Sovereignty

Sovereignty is a set of facts you can check: who runs the service, where the machines are, what is kept, for how long, and what leaves the country. This page lists them for ITS INCOM AI, which is run by Internet One Srl for the ITS INCOM Foundation.

Two parts that do not mix#

The platform is split in two.

• The control plane, in Switzerland, keeps the inventory of the machines, the catalogue of models and the zones. It never sees a customer: no accounts, no keys, no texts.
• The data plane of ITS INCOM AI, in Switzerland, keeps everything that concerns you: accounts, keys, usage records, conversations, uploaded documents, copies of the database. The API you call is part of it.

The data plane downloads its configuration from the control plane every minute and works from its own copy, so a request never waits for the control plane. Once an hour it sends back numbers, and only numbers: for every hour, model, machine, endpoint and zone, the count of calls and errors, the tokens and the average time. No user, no key, no text, no IP address.

Where your requests go#

A zone is a group of machines in one country, with a declared owner. Every key has the zones it may use: by default, all the zones ITS INCOM AI offers.

• A text generation request goes only to machines in your key's zones, so it never leaves their countries.
• If the chosen machine fails before the first token, the request moves to another machine, still inside your zones.
• If no machine is available there, the answer is 503 and names the zone. The request is never moved to another zone.

Your account data stay in Switzerland; your requests are processed in the zones of your key, which can be in another country. The zones of each model, with their country, are in the catalogue. More in Zones.

What is kept, and for how long#

"Encrypted" means encrypted by the application before it is written to the database, on top of whatever protects the disk. What you delete stays in the copies of the database until they rotate out, after 30 days.

Technical logs, that is errors with the IP address of the client, stay on the machines of ITS INCOM AI in Switzerland. How long they are kept is not published yet.

Deleting#

• A document: its file, its pieces and its vectors are deleted at once.
• A conversation: deleted at once, with all its messages.
• The account: in the dashboard, under Account. It is disabled at once, and for 30 days the deletion can be undone by writing to segreteria@itsincom.it. After 30 days conversations, knowledge bases with their vectors, keys, the request log and the usage records are deleted, and the account is anonymised.

What stays after the account is deleted: the invoices, and a record of the request — email address, time, IP address — kept without an end date as proof that the deletion was carried out.

How to check#

• X-Zona on every chat completion says where it was processed. In a stream the headers leave before a machine is chosen: if your key allows more than one zone, the header lists the possible ones.
• Usage records keep the zone and the site of every request. The dashboard does not show them yet: ask segreteria@itsincom.it for an extract.
• The catalogue lists the zones of every model, with their country: Models catalog.
• Who else touches your data: Sub-processors.

Contract documents#

Which law governs the service, the data processing agreement and the security measures belong to the contract documents of ITS INCOM AI: write to segreteria@itsincom.it. For the law that applies, see also nLPD and NIS2.