Trust

Efterblik is designed on the principles of trust, digital sovereignty, and security.

The platform is developed and operated by IT& ApS, a Danish-owned company based in Aarhus. Our platform is built using open-source technologies, and the underlying infrastructure is owned and operated by European entities.

All data processed through Efterblik is protected in accordance with the GDPR and other EU legislation governing the processing, storage, and access to personal data.

We actively work to keep our platform independent of cloud and AI providers that cannot guarantee genuine digital sovereignty. We therefore use only European subcontractors that meet our requirements for both technical and legal digital sovereignty.

Both technical and legal digital sovereignty

Your data is protected by the GDPR and other EU legislation, which sets out clear requirements for the processing, storage, and access to personal data. With Efterblik, your data remains outside US jurisdiction, including the CLOUD Act. We actively work to keep our platform independent of cloud and AI service providers that claim to guarantee digital sovereignty simply by locating their data centres within the EU.

No to “sovereignty washing”

US cloud and AI providers are subject to US jurisdiction and may therefore be compelled to disclose their customers’ data, regardless of where in the world the data or data centres are located and regardless of what they state in their marketing materials, internal policies, and customer contracts. For this reason, Efterblik exclusively uses European subcontractors that genuinely meet our requirements for both technical and legal digital sovereignty.

Frequently Asked Questions

Efterblik is developed and operated by IT& ApS, a Danish-owned company based in Aarhus. Our platform is built on open-source technologies, and the underlying infrastructure on which the platform runs is owned and operated by European companies.

Can Efterblik be hosted on our own on-premises or private cloud infrastructure?

Yes. Efterblik can operate across cloud and/or on-premises environments and can also be deployed in air-gapped environments for maximum security.

What types of AI models are used in Efterblik?

Efterblik exclusively uses open-source AI models hosted on European infrastructure.

Is our data used to train AI models?

No. Your data is not used to train AI models. All data processing in Efterblik is designed to ensure that your data remains yours and does not fall into the wrong hands.

How do you comply with the GDPR?

We enter into a data processing agreement with every customer and sub-processing agreements with all subcontractors. We only store and process data within the EU and have documented procedures for data processing, deletion, and portability in compliance with the GDPR.

How is data protected against breaches?

Data is encrypted both at rest and in transit. Access is role-based and logged, and we have an incident response procedure that ensures notification within 72 hours in accordance with Article 33 of the GDPR.

How do you comply with the EU AI Act?

Efterblik is classified as a low-risk AI system and meets the applicable transparency requirements. All AI-generated content is clearly labelled, and users are clearly informed when they are interacting with an AI solution within Efterblik.

How are AI errors and hallucinations handled?

All AI-generated content is clearly labelled as such, including speech transcriptions and generated summaries and insights. When automatically generated AI summaries are used, a human user can edit and verify them, ensuring a clear distinction between unverified AI content and human-verified content. Where possible, source references are also included with AI-generated content so that it can be validated against the original data.

Where is data stored?

All data is stored within the EU by European-owned companies. Our primary data location is with Hetzner in Nuremberg. Backups and AI-based data analysis are handled by Scaleway in France. No data leaves the EU.

How can data be exported and deleted, for example when the agreement ends?

You can export your data at any time in formats such as CSV or Excel files. When the agreement ends, all customer data is deleted within 30 days, and you will receive a certificate of deletion as documentation. Individual evaluations can also be located and deleted on an ongoing basis.

Subcontractors

Efterblik uses only European subcontractors who comply with our demands for both technical and legal digital sovereignty:

Hetzner Online GmbH

Servers and hosting

Hetzner is our primary hosting provider. We use their datacentre in Nuremberg.

Scaleway

Servers and hosting

Scaleway is a French cloud provider. We use Scaleway for backup and for running AI data analyses.

Lettermint

Transactional emails

Lettermint is a Dutch email service. We use Lettermint to send system emails from Efterblik, including invitations and notifications for respondents.

Ready to see Efterblik in action?

Book a demo and let us show you how Efterblik can elevate your evaluations, tailored to your emergency service and everyday work.

Book a demo