Submit an AVV request

Do you want to use innoGPT in your company in compliance with the GDPR? Then you need a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. The good news: You don’t have to send PDFs back and forth, get a printer up and running, or write to anyone in person. You can complete the DPA directly in your account in under 2 minutes.

What exactly is the DPA?

The Data Processing Agreement is the legal basis that allows us (innoki GmbH) to process personal data on your behalf. It is required by law as soon as you use innoGPT for business purposes and handle personal data in the process.

With the DPA, you receive in writing (or digitally signed):

  • Processing strictly in accordance with your instructions

  • Confidentiality obligation for all innoki employees

  • Technical & organizational measures (TOMs) – e.g., AES-256 encryption, TLS, row-level security

  • Reporting obligations in the event of security incidents

  • List of sub-processors with all third-party providers used


How to submit an AVV request – in 3 steps

Step 1: Open your Workspace settings

  1. Log in to your innoGPT workspace.

  2. Click on your profile icon in the bottom left corner.

  3. Select SettingsGeneralScroll down to Privacy & Security

ℹ️ Important: Only a Workspace admin or owner can sign the AVV, as it is a legally binding contract on behalf of your company. If you are a regular user, forward this article to your admin.

Step 2: Fill out the DPA

In the Data Processing Agreement section, click on "Sign DPA." You will be guided through a short form where you provide the following information:

  • Company

  • Today's date

  • Street & House Number

  • Zip code

  • City

  • Your first and last name

  • Email

Step 3: Sign digitally & receive confirmation

After submitting, you will automatically receive the signed AVV as a PDF via email.

Done! You now have legally binding proof that we process your data exclusively in accordance with your instructions.


Frequently Asked Questions from the Community

We get these questions all the time—here are the answers in one place.

“Do I really need the AVV if innoGPT is GDPR-compliant anyway?”

Yes. As soon as you use innoGPT as a business and process personal data in the process (e.g., customer names, emails, employee data), Article 28 of the GDPR mandates the DPA. The compliance of our platform and the DPA are two different things—both are necessary.

“Who is the contractual partner—innoGPT or innoki GmbH?”

The contracting party is innoki GmbH (Osloer Str. 6, 49377 Vechta) as the data processor. “innoGPT” is the product name.

“Can I also use a customized version of our own DPA template?”

In most cases, we recommend using our standard DPA—it has been reviewed by specialist lawyers and fully complies with all GDPR requirements. If your company absolutely needs its own template (e.g., due to corporate requirements), please contact the innoGPT team directly via chat support or by email at hello@innogpt.de. We will review this on a case-by-case basis.

“What about sub-processors—will I be notified if anything changes?”

Yes. The list of sub-processors in the Trust Center is always up to date. We’ll notify you of any changes in a timely manner so you can exercise your right to object under the GDPR.

“I’m using the trial version / a free trial—do I still need the AVV?”

As soon as you enter real personal data into the chat: yes. For purely testing purposes with dummy data, it is not legally required, but we recommend signing it early—it costs nothing and you’re immediately on the safe side.

“What happens to our data if we cancel?”

After the contract ends, your data will be deleted or returned according to the timeframes specified in the AVV—whichever you prefer. As an admin, you can also configure the exact deletion timeframes yourself in the Workspace Settings → Privacy.

“Do I need a separate AVV for each workspace?”

Yes, the AVV applies per Workspace, as each Workspace can be assigned to its own legal entity. For example, if you have multiple subsidiaries with their own Workspaces, each Workspace admin must sign a separate agreement.


Stuck?

If you’re having trouble signing the agreement or have specific legal questions:

📧 hello@innogpt.de


Related articles: