Loota.
English Suomi
The box seen from above on the black desk, its small warm light on.

Still from the film

Your data

Your data is on your server.

On the server

The language model, the search and the databases run on your server.

Questions and documents are not sent to an external AI service. External connections are made only if an administrator switches on web search or an integration with another system. Both are off by default.

Documents are used for search, not for training the model. The building blocks are widely used open components.

What is on the server and which connections can leave it On your server are the language model, which is run locally, the search (Qdrant), the database (MongoDB) and sign-in (Keycloak, OIDC). Web search and an integration with another system are drawn as switches in the off position; only an administrator can switch them on. No line runs to an external AI service. YOUR SERVER LANGUAGE MODELrun locally SEARCHQdrant DATABASEMongoDB SIGN-INKeycloak (OIDC) WEB SEARCHoff by default INTEGRATION WITH ANOTHER SYSTEMonly if an administrator switches it on EXTERNAL AI SERVICEno questions or documents are sent

Updates and remote support are agreed in the written proposal. Your IT team can verify that no traffic leaves the server.

Access

Administrators decide who sees what.

Access rights are granted per document or per category, and search stays within them. A new user sees nothing until access is granted.

Access is checked in the database with every question. The language model does not decide who may see what.

Sign-in

Sign-in uses Keycloak (OIDC). In the technical review we look at connecting it to your organisation’s user directory.

The log

The log shows who did what and when. It holds no content.

  • sign-ins
  • questions: an identifying hash only
  • approvals
  • denied access attempts
  • exports of the log

The log can be exported for an auditor as CSV or JSON. The export is logged too.

What is stored

Conversation history is stored, and administrators can see users’ messages.

Conversation history is stored on your server so that users can return to earlier conversations. Tell your users before you start that administrators can see their messages.

MaterialWhat is storedWho sees it
Library documentsThe documents and the search index built from them, on your server.Users to whom an administrator has granted access.
Conversation historyQuestions and answers, on your server.The user. Administrators see messages and feedback in the quality-monitoring view.
A user’s memorySaved preferences, such as the style of answers. Every note can be deleted.Only the user. Administrators cannot see it.
An aisle in the data centre. On the left the cabinets’ status lights recede towards the vanishing point; the right side is dark.

Regulation and your own server.

Compliance is assessed in your environment. With processing on your own server, there is no transfer to a cloud service to assess.

Still from the film

GDPR, Chapter V
Personal data may be transferred outside the EU and the EEA only subject to the conditions of Chapter V of the regulation.
Finnish Ministry of Finance, guidance of 26 February 2025
The guidance on the use of generative AI says that material that is secret, non-public or contains personal data is not to be entered into an AI service unless the organisation has approved the service for that purpose.
Finnish Information Management Act, section 13
An authority sizes its information security measures according to a risk assessment and makes sure a system is secure when procuring it.

None of these prohibits cloud services or requires a server of your own.