Case files don't belong in someone else's model.
Keep them on your machine.
Private LLM hosting on a whole dedicated machine in EU-Central, for firms that need to run document review, drafting, or research assistance without sending client material through a consumer AI product.
Not legal advice. This page describes GPUwerk's infrastructure and contractual commitments. It is not an opinion on your duty of confidentiality, your privilege obligations, or your bar association's or law society's rules on AI tools. Check with your own risk partner, general counsel, or ethics adviser before deciding what can run where.
Why firms end up here
Associates and paralegals already use AI tools for drafting and summarizing. The question is which ones, and where the documents go while they do it.
Consumer AI tools weren't built for privileged material
Many bar associations and law societies have flagged the risk of running case documents through public AI products, where the provider's terms may allow retention or review of what's submitted. We're not citing a specific rule here because it varies by jurisdiction; check your own bar's current guidance. The infrastructure question is separate and answerable: does the machine belong to you, and who else can reach it.
"The provider trains on what we submit"
On a GPUwerk instance, the model runs on hardware assigned to your firm alone. GPUwerk operates the machine but, under the data processing agreement, does not access your content except at your request for support or where a legal obligation requires it. There is nothing for us to train on, and no other tenant shares the GPU.
"Associates paste client material into ChatGPT anyway"
Blocking access pushes it to personal devices. A sanctioned alternative on your own instance, same chat interface, keeps that workflow on hardware only your firm controls. See the private ChatGPT setup →
What's actually in the contract
For your general counsel or IT lead to review directly.
| Question | Answer |
|---|---|
| Where does it run? | EU-Central, on a dedicated single-tenant machine assigned to your firm |
| Who operates it? | PRINT IT! SE, a Societas Europaea registered in Prague, Czech Republic. No US parent entity. |
| Who can reach the instance? | Through the instance itself, only holders of your SSH keys; password login is disabled fleet-wide. GPUwerk keeps infrastructure administrator access to the underlying machine, as on any hosted service, and under the DPA does not use it on your content except at your request for support or where a legal obligation requires it. |
| Does GPUwerk read case documents? | No. We host the hardware and, under the DPA, do not access, read, copy, index or analyse workload content. |
| Sub-processors for the workload? | None, listed at /legal/sub-processors |
| DPA (GDPR Art. 28)? | Published at /legal/dpa, no charge |
| Data on termination? | Container and workspace volume deleted from the node, then the node is sanitised before reassignment. Filesystem deletion, not a cryptographic erase; export what you need before terminating, since it isn't reversible. |
Questions we get from firms
Is it safe to put privileged documents into an LLM?
That depends on where the model runs and who can reach it, not on the model itself. On a GPUwerk dedicated instance in EU-Central, the machine is assigned to you alone and reachable only through your SSH keys; GPUwerk does not access, read, copy, index or analyse what runs on it except at your request for support or where a legal obligation requires it. This is a description of our infrastructure, not legal advice on your duty of confidentiality, which is for your own risk or ethics counsel to assess.
Does GPUwerk train on documents we process?
No. GPUwerk operates infrastructure, not models. Your documents are processed by software you install on your own instance, and under our data processing agreement GPUwerk does not access that content except at your request for support or where legally required. There is nothing for GPUwerk to train on.
Do you sign a DPA covering client data?
Yes, a standard GDPR Article 28 DPA is published at /legal/dpa at no charge. There are no sub-processors for instance workloads, listed at /legal/sub-processors.
Is this a substitute for advice from our bar association or law society?
No. This page describes infrastructure, not legal advice. Confidentiality and privilege obligations vary by jurisdiction and practice area, and firms should check their own bar or law society guidance before sending case material to any AI tool, including this one.
Related pages
Talk to us before you commit a workflow to it.
A short call covers what runs where, who can see it, and what your own counsel still needs to sign off on.
Talk to us Deploy an instance