---
title: "Security & Compliance First"
url: https://www.noucore.ai/de/die-technologien/sicherheit
lang: de
updated: 2026-11-10
---

Security &
Compliance First
================================

Maximale Kapselung, lückenlose Data Governance und nahtlose Einbindung in Ihre bestehende Infrastruktur. noucore liefert KI-Betrieb nach höchsten europäischen Sicherheitsstandards – wahlweise als dedizierte Private Cloud oder vollständig autarkes On-Premise-Deployment.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[Jetzt unverbindliches Erstgespräch buchen](https://www.noucore.ai/de/warum-eine-eigene-ki/ki-wissensmanagement.md)

Kapselung & Data Privacy

### Absoluter Schutz des geistigen Eigentums (IP Protection)

#### Kein externes Modell-Training

Im Gegensatz zu öffentlichen SaaS-Schnittstellen werden Prompts, Unternehmensdaten und Workflows zu keinem Zeitpunkt an externe Server übertragen oder für das Training von Drittanbieter-Modellen verwendet.

#### Vollständige Mandantentrennung (Single-Tenancy)

Auch im Cloud-Betrieb in unseren deutschen/europäischen Rechenzentren (ISO 27001 zertifiziert) gilt: Ihre noucore-Instanz läuft auf dedizierter Hardware. Es gibt keine Shared-Compute-Ressourcen mit anderen Unternehmen.

#### Air-Gapped-Option für KRITIS

Für maximale Geheimhaltung lässt sich noucore in Ihrem Rechenzentrum vollständig vom Internet isolieren.

Identity- & Access-Management (IAM)

### Granulares Rechte-Mapping via Single Sign-On (SSO)

#### Protokoll-Standards

noucore integriert sich nativ per OAuth2, OpenID Connect (OIDC) oder SAML 2.0 in Ihre bestehende Identity-Provider-Infrastruktur (z. B. Microsoft Entra ID, Keycloak, Okta).

#### Dynamic Access Matching (RAG-Sicherheit)

Das noucore RAG-System (Retrieval-Augmented Generation) erbt die Berechtigungsstrukturen Ihrer Quellsysteme (z. B. Pimcore, ERP, Fileserver). noucore filtert Antworten in Echtzeit, sodass Mitarbeiter nur Informationen sehen, für die sie im Ursprungssystem eine aktive Leseberechtigung besitzen.

DevOps, Monitoring & Ausfallsicherheit

### Nahtloser Betrieb und kontinuierliches Monitoring

**Container-Orchestrierung:**
Das Deployment erfolgt vollständig containerisiert via Docker. Das ermöglicht Ihrer IT automatisierte Backups, einfache Skalierung und unterbrechungsfreie Updates (Rolling Updates) von Frontend und Modellen via CI/CD-Pipelines.

**Echtzeit-Telemetrie:**
Über standardisierte Schnittstellen für Prometheus und Grafana behält Ihre IT-Abteilung kritische Systemparameter wie GPU-Temperatur, VRAM-Belegung, Time-to-First-Token (TTFT) und API-Durchsatz lückenlos im Blick.

[Jetzt unverbindliches Erstgespräch vereinbaren](https://www.noucore.ai/de/warum-eine-eigene-ki/ki-wissensmanagement.md)

Technische FAQs zu Security, IAM und Systemintegration
--------------------------------------------------------

### How is it ensured that confidential prompts or sensitive company data do not leak?

noucore follows a strict zero-data-leakage policy. Because the architecture is operated fully encapsulated in your controlled environment (either in a dedicated, ISO 27001-certified EU data center or on-premise), data never leaves your network. Since we use open-weight models exclusively, there are no third-party APIs through which data could be misused for model training.

### Does the platform support existing governance structures and authorization concepts?

Yes. noucore relies on role-based access control (RBAC) and connects seamlessly to your identity provider (e.g. Microsoft Entra ID, Keycloak) via OAuth2, OpenID Connect (OIDC) or SAML 2.0. noucore only reads and processes documents from your source systems (e.g. ERP, CRM, file servers) for which the requesting user has explicit read permission.

### Is it possible to operate the AI infrastructure completely independently of the internet?

Yes. With an on-premise deployment in your own data center / server room, the entire AI stack – including the user interfaces, inference engines and vector databases – can be operated in air-gapped mode. No active internet connection is required for regular operation or for inference of the open-weight models. This makes noucore ideally suited for critical infrastructures (KRITIS).

### How is compliance with the GDPR and other regulatory requirements ensured?

Local or dedicated EU hosting eliminates the risk of violations relating to transatlantic data transfers (such as the US Cloud Act). All data processing steps are transparent and fully auditable for your compliance department. In addition, by using open-weight models and local vector stores, noucore is ideally prepared for the documentation and transparency requirements of the EU AI Act.

### What telemetry data does noucore provide for IT infrastructure monitoring?

noucore features standardized exporters for Prometheus that integrate natively into your Grafana dashboards. Both hardware metrics of the compute layer (GPU utilization, tensor core load, VRAM allocation and temperatures) and application-side KPIs (time-to-first-token, inference latencies, API throughput and HTTP error rates) are monitored.

### How does patch management work for security updates and new model releases?

Because the entire noucore architecture is containerized, lifecycle management is standardized via Docker infrastructures. Security patches for the operating system, updates to the inference software or the replacement of AI model weights are packaged as new container images and can be rolled out via your established CI/CD pipelines. With an appropriately redundant node design, this takes place during live operation via rolling updates without any system downtime.