# Secure & European AI Platform Source: https://blackmountain.io/security How BlackMountain keeps ownership, jurisdiction, processing and data control within the European Union. ## European by structure, not by hosting region. BlackMountain is a European company with European ownership, operating entirely within the EU. No US parent, no non-EU investors, no foreign jurisdiction reaching into your data. [Talk to Security](https://blackmountain.io/contact) [View Legal Documents](https://blackmountain.io/p/terms) - **100 %** European ownership – no investors or parents outside the EU - **EU** Application, storage and processing run in the EU (Scaleway, Paris) - **0** Of your content used to train models - **4** Deployment options, from EU multi-tenant to on-premise “Hosted in the EU” is not the same as European. Many AI vendors run EU data centres while remaining under non-EU corporate control. Sovereignty is a question of ownership and jurisdiction – not of hosting labels. ## Jurisdiction follows ownership A company under non-EU control can be legally compelled to disclose data, wherever it is stored. ## Model providers add exposure AI processing often leaves the EU even when the application does not. ## Compliance has to be provable Auditors and procurement teams need documentation, not marketing claims. ## Four things you can verify. ### 100% European ownership BlackMountain has no investors or parent entities outside the European Union. No foreign jurisdiction applies to our corporate structure. ### EU-only operations Application, data storage and processing run within the European Union. Our Datacenters are operated by the European provider Scaleway and are located in Paris. ### Controlled model access Models are operated inside a governed EU environment. You decide which providers are enabled for your organisation. ### Your knowledge stays yours We use an Enterprise API – your content is never used to train models. The know-how of your workforce stays within your company instead of leaking into external systems. ## AI that works with people, not around them. ### Human judgment stays in control AI can research, summarise, draft and recommend — but critical decisions, approvals and permissions remain with people, with governance, roles and access control built in. ### Ask Human instead of guessing When information is missing or a request is unclear, AI should not invent an answer. With Ask Human, the system can ask for clarification before continuing. ### Designed for collaboration People and AI work in the same workspace, with shared context, connected knowledge and visible workflows. This makes AI part of how teams work – not a separate tool on the side. ### A platform built for quality Purpose-built features ensure you keep long-term control over your business processes — not the AI. Because the best results happen when you stay in the lead. ## Security you can administer, not just trust. Permissions, data protection and oversight are built into the platform – administered by your teams, traceable for your auditors. ### Every answer respects who is asking. Roles on organisation, workspace, team and knowledge level. AI only sees what the requesting user is allowed to see – nobody gets more through AI than in the original system. [Explore Control Tower](https://blackmountain.io/modules/control-tower) ### Personal data is caught before it reaches a model. PII protection detects and controls personal data in prompts and documents. For the most sensitive information, Local AI keeps processing in your own building. [Explore Local AI](https://blackmountain.io/local-ai) ### People decide. Everything is traceable. Ask Human keeps people in the decision path, and activity, access and model usage are recorded for internal and external review. [Explore Agent Studio](https://blackmountain.io/modules/agent-studio) ## Documented, not asserted. ### ISO 27001 IN PROGRESS ### GDPR compliance and data subject rights DOCUMENTED ### DPA available for all customers AVAILABLE ON REQUEST ### Subprocessor list published PUBLISHED ### Independent penetration testing DOCUMENTED ### Encryption at rest and in transit DOCUMENTED [Privacy Policy](https://blackmountain.io/p/privacy-policy) [DPA](https://blackmountain.io/p/dpa) [Terms](https://blackmountain.io/p/terms) [Subprocessors](https://blackmountain.io/p/subprocessors) ## Choose how 48° runs for you. ### EU Multi-Tenant Standard setup, fully EU-operated. ### Dedicated Environment Isolated instance for higher assurance requirements. From 1.000 Seats. ### Your own cloud Deployment into your EU cloud account. Enterprise. ### On-premise For regulated environments with strict residency rules. Enterprise. ## For data that must never leave your building. Run open-weight models on a Mac mini or Mac Studio in your own office or data centre, connected to 48°. Workspaces you mark as local are answered only on your hardware – everything else keeps using the EU platform. [Explore Local AI](https://blackmountain.io/local-ai) ## Aligned incentives for responsible AI usage. BlackMountain does not build its business on token markups. That means our incentive is not to make customers consume more tokens — but to help organisations use AI efficiently, securely and with measurable value. ### No token margin incentive We do not earn more by making your AI workflows unnecessarily expensive. ### Built to reduce AI waste Our platform can optimise how context, models and workflows are used — reducing unnecessary token consumption where possible. ### Right model for the right task Not every task needs the largest or most expensive model. Multi-model access helps teams choose the right model for the job. ### Reusable workflows Instead of repeating long prompts and manual context setup, teams can create reusable assistants and workflows that standardise efficient AI usage. ### Cost visibility through Control Tower Usage and cost are visible across teams, models and workflows — so AI adoption can be managed instead of guessed. ## Five questions worth asking — including us. ### Who owns the company, and which jurisdiction applies? ### Are there investors or parent entities outside the EU? ### Where does model inference actually happen? ### Which subprocessors are involved, and are they disclosed? ### Can permissions from your source systems be enforced inside the AI? We answer all five in writing. If a vendor cannot, hosting location is not the reassurance it appears to be. ## Straight answers to the questions that matter. ## Bring AI into your organisation without giving up control. Talk to our security team or review our documentation before you decide. [Talk to Security](https://blackmountain.io/contact) [Book a Demo](https://blackmountain.io/contact)