The confidentiality of your data is our priority. We know your grant proposals hold confidential research strategies, budgets, consortium details and IP, so we keep them inside the EU, under EU jurisdiction, with no AI training on your content.
Application, database and files in Germany
EU-incorporated infrastructure, no US hyperscaler
Your proposals are never used to train AI models
AI calls run stateless, nothing kept after the answer
Email magic-link, no passwords to steal
DPA, audit trail and breach procedures in place
The whole platform (application, database, file storage, authentication) runs on a German-incorporated EU cloud operator (ISO 27001 at the data-center level), not on a US hyperscaler. Encryption at rest and in transit, EU jurisdiction end to end. The reproach made to most “EU-hosted” tools is that they sit on AWS or Azure and stay exposed to the US CLOUD Act regardless of region. Here, they do not.
Every meaningful action (sign-in, edits, validations, invitations, exports) is recorded in a workspace audit log, alongside a separate log of every AI call (who, which project, which model). Admins export both as CSV on demand. No proposal content, budgets or partner names are ever stored in those logs, only structural metadata.
When you import an existing proposal PDF, organisation names, person names, project codenames and emails are stripped and replaced with neutral tokens before any non-default AI provider sees the document. The token-to-name mapping never leaves EU infrastructure; real names are re-attached locally afterwards.
The difference is architectural, and verifiable.
| Solution | Where it's hosted | AI processing | CLOUD Act exposure |
|---|---|---|---|
| GrantForge | Germany (EU), on Hetzner. Not AWS / Azure / Google Cloud | Mistral Cloud (EU), Zero Data Retention by default, or your own key (BYOK). Never trained on. | No |
| ChatGPT upload | OpenAI servers (US) | Stored in your thread history | Yes |
| Microsoft Copilot | Microsoft tenant (Azure) | Indexed in your tenant | Yes |
| SharePoint upload | Microsoft tenant (Azure) | Indexed in your tenant | Yes |
Your proposals are processed by an EU-based language model under Zero Data Retention: calls run stateless, nothing is stored beyond the moment needed to produce the answer, and your content is never used to train models. Need your own provider? Workspaces can bring their own AI key (BYOK).