Sovereignty, hosting and governance
In plain language, what stays in your country and what the AI is allowed to do. The contract annex carries the binding text.
01
Surveillance information
It reaches only the roles you authorize. It stays out of support tickets and offshore tools, and an imagery order never names you or its purpose.
02
Personal data
Under the personal data protection law (LOPDP), Quatro acts as processor on your instructions, collects only what the work needs and pseudonymizes where it can.
03
What you own
Your data and every derived product are yours from the moment they exist. The rules, thresholds and workflows built for you are yours too, delivered in open formats you can carry to another provider.
04
Configuration and credentials
System configuration, architecture and credentials are confidential. The keys stay in your custody, and remote administration runs through multi-factor sign-in with every session recorded.
05
Where it runs
Data, backups, logs and keys stay in the country. You choose an in-country data center we manage, a government or private cloud in the country, or your own premises, and you can move between them. A remote site keeps working when the link drops.
06
What the AI may do
Inference runs in the country, and no third-party model is trained on your data. Every model is registered, and you hear about a change before it reaches production. Models are replaceable, open-weight ones included. Rules are explicit and versioned, and every output carries a trace. The AI advises, an official decides and signs, and you can switch any AI function off.
07
When it ends
A full export within 30 days, 90 days of transition support, and certified deletion.
Hosted in your country · Your team owns it from day one