AUP
Acceptable Use Policy
What it proves: the no-model rule in contract language. We sell the environment and the hosting, never the model.
LEGAL & DOCUMENTS
Each page on this site makes claims: hosting in the EU by a French provider, a signable DPA, a no-model contract. This page is where those claims are written down, dated and downloadable, before you talk to anyone.
THE SHELF
DPA
What it proves: the residency and processing claims, enforceable downstream to your own clients.
AUP
What it proves: the no-model rule in contract language. We sell the environment and the hosting, never the model.
PRIVACY
What it proves: what we collect on this site and in the product, and what we never collect.
SUB-PROCESSORS
What it proves: every company that touches customer environment data, named, with role and jurisdiction.
LEGAL NOTICE
What it proves: the publishing entity, under French law, and its host.
THE DPA
The DPA is a template you can hand to your lawyer or your own client today. It names the processing, the hosting location in the EU, and the sub-processors. If you book a demo, we can send it ahead of the call so legal reads it first.
THE NO-MODEL CLAUSE
§ 2 · Scope of service
"Permia supplies the hosted environment and the infrastructure it runs on: the server, the persistent terminal session, the storage and the network path to them, hosted in the EU by a French provider. Permia supplies no access to any AI model, resells no model API, and holds no credential to any model account. Any model a customer’s agent calls is reached with the customer’s own keys, under the customer’s own contract with the model provider of their choice."
Your API traffic stays under your own contract with your model provider. Claude Code, Codex, Mistral: swapping agents means changing a binary in your environment, not changing hosts. That is what the clause above means in contract terms: your environment continues regardless of what happens at the model layer, because we never held your model access.
Read the full AUPSUB-PROCESSORS
| name | role | country |
|---|---|---|
| our French infrastructure provider | datacenter operator | France |
Reviewed quarterly · last updated 2026-06-10
Not on this list: any model vendor. Your agent's API traffic runs under your own contract with your model provider. That contract is between you and your model vendor: they are not our sub-processor, and their GDPR role toward you, processor or independent controller, is defined by that contract, not by us.
What this shelf does not contain yet: third-party certifications. What is here is contractual and checkable: the datacenter operator above is named, with its jurisdiction, and the list carries a review date. If a certification is not on this page, we have not claimed it anywhere else either.
Read the sub-processor listBook 20 minutes and we will close the laptop mid-session, then reattach from a phone, live. If you downloaded the DPA, say so: we start from your questions.
Someone who signed this DPA answers.