Law Firm Dr. jur. Thomas Schwenke
nele.ai enables the data-compliant
use of generative AI.
Dr. Thomas Schwenke
Expert and Legal Advisor in Data Protection Law
Dr. Thomas Schwenke
Expert and Legal Advisor in Data Protection Law
Law Firm Dr. jur. Thomas Schwenke
Personal data of the client is processed in a logically separated manner and protected against unauthorized access or merging with other data.
Systematic vulnerability scans are conducted regularly to detect and remediate potential security gaps at an early stage. This includes verification according to OWASP guidelines as well as CVE checks.
Only authorized personnel can access data processing systems and procedures. This is ensured through the application of strong password policies, two-factor authentication, and monitoring of access activities.
Sensitive data is encrypted and transmitted using AES-256 and protected via TLS 1.3.
All operations are monitored and recorded in detailed audit logs, allowing them to be analyzed and reviewed at any time.
Upon request, nele.ai replaces sensitive personal data before transmission, where technically possible, and reinserts it after the message is received.
All available AI models contractually guarantee that your data will not be used to train future models. Even with local, dedicated models, no training is performed using your data. Our Information Security Management System (ISMS) is certified according to ISO 27001 by TÜV Rheinland.
You decide how long your chats and documents remain stored on our German servers. You can set the deletion time at any time by deleting the data.
Our knowledge bases are based on RAG, which prevents hallucinations by the selected AI model. If the AI does not have information, it will indicate this. If information is available, it will cite its source.
Where technically feasible, we make it clear to the user on what basis an answer is generated, for example in our knowledge bases. Furthermore, we do not truncate chat history without informing the user.
In accordance with Article 50, we are committed to informing every person interacting with our AI system in a timely and clear manner about the use of AI, its functions, potential human oversight, and those responsible for decision-making.
Our permission system ensures that employees cannot be evaluated. Furthermore, it allows you to configure access rights to necessary information, adhering to the principle of least privilege.
At nele.ai, you have the option to connect your own LLMs/AI models while still using our user-friendly interface.
Just get in touch with us—we will be happy to provide you with a flat-rate offer for your usage.
Instead of a flat rate for all employees, there is an option for a fixed-price offer per employee, plus the costs for the LLM you provide via API key.
For seamless integration and usage, please contact us directly. Let’s work together to find the best solution for your requirements.
In our DPA, we contractually define how we process and protect your data. You can find all technical and organizational measures (TOMs) in Section 6.
We work closely with external data protection officers to design and implement robust and effective data protection policies.
We have prepared a DPIA to assist your data protection officer in evaluating our systems. We would be happy to send this to you via email.
Start your way—we offer flexible entry options to meet your individual needs.
Still have questions?
Don't hesitate to contact us.
