The platform runs on AWS in German data centres; your own servers are at Hetzner in Germany. The AI models run at their providers — you decide what may be stored there. And none of it accesses your computer.
Five stages, from your input to the result on your server. At every point it’s clear where your data is — and who can’t get at it.
From input to approval
In Germany
At the model providers
01
Input
You work in the browser. The AI only sees what you bring into OMVIN — no files and no programs on your computer.
Your firm
02
Transfer
The path to the platform is TLS-encrypted — from browser to data centre.
Encrypted
03
Platform
OMVIN by flow office runs on AWS infrastructure in German data centres.
AWS · Germany
04
AI models
The models don’t run on our platform but at their providers — via AWS Bedrock, OpenAI direct or Requesty. You decide what may be stored there and whether only EU routes are used.
Provider route · your policy
05
Your server & approval
Results land on your own server in Germany. Only what you approve goes live.
Hetzner · Germany
AI models
Leading models. Your rules.
The AI models don’t run on our platform but at their providers — where other standards apply than for OMVIN itself. So you decide which retention a provider may have, and see for each model what applies. Per project, the rule can only be tightened, never relaxed.
Excerpt from the model overview in OMVIN. ‘Zero Data Retention’: the provider stores neither requests nor responses. For each model you see which retention applies and which route it takes — and which models your policy still allows.
Security in detail
What’s protected — and how.
Your serverNuremberg · FalkensteinHetzner · DEFixed IPv4Daily backups
Location
Platform and servers in Germany
OMVIN by flow office runs on AWS infrastructure in German data centres — not just anywhere, but here.
Your development environments run on your own Hetzner servers in Nuremberg or Falkenstein — with a fixed IPv4 and daily backups. You create them directly in the platform, GDPR-compliant.
At a glance
Platform on AWS in German data centres
Own servers at Hetzner in Nuremberg or Falkenstein
Fixed IPv4 and daily backups
Created directly in the platform
Local files & programsNo accessWhat you bring into OMVINVisible
Your computer
No access to your computer
Everything runs in our protected cloud. The AI can’t reach files or programs on your local computer — it only sees what you bring into OMVIN.
At a glance
You work in the browser
No local files, no local programs
The AI only sees what you bring into OMVIN
PublicShare linkTeam onlyLive only after your approval
Access
Access & approval
Public, via share link or just for your team: you decide who sees a project. And nothing goes live without your approval.
At a glance
Public, via share link or team members only
You assign roles such as project admin
Live only with your approval
German data centre
Our principles
Always true for your data.
Security isn’t a feature you switch on. It’s the foundation OMVIN is built on.
No training on your content — set as the default
No AI access to your local computer
Platform and servers in German data centres
For every AI model you see what the provider stores and which route it takes
The platform runs on AWS in German data centres. Your own development environments run on Hetzner servers in Germany — in Nuremberg or Falkenstein, as you choose. You create these servers directly in OMVIN.
Can the AI access my computer?
No. You work in the browser; everything runs in our protected cloud. The AI only sees what you bring into OMVIN — no local files, no local programs.
Which AI models can I use?
Leading models from several providers, including Claude Fable 5.1, Opus 5.5 and Haiku 5.5, GPT-6 Astra, GPT-6.1 Sol, GPT-6 Sol and Luna, MiMo 2.6, DeepSeek and GLM. They run at the providers — via AWS Bedrock, OpenAI direct or Requesty — where their standards apply, not those of our platform. In OMVIN you see for each model which retention applies, which route it takes and whether your policy allows it.
Is my content used to train AI models?
No. ‘No training on content’ is the default setting: providers then store only temporarily for security checks and reserve the right to longer retention in confirmed cases of abuse. If you want to be stricter, choose ‘Only when abuse is detected’ or ‘No retention’ — then only models that meet this rule remain available.
Does my data stay in the EU?
Platform and servers are in Germany. Requests to the AI models go to their providers — by default via whichever route is available, not necessarily within the EU. With EU routing enabled, all requests run exclusively via EU routes — included in both plans. Because less capacity is available, longer response times and outages are more likely at peak load.
Who can see my projects?
You decide per project: public, via share link or team members only. You assign roles such as project admin yourself.
Is there a data processing agreement?
Yes. The data processing agreement under Art. 28 GDPR is under ‘Legal’ — as is the privacy policy.
Start securely
Try OMVIN now.
Try OMVIN with real tasks from your business — in German data centres, with no access to your computer.
