Frequently asked
What your procurement team usually asks first.
Direct answers to the questions we get on the first call. Missing one? Email hej@komplai.dk, we update this list.
- The model proposes; humans approve. AI-generated paragraphs are flagged as draft until the case worker accepts them. The forvaltningslov templates are not AI-generated, they're pre-built structures the AI fills in, not writes from scratch. The output is traceable, citable and auditable.
- Not in the default setup. Our EU cloud runs in Germany with no US sub-processors. Our on-prem appliance lives entirely inside your environment. If you opt to use OpenAI/Anthropic with your own API keys, the US exposure is yours, we document it in your Transfer Impact Assessment.
- No. Neither our EU-hosted models nor the third-party models we connect to are configured to train on your data. It's explicit in the DPA, and the contracts with sub-processors mirror that. If you bring your own API keys, your contracts apply.
- The platform makes no decisions. It proposes text and structure that the case worker signs off on. The forvaltningslov module is built precisely to support, not replace, case worker judgment. The DPIA walks through this explicitly per module.
- Every document action is logged with user ID, timestamp, module, model version and prompt hash. The log is exported to your SIEM (Splunk, Elastic, Sentinel) or your DMS. We retain nothing longer than the contract requires.
- You choose. Our EU-hosted models (typically Mistral Large or Llama-based), your on-prem models (Ollama, vLLM), or your own API keys to OpenAI/Anthropic. The model version is pinned to a specific release and rotations are announced 90 days ahead, no surprise upgrades that change the output.
- No, not by default. For PII detection our engine is our own Danish-tuned NER model running on Hetzner in Germany — fine-tuned on Danish legal and public-administration text. If you want to attach an Anthropic or OpenAI key as an additional layer (Hub → Settings → AI keys), you can use your own credentials for it. It's never required, and the default is that nothing leaves the EU. See /metode for the full technical breakdown.
- Our modules are positioned under Article 6(3) as supporting tools for human case work, not high-risk AI systems. The supporting documentation sits in the procurement pack. If you classify a specific module as high-risk under your interpretation, we adapt the documentation.
- Yes. DPA, DPIA template, sub-processor list, ISAE 3402 Type II and TIA are shared without NDA. We think procurement documentation should sit at the same level as a CE mark on electronics, it's not a secret.