> ## Documentation Index
> Fetch the complete documentation index at: https://docs.varios-ai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security at VARIOS AI

> The secure processing of data is a central principle of VARIOS AI.

## Our Commitment

We know that our customers have the highest requirements for data protection and information security – and we take this responsibility very seriously. For us, security is not a one-off project but a continuous process. We combine internationally recognized standards, technical excellence, and regular audits to provide our customers with a platform they can trust at any time.

## Certified Information Security

avency GmbH, the company behind VARIOS AI, is certified according to [ISO/IEC 27001 and ISO 9001](https://www.avency.de/downloads.html). Our preferred hosting partner also meets the highest security and quality standards. Detailed information about the security measures can be found here:
[https://docs.hetzner.com/general/others/certificates](https://docs.hetzner.com/general/others/certificates)

## Secure Software Development

Security is an integral part of the development process:

* **Secure coding guidelines** based on established standards
* **Regular penetration tests** by independent security experts
* **OWASP Top 10** and other best practices as binding benchmarks
* **Automated CVE scans** with every deployment

This ensures that security aspects are not added later but are integrated into the software from the very beginning.

## Data Encryption

All chats and uploaded documents in VARIOS AI are **encrypted** – both at rest and in transit.

This ensures that sensitive information is protected in the best possible way at all times.

<Info>
  VARIOS AI encrypts all data at rest with AES-256 in Galois/Counter Mode
  (**AES-256-GCM**) with a 96-bit initialization vector length (IV). This
  internationally recognized standard combines strong encryption with integrated
  integrity checking, thereby ensuring both confidentiality and tamper
  protection. It complies with the recommendations of the **BSI Technical
  Guideline TR-02102** for maximum security.
</Info>

<Note>The private key (RSA key) can be chosen by the user.</Note>

## Flexible Hosting Options

In addition to our cloud variant, VARIOS AI also offers the option of **on-premise hosting**.

This allows particularly security-critical organizations to operate the platform entirely within their own infrastructure – in compliance with internal compliance and security policies. With the inclusion of a local model, VARIOS AI can be operated without any connection to the internet.