Your firm’s own AI. On servers in the EU. Never trained on your files.
A ChatGPT-like assistant that can search your documents, runs on a dedicated server in Finland or Germany, and ships with the GDPR and AI Act paperwork already prepared. Flat monthly price. No IT team required.
Indicative pricing from €1,500 / month per firm, to be confirmed. No per-user fee.
Does our standard NDA template allow disclosure to subcontractors?
Yes, with conditions. Clause 4.2 of your standard mutual NDA permits disclosure to subcontractors who need the information for the agreed purpose, provided they are bound by confidentiality terms at least as strict as the NDA.
Your 2024 precedent note recommends naming subcontractors in a schedule for higher-risk matters. 1 2
- Dedicated EU servers (Hetzner, Helsinki / Germany)
- No training on your data
- GDPR DPA and AI Act documentation included
- Flat fee per firm
Most AI tools are a problem for professional firms
You cannot put client files into ChatGPT. Microsoft Copilot is billed per seat and lives in a cloud your clients may not accept. Running open-source models yourself means someone has to own the servers, updates, access control, and the paperwork.
Confidentiality
Client files, matter notes, and accounting records are not training data, and they are not something you paste into a consumer chatbot.
Data residency
Many clients and professional rules expect processing in the EU, with a named processor and a written DPA.
Time and cost
A partner should not become a part-time GPU administrator. Per-seat tools get expensive as the firm grows.
Vaitia is a private instance for one firm: models, documents, and processing stay on a dedicated EU server, with a single monthly invoice.
Set up in days, not a project
Typical onboarding is measured in days. The goal is a working assistant within one business day once access and document sources are agreed.
- Step 1
We provision your server
A dedicated GPU server is rented in the EU — Helsinki or Germany — in an environment used only for your firm. You do not share the instance with other customers.
- Step 2
Your assistant is connected to your work
Chat for everyday questions, plus search over the document sources you choose (for example a secure file share or an export of templates and policies). Access is limited to the people you name.
- Step 3
Paperwork and handover
You receive a DPA, a description of processing, and AI Act-oriented documentation. Your team gets a short walkthrough. Then it is yours to use, with us on hand for operations.
We rent capacity from EU hosting providers (starting with Hetzner). We do not operate our own data centre. That keeps setup fast and costs predictable. Hardware ownership is a later decision, not a launch requirement.
Your files stay in the EU, on a machine that is yours for the term
- Where it runs
- Dedicated servers in the EU, initially Hetzner locations in Helsinki (Finland) and/or Germany. Finland or Germany, your choice where both are offered.
- Who can see data
- Your authorised users, and Vaitia operators only as needed to keep the service running, under the DPA. No advertising partners. No training partners.
- Training
- We do not train foundation models on your prompts or documents. Your data is not used to improve a general model for other customers.
- Isolation
- One firm, one dedicated server instance. No multi-tenant model serving on a shared GPU for this product line.
- Encryption and access
- TLS in transit. Disk encryption at rest as provided by the host and our configuration. Access via authenticated accounts. Operators who maintain the server can, in principle, access the machine — this is not a zero-knowledge product.
- Subprocessors
- Hetzner for hosting. The current subprocessor list is in our privacy policy.
- Backups and deletion
- Backups stay in the EU. On contract end, data is deleted according to the DPA, within [RETENTION_PERIOD], unless law requires longer.
The paperwork is part of the product
Law and accounting firms do not only need a chat box. They need something they can show a client, a DPO, or a regulator. Every subscription includes a documentation pack. These are practical templates and descriptions of our service, not a certificate and not legal advice.
GDPR data processing agreement (DPA)
A written DPA appointing Unattended Oy as processor and your firm as controller, including subprocessors and security measures.
EU AI Act-oriented documentation
A description of the system, its intended use, known limits of open-source models, and human-oversight expectations — enough to help your firm document its use of the tool. We do not claim the product is “AI Act certified.”
No-training and EU-only processing statements
Clear contractual language that we do not train general models on your data and that processing takes place in the EU as described in the DPA.
Operational description
Where the server is, what software runs, how access is granted and revoked, and how to request export or deletion.
Vaitia is not a law firm and does not provide legal advice. Your firm remains responsible for how it uses the assistant and for its own professional and regulatory obligations.
Preview the DPA templateBuilt for how law and accounting firms actually work
Law firms
- Draft starting points for standard letters, engagement terms, and internal memos — always reviewed by a lawyer.
- Ask questions across the firm’s own precedents and templates, not the public internet.
- Summarise a document the firm already holds, on the firm’s server.
- A private alternative when staff would otherwise paste text into ChatGPT.
Accounting firms
- Answer internal questions from the firm’s own checklists, closing procedures, and template workpapers.
- Help staff find “how we do this” in the firm’s documented methods.
- Draft first-pass client explanations (e.g. a VAT reminder or a request for missing receipts) from approved language.
- Keep client bookkeeping data off consumer AI tools.
The assistant can be wrong. It does not replace a qualified lawyer or accountant. Outputs are a starting point for professional review.
How this differs from the obvious options
Vaitia
- Who it is for
- One professional firm, set up for you
- Where processing happens
- Dedicated server in the EU (Finland / Germany)
- Trains on your firm data?
- No, not for foundation-model training
- Document search over your files
- Yes, on sources you connect
- Pricing model
- Flat fee per firm (indicative €1,500–€3,000 / month)
- Paperwork
- DPA, processing description, AI Act-oriented docs included
- You run the servers
- No
ChatGPT (consumer / typical business add-ons)
- Who it is for
- Individuals and companies using a shared public service
- Where processing happens
- Vendor’s cloud; residency depends on the plan you buy
- Trains on your firm data?
- Consumer defaults and business terms differ — check OpenAI’s current terms
- Document search over your files
- Only with the features and terms of that product
- Pricing model
- Per user / plan; plus usage on some tiers
- Paperwork
- DPA available on some paid plans
- You run the servers
- No
Microsoft 365 Copilot
- Who it is for
- Organisations already in Microsoft 365
- Where processing happens
- Microsoft cloud; residency depends on tenant and plan
- Trains on your firm data?
- Subject to Microsoft’s terms for Copilot
- Document search over your files
- Yes, inside the Microsoft 365 workspace
- Pricing model
- Around $21–30 / user / month, as publicly listed — confirm current Microsoft pricing
- Paperwork
- Enterprise agreements available
- You run the servers
- No
Do-it-yourself (Ollama, Open WebUI, a rented GPU)
- Who it is for
- Teams with time to run infrastructure
- Where processing happens
- Wherever you put the machine
- Trains on your firm data?
- Only if you set that up yourself
- Document search over your files
- Possible, if you build it
- Pricing model
- Hardware or cloud GPU plus your staff time
- Paperwork
- You write it
- You run the servers
- Yes
- Competitor features and prices change. Figures above are believed accurate as of November 2026 and should be re-checked before launch. Microsoft Copilot pricing is shown in USD because that is how Microsoft publishes it.
- Do-it-yourself can be cheaper in cash and is the right path for some firms. Our value is operations, isolation, and documentation, not a unique model.
- Other private-AI vendors exist; several focus on larger organisations or public-sector buyers. We focus on small law and accounting firms and a flat monthly fee.
One price for the firm, not a fee for every seat
Indicative monthly pricing, billed per firm. Confirm at proposal. No usage surprises in the standard tier — if we ever charge for overage, it will be written in the contract first.
Practice
Smaller teams, roughly up to ~15 users
€1,500
per month · indicative
- Dedicated EU server
- Yes
- Chat + document search
- Yes
- Models
- Current supported open-source models
- Compliance pack
- Yes
- Support
- Email / scheduled support hours [SUPPORT_HOURS]
- Setup
- Included
Firm
Typical 15–40 user firms
€2,200
per month · indicative
- Dedicated EU server
- Yes
- Chat + document search
- Yes
- Models
- Same
- Compliance pack
- Yes
- Support
- Same, plus a named onboarding window
- Setup
- Included
Chambers
Larger firms in our range, ~40–100 users
€3,000
per month · indicative
- Dedicated EU server
- Yes (capacity sized to the firm)
- Chat + document search
- Yes
- Models
- Same, with room to agree a default
- Compliance pack
- Yes
- Support
- Priority operational support
- Setup
- Included
Prices are placeholders and will be confirmed before any public launch.
Minimum term confirmed in the proposal.
Not sure which tier? Request a demo and we will size it with you. We will not upsell you into a tier you do not need.
For a 20-person firm, Microsoft 365 Copilot at a publicly listed $21–30 per user per month is roughly $420–600 / month (software seats only). Our fee is flat and includes the dedicated instance and the documentation pack. This is a cost illustration, not a claim that the two products are feature-identical.
Questions, answered plainly
Is this ChatGPT?
No. The chat should feel familiar, but it runs open-source models on a dedicated server for your firm in the EU. Your prompts and documents are not sent to OpenAI, Google, or Anthropic for this service.
Which models do you use?
Open-source models such as Qwen, Mistral, Llama, or gpt-oss, depending on what is stable and suitable at the time of setup. We will tell you which model is the default and will not silently send your data to a third-party hosted model outside the contract.
Will it be as good as ChatGPT or Claude?
Not always, and not on every task. Frontier models from the large labs still lead on many kinds of reasoning. Firms choose us because of residency, confidentiality, and control, not because we claim a quality prize. If a task needs a stronger external model, that is a policy decision for your firm — it is not the default here.
Where is the server?
In the EU, on dedicated machines rented from Hetzner in Helsinki and/or Germany. You will know the region in your agreement.
Do you train on our data?
No. We do not use your prompts or documents to train foundation models, and we do not share them with other customers.
Can your staff read our files?
Operators can access the server in order to maintain it. Access is limited, logged, and covered by the DPA. This is not a zero-knowledge product. If that is a deal-breaker, we would rather you know now.
Do you have ISO 27001 or SOC 2?
Not at this time. We will not display certification marks we do not hold. Security practices are described in the DPA and the operational documentation. Formal certification is a possible later step, not a current claim.
Is this legal advice or audit advice?
No. The assistant can draft and search. A qualified professional at your firm has to review anything that matters.
How long does setup take?
The target is a working assistant within a day once access and document sources are agreed. Some firms take longer, usually because of IT access or deciding what to index. We will give you a realistic date in the proposal.
What happens if we cancel?
You can export what you need. We delete your instance data according to the DPA, within [RETENTION_PERIOD], unless a legal duty requires us to keep it.
Who is the contracting entity?
Unattended Oy, a Finnish limited company (Y-tunnus 3622216-6), Hiomotie 10, 00380 Helsinki, Finland. Invoice details will be on the proposal and the imprint page.
Do you work only with Finnish firms?
No. The first focus is Finland and the Nordics, and we can serve firms elsewhere in the EU where we can offer EU hosting and a straightforward contract.
Request a demo
Tell us a little about your firm. We will reply to schedule a conversation — a walkthrough if the product is ready to show, or a short interview if you are early and we are still shaping the service. No mailing list in disguise. We will not share your details.
If we wrote to you, thank you for coming. The form is the best way to pick a time.