Local AI for professional secrecy holders with GDPR and Section 203 requirements
AI Cube processes models and knowledge in your controlled environment. Data paths, permissions and operations are documented; in managed operations, the people involved accept a written secrecy obligation.
Companies worldwide trust WZ-IT
Four patterns that block AI here
External AI services process client, patient or other confidential data through additional involved parties.
A DPA addresses the GDPR layer but does not alone settle necessity, secrecy obligations and the access chain under §203.
Models, knowledge sources, logs, backups and remote maintenance together form the actual data path.
In a managed service, contributing persons and any further participants must also be effectively bound to secrecy.
Local AI for GDPR and Section 203 requirements
We configure and operate AI Cube for the agreed GDPR and Section 203 scope. This includes controlled data paths, limited permissions, documented maintenance, the appropriate DPA and written secrecy obligations for the people involved. Legal evaluation of the specific use remains with the controller and its advisers.
What §203 StGB prohibits
§203 StGB protects confidential information entrusted by clients, patients and other parties. The necessary involvement of contributing persons is permitted. What matters is that access is limited to what is necessary, the people involved are bound to secrecy and the complete data and maintenance path is controlled.
Why cloud AI is the problem
With public AI services, inputs and documents leave your own infrastructure. Whether a service is suitable in a specific case therefore depends not only on a DPA, but also on data flows, subprocessors, access permissions and the actual use.
Why local processing helps
On-premises inference, local vector search and internally operated interfaces keep technical processing in your controlled environment. This reduces external data paths and subprocessors and allows access to be limited precisely.
Managed service with a secrecy obligation
When we provide setup or operations as a contributing person, the people involved accept a written secrecy obligation and are instructed about the criminal consequences. Where personal data is involved, this is combined with a DPA, limited administrative rights and documented maintenance paths.
What we deliver for it
These technical and contractual building blocks form part of the agreed §203 scope:
Data-protection layer
Secrecy and instruction on criminal consequences
necessary rights, logging and controlled paths
This content is general information and not legal or tax advice. The specific implementation under §203 must be reviewed professionally on a case-by-case basis.
AI Cube for firms, practices and other §203 environments
The local AI platform brings AI chat, knowledge spaces and local models into your network. It is configured for the agreed GDPR and §203 framework; professional-software integrations remain a clearly scoped integration service.
Delivered ready to use within 10 working days
AI Cube
€6,490 excl. VAT one-time
Device, setup, briefing and shipping
€349.90 excl. VAT / month
AI Cube Care · first year accompanied, then cancellable monthly
- Compact AI appliance on NVIDIA GB10 with 128 GB unified memory and 1 TB NVMe
- Open WebUI with knowledge bases, groups and roles
- A local language model, a fast model for short tasks and an embedding model
- Hardened system, firewall, HTTPS on the local network
- Remote maintenance through NetBird, logged and switchable
- Handover documentation, a 30-minute briefing and shipping within Germany
- Two-year manufacturer warranty
Expandable when required
RAG, data sources, integrations, secure connectivity and custom workflows are scoped separately.
Operable for the long term
AI Cube Care keeps the device running: a monthly maintenance window, tested model updates with a rollback path, round-the-clock monitoring, ticket support and warranty handling. For confidentiality professionals we add a data processing agreement under Art. 28 GDPR and the written secrecy obligation under Section 203 (4) of the German Criminal Code, including instruction on the criminal consequences; on request remote access stays switched off by default.
Solutions per profession
Confidentiality norm, use cases and professional-software integration - profession-specific.
Law Firm
§203 · Case data · RAG
Case-law research, draft pleadings and case knowledge with local AI configured for a defined Section 203 scope.
Learn moreTax Advisors
§203 · DATEV · Client data
Process documents, correspondence and firm knowledge with local AI configured for a defined Section 203 scope.
Learn moreMedical Practice & MVZ
§203 · Patient data · PMS
Practice knowledge, drafts and documentation with local models in the practice network.
Learn moreHospital & Clinic
§203 · HIS · air-gapped
Doctor's letters, tumour board, coding at volume - air-gapped in your own data centre.
Learn morePsychotherapy
§203 · Therapy data · local
Drafts, professional research and internal knowledge with local models in the practice.
Learn moreNotary
§203 · Deeds · RAG
Deed drafts and register-law research - party data stays in the office.
Learn moreAuditors
§203 · Working papers · RAG
Working papers, IDW PS research, report drafts - client figures stay in-house.
Learn moreAdvise. Build. Operate. From one team.
Sovereign AI is a lifecycle, not a device purchase - and everything stays on your infrastructure.
Advise & design
Workshop, sizing, data classification and §203 contract framework. We understand your stack, professional software and compliance requirements before we recommend.
Build & integrate
On-premise build on your hardware, RAG on your documents with access control, integration into your professional software, secrecy obligation + DPA.
Operate & maintain (optional)
Updates, monitoring, model upgrades and RAG maintenance as a service contract - or you operate fully yourself. Handover and knowledge transfer included.
The full service range for your local AI
From hardware and inference through RAG and integration to operations and security - no interface ping-pong between advice, build and operations.
Local AI infrastructure
Knowledge & RAG
Integration & development
Three reasons that make the difference
Your hardware, controlled data flows
On-premise deployment at your site; external integrations, updates and remote access are configured deliberately and documented.
Open source, no lock-in
Ollama, vLLM, Open WebUI, Qdrant - operable internally, no vendor lock-in.
GDPR & §203
DPA, written secrecy obligation and instruction of contributing persons about the criminal consequences.
For professional secrecy holders
Connect AI and applications in a Section 203 operating model
In addition to local AI, WZ-IT can operate the related portals, open-source applications, Supabase backends and custom services in a managed cloud designed for professional secrecy holders.
Enquiry
Assess local AI for professional secrecy holders
Describe the workflow and data that should be processed locally or in a controlled environment.
Frequently asked questions
Answers to the most important questions
Yes. Section 203(3) StGB permits the necessary involvement of other contributing persons. The specific use needs controlled data paths, an effective secrecy obligation and the other data-protection and profession-specific requirements.
A DPA is an important part of the GDPR layer. For secrets under §203, necessity, involved persons, secrecy obligations, access rights and further providers must also be assessed.
The organisation must define which data may be processed, who receives access and how service providers are involved within the §203 framework.
Server location is only one criterion. Provider identity, subprocessors, access rights, third-country transfers, contracts and the actual processing also matter.
AI Cube costs EUR 6,490 excluding VAT as a one-time purchase for the 1 TB version, plus AI Cube Care at EUR 349.90 excluding VAT per month; the first twelve months run with the device, cancellable monthly after that. Hardware, hardening, an agreed local model, monitoring, updates and support are included. Larger deployments are quoted per project.
A fully local or isolated deployment can be configured. Updates, external models, web search and remote maintenance are then unavailable or require controlled transfer procedures.
Common open-source LLMs (Llama, Qwen, Mistral, Gemma) on NVIDIA hardware - from the AI Cube as a GB10 appliance for a single practice to an RTX GPU server for larger institutions. No vendor lock-in.
We document data paths, roles, technical safeguards and operating responsibility. For a §203 scope, the people involved accept a written secrecy obligation and are instructed about the criminal consequences; an appropriate DPA is added where personal data is processed.
In-depth guides on this topic
What clients say about working with us
From local AI integration to architecture, data sovereignty and ongoing operations.
“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”
Steve Kirchner
Managing Director, nextGYM GmbH
“While looking for a partner to integrate a local AI solution, we came across Timo and Robin - and could not have made a better decision. They quickly understood our requirements and solved technical challenges competently and pragmatically. We were particularly impressed by the straightforward collaboration, their high level of expertise and the speed of implementation. We are delighted to have Timo and Robin at our side as reliable business partners and look forward to our next projects together. (translated)”
Henrik Jeche
Head of IT Administration
ml&s - full-service provider for the electronics industry.
“Communication with WZ-IT was open, friendly and professional from the very beginning. Mr. Wevelsiep and Mr. Zins responded to every one of our questions patiently, promptly and respectfully, and contributed their own suggestions and good ideas on how to modernize our server infrastructure and adapt it even better to our needs. Throughout, WZ-IT consistently kept our need for data sovereignty and GDPR compliance in mind. Even short-notice adjustments and change requests from our side were implemented quickly and patiently and integrated consistently into the overall concept. From planning to the final handover, every step was documented transparently and comprehensively - so if a provider change should ever become necessary, the documentation would let us onboard a successor into our infrastructure very quickly. We are extremely satisfied with WZ-IT and hope to continue working together for a long time.”
Christoph Mußmann
Project Officer, DGHO e.V.
DGHO - German Society for Hematology and Medical Oncology.
“We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)”
Matthias Zimmermann
Managing Director, Annota GmbH
Annota - healthtech startup with an AI documentation assistant.
“I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)”
Andrea Pawlowski
Communications Manager, Golem.de
Golem.de - leading German IT news outlet.
“Professional, honest and technically thoroughly sound: WZ-IT set up our Proxmox and backup infrastructure securely and future-proof. The consulting from Timo and Robin was objective and needs-driven, the implementation smooth and the final documentation exemplary. You can tell immediately that business-critical infrastructure is thought through holistically from the outset here and implemented with clear ownership.”
Pascal Block
Project Manager, Stadtwerke Brühl GmbH
Stadtwerke Brühl - municipal energy and infrastructure utility.
“With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)”
Sonja Aßer
Data Manager, ARGE
ARGE Neue Medien - master data & digital standards for plumbing and building technology.
“I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.”
Aleksandr Shuliko
CTO, EVA Real Estate
EVA Real Estate - leading real-estate agency in Dubai.
“WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.”
Pascal Hakkers
Aphy AG
Aphy AG - AI platform for hotel back-office.
“WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.”
John Hellmerichs
Managing Director, AInergy GmbH
AInergy - consultancy for energy and facility management.
“Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)”
Sebastian Maier
Managing Director, Yonju GmbH
Yonju - business coaching and AI products.
“Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.”
Gabriel Sanz Señor
Managing Director, Odiseo Solutions
Odiseo Solutions - software engineering for the space industry.
“WZ-IT supported us professionally with the provisioning and setup of NetBird. Alongside the technical implementation, we also received well-founded advice on connecting our Kubernetes clusters. The recommendations were concrete and directly actionable. The collaboration was consistently reliable, fast and on equal terms. We can recommend WZ-IT without reservation.”
Kai Clauß
Head of Development, SweetConnect GmbH
SweetConnect - cross-manufacturer Industry 4.0 platform for confectionery production.
Let's talk about your project - honest and no strings attached
- Straight with Timo and Robin - no sales team, no pitch
- An honest take, including when we are not the right fit
- Concrete next steps for infrastructure, software or AI
No risk: worst case, you leave with a clearer understanding of your project than before.
“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Arrange a callback
Companies worldwide trust WZ-IT