every decision.
on record.

kint runs decisions for organisations that answer to boards, regulators and the public. kint's own controls are part of the platform: sign-in through your identity provider, roles and releases, versioned data and a record of each run. kint hosts and operates the platform in Germany.

Foundations · security and accountability
data, model and settings per runone record per run
kint's own controls

what the platform does. what you can show.

These controls are kint's own, built into the software and active on every run. Where the platform runs is set out below.

  • 01

    your identity provider

    People sign in through your identity provider over OpenID Connect, with SAML on request.

    you can show: who has an account, from your own directory
  • 02

    role-based access

    Roles separate who may model, run, release and read.

    you can show: who could see and change what
  • 03

    every action in the record

    Uploads, model changes, runs and releases are recorded with who acted and when.

    you can show: the full chain from question to decision
  • 04

    release

    kint's decision agent proposes, and a person on your team releases each plan before it is written back. An approved workflow runs whenever your systems call it.

    you can show: who approved the workflow and who released each plan
  • 05

    versioned data and replay

    Every upload becomes a version with a content hash. Each run pins the data version, the model version and the solver settings, so the plan can be re-checked against the record.

    you can show: which data a decision used, and its replay
  • 06

    data separated per tenant

    Each customer's data is separated from other customers' data by tenant-level access control in the database.

    you can show: where your data lives and who touches it
  • 07

    encryption

    Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256).

    you can show: how data is protected on the wire and on disk
  • 08

    language model on record

    The agent uses a language model to read descriptions and draft models. Which model is used and in which region it is hosted is documented per setup. The plan itself always comes from a solver.

    you can show: which model saw which text, and where it ran
Our promise on your data

for your runs only

The data is used for your decisions.

never shared

The data is not shared with other customers.

never trains for others

kint trains no models for other organisations on your data.

EU AI Act

documentation from the running system.

The obligations of the EU AI Act describe what a responsible system records and explains. kint records it during every run and maintains drafts of the documentation from that record.

Who owns what

kint keeps the drafts current. Compliance reviews them and owns the assessment, because the risk class depends on how your organisation uses a decision.

EU AI Act obligations and what the platform contributes
ReferenceTopicWhat the platform contributes
Art. 9Risk managementA risk register drafted from the configured decisions and their limits.
Art. 12Record keepingAn audit trail of every run, logged automatically: data, model, settings, result, releases.
Art. 13TransparencyPlans from exact models name the binding limit and what one more unit of it is worth.
Art. 14Human oversightA person releases each plan, and people can stop and override.
Art. 17Quality managementVersioned models and reviews that feed quality records.
Annex IVTechnical documentationDrafts kept current from the running system, for your compliance team to review.
Where kint runs

hosted in germany. or in your network.

kint is hosted in Germany and operates the platform itself. For operations that must not leave your network, we scope an installation inside it.

Where kint runs and who operates it
WhereRun byWhat applies
hosted in Germanykintkint hosts and operates the platform: engine, decision agent and record. The controls above apply on every run.
your data centreyour teamAn installation scoped for your infrastructure, with its identity provider, network rules and monitoring. Releases, the record and documentation work the same way.
Questions procurement asks

short answers.

For the full set, ask for the documentation pack.

Does our data train models for other customers?
No. The data is used for your runs. It is not shared with other customers, and kint trains no models for other organisations on it.
Where does the language model run?
The agent uses a language model to read descriptions and draft models. Which model and which hosting region apply is documented per setup. The plan itself always comes from a solver, never from the language model.
Can we re-check a decision for an auditor?
Yes. Each run pins the data version, the model version and the solver settings, so the plan can be re-checked against the record. The record also shows who released it.
Can kint run inside our own network?
Yes. For operations that must not leave your network, we scope an installation inside it, with the identity provider and monitoring you already use.

bring the questions your auditors ask.

Talk to the founders and engineers behind kint. We walk your security and compliance team through the controls, the record and the documentation drafts.

Hosting
hosted in Germany, or an installation in your network
Regulation
GDPR · EU AI Act documentation drafts
Contact
hello@kint.pro