The data stays in the perimeter
DataGovern is on-premise: the platform and the open-weight LLMs run inside your infrastructure. Compliance data does not leave your organisation and does not transit through non-EU cloud.
DataGovern
Agentic governance with hard boundaries: on-premise data, human decision on obligations and traceable evidence are part of the product.
Governance with clear accountability
Human-in-the-loop
The agents prepare evidence, records and remediation plans. The decision, the sign-off and the accountability stay with the DPO or the CISO: no obligation is closed on its own.
Traceable evidence
Every classification, gap and document links to the data and the regulatory text that produced it: ready for the competent authority and for the board.
Compliance and data
The answers procurement asks for first
GDPR
Records of processing, DPIAs, lawful bases and data subject rights in one hub, on-premise. Reference: Regulation (EU) 2016/679.
NIS2
Posture assessment, gap analysis against the requirements, measures registry and a 24/72h incident notification workflow. References: Directive (EU) 2022/2555 and Legislative Decree 138/2024.
EU AI Act
Classification of AI systems by risk level and technical documentation, with readiness set on the August 2026 deadline. Reference: Regulation (EU) 2024/1689.
Frequently asked questions
Is DataGovern really on-premise?
Yes. The platform and the open-weight LLMs (Llama, Mistral, DeepSeek, Gemma, Qwen) are deployed inside your perimeter. Compliance data does not leave your organisation and does not transit through non-EU cloud.
Do you use our data to train the models?
No. The LLMs work on your data to produce your evidence and your documentation. Customer data is not used to train shared models.
Does DataGovern send the notifications or close the obligations for us?
No. It prepares evidence, records and remediation plans, and guides incident notification within the 24/72h windows. The submission, the sign-off and the accountability stay with the DPO or the CISO.
Are we ready for the August 2026 AI Act deadline?
DataGovern classifies your AI systems by risk level under Regulation (EU) 2024/1689, generates the required documentation and tracks the deadlines. Application is phased: the relevant obligations become operative from August 2026.
Does NIS2 apply to us too?
NIS2 (Directive (EU) 2022/2555, transposed by Legislative Decree 138/2024) covers many SMEs in essential and important sectors. DataGovern measures posture, surfaces the gaps and keeps the measures registry, so you can check the scope and close the gaps.
How do you handle the three regulations together without duplicating work?
The cross-regulation gap analysis cross-references GDPR, NIS2 and AI Act, spots the overlaps and produces one unified remediation plan instead of three disconnected ones.
Which AI models does the platform use?
Only open-weight LLMs, run on-premise: Llama, Mistral, DeepSeek, Gemma, Qwen. The choice is agreed based on the resources and requirements of your deployment.
What hardware does the on-premise deployment require?
It depends on the models and on the volume of documents and processes to oversee: server, GPU and storage sizing is defined during the initial audit, together with the choice of the open-weight LLMs that best fit your resources.
How do we start and how much does it cost?
The first step is an integrated GDPR, NIS2 and AI Act audit. The platform is then an annual licence for SMEs and enterprises, with custom pricing: contact us for a quote on your case.