Security
ONYVEN is a German company. We build for enterprises in regulated industries, so security is designed in from the start, not added later.
Never used to train AI
Your documents are used for your work only. No AI model is ever trained on them.
Humans stay in control
AI reads, rules decide, your team approves. Nothing reaches your systems without your say.
Built for GDPR and KVKK
Every customer gets a data processing agreement, and Turkish companies the KVKK standard contract.
Full audit trail
Every document, decision and export is recorded and traceable.
01 · Data protection
Hosted in the EU, kept apart from every other company, and deleted when you say so.
EU hosting
Your data is hosted and processed on Microsoft Azure within the EU, under European data protection law.
Encrypted in transit and at rest
Your data is TLS-encrypted whenever it moves and stored encrypted wherever it rests.
Strict data isolation
Each company's data is kept separate from every other company's, in the application and again in the database.
Retention on your terms
You set how long we keep your data and when it is deleted. If you leave, your data is returned to you.
02 · Responsible AI
The model extracts information. It has no access to your systems, and it cannot act on its own.
The AI never acts
The AI model cannot send messages, change records or browse the web. Every action is taken by rules you set or by a person.
Validated output
Every result is checked against a fixed data model before anyone sees it. Anything that does not fit goes to a person.
Protection against manipulation
Documents that try to instruct the AI cannot make it act. Reading and acting are kept apart by design.
Enterprise AI terms
We work with leading AI models under enterprise terms. Model providers never use your documents to train their models.
03 · Enterprise controls
Banks, defence and public-sector suppliers have their own rules. ONYVEN is built to work within them.
Roles and permissions
Personal accounts and role-based access decide who can see, change and approve.
Read-only to start
Pilots start on a read-only connection to your business systems. Nothing is written to them until you decide it should be.
Private deployment
For regulated industries, ONYVEN can be deployed in your own cloud or on your own infrastructure, depending on your requirements.
Security reviews welcome
We answer your security questionnaire in full and work with your IT and compliance teams before a pilot starts.
04 · Contact
Security questions go straight to the founding team, in English or Turkish.
Thirty minutes on a video call. You tell us how the work runs today, where the manual steps and bottlenecks are, and we show you what ONYVEN would have done with a week like yours. If it is not a fit, you will hear that from us too.
Onur YılmazFounder, ONYVEN30 minutes · Founder call
You talk to the founder directly. Half an hour is enough to see the product run on orders like yours and decide whether a pilot makes sense.
Book 30 minutesOr write to [email protected]