cat blog/oshu-launch-gdpr-native-ai-chatbot.md
All posts

Oshu is live: a GDPR-native AI chatbot that never leaves the EU

Most AI chat widgets you can drop onto a website share one quiet property: the conversation leaves Europe. The widget looks European, the company might even have a Frankfurt data region, but the model behind it is OpenAI or Anthropic running on US-owned cloud. And under the US CLOUD Act, where the server physically sits stops being the point. A US-incorporated provider can be compelled to hand over the data wherever it lives.

That gap is why we built Oshu. "Hosted in the EU region" and "sovereign in the EU" are not the same sentence, and for a lot of European organisations the difference decides the whole thing.

Today Oshu is live.

What Oshu is

Oshu is an embeddable AI chatbot, grounded in your own content. You create one workspace, set up as many chatbots as your plan allows, and drop each one onto a different surface with a single <script> tag: a product page, a docs site, an internal Q&A page, a course page, an onboarding flow.

Three things define it.

Sovereign. The platform runs on Hetzner servers in Falkenstein, Germany. Inference runs on Mistral's EU API in Paris. The contracting entity on your data-processing agreement is BeyondSimulations GmbH in Hamburg. No data leaves the EU, and neither Mistral nor any sub-processor trains on it. There is no US cloud anywhere in the stack. Not for hosting, not for the model, not as a fallback.

Grounded. You fill a library from a GitHub repository, from PDFs we OCR into Markdown, or from web pages we crawl and keep refreshed, in any mix you like. The chatbot answers from that material instead of guessing from the open web, so replies stay on topic and you can trace them back to a source.

Auditable. Every conversation, every token, every model call, and every administrative action shows up in your dashboard. You can see which sources a reply drew from. Full data export is available whenever you want it. For agents that might receive sensitive input, a private mode stores only a [PRIVATE MODE] placeholder instead of the visitor's text.

Why "no US cloud" is the point

The Schrems II ruling made clear that US surveillance law can reach data held by US-subject companies even inside European facilities. The CLOUD Act is the mechanism. This is why a growing number of European universities, public bodies, healthcare and legal teams, and privacy-serious Mittelstand companies now have a requirement that a US-region toggle simply cannot meet.

Oshu meets it by construction. Hetzner in Germany, Mistral in Paris, a German GmbH on the AVV. The data-processing agreement (Art. 28 GDPR) is concluded electronically at signup, with a public sub-processor list and the technical and organisational measures attached as binding annexes. If you need a counter-signed copy naming your own entity, we provide one at no extra fee.

Who we built it for

  • Mittelstand and SaaS teams who want product, docs, and support agents that answer from their own material and stay grounded in it. One widget per product or per client, billed centrally.
  • Universities and lecturers who want a tutor for a lecture or a syllabus, grounded in the slides and PDFs they upload, with maths rendered inline in LaTeX so STEM courses stay readable. It drops into Canvas, ILIAS, OpenOlat, and Stud.IP through the course-page editor, and you can put its hosted page behind a QR code on a slide. (Moodle needs a one-time sysadmin allowlist today; native LTI 1.3 is on the roadmap.) Verified academic institutions get a standing discount on every paid tier.
  • Technical founders who would rather bring their own Mistral key. On BYOK the key is yours, the infrastructure is ours, messages are uncapped on our side, and you get per-agent model selection.

What it costs

Start free, no card required. Beyond that it is a flat monthly fee with a hard cap, no per-message billing, and no charge per resolved conversation. When you reach a cap, replies pause until the next cycle rather than running up a surprise bill, and we will raise any cap on request when you need the headroom. You can see the current tiers at oshu.eu.

Start free

No waitlist, no sales call. Create a free workspace, embed your first chatbot, and watch it answer from your own content. When you need more bots, more messages, or a bigger library, upgrade in a couple of clicks from the dashboard. Downgrade just as easily.

Try it at oshu.eu. One script tag, grounded in your own content, and nothing leaves the EU.

The Oshu team, BeyondSimulations GmbH, Hamburg