Your AI. Your infrastructure. Your rules.
RAGSuite runs entirely on infrastructure you control — on-premise, in your private cloud, or fully air-gapped. No data leaves your perimeter, nothing phones home, and every answer is traceable to its source. Sovereignty isn’t a feature here; it’s the architecture.
Control you can prove — not a promise you have to trust.
For a regulated, German-speaking enterprise, “the cloud” is rarely the real problem — losing control of where data lives, who can see it, and what a model does with it, is. RAGSuite is built so that control never leaves your hands, and so you can demonstrate it to an auditor, a Datenschutzbeauftragter, or a Betriebsrat.
Eight guarantees a due-diligence team can verify.
Each one is architectural — enforced by how RAGSuite is built and deployed, not by policy alone.
Self-hosted or air-gapped
Deploy on your own servers, your private cloud, or a fully disconnected network. Docker-native, stands up in minutes, and runs with zero outbound internet if you require it.
Nothing phones home
RAGSuite never calls back to us. No telemetry, no usage beacon, no remote kill-switch — something you can verify at the network layer.
Offline licence keys
Enterprise unlocks with a signed, offline licence key (a self-contained JWT). No activation server, no online check — your air-gapped instance simply works.
DSGVO by design
Personal data stays inside your perimeter, under your existing processing agreements and retention rules. No new sub-processor to assess, because there isn’t one.
Local, private models
Run fully local LLMs via Ollama for air-gapped inference, or connect OpenAI, Anthropic, Mistral or Gemini under your own keys. Your content never trains anyone else’s model.
Data residency you choose
Documents, vectors and metadata live in your own PostgreSQL, Redis and vector store. You decide the region, the encryption and the backups.
Citations on every answer
Every response links to the exact source passage, so staff verify before they act — and decisions aren’t built on hallucinations.
Betriebsrat-friendly
No covert employee tracking, no external data flows to explain. The transparency that makes works-council sign-off straightforward.
Sovereignty isn’t a setting you toggle on. It’s where your data lives, who holds the keys, and whether you can prove all of it to an auditor.
Three forces push AI on-premise — the EU AI Act is only one.
Data-protection law is already here, the EU AI Act is phasing in through 2028, and the wider drive for digital independence keeps building. You don’t have to bet on a single deadline — you have to prove control whenever it’s asked of you.
- 2 Feb 2025
Prohibited practices
Banned AI uses and AI-literacy duties apply.
- 2 Aug 2025
GPAI models
Obligations for general-purpose AI models and the governance framework apply.
- 2 Aug 2026
Transparency duties
In force. Article 50 applies to providers and deployers: people must be told when they are interacting with an AI, and AI-generated content must be marked. Not limited to high-risk systems — and open-source systems are not exempt. National market-surveillance authorities can enforce from this date.
- 2 Dec 2026
New prohibitions
Two further Article 5 bans (AI nudification, AI-generated CSAM) take effect. Generative systems placed on the market before 2 August 2026 have until this date to meet the machine-readable marking requirement.
- 2 Dec 2027
High-risk · standalone
Annex III systems must comply — moved back from Aug 2026 by the Digital Omnibus on AI, Regulation (EU) 2026/1744.
- 2 Aug 2028
High-risk · embedded
AI built into regulated products (Annex I) must comply.
A US public cloud, or a platform you actually control.
Both can tick a compliance box. Only one removes the dependency.
- Your data leaves your perimeter
- A new sub-processor to assess and monitor
- A dependency you can’t remove
- Compliance you outsource and hope holds
- Subject to non-EU jurisdiction and access law
- Data stays inside your perimeter
- No RAGSuite sub-processor — there isn’t one
- Keys, models and infrastructure you hold
- Compliance you can demonstrate, line by line
- An innovation by NITSAN — with service partners across Germany
What sovereignty looks like in practice.
Everything a German due-diligence team asks for — documented.
Architecture and data flows, SLOs, penetration testing and disclosure, versioning and upgrade guarantees, backup and disaster recovery, and the full German interface. It all lives in the Trust Center.
Sovereignty questions, answered
Can RAGSuite run fully air-gapped?
Yes. With local LLMs via Ollama and offline licence keys, a RAGSuite instance needs no outbound internet at all. Nothing phones home, and Enterprise unlocks from a signed key you hold.
Who is behind RAGSuite?
RAGSuite is an innovation by NITSAN, delivered in Germany through independent service partners, with EU/German hosting and support in German and English. We are formalising a dedicated German operating entity; full legal details are in our Impressum.
Where does our data actually go?
Nowhere you don’t send it. Documents, vectors and metadata stay in your own PostgreSQL, Redis and vector store. If you use a hosted model provider, only the prompt you choose to send leaves — or keep everything local with Ollama.
Does “self-hosted” mean we’re on our own?
No. The Community Edition is self-serve, and the Enterprise Edition adds email support in German and English. Guided onboarding, an SLA and a dedicated contact are available as enterprise services by agreement for larger or regulated deployments.
How is this different from a DSGVO-compliant US cloud?
A compliant US cloud still places your data and your dependency outside your control. RAGSuite removes the dependency entirely: you hold the infrastructure, the keys and the models. Compliance becomes something you demonstrate, not something you outsource.
“Our clients in the housing sector cannot send tenant data to a US cloud. RAGSuite lets us give them a real AI assistant that never leaves their building.”
Prove data sovereignty to your auditor.
Self-hosted, air-gapped, nothing phones home. We’ll show you exactly what runs where — and how to verify it.