Licensed to be used in conjunction with basebox, only.
// security
Demo
Applies to
Product: Demo · Audience: Security / Compliance reviewer
The Demo is a test environment, not a production product. Any statement about its infrastructure – including the use of external model infrastructure – applies exclusively to the Demo and must never be generalized to Cloud or Server. Do not process real personal or patient data in the Demo.
What the Demo is for
Getting to know the interface and the features before a purchase or deployment decision: chat, documents, knowledge bases, apps, connectors. It shows what basebox can do – not how a production environment is secured. To assess a production environment, read Cloud or Server.
What applies to the security assessment
| Aspect | Demo |
|---|---|
| Production operation | No. No availability, retention or recovery commitments |
| Suitable for real data | No. No personal, confidential or patient data |
| Infrastructure | Separate setup, apart from the Cloud: platform at Hetzner |
| Models | Claude via Google Vertex AI – prompts go to Google |
| Tenants | Shared test environment; no isolated customer environment |
| Contractual basis | basebox is a processor, with Hetzner and Google as sub-processors (DPA); no operational or availability commitments |
| Deletion | Test data may be removed at any time without notice |
What you may conclude from the Demo – and what not
You may: feature scope, usability, model behaviour, interplay of apps, knowledge bases and connectors, the administrator/user role model.
You may not: infer data flows, storage locations, encryption or response times of the production environments from the Demo. The production data flows are under Data flows, separated by Cloud and Server.
Recommendation for reviewers
- Use the Demo with synthetic data – invented names, public documents.
- Check in the Demo the behaviour you will later require in production: notice in the chat when recording is enabled, consent dialog before the first web search, private default apps.
- Assess security and data protection against the production environment you will use – with the pages Cloud security or Server security.
How users reach the Demo and what works there: Try the Demo.
Next step: Cloud