Hosting, data protection, and content provenance.

Overview

CogniWerk is built and hosted in the European Union, on infrastructure located in Germany. German law governs the hosting agreement.

CogniWerk operates as a GDPR-compliant processor. An Article 28 Data Processing Agreement (DPA) is available on request, and a sub-processor register is maintained and kept current.

CogniWerk's image generation tools are classified as limited-risk under the EU AI Act. The rationale behind this classification is available on request.

Every image generated on CogniWerk carries a digital watermark and C2PA content credentials, automatically, on every plan including Free. This is the concrete mechanism satisfying the AI Act's Article 50 requirement that synthetic content be marked in a machine-readable, detectable format, not a separate marketing claim layered on top.

CogniWerk's model stack is rights-cleared for commercial use on every paid plan (the Free plan is for personal and evaluation use only). Written IP indemnification is provided on paid plans; the exact scope of that indemnification is a legal document, not marketing copy, and is available on request rather than summarised here.

Every generation on CogniWerk is traceable: the model used, the prompt, the settings, and the output are recorded and exportable, for client handovers, internal review, or audit.

A one-page summary is available immediately below. The full compliance pack (the complete document set behind the overview above) is available on request, and is automatically attached to your first invoice once you're on a paid plan.