> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/ai/ai-model-hub/governance-and-compliance/data-handling.md).

# Data Handling

AI Model Hub runs openly available models on <code class="expression">space.vars.ionos\_cloud</code> infrastructure. All inference is performed in <code class="expression">space.vars.ionos\_cloud</code> data centers in Germany, and your prompts and the generated outputs are processed there and nowhere else. This page describes what happens to your data when you use the service: what is recorded, who may access it, and what we never do with it.

## Prompts and outputs

The content of your prompts and of the outputs generated for you is never logged and is never accessed by <code class="expression">space.vars.ionos\_cloud</code> personnel. It is not written to any log or to persistent storage; it is not used to train, fine-tune or otherwise improve any model; and it is not disclosed to any third party, including the developers of the models we operate. Metadata describing each call is recorded, as set out in [<mark style="color:blue;">Request metadata</mark>](#request-metadata).

## How your requests are processed

The inference API is stateless per request. No session or conversation is maintained on our side: where your application maintains a conversation, it does so by transmitting the preceding turns with each new request.

Separation between customers is enforced logically: each request is authenticated against your contract, responses are returned solely to the caller that issued the request, and no path exists by which one customer may read another customer's requests or outputs.

During processing, your prompt resides in host memory and in GPU memory. Neither the prompt nor the generated output is written to persistent storage.

## Request metadata

We record metadata describing each API call: the timestamp, the model invoked and the number of tokens processed. This metadata is required for accurate billing and for the operation of the service. It contains no part of your prompt or of the generated output.

Operational logs and metrics are retained only for the period necessary to operate the service reliably, in accordance with <code class="expression">space.vars.ionos\_cloud</code>'s internal retention policy. Access to this operational data is restricted to <code class="expression">space.vars.ionos\_cloud</code> personnel located within the European Union; no access occurs from outside the European Union in the operation, maintenance, support, or fault diagnosis of the service.

## Sub-processors

No third-party sub-processors are engaged for AI Model Hub.

Processing is carried out by <code class="expression">space.vars.ionos\_cloud</code> within the European Union.

## Model developers

AI Model Hub offers models published by third parties. We obtain the model weights and deploy them onto infrastructure we operate; the weights are the only component originating from the model's developer. The developer accordingly has no access to your data and does not process personal data on your behalf.

## Security measures

* **In transit:** TLS for all external API traffic.
* **At rest:** AES-class encryption on all persistent storage.
* **Authentication:** API access is authenticated by means of API key tokens, which you may create and revoke at any time.

## Pseudonymization and encryption

Responsibility for the measures required by Article 32 GDPR is shared: we implement the measures set out in [<mark style="color:blue;">Security measures</mark>](#security-measures) and [<mark style="color:blue;">Request metadata</mark>](#request-metadata), and you decide what personal data your requests contain.

<code class="expression">space.vars.ionos\_cloud</code> does not pseudonymize the content of your requests. The model needs the actual text to return an accurate response. If you require pseudonymization, apply it in your application before the data leaves your environment. For example, replace names and identifiers with tokens, and restore the original values in the response you receive.

While a request is being processed, the content of your requests is held in plaintext in host and GPU memory. It is not written to persistent storage and is not retained after the request completes.

As the controller, you remain responsible for deciding what your requests contain.

## Certifications

* <code class="expression">space.vars.ionos\_cloud</code> data centers are certified to ISO 27001.
* AI Model Hub falls within the scope of BSI C5.

## Special-category data (Article 9 GDPR)

No restrictions apply beyond the measures described on this page. You remain the controller in respect of the data you transmit, and you are responsible for establishing your own legal basis and, where required, for conducting your own data protection impact assessment.

## Related documents

The following apply to AI Model Hub as part of <code class="expression">space.vars.ionos\_cloud</code> and are not reproduced here. AI Model Hub is covered as a platform service, so no product-specific agreement is required. The general technical and organizational measures annex (Article 32 GDPR) applies without a product-specific annex. The sub-processor annex forms part of your data processing agreement.

Your data processing agreement applies as part of your contract with <code class="expression">space.vars.ionos\_cloud</code> and does not require separate signature: Article 28(9) GDPR requires the processor contract to be in writing, and electronic form satisfies that requirement.

The applicable documents for each contracting company:

| **Your contracting company**                                                     | **Data processing agreement (Art. 28 GDPR)**                                                                                                                                        | **Terms for AI services**                                                                                                                           |
| -------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
| <code class="expression">space.vars.ionos\_cloud</code> GmbH (Germany)           | [<mark style="color:blue;">Datenschutzpaket</mark>](https://cloud.ionos.de/terms-gtc/terms-enterprise-cloud/enterprise-datenschutzpaket/)                                           | [<mark style="color:blue;">Nutzungsbedingungen für KI-Dienste</mark>](https://cloud.ionos.de/terms-gtc/ki-dienste/)                                 |
| <code class="expression">space.vars.ionos\_cloud</code> Solutions Spain SLU      | [<mark style="color:blue;">Acuerdo de encargo de tratamiento de datos</mark>](https://cloud.ionos.es/terms-gtc/terms-enterprise-cloud/data-protection-package/)                     | [<mark style="color:blue;">Condiciones de uso de los servicios de IA</mark>](https://cloud.ionos.es/terms-gtc/condiciones-uso-servicios-ia/)        |
| <code class="expression">space.vars.ionos\_cloud</code> France SAS               | [<mark style="color:blue;">Data Processing Agreement of IONOS CLOUD</mark>](https://cloud.ionos.fr/terms-gtc/terms-enterprise-cloud/data-protection-package/)                       | [<mark style="color:blue;">Conditions d'utilisation des services d'IA</mark>](https://cloud.ionos.fr/terms-gtc/conditions-utilisation-services-ia/) |
| <code class="expression">space.vars.ionos\_cloud</code> UK Ltd. (United Kingdom) | [<mark style="color:blue;">Data Processing Agreement for IONOS CLOUD</mark>](https://cloud.ionos.co.uk/terms-gtc/terms-enterprise-cloud/data-processing-agreement-for-ionos-cloud/) | [<mark style="color:blue;">Specific Conditions for Use of AI Services</mark>](https://cloud.ionos.co.uk/terms-gtc/ai-services/)                     |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ionos.com/cloud/ai/ai-model-hub/governance-and-compliance/data-handling.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.