1 · Hosting & data location
Your data is stored in France.
Application, database, file storage, backups and e-mail delivery run at Scaleway in France. Sign-in runs through a hosted Keycloak at Cloud-IAM, also in France.
- Application
- Scaleway, France (EU)
- Database
- Scaleway Managed PostgreSQL, France (EU) – encrypted at rest
- File storage
- Scaleway Object Storage, France (EU) – encrypted at rest
- Backups
- automated managed database backups at the hosting provider, France (EU); recovery concept in place
- Sign-in
- Cloud-IAM (hosted Keycloak), France (EU); two-factor authentication mandatory from the first booking
- E-mail delivery
- Scaleway Transactional Email, France (EU)
- Speech recognition & OCR
- our own GPU instance at Scaleway, France (EU); started only when used, recordings are not stored
- Transport
- TLS-encrypted throughout (HTTPS enforced)
Storage and processing are two different things: your data is stored at Scaleway in France. If your account chooses an external AI provider, the content required for the respective analysis is transmitted to that provider and processed there under its terms – see AI processing.
2 · Tenant isolation
Every data row belongs to one account.
- Row level security
- Every data row is bound to the customer account at database level. One account's content is technically unreachable for other accounts – including for AI analyses.
- Roles and visibility
- Account roles owner, admin and member; project memberships with a project role; searches, minutes and tasks either private or visible to the team.
- Operator access
- Our support can only enter an account through a logged impersonation – and you can switch this access off in your account at any time.
- Shared reports
- Shares are read-only snapshots behind an unguessable link, optionally password-protected, with an expiry date and revocable at any time – revocation takes effect immediately. Only the report is shared, never the project.
3 · AI processing
The AI provider is your choice.
Your content is processed solely to deliver the requested function. If you use an external AI provider, the content required for the respective analysis is transmitted to the provider you selected.
The provider is chosen per account by the account admin. Without an explicit choice of a US provider, the AI path stays in the EU. Access is exclusively through business interfaces (API), never through consumer chat products.
inventMAP itself does not train AI models with your data. Across accounts only distilled, anonymous method patterns are used – never your content.
| Provider | Location / processing | Function and choice | Content processed |
|---|---|---|---|
| Scaleway (open models) | France · processed in the EU | Sovereign option: open model on Scaleway infrastructure, web search through our own meta-search. Selectable per account. No training on your data (excluded by architecture). | Analysis inputs: problem descriptions, excerpts from your network, uploaded documents, research results |
| Mistral AI | France · processed in the EU | EU provider, selectable per account. Retention at the provider around 30 days; training on customer data can be switched off at the provider via opt-out. | as above |
| Anthropic (Claude) | USA · processed in the USA | Only if explicitly chosen by the account. Access through the business API; no training on customer data (API standard). Basis: EU-US Data Privacy Framework or standard contractual clauses. The US CLOUD Act remains relevant. | as above |
The binding description is in the privacy policy and in the subprocessor annex of the DPA. Retention periods and training exclusions apply per provider and plan – we only state what is documented for the access we actually use. Privacy policy (in German) →
4 · Research and auxiliary services
Only search queries leave the system.
For research, inventMAP queries external sources. What is transmitted are search terms and queries – no customer documents and no personal data of your users.
- Web search
- The primary source is our self-operated meta-search (SearXNG) on our own infrastructure in France. Only when results are too thin or our instance is unavailable does an external search service (Brave Search, USA) supplement them – and even then only with search terms.
- Patent data
- Questel (commercial patent database) or public offices: the European Patent Office (EPO OPS) and the German DPMA. Only search queries are transmitted.
- Scientific publications
- OpenAlex, an open publication database (OurResearch, USA). Only search queries are transmitted.
- Payment and invoicing
- Payment processing for paid usage through Mollie (Netherlands), invoicing through sevdesk (Germany).
5 · Subprocessors
Who processes on our behalf.
| Provider | Purpose | Location / region |
|---|---|---|
| Scaleway S.A.S. | Hosting of application, database, file storage, backups, e-mail delivery, GPU for speech/OCR; AI with open models if chosen by the account | France (EU) |
| Cloud-IAM | Sign-in (hosted Keycloak) | France (EU) |
| Mistral AI | AI analyses – only if chosen by the account | France (EU) |
| Anthropic PBC | AI analyses (Claude) – only if explicitly chosen by the account | USA |
| Mollie B.V. | Payment processing – only for paid usage | Netherlands (EU) |
| sevdesk GmbH | Invoicing and bookkeeping | Germany (EU) |
| European Patent Office, DPMA, Questel | Patent data – search queries only | EU / France |
| Brave Software (Brave Search API) | supplementary web search when results are thin – search terms only | USA |
| OurResearch (OpenAlex) | Publication data – search queries only | USA |
The binding list is Annex 2 of the data processing agreement. We announce new or changed subprocessors in advance; you may object on justified grounds (Art. 28 (2) GDPR).
6 · Deletion & data subject rights
You stay in control of your data.
- During use
- You manage and remove projects, searches, documents and share links yourself in the application. Revoked share links become invalid immediately.
- Cancellation
- The account admin cancels the account in the settings. The data is kept for now and the cancellation can be withdrawn as long as nothing has been deleted.
- Data export
- After cancellation we provide your data through a secured, time-limited download link (Data Act Art. 25).
- Complete deletion
- Once the download window has expired, the account is deleted automatically and completely – cascading through all data sets including the files in object storage. Statutory retention obligations (e.g. invoice data) remain unaffected.
- Backups
- Deleted data leaves the automated backups with their regular cycle at the hosting provider; backups are not used to restore deleted customer data.
- Data subject rights
- Access, rectification, erasure and data portability: requests to the contact named in the imprint; details in the privacy policy.
7 · Documents for your internal review
Documents for your internal review
For procurement, IT security and data protection we provide on request:
- Data processing agreement (DPA)
- Technical and organisational measures (TOMs)
- List of subprocessors
- Data protection information
- Security information
- NDA / confidentiality agreement
- technical security call
Contact: Dipl.-Ing. (FH) Gregor Panitz, gregor@inventissimo.de · Security & IT Sovereignty →