Traceable data zones per model.
A preferred model zone is selected per chat. The available region, retention, and transfer basis depend on the provider, model, and account configuration.
Data zone: Deutschland
German data zone.
Persistent Vantero data is stored in Germany; selected models process requests in the German data zone. Provider terms on retention and transfers must be reviewed before each approval.
Server locations: Germany; specific region identified per model
6 available text models
Mistral Small 24B
GPT-OSS 120B
Qwen3 VL 235B
CodeLlama 13BLlama 3.3 70BLlama 3.1 405B1 available image model
FLUX.1 SchnellData zone: Global
Mistral models via a global endpoint.
Mistral models currently use a global provider endpoint. A fixed inference region, training exclusion, or zero data retention is stated only when supported by account-specific evidence.
Provider endpoint: Global, no fixed inference region promised
5 available text models
Mistral SmallMistral Medium 3Mistral LargeCodestralDevstralData zone: Europa
Frontier models in European data zones.
Frontier and specialist models may be provided through provider-designated European cloud regions. The actual region, availability and transfer basis must be reviewed per model and account.
Server locations: EU region identified per model
21 available text models
GPT-5.4ChatGPT-5ChatGPT-5 MiniChatGPT-4.1ChatGPT-5 Nano
Gemini 2.5 ProGemini 2.5 FlashGemini 2.5 Flash-Lite
Claude Opus 4.6Claude Sonnet 4.6Claude Haiku 4.5
Nova ProNova 2 LiteNova LiteNova Micro
DeepSeek V3.2Qwen3 Coder 480BQwen3 VL 235BQwen3 Next 80B
Kimi K2.57 available image models
FLUX.2 ProImagen 3 FastImagen 3Imagen 4 FastImagen 4Imagen 4 UltraNova CanvasData zone: USA
US cloud with transfer controls.
Perplexity models provide real-time web access on US infrastructure. The transfer basis, provider terms and required safeguards must be reviewed before use.
Server location: USA
4 available text models
SonarSonar Reasoning ProSonar Deep ResearchSonar Pro1 available image model
GPT Image 2Data residency is only one review factor.
The provider, technical endpoint, access controls, retention and legal basis for possible transfers must be assessed alongside the storage location.
CLOUD Act
Where processing has a third-country connection, possible government access, the transfer basis and supplementary safeguards must be assessed.
Keep transfer mechanisms current
Adequacy decisions, Standard Contractual Clauses and transfer assessments must match the specific provider and current legal position.
Check the DPA for each plan
Where a service processes personal data on a controller's behalf, Art. 28 GDPR requires a binding DPA. Whether a consumer plan is suitable depends on its contractual and privacy terms.
Check training controls
Training and feedback use varies by provider, product, plan and account configuration and must be documented before approval.
Assess DPIA risk
A DPIA is required under Art. 35 GDPR where the specific processing is likely to result in a high risk; the use of AI alone does not trigger it in every case.
Classify AI Act duties
Information, literacy, labelling and potential high-risk duties must be assessed for the specific feature and intended use.
Documents and review paths for data protection.
The DPA and TOMs are available. Provider information and customer-specific reviews and approvals must be kept current for the intended use.
DPA available
Electronically incorporable data processing agreement with a transparent sub-processor list.
TOMs documented
Technical and organisational measures according to Art. 32 GDPR available for review.
Review training and retention
Vantero uses inputs for response generation and not to train its own models. Third-party terms must be reviewed per model and account before approval.
Storage and processing context
Persistent platform data in Frankfurt; request processing follows the identified model and feature context.
Checklist for the data protection officer
Frequently asked questions about data zones
Can different data zones be used within the same team?+
What happens to data when the zone is changed?+
How is managed web search approved for data protection?+
How does data sovereignty differ from data residency?+
Where is user data stored?+
Ready for traceable AI use?
Set up Early Alpha access after approval; available features depend on the applicable test configuration.