Legal · Procurement
Procurement and compliance documents
The facts and documents a purchasing, legal or security review asks for, in one place. Each document is public; a signed copy of the data processing agreement is available on request.
Documents
- General Terms and Conditions — Contract terms for the SaaS services of Manfred Kunze Development GmbH, including section 4 (availability) and section 7 (data protection and data processing).
- Data processing agreement — Article 28 GDPR agreement on the Commission's standard contractual clauses (Implementing Decision (EU) 2021/915) with the four annexes.
- Sub-processors — Every third party processing customer data on our behalf, with purpose, location, transfer safeguard and the provider's own terms.
- Privacy notice — Data categories, purposes, legal bases, locations, retention and data subject rights for the platform.
- Security overview — Hosting, encryption, tenant isolation, access control, telemetry and vulnerability reporting, including what we do not claim.
- security.txt — Machine-readable vulnerability reporting contacts (RFC 9116).
- Imprint — Statutory provider identification, commercial register and tax identifiers.
- Company website privacy policy — Covers manfred-kunze.dev, the company website, as distinct from the platform.
Company
- Legal name
- Manfred Kunze Development GmbH
- Address
- Franz-Wachter-Straße 28, 70188 Stuttgart, Germany
- Managing directors
- Robin Kunze, Falk Wittmann
- Commercial register
- Amtsgericht Stuttgart, HRB 802423
- VAT ID
- DE460078572
- D-U-N-S
- 316917065
- Founded
- 2024
- Contact
- Contact form · [email protected]
Product facts
- Product
- 2kw.ai (also referred to as Backbone)
- Console and API
- https://app.2kw.ai · documentation at https://docs.2kw.ai
- Hosting
- Application: Hetzner Online GmbH, Falkenstein and Nuremberg, Germany. Database: Tiger Cloud (Timescale, Inc.) in the Amazon Web Services region eu-central-1 (Frankfurt, Germany).
- Built-in models
- Azure OpenAI, Data Zone Standard deployment, resource in Sweden Central; prompts and completions processed in EU member states.
- Bring your own key
- Scale and Enterprise plans; requests go to the customer's own provider under the customer's contract.
- Pricing
- Published at https://2kw.ai/#pricing; every paid plan starts with a 7-day free trial.
- Availability
- No specific availability figure is guaranteed unless agreed in writing (general terms, section 4).
Sub-processors at a glance
| Processor | Purpose | Location |
|---|---|---|
| Microsoft Ireland Operations Limited | Inference for the platform's built-in models and for the vision step of the document conversion pipeline (Azure OpenAI). | The built-in model deployment is of type Data Zone Standard with the resource in the Sweden Central region. |
| Hetzner Online GmbH | Hosting of the application, the sign-in service, the document conversion services and the website analytics instance, and object storage (Hetzner Object Storage) for documents uploaded through the Files API or into knowledge bases. The platform database runs at Timescale (see below). | Data centres in Falkenstein and Nuremberg, Germany. |
| Timescale, Inc., d/b/a Tiger Data | Managed PostgreSQL service (Tiger Cloud) hosting the platform database. | The Amazon Web Services region eu-central-1 in Frankfurt, Germany, which we selected for the service. |
| Cloudflare, Inc. | Content delivery network, TLS termination and DDoS protection in front of 2kw.ai, app.2kw.ai and docs.2kw.ai. | Cloudflare's global network; a request is handled at the point of presence closest to the visitor.. |
| Stripe Payments Europe, Limited | Subscription billing, invoicing and payment processing for platform accounts through Stripe's hosted billing portal. | European Union, with Stripe entities in the United States involved in payment processing. |
| Raintank Inc. dba Grafana Labs | Hosted infrastructure monitoring (Grafana Cloud): cluster metrics, Kubernetes events and container logs from the production cluster. | Grafana Cloud stack in Grafana Labs' Germany region (AWS, prod-eu-west-2). |
| Linkup Technologies SAS | Web search for agents that use the platform's built-in web search tool. | Linkup's European Union processing region, which is enabled for our account; Linkup's production systems and backups for that region are hosted in the EU. |
Full entries with data categories, transfer safeguards and the provider terms: /subprocessors.
Obtaining a signed data processing agreement
The text at /dpa is the agreement we sign. Under section 7 of the general terms the agreement is concluded before processing on your behalf starts and is made available in text form on request. To receive a countersigned copy, or to send us your own Article 28 template for review, use the contact form and name the organisation and the account e-mail address.
Related
Privacy noticeWhat the platform processes, where, on which legal basis, and for how long.Security overviewHosting, encryption, tenant isolation, access control and vulnerability reporting.Sub-processorsEvery third party that processes customer data on our behalf, with location and safeguards.Data processing agreementArticle 28 GDPR agreement based on the Commission's standard contractual clauses, with annexes.