Kuwalyst designed the AI feature CESAR now offers its enterprise customers: a European model, run in France on Scaleway, that writes the work-in-progress analysis from their own data only. Kuwalyst has been our AI expert ever since.
Trust
What sovereign AI means at Kuwalyst, for the DPO, CIO or procurement team preparing a questionnaire: where your data is hosted, which models run, what leaves the workspace and what stays, and what we do not claim.
Sovereign AI, on this site, means three concrete things. The workspace that holds your data is hosted in the European Union, on Scaleway in France. The AI that processes it is Scaleway Generative APIs by default, hosted in France; privately hosted models, on-premise or in a VPC, are available on request. And the data-handling terms, including a right to audit and deletion on request, are set out in the contract.
It does not mean that no third party is involved: the hosting provider and the standard AI service are European third parties, named below.
Your workspace runs on Scaleway, in France. Personal data collected through this website is hosted on servers located in France and is not transferred outside the European Economic Area. Data synced from a connected source, such as a Shopify store, is stored in per-client files in Scaleway's Paris region. These files are isolated from each other at the filesystem level, and access credentials are encrypted at rest.
Scaleway, our infrastructure provider, is ISO/IEC 27001 certified. Kuwalyst claims no certification of its own.
By default, the Media Planner and the AI Analyst use Scaleway Generative APIs, hosted in France. Privately hosted models are available on request, including on-premise and VPC deployments. The media mix model itself is built with PyMC-Marketing, an open-source library whose priors and code your team can read: why PyMC-Marketing rather than Meridian.
The figures in a plan do not come from the language model. They come from your data, from a media mix model or from an audited benchmark, and each one is tagged with its source. The language model writes and explains; it does not produce the figures.
What stays: your data, and the plans, models and evidence built from it, in your workspace hosted in France. What leaves: the data sent to the AI service to produce an analysis, processed in France by Scaleway Generative APIs, the only sub-processor for data from connected sources. That data is not shared with any other third party.
For Shopify, Kuwalyst revokes its access token as soon as the app is uninstalled, then deletes the store's data file when Shopify's redaction request follows. Redaction requests for an individual customer of the store are honoured within minutes of receipt.
Data-handling terms are set out in the contract, with a right to audit and deletion on request. The sub-processors involved: Scaleway (hosting and Generative APIs, France).
Personal data collected on this website is kept for as long as necessary: contact requests for three years after the last contact, client data for the duration of the contract and five years after it ends, analytics for fourteen months.
Under the GDPR you can exercise your rights of access, rectification, erasure and portability, ask for processing to be restricted or object to it, by writing to privacy@kuwalyst.ai. We answer within one month.
Kuwalyst claims no certification of its own: the ISO/IEC 27001 cited on this page is Scaleway's. We do not promise that no third party is involved: the hosting provider and the standard AI service are European third parties, named on this page. And this page adds no guarantee to those in the contract. If a questionnaire asks for something it does not answer, ask us and we will answer in writing.
Kuwalyst designed the AI feature CESAR now offers its enterprise customers: a European model, run in France on Scaleway, that writes the work-in-progress analysis from their own data only. Kuwalyst has been our AI expert ever since.
On this site, sovereign AI is an AI service hosted in the European Union, run by a European provider or on your own infrastructure, with data-handling terms set out in the contract. In practice: Scaleway in France as standard, and privately hosted models on request.
In France, on Scaleway. Personal data collected on this website is not transferred outside the European Economic Area, and data from connected sources is stored in per-client files in Scaleway's Paris region.
Not by default. The standard AI service is Scaleway Generative APIs, hosted in France. Privately hosted models, including on-premise and VPC deployments, are available on request.
For the personal data collected through this website, Kuwalyst is the controller under the GDPR and French law: hosting in France, no transfer outside the EEA, retention periods stated on this page, and rights exercised at privacy@kuwalyst.ai, with an answer within one month. For platform data, the data-handling terms are set out in the contract, with a right to audit and deletion on request.
We answer in writing and point to the contract terms wherever a question turns on them.
Talk to us