Citizen data stays on hardware you can name and locate.
Private LLM hosting on a dedicated machine in EU-Central, for public agencies and municipal teams that need to know exactly where a workload runs and who can reach it.
Not procurement, legal, or sovereignty-certification advice. This page describes GPUwerk's infrastructure and contractual commitments. Whether it satisfies your framework's specific sovereignty, accreditation, or procurement requirements is for your own legal and procurement team to determine.
Why public sector procurement asks harder questions
A citizen-facing service, an internal case management tool, or a policy drafting assistant all touch data the public expects government to hold carefully, and procurement processes usually ask for specifics, not general assurances.
"We don't know where our data actually sits"
The hardware is physically in EU-Central and operated by PRINT IT! SE, a Societas Europaea registered in Prague. There is no US parent, no US region, and no US-incorporated entity in the chain. We can name the location; whether that meets your specific sovereignty policy is a question for your legal team.
"Staff use consumer AI tools for drafting anyway"
A caseworker drafting a summary or a policy officer testing language in a public AI tool sends that content to a third party outside any agency contract. A sanctioned alternative on a dedicated instance, same chat interface, keeps that workflow on infrastructure your agency controls. See the private ChatGPT setup →
"We need a specific accreditation for this tender"
We don't hold public-sector-specific accreditations today, and we don't claim any we don't have. If a tender requires a listed framework or certification, tell us and we'll say plainly whether we can meet it, rather than let the page imply we do.
Infrastructure facts, plainly stated
| Question | Answer |
|---|---|
| Where is data physically processed? | EU-Central, on a dedicated single-tenant machine assigned to you |
| Does this count as data sovereignty for our policy? | We can confirm physical location and operator; whether that satisfies your organisation's full sovereignty definition is your determination. |
| Who operates the hardware? | PRINT IT! SE, a Czech Societas Europaea, no US parent or US-incorporated entity in the chain |
| Who can access instance content? | Through the instance itself, only holders of your SSH keys; password login is disabled fleet-wide. GPUwerk keeps infrastructure administrator access, as on any hosted service, and under the DPA does not use it on your content except at your request or where a legal obligation requires it. |
| Sub-processors for the workload? | None, listed at /legal/sub-processors |
| DPA (GDPR Art. 28)? | Published at /legal/dpa, no charge |
| Certifications or framework listings held? | None claimed on this page or elsewhere on the site. If your tender requires a specific accreditation, verify directly with us before relying on this page. |
Pricing
On-demand spark-1x is $0.79/hour, spark-2x is $1.79/hour. Held (reserved) capacity is 75% of the on-demand rate: $0.59/hour and $1.34/hour. Full detail on the pricing page.
Questions we get from public agencies
Is GPUwerk an approved vendor for our procurement framework?
Not automatically. GPUwerk doesn't hold public-sector-specific accreditations or framework listings today. If your procurement requires a specific accreditation, verify directly with us before relying on this page, and check with your procurement office about what your framework requires.
Does hosting on GPUwerk count as data sovereignty?
GPUwerk can tell you that the hardware is physically in EU-Central, operated by a Czech Societas Europaea with no US parent. Whether that satisfies your organisation's specific data sovereignty policy, which often covers more than physical location, is a determination for your legal and procurement team.
Can citizen data be processed here under GDPR?
A standard GDPR Article 28 DPA is published at /legal/dpa at no charge, with no sub-processors for instance workloads. Establishing the correct legal basis for processing citizen data remains your responsibility as controller.
Who can access our workload's content?
Through the instance itself, only holders of your SSH keys; password login is disabled fleet-wide. GPUwerk keeps infrastructure administrator access, as on any hosted service, and under the DPA does not use it on your content except at your request for support or where a legal obligation requires it. Email hello@gpuwerk.com with questions.
Related pages
See how other teams handling sensitive data use the same infrastructure: law firms, healthcare, or back to private LLM hosting overview.
Related pages
Bring your agency's AI workload to a machine you control.
Talk to the people who run the racks, or start with a pilot and a practical rollout plan.
Talk to us Deploy an instance