Data Handling & Privacy

Zero-Data-Retention

noris operates a strict zero-data-retention policy:

• Prompts and completions are not persisted.
• Content is never used for training or fine-tuning models.
• Requests are discarded immediately after the response is delivered.

This policy applies without exception to all endpoints and models. Only aggregated, anonymized metadata (e.g. token counters for AI points billing) is collected, never the content of requests.

GDPR Compliance

All data processing takes place in Germany. Data never leaves the EU or Germany at any point. This ensures noris meets GDPR requirements regarding data localization and sovereignty.

For clients having personal data processed on their behalf, noris concludes a data processing agreement under Article 28 GDPR. Please contact your noris representative.

Certifications and Evidence

The certifications held by noris network, including its information security credentials, are documented centrally on the company website: noris network certifications.

That page also holds the evidence used to assess GDPR compliance.

Encryption

In transit

All connections to the API are TLS encrypted, without exception, across all endpoints.

At rest

The most effective measure is that virtually no data comes to rest in the first place:

• No data is at rest in the AI cluster. Prompts and responses are processed exclusively in graphics memory (VRAM) and are deleted automatically right after processing.
• The gateway writes log files containing metadata only, such as timestamp, model, and token counters for billing. Prompts and responses are not stored there.
• Intermediate caches exist only for the duration of a session. What is held are vector representations, not the content itself. The cache chain spans VRAM, system memory, and disk; every tier exists only as long as the session does and is discarded when it ends.

Data Center Security

The platform runs in highly secure noris data centers in Germany. For an overview of the data centers, see the noris network data center page. Security measures include:

• Physical security: access controls, video surveillance, security personnel
• Fire protection: early fire detection and suppression systems
• Fail-safe power supply: redundant UPS systems and diesel generators
• Climate control: continuous temperature and humidity regulation

Open-Weights Models

All deployed models are open-weights models. This means:

• No telemetry: the models send no usage data to third parties
• No phone-home: no automatic callbacks to manufacturers
• No hidden data channels: full transparency of the model architecture

Tenant Isolation

The infrastructure is shared across customers. Separation is implemented through virtual keys:

• Every access path receives its own virtual key.
• The processing context is bound to the virtual key. A request is processed solely within that context; there is no access across tenant boundaries.
• Stateless processing: requests carry no state between tenants.
• Isolated memory: the KV cache is released once processing completes.

Virtual keys are also the level at which consumption limits can be set, see rate limits and quotas.