Model Context Protocol & REST API Standards

Privacy Policy for MCP & AI Agents

How aidministratie processes, secures, and isolates enterprise data when connected to AI platforms (Claude, ChatGPT, Mistral, Microsoft Copilot, Antigravity).

Last updated: October 23, 2026 // Effective immediately

corporate_fare 1. Controller & Scope

Data Controller & Architecture Scope

This policy governs all automated and programmatic interactions with the aidministratie Model Context Protocol (MCP) Gateway, Streamable HTTP/SSE endpoints (hosted at loket.aidministratie.be), and associated REST APIs operated by Bram Vanzieleghem (trading as aidministratie.be and ITeratief), registered in Belgium under company number BE 0671.637.106, with registered address at Boezingestraat 61, 8920 Langemark-Poelkapelle, Belgium (hereinafter "aidministratie", "we", "us", or "our").

When an authorized user connects an AI platform (such as Anthropic Claude, OpenAI ChatGPT, Mistral Le Chat, Microsoft 365 Copilot, Google Antigravity, or Cursor) to their aidministratie tenant via MCP or REST, aidministratie acts as a Data Processor under GDPR Article 28 on behalf of the subscriber organization (the Data Controller).

verified_user 2. AI Model Training Protections

Zero Training on Customer Data (Strict Guarantee)

gpp_good Core Guarantee: Zero Foundation Model Training

We categorically guarantee that any customer data, business documents, contracts, CRM entities, financial figures, or business cards processed through aidministratie MCP tools are never used by aidministratie, nor by underlying LLM infrastructure providers, to train, pre-train, or fine-tune public AI models.

  • Ephemeral Ingress: Content sent to MCP tools is processed transiently in memory to perform the requested tool execution (e.g. OCR, VAT validation, schema parsing) and is strictly routed only to authorized tenant storage.
  • Enterprise API Terms: When commercial foundation models are engaged for reasoning activities, they are exclusively invoked via enterprise endpoints governed by zero-day data retention and strict confidentiality commitments.
shield_lock 3. Cryptographic & Logical Isolation

Multi-Tenant Separation & KMS Envelope Encryption

aidministratie is engineered as a Sovereign Multi-Tenant Architecture:

  • Database Boundary Isolation: Each customer organization is assigned a distinct tenant identifier (UUID). Database tables, workflow states, and pending task queues are partitioned and queried exclusively using cryptographically verified tenant session bindings.
  • Virtual File System (VFS) Encryption: All business files, contracts, and scanned images committed to our Virtual File System are encrypted at rest using AES-256 envelope encryption. Each tenant possesses a distinct Data Encryption Key (DEK) managed through our KMS Vault service.
  • Zero Ingress Boundary: Tenant adapters and on-premise connectors connect outbound via WebSocket reverse tunnels; no customer network ports are ever exposed to incoming internet traffic.
approval_delegation 4. Human-in-the-Loop Architecture

Human Oversight & Immutable Audit Logging

To eliminate hallucination risks in administrative workflows, aidministratie enforces a Human-in-the-Loop (HITL) governance model:

  • Staged Mutations: AI agents do not unilaterally alter critical external databases or write directly to production spreadsheets without authorization. Proposed mutations are placed in a staging queue with a confidence rating.
  • Explicit Approvals: Decisions (approve or reject) are explicitly verified and recorded with timestamps, actor IDs, and feedback reasoning traces.
  • Semantic Audit Logs: Every tool execution, file read/write, and approval event is immutably logged to an append-only audit trail within the tenant's database for compliance verification.
public 5. Geographic Hosting & GDPR Compliance

100% European Infrastructure & Sovereignty

All core database engines, object storage clusters (SeaweedFS), and temporal workflow orchestrators are physically located in ISO/IEC 27001 certified data centers within the European Union (Germany and Finland, hosted on dedicated Hetzner cloud infrastructure).

Data is never transferred to jurisdictions outside the European Economic Area (EEA) unless explicitly instructed by the customer via their choice of external foundation model endpoint.

key 6. Authentication Security

Token Security & Immediate Revocation

  • One-Way Hash Storage: All Tenant API Keys (vlw_live_...) are hashed using SHA-256 before storage in the Master Database. Raw keys cannot be viewed or decrypted by our personnel once generated.
  • Instant Revocation: Customers maintain the right to instantly revoke, cycle, or expire any issued API key via their admin portal or support request.
  • DDoS & Probe Protection: Endpoints are protected by layered rate limiting, zero-tolerance probe drops (HTTP 444), and automated Fail2ban perimeter firewalls.
mail 7. Inquiries & Compliance Contact

Data Subject Rights & Contact

In accordance with GDPR Articles 15 to 22, customer organizations and their users have the right to access, rectify, restrict, or request the deletion of their personal and tenant data.

For compliance inquiries, Data Processing Agreement (DPA) execution, or security audits, contact us directly at:

Security & Privacy Officer: Bram Vanzieleghem
Address: Boezingestraat 61, 8920 Langemark-Poelkapelle, Belgium