Security & data processing
This translation is provided for convenience. Only the German version is legally binding.
Location and energy
The language model runs at our infrastructure partner Verda (formerly DataCrunch) in data centers in Helsinki, Finland (EU), which are operated with renewable energy.
No storage of API content
The SeibertGPT gateway and the portal do not store any content of API requests – neither your inputs (prompts) nor the model's responses. For each request, we store only metadata for billing and limits: time, duration, model, number of tokens, status, the API key used and the booked plan.
To limit large requests to a conversation that has been inactive for a long time or is unknown (fair use), we additionally store, per user account, a SHA-256 hash of the beginning of the respective conversation (system prompt and first user message) and the time of the last request in that conversation. The purpose is to keep SeibertGPT available for all customers; the legal basis is Art. 6(1)(f) GDPR. This entry is automatically deleted after 24 hours at the latest or, if a longer inactivity limit is configured, after twice that period, if that is longer.
Chat history
We store your chats in the web chat so that you can access your history again. You can delete individual chats or all chats at any time; they are then deleted from our database together with all their messages.
Protection of your API keys
You see the full API key only once, when you create it; we store only its SHA-256 hash. We store the internal key used by the web chat in encrypted form (AES-256-GCM). You can revoke your keys in the portal at any time.
No training on your data
SeibertGPT does not use your inputs or the responses to train AI models. According to Verda's terms, customer data is not used for training there either.
Access only through SeibertGPT
For customers, the language model is accessible exclusively through SeibertGPT – in the web chat and via the API with your API key.
Cookies and tracking
For sign-in, SeibertGPT sets only technically necessary cookies. We count page views with PostHog without cookies; we associate them with you via the identity cookie “seibert-id” only with your consent in your Seibert customer account. The portal does not embed content from third-party servers. You can find details in the Privacy Policy.
Certification
Seibert Group GmbH is certified according to ISO/IEC 27001. Learn more in the Seibert Group Trust Center (opens in a new tab).
Data processing and confidentiality
We conclude a Data Processing Agreement pursuant to Art. 28 GDPR with business customers and offer a non-disclosure agreement (NDA). You can create both yourself under “Contracts” right after creating your account and sign them online; we answer questions at seibertgpt@seibert.group. Learn more on the Data Processing Agreement page.