AI that stays
in Europe.

Nordflak is a Swedish AI service for businesses. It helps users write, summarise, analyse and work with documents in an independent European environment.

Nordflak's AI model, inference, data storage, authentication and core operational functions are located and controlled within Europe. The service uses no non-European cloud, AI, analytics or identity services.

This means Nordflak does not depend on, for example, Microsoft, Google or American AI platforms in order to function.

Nordflak is built for professional everyday work, document analysis and business use. The largest American models may be better at certain highly advanced tasks.

Nordflak's main strength is the combination of useful AI, European control and independence from non-European technology platforms.

No. Customers' documents, questions and conversations are not used to train the AI model.

All central storage and processing takes place within the EU. Ahead of the pilot launch, we will publish more detailed information about the operating environment, data flows, backups and data erasure.

Your conversations are stored encrypted with a key unique to your organisation, in our own key management on European servers. The encryption is not end-to-end, because the service has to be able to read a message in order to send it to the AI model. But no human reads your conversations, all access is logged, and your data is never used to train any model.

Yes. Before a query is passed on to the language model, Nordflak automatically masks Swedish personal identity numbers, email addresses and phone numbers in the text. If you upload files, they are run through an automatic redaction that covers detected personal data in both text and images first. The model receives a de-identified version of that type of data.

Yes. Every AI call is logged with user, timestamp and model in a tamper-evident log, where entries are cryptographically chained so that an entry cannot be altered or removed after the fact without it showing. The log is hash-chained per organisation and can be verified for integrity.

Yes. Your administrator chooses a retention period of 30, 90 or 365 days, and conversations past that period are deleted automatically. Every deletion is documented in a deletion certificate that can be downloaded and shown to your customers, your data protection officer or the supervisory authority. Your retention policy becomes something that demonstrably happens, not just a document.

By building data protection into the service instead of leaving it as an afterthought: a data processing agreement in Swedish, a published sub-processor list, storage within the EU, automatic masking of personal data before it reaches the model, automatic data retention with a downloadable deletion certificate, and a tamper-evident log of how the service is used. When a customer sends their vendor assessment, the answers should take minutes, not weeks.

Your administrator removes the member, who is then locked out: the account is blocked and active sessions are ended. The company's conversations and audit log remain untouched, because they belong to the organisation and not to the individual. Full erasure of a specific person's data is a separate request we handle manually.

Nordflak has its own passwordless sign-in: you log in with a one-time code sent to your email and add two-factor authentication via an authenticator app (TOTP). Administrators are required to use two-factor, and sensitive administrative actions require it every time. Sign-in does not depend on Microsoft, Google or any other external identity platform.

It comes with you. Everything you have built up in Nordflak can be exported in an open, documented format: conversations, files and history. After that we delete everything on our side and provide written proof. Your knowledge is your property, not ours.

The export function is being built right now and is included from the start of the pilot phase.

Nordflak is aimed primarily at companies and organisations that:

• handle sensitive or business-critical information
• want to reduce their dependence on non-European technology suppliers
• need a controlled AI service for their employees
• want to work with documents and internal knowledge in a European environment

Nordflak is under development and is being prepared for pilot operation with Swedish companies. The first users will be invited in stages.

Registering your interest is free of charge and involves no obligation to purchase. You will receive updates on development and the opportunity to take part in the upcoming pilot phase.

Access will be opened in stages. Pilot companies and early users who have registered their interest will be invited first. Further information will be sent to the email address you register.

No. Nordflak is deliberately built as an independent AI workspace with no dependence on Microsoft's or Google's platforms.

Instead, documents can be uploaded directly and results can be exported to common and open file formats.