Security, hosted in Germany.
Kyros is built for governance from the ground up: hosting in Germany, a full audit log, fine-grained roles and guardrails that act before a message ever reaches the model.
Control over data, access and content.
Hosted in Germany
API and database run in Frankfurt am Main. Every message is also processed by the provider of the chosen AI model, not always in Germany.
Per-assistant data retention
Set per assistant: platform default, never store, or a custom inactivity period.
Full audit log
21 tracked action types record who changed what and when.
Domain allow-listing
Decide which websites may embed the widget — including wildcard subdomains.
Signed embed codes
Embed codes are signed, with an optional expiry date.
Granular roles
Fine-grained roles, reusable custom roles and per-member overrides.
Content moderation
Incoming messages are screened and withheld when needed, before they reach the model or storage.
Workspace isolation
Data and access are strictly separated per workspace.
Security FAQ
Where is my data hosted?
Hosted in Germany: the API and database run in Frankfurt am Main. Every message is also processed by the provider of the chosen AI model, not always in Germany. Whether your deployment meets the GDPR also depends on how you configure it.
How long are conversations stored?
Retention is configurable per assistant: the platform default, “never store”, or a custom inactivity period.
What does the audit log record?
The audit log captures 21 tracked action types, so it stays traceable who made which change and when.
Can I control where the widget is embedded?
Yes. Domain allow-listing lets you decide which websites may embed the widget — including wildcard subdomains. Embed codes are also signed, with an optional expiry date.
How does access control work?
Through granular roles, reusable custom roles and per-member overrides. Data is additionally isolated per workspace.
Security your compliance team will sign off on.
Free plan, no credit card. Hosted in Germany.