SECURITY

European by structure, not by hosting region.

European by structure, not by hosting region.

European by structure, not by hosting region.

BlackMountain is a European company with European ownership, operating entirely within the EU. No US parent, no non-EU investors, no foreign jurisdiction reaching into your data.

WHY IT MATTERS

“Hosted in the EU” is not the same as European.

“Hosted in the EU” is not the same as European.

Many AI vendors run EU data centers while remaining under non-EU corporate control. That structure exposes data to foreign legal access regardless of where the servers stand. Sovereignty is a question of ownership and jurisdiction — not of hosting labels.

01 / STRUCTURE

Jurisdiction follows ownership

A company under non-EU control can be legally compelled to disclose data, wherever it is stored.

02 / PROCESSING

Model providers add exposure

AI processing often leaves the EU even when the application does not.

03 / EVIDENCE

Compliance has to be provable

Auditors and procurement teams need documentation, not marketing claims.

WHAT MAKES US SOVEREIGN

WHAT MAKES US SOVEREIGN

Four things you can verify.

Four things you can verify.

Four things you can verify.

Four things you can verify.

100% European ownership

BlackMountain has no investors or parent entities outside the European Union. No foreign jurisdiction applies to our corporate structure.

EU-only operations

Application, data storage and processing run within the European Union. Our Datacenters are operated by Scaleway and are located in Paris.

Controlled model access

Controlled model access

Models are operated inside a governed EU environment. You decide which providers are enabled for your organisation.

No training on your data

Your content is never used to train models — neither ours nor those of third parties.

Your content is never used to train models, neither ours nor those of third parties.

HUMAN-LED AI

AI that works with people, not around them.

AI that works with people, not around them.

Human judgment stays in control

AI can research, summarise, draft and recommend — but critical decisions remain with people. Workflows can include review, approval and feedback where human responsibility matters.

Ask Human instead of guessing

When information is missing or a request is unclear, AI should not invent an answer. With Ask Human, the system can ask for clarification before continuing.

Designed for collaboration

People and AI work in the same workspace, with shared context, connected knowledge and visible workflows. This makes AI part of how teams work — not a separate tool on the side.

Governed by default

Human-led AI only works when permissions, roles and visibility are built in. BlackMountain connects AI usage with access control, auditability and Control Tower oversight.

GOVERNANCE & CONTROL

GOVERNANCE & CONTROL

Security you can administer, not just trust.

Security you can administer, not just trust.

Security you can administer, not just trust.

Security you can administer, not just trust.

01

Role-based access

Permissions across organisation, workspace, team and knowledge base level.

02

Permission-aware knowledge

AI only accesses what the requesting user is allowed to see.

03

PII protection

Detect and control personal data before it reaches a model.

04

Human in the loop

Ask Human keeps people in the decision path instead of letting AI act on assumptions.

05

Full usage transparency

Control Tower shows which models, teams and workflows are used, at what cost, with what data.

06

Auditability

Activity, access and model usage are traceable for internal and external review.

CERTIFICATIONS & DOCUMENTATION

CERTIFICATIONS & DOCUMENTATION

Documented, not asserted.

Documented, not asserted.

Documented, not asserted.

Documented, not asserted.

ISO 27001

In Progress

GDPR compliance and data subject rights

DOCUMENTED

DPA available for all customers

AVAILABLE ON REQUEST

Subprocessor list published

PUBLISHED

Independent penetration testing

Documented

Encryption at rest and in transit

Documented

DEPLOYMENT OPTIONS

DEPLOYMENT OPTIONS

Choose how BlackMountain runs for you.

Choose how BlackMountain runs for you.

Choose how BlackMountain runs for you.

Choose how BlackMountain runs for you.

01 / STANDARD

EU Multi-Tenant

Standard setup, fully EU-operated.

02 / ISOLATED

Dedicated Environment

Dedicated

Isolated instance for higher assurance requirements. From 1.000 Seats.

Isolated instance for higher assurance requirements. From 2.000 Seats.

03 / ENTERPRISE

Your own cloud

Deployment into your EU cloud account. Enterprise.

Deployment into your EU cloud account. Enterprise. From 5.000 Seats.

04 / REGULATED

On-premise

For regulated environments with strict residency rules. Enterprise.

For regulated environments with strict residency rules. Enterprise. From 10.000 Seats.

BUSINESS MODEL / TOKEN INCENTIVES

Aligned incentives for responsible AI usage.

Aligned incentives for responsible AI usage.

BlackMountain does not build its business on token markups. That means our incentive is not to make customers consume more tokens — but to help organisations use AI efficiently, securely and with measurable value.

No token margin incentive

We do not earn more by making your AI workflows unnecessarily expensive.

Built to reduce AI waste

Our platform can optimise how context, models and workflows are used — reducing unnecessary token consumption where possible.

Right model for the right task

Not every task needs the largest or most expensive model. Multi-model access helps teams choose the right model for the job.

Reusable workflows

Instead of repeating long prompts and manual context setup, teams can create reusable assistants and workflows that standardise efficient AI usage.

Cost visibility through Control Tower

Usage and cost are visible across teams, models and workflows — so AI adoption can be managed instead of guessed.

EVALUATION FRAMEWORK

EVALUATION FRAMEWORK

Five questions worth asking — including us.

Five questions worth asking — including us.

Five questions worth asking — including us.

Five questions worth asking — including us.

01

Who owns the company, and which jurisdiction applies?

02

Are there investors or parent entities outside the EU?

03

Where does model inference actually happen?

04

Which subprocessors are involved, and are they disclosed?

05

Can permissions from your source systems be enforced inside the AI?

We answer all five in writing. If a vendor cannot, hosting location is not the reassurance it appears to be.

We answer all five in writing. If a vendor cannot, hosting location is not the reassurance it appears to be.

FAQ

Straight answers to the questions that matter.

Straight answers to the questions that matter.

Straight answers to the questions that matter.

Straight answers to the questions that matter.

Where is data stored and processed?

Who owns BlackMountain?

Is data used to train models?

Which models can we enable?

How is encryption handled?

Which certifications exist today?

Who are the subprocessors?

How are permissions enforced?

What happens to our data when the contract ends?

Can we run BlackMountain in our own environment?

READY WHEN YOU ARE

Bring AI into your organisation without giving up control.

Bring AI into your organisation without giving up control.

Bring AI into your organisation without giving up control.

Bring AI into your organisation without giving up control.

Bring AI into your organisation without giving up control.

Talk to our security team or review our documentation before you decide.

Talk to our security team or review our documentation before you decide.

BlackMountain GmbH | Imprint | Terms of Service | DPA | Subprocessors | Privacy Policy | Report Fraudulent Activity

The products, services, information, and/or materials made available on this website may be subject to restrictions under the laws or regulations of certain jurisdictions and may not be available to residents of those jurisdictions. Please consult the applicable restrictions or contact us directly for more information.

Copying, editing, modifying, distributing, linking, or any other use (whether for commercial or non-commercial purposes) of the materials on this website, beyond personal viewing, is strictly prohibited without prior written consent from BlackMountain GmbH.

© BlackMountain GmbH 2026. All rights reserved.

Made in Europe

Highest quality standards

General Data Protection Regulation

Highest security standards

Cookie Settings

Click here to renew your Consent

BlackMountain GmbH | Imprint | Terms of Service | DPA | Subprocessors | Privacy Policy | Report Fraudulent Activity

The products, services, information, and/or materials made available on this website may be subject to restrictions under the laws or regulations of certain jurisdictions and may not be available to residents of those jurisdictions. Please consult the applicable restrictions or contact us directly for more information.

Copying, editing, modifying, distributing, linking, or any other use (whether for commercial or non-commercial purposes) of the materials on this website, beyond personal viewing, is strictly prohibited without prior written consent from BlackMountain GmbH.

© BlackMountain GmbH 2025. All rights reserved.

Made in Europe

Highest quality standards

General Data Protection Regulation

Highest security standards

Cookie Settings

Click here to renew your Consent