Encrypted in the EU
All data is encrypted, at rest and in transit, and stored within the European Union under your control.
Security and data
Your data. Your environment. Under your control.
Vitinn is designed so you stay in control of your data: it lives in your environment, is encrypted in the EU and is never used for training.
In your environment
Vitinn is single-tenant, hosted in your own AWS or Azure environment in Europe. The models run there, the data never leaves, and conversations, documents and connections don’t pass through a shared service used by others. It meets Icelandic and European data protection requirements from day one.
No training on your data
Nothing your people type or upload is used to train AI models, not by APRÓ and not by the model providers.
Access control
Vitinn connects directly to your workplace's identity system, most often Microsoft Entra or Google (single sign-on). Access, permissions and teams are managed in one place from your own systems.
Encryption keys in your hands
You have full control of the encryption keys. Data that goes into Vitinn, or is created there, is accessible only to you.
Central usage control
Usage, cost and access to models are managed centrally, for example with a budget and rules you set. You set quotas per user or team. Model usage is paid directly to AWS or Azure on your own account. You see it and control it in Vitinn.
Filtering personal data
An optional add-on where people work with customer data, in customer service for example. ID numbers, card numbers and other personally identifiable data are detected and masked before the text is processed by the model. The filter runs in your environment.
Privacy and standards
Vitinn meets GDPR requirements and is aligned with international security standards such as ISO, SOC and CSA. We help fit the setup into your own security policy and risk assessment.
How is Vitinn different from public AI services?
| Public services | APRÓ Vitinn | |
|---|---|---|
| Where is the data? | With the provider, often outside the EU | In your environment, in the EU |
| Training on your data | Depends on plan and settings | Never |
| Sign-in | Separate account per user | Your single sign-on |
| Connection to internal systems | Limited | Yes, with your permissions |
| Ownership | The provider | You |
Let’s go through security together
We look at how Vitinn fits your security policy, access control and risk assessment before any data is connected.