For critical infrastructure and public authorities
AI in your own data centre, even without internet.
For energy, water, transport and authorities with security tasks.
- Server on your premises
- Operation without internet
- Remote maintenance only with approval
- Permissions from your directory
- Every action logged
- ISO 27001 certified
Find regulations, draft texts, search documentation.
Examples from five sectors.
- Energy and municipal utilities
- Search operating instructions
- Answers in customer service
- Summarise regulatory rulings
- Water and wastewater
- Operations manual for the shift
- Search maintenance reports
- Draft board papers
- Airports and transport
- Find procedural instructions
- Technical documentation
- Summarise contracts
- Police and security authorities
- Search decrees
- Answer enquiries
- Procurement and budget
- Decommissioning and interim storage
- Search licensing documents
- Knowledge of departing experts
- Letters to the regulator
Control systems stay outside.
basebox sits in your IT network and works with documents and office systems.
- No connection to control systemsGrid control, process control systems, interlockings or safety systems are not connected. basebox does not control any plant.
- Write access off by defaultConnectors read with the permissions of the person asking. You enable writing one by one.
- Updates through your gatewayNew versions and models arrive via your internal repository, not from the internet.
Runs without internet.
By default, basebox makes no outbound connections: no telemetry, no licence check, no update calls.
- AI model
- Documents and text recognition
- Apps and permissions
- Voice input
- Audit log
- Connection of internal systems
Evidence for your supply chain.
Your obligations under NIS2, the EU directive on cybersecurity, remain with you. For your supplier assessment you receive:
- ISO 27001 certificate
- Software bill of materials (SBOM)
- Process for reporting vulnerabilities
- Penetration test by external auditors
- Mapping to the NIS2 measures
Answers for your security assessment →Security and evidence →NIS2 in the documentation ↗
What basebox is not.
So you don’t find out only during the audit.
- No VS-NfD approvalClassified information (in Germany VS-NfD, “restricted”) requires products approved by the BSI, the German Federal Office for Information Security. basebox does not have this approval, so classified information does not belong in it.
- No high-risk AIAssessing people, profiling or evaluating evidence counts as high-risk under the EU AI Act. basebox is not built for that.
- No KRITIS certificateThere is none for products. You receive evidence for your own ISMS.
A server with you in three weeks.
Fully set up, with installation in the data centre and an introduction.
Frequently asked questions
No, basebox is not approved for VS-NfD. Classified information requires products approved by the BSI. Classified information therefore does not belong in basebox; unclassified documents do.
No. The basebox server runs entirely without internet, with AI model, documents, apps, permissions and audit log. Updates and new models arrive via your internal repository.
No, basebox has no access without an operations contract. Remote maintenance only happens on your instruction: time-limited, approved by you, logged and revocable at any time.
The catalogue of the German Federal Network Agency (Bundesnetzagentur) applies to systems you need for the secure operation of grids and plants. basebox sits outside it, in the IT network and without a connection to control systems. You record this boundary in your ISMS; we provide the description of the set-up.
For administrative tasks, the police may use basebox, such as searching decrees, answering enquiries or drafting specifications. Not for classified information and not for tasks that count as high-risk under the EU AI Act, such as profiling or evaluating evidence.
In Germany, no nuclear power plant has generated electricity since April 2023. For decommissioning and interim storage, basebox helps with documentation, separate from control and safety systems. Security-relevant documents stay outside.
The NIS2 obligations remain with you, also with basebox. basebox is your supplier and provides the evidence you need for the security of your supply chain: ISO 27001 certificate, software bill of materials, process for reporting vulnerabilities and the mapping to the NIS2 measures.
Last updated: