Security is not an add-on. It is the foundation.

The assistant handles your internal working documents, and that sets the bar. It is designed so that an IT department, a DPO and an auditor can each say yes for their own reasons.

Processed in the EU, by a European company

All document and query processing runs on servers inside the EU, under a data processing agreement signed before onboarding. Videns-assistent is a Danish company with no US parent, so no onward transfer mechanism is needed to begin with.

Your content is never used to train a model

Not by us, and not by the model provider. This is contractual, not a setting that can be toggled by accident.

Access enforced at retrieval, not in a prompt

Each person only ever sees answers drawn from documents their role is cleared for. The filter runs on the search itself, so an out-of-scope document is never retrieved and cannot be summarised. Permissions can be driven by your existing directory, for example Active Directory or Entra ID.

Content-blind logging

The log records that a question was asked and how it resolved — not the text of it. That is deliberate: free-text fields are where people accidentally type a name or a case number, and the cleanest way to protect that is never to store it.

No guessing. Only your sources.

The assistant answers strictly from your approved documents and always shows document, section and revision date. Where the material does not cover the question, it says so rather than producing something plausible.

Runs where the work is

In the browser, on phones, tablets and shared PCs. No installation, no app rollout through IT. Someone opens a link and is working.

Hosted by us, or entirely inside your walls

Self-hosted deployment uses the same containers and a licence key, on your infrastructure, with your own model provider if required. The documents never leave your building. Updates ship with preflight checks, a database backup and rollback.

Every answer is auditable

Because each answer carries its document, section and revision date, an auditor can reconstruct what a member of staff was told on a given day and from which version of which procedure.

If you are comparing vendors

The questions worth asking any assistant of this kind: where is the data processed, who is the controller, is access enforced before or after the model sees the document, is the query text stored, and can it run without an internet connection to a US provider? We have written our answers above so they can be checked against someone else's.

Where to next