KUOS / Legal
Data protection is an operating responsibility.
KUOS supports a local-first approach. GDPR compliance depends on your processing purposes, configuration and organizational practices.
Controller and processor roles
KUOS ApS controls website and enquiry processing. In a self-hosted deployment, your organization determines its own purposes and controller obligations. If KUOS ApS processes personal data on your behalf under a service agreement, roles and a data processing agreement must be established before processing.
Design your deployment
Document lawful bases, access, retention, backups, deletion and data subject request procedures. Assess sensitive data and whether a data protection impact assessment is required.
Providers and transfers
Local hosting does not prevent external transfers if you enable remote model APIs or other services. Review each provider, subprocessors and applicable transfer safeguards.
Evidence, not a badge
Local inference and audit features support accountability; they are not GDPR certification or a guarantee of EU AI Act compliance. Contact [email protected] to discuss the responsibilities of a proposed service.