01
Client data in private accounts
Staff paste extracts from client files into free chatbots. Where that data ends up and how long it is kept, nobody knows.
For Dutch small and mid-sized companies
One secure AI workspace for your whole office.
Your staff work with AI on your own documents, within the rights of their department. You keep the keys, the log and the AI register the AI Act asks of you in your own hands.
Data in EuropeRights per departmentStart with an AI audit
app.noxtrack.com
What did we agree with Jansen BV about the deferred tax return?
The return was deferred by a year in March, in consultation with the client. The agreement is in the meeting notes of 14 March.
Source, Jansen BV fileTax department3 collections · 8 users
Sound familiar?
AI is already being used in your office. Just not on your terms.
That is not down to unwillingness. It happens by itself, someone tries a free chatbot, it works, and six months later there is client data sitting in private accounts.
02
Separate subscriptions, separate arrangements
One person pays for ChatGPT on their own credit card, another uses nothing at all. Whoever leaves takes their account and all their conversations with them.
03
No answer when someone asks
If a client or an auditor asks what you do with AI, nobody has the answer written down. Since 2 August 2026 the AI Act expects that of you.
What you get
One environment where the safe path is also the easy path.
Your staff get a better AI environment than the one they had on their own. You get the grip you were missing. Nobody has to keep records.
One AI workplace for everyone
Staff log in to one environment and work there with the models from OpenAI and Anthropic. No separate accounts, no private keys, no credit cards.
OpenAI
Anthropic
Private accounts
Your documents as the source
Connect document collections per department, by upload or straight from Google Drive and SharePoint. The AI answers from your own files, and the models do not train on your data.
Client files
Annual accounts
Payroll
Rights per department
Tax sees tax files, payroll sees salary data. Anyone who may not reach something cannot reach it through the AI either.
DepartmentSourceAccess
TaxTax filesYes
PayrollSalary dataYes
TaxSalary dataNo
Keys held centrally, never by the employee
The model providers' keys sit centrally in the environment and never end up on a laptop. If someone leaves, you switch off one account.
Keys
Central in the environment
On laptops
Never
If someone leaves
One account off
Providers
OpenAI and Anthropic
The AI register fills itself
Every use gets a log entry. The register shows which applications run, with which models and sources, and under whose responsibility. Export as PDF or CSV, for a client or an auditor.
ApplicationModelOwner
File assistantClaudeM. Jansen
Return checkGPTS. Bakker
ExportPDFCSV
Data in Europe
The environment runs in Europe. So do your documents, logs and register.
That is the difference with the American providers of this kind of tooling. Everything we see of you stays within the EU.
Where it runs
The environment and the database sit in a data centre within the EU. Your documents, the rights per department, the record of use and the register do not leave Europe.
What does cross the border
The question itself goes to the model of the provider you choose. Choose a European region at OpenAI or Anthropic and that step stays in Europe too. Choose an American one and the register shows you which departments and sources that concerns.
What we keep, and for how long
By default we record per conversation only that it took place, the moment, the department, the model and the sources used. Content is recorded only if you switch that on. Retention is 90 days by default and you set it yourself. Your documents stay in the environment as long as you want and can be deleted per collection.
Who it is for
Built for offices that work with confidential data.
Accountancy and administration firms
Annual accounts, tax files and payroll, separated per department.
Insurance and financial advisers
Policies and client files as a source for advice and back office, each within their own rights.
Health practices and clinics
Process notes and referrals without anything ending up in a free chatbot.
AI Act
What is expected of you since 2 August 2026
Not the version with high-risk systems and fines running into tens of millions, but what applies when your company has ten to fifty people. It comes down to two questions, what happens with AI in your company, and who can reach which data through AI.
- A register of the AI systems you use
- Being able to show who can reach which data through AI
- Policy and demonstrable knowledge among the people working with it
- Transparency towards your customers about your use of AI
- Agreements with your providers about processing data
AI audit
Book the auditWant to know where you stand first? Start with the AI audit.
In the audit we map which AI tools are being used in your office right now, including the ones you did not know about. You get an overview of what is running, where client data goes and what the AI Act makes of that. The result is a report you can use straight away as the first content of your AI register, whether you continue with Noxtrack afterwards or not.
Book an intro call.
In half an hour we map what already happens with AI in your office and what the environment would look like for you. Rather email first? hello@noxtrack.com
Frequently asked questions
What you probably want to know
Question not listed? Email hello@noxtrack.com.
In a data centre within the EU. Only the departments you designate can reach them, and the models do not train on your data.
No. You connect sources per department and decide who sits in which department. The AI can only answer from sources that employee is entitled to.
Noxtrack delivers the register and the record keeping the AI Act asks for on the systems you use. Policy and knowledge among your people remain your part. The AI Act page sets out exactly what is expected of you.
They can go. The environment replaces the per-employee subscriptions. The keys at the model providers stay yours.
That depends on the number of departments and on what you want to record. In the intro call you get a concrete figure, not a quotation process.
The basic environment is up within a few days. After that we set up the document collections and the rights per department together.
