Data, security and contracts
The short version for your IT, legal or data protection officer. If something they need is missing, ask in your brief and it will be answered before any data is shared.
Data, contracts and ownership
- I sign your NDA before you share anything.
- I sign a data processing agreement (GDPR Art. 28) whenever personal data is involved.
- Your data stays on your servers or in an EU data centre. No third-party AI services unless you approve them.
- You own all code and models built for you once paid. No lock-in.
- Individual activity registered in Lithuania; invoices in euros.
How your data is handled in a project
- Before anything is shared: I sign your NDA. For the diagnostic, a small sample of your data is usually enough, and it can often be anonymised first.
- Where it is processed: on hardware agreed with you: your own servers, an EU data centre, or, if you agree, my own workstation in Lithuania for the diagnostic. Nothing is sent to an outside AI service by default; the models run locally, as in every Lab on this site.
- Third-party services: none by default. Any service a project would use (a cloud AI provider, hosting, a monitoring tool) is named in the proposal and used only with your written approval.
- When the work ends: your data is returned or deleted, as the data processing agreement requires.
Data processing agreement (GDPR)
Whenever personal data is involved, I act as your processor and sign a data processing agreement under Article 28 of the GDPR. I can sign yours, or provide a standard one before any personal data is shared.
Security questionnaires
Larger organisations often need a supplier questionnaire, for example for NIS2 supply-chain checks. Send it with your brief and I’ll answer it before any data is shared.
The EU AI Act
Most document, search and extraction systems are not “high-risk” under the EU AI Act. Systems that talk to people must make clear that they are AI. Uses such as recruitment, credit scoring or access to essential services can be high-risk and carry heavier obligations. The diagnostic flags this for your use case before anything is built.
Who you contract with
Saulius Beconis, registered for individual activity (individuali veikla) in Lithuania, trading as S. BECONIS. Invoices are issued in euros. All code and models built for you are yours once paid.
How this website handles personal data is described in the privacy notice.