Services Private Claude Deployment

Private Claude Deployment, inside your own AWS account in the EU.

Your employees already use AI, often through personal accounts with company documents and no record. Private Claude Deployment gives them a company-controlled Claude assistant that runs in your AWS account, so you control who uses it, what data it sees and where that data goes, and you can prove it to your auditor.
  • Runs in your AWS account
  • EU data residency
  • No training on your data
Runs in your AWS account
The platform, your data and every log stay in your own AWS account, not with a chat vendor.
EU data residency
Claude runs on Amazon Bedrock in EU regions, and each log records where the request was processed.
No training on your data
Your prompts and documents are used only to answer the question, never to train AI models.
Pay for use, not seats
No seat licence. You pay for what employees actually use, so light users cost a fraction of a subscription.
The challenge

Shadow AI is already in your company.

AI is now part of daily work. Most of it happens outside your control, and your data goes with it.

Shadow AI

Employees paste contracts, code and customer data into personal AI accounts. The data leaves the company with no record.

No visibility, no proof

IT cannot see who used which tool or what was shared, and cannot prove to an auditor that nothing leaked.

Bans do not work

Blocking public AI pushes it onto private phones. Employees need a safe tool that is just as good.

78%
of employees who use AI at work bring their own AI tools
Microsoft and LinkedIn Work Trend Index, 2024
48%
of employees have entered non-public company information into AI tools
Cisco Data Privacy Benchmark, 2024
43%
of data breaches involved AI tools the company had not approved
IBM Cost of a Data Breach, 2026
46%
of employees would keep using personal AI tools even if their employer banned them
Software AG, 2024

What's included

Private Claude Deployment gives every employee Claude, with the controls your security, legal and IT teams ask for. Everything runs in your own AWS account, delivered and operated by us.
Company sign-in, control by group
Employees sign in with Entra ID, Okta, Google or Keycloak. Your identity provider decides who uses which Claude models; nobody holds API keys. Offboarding ends access within an hour.
Guardrails and data masking
Every prompt is checked before it reaches the model: personal data is masked and secrets are flagged, including local identifiers such as OIB and IBAN. Answers are checked again on the way back.
Answers from your documents
Connect SharePoint, OneDrive, Confluence or file storage. Employees only get answers from documents they are already allowed to open.
Audit trail in your account
Logs are masked, encrypted and tamper-proof, kept 30 days in full and one year as an activity record of who used which model and when. Ready for your auditor.
Monitoring and cost control
Usage, tokens and response times flow to Amazon CloudWatch, Grafana, Datadog or any OpenTelemetry tool. Budgets per user and per group keep AI costs predictable.
Policies and training
An AI usage policy, input for your data protection impact assessment (DPIA), works council support and AI literacy training for staff and administrators.
Claude Desktop, Code and Agent SDK
One gateway serves chat, Cowork and Claude Code. Switch region or provider, or fail over to a backup, without reinstalling anything on laptops.
Compliance by design
Built for GDPR, the EU AI Act and DORA: EU processing, named operators, audit rights, an exit plan and code you own.
Comparing your options

Private Claude Deployment or another subscription?

Per-seat AI tools such as ChatGPT Business, Claude Team and Microsoft 365 Copilot use similar models. The difference is where they run, who keeps the logs and how you pay.

Topic Private Claude Deployment Per-seat AI subscriptions
Where it runs Your own AWS account The vendor's cloud
Where requests are processed EU regions only, recorded in every log Depends on the plan; EU processing often only in Enterprise contracts
Logs of every request In your account, masked and tamper-proof With the vendor; full audit logs usually only in Enterprise plans
Control per team Models, tools and budgets per group from your identity provider Admin settings that vary by plan
Pricing Pay for use, no seat licence $20 to $30 per user per month, used or not
Policy, DPIA input, works council, training Part of the service Not included: you get the software
If you leave Code, configuration and logs stay with you Data and logs stay with the vendor
Who controls what

You own it. We run it.

The table your CISO will ask for. You keep the account, the keys, the data and the logs. We handle the setup and the day-to-day operation, so your team just uses Claude.

  • AWS account and network You
  • Encryption keys You
  • Region where data is processed You
  • Identity provider, groups and access You
  • Audit logs and activity records You
  • Setup, updates, monitoring and support Sedmi odjel
  • AI policy, DPIA input and staff training Together
  • Training AI models on your data Never

Start small, prove the value, scale

A mid-sized company goes from the first workshop to company-wide use in about 8 to 12 weeks. We deliver a proven setup in your own AWS account: the gateway runs on ECS Fargate or EKS behind an internal load balancer, reachable only from your private network, with no internet access for the servers.

1 to 2 days
Discovery workshop
We map how your teams use AI today, which data sources matter and what your compliance needs are. Outcome: an agreed scope and plan.
2 to 3 weeks
Proof of concept
The gateway, guardrails and Claude run in your own AWS account with one document source. Outcome: a working setup on your own data.
4 to 6 weeks
Pilot group
Twenty to fifty real users work with real documents while we tune the policies and track usage. Outcome: proven value and real feedback.
2 to 4 weeks
Rollout
All groups are onboarded, device policies are deployed and staff are trained. Outcome: secure AI for every team.
Ongoing
Managed operation
As your AWS managed service provider we run it for you: monitoring, updates, new Claude models and audit support.
Let's start with a discovery workshop.

One session to map how your teams use AI today and plan a proof of concept on your own data.

Book a workshop

Why Sedmi odjel

A partner your security team and your auditor can check, close to you in Central Europe.
AWS Premier Consulting Partner
The highest AWS partner tier, with the AWS AI Services Competency.
Audited AWS Managed Service Provider
We can run the platform for you after go-live, under an agreed service level.
ISO 27001, ISO 27017 and ISO 20000-1
Certified information security, cloud security and IT service management.
Local and close
Offices in Zagreb, Vienna and Mannheim. We work in Croatian, German and English.
FAQ

What IT, security and legal ask first.

Have a question that is not here? Schedule a call and bring the hardest ones.

Which Claude models can we use?

Claude Opus, Sonnet and Haiku run through EU routing on Amazon Bedrock, so requests stay in EU regions such as Frankfurt, Ireland, Paris and Stockholm. Each group gets its own list of allowed models. Models that are only offered with global routing, which can process data outside the EU, stay switched off unless you decide otherwise.

Do we need to buy Claude licences?

No. There are no seat licences. You pay AWS for actual usage, directly or through us as an AWS reseller, plus the project and, if you choose it, our managed service. Light users typically cost a few dollars a month in AI usage.

Is our data used to train AI models?

No. Amazon Bedrock does not use your prompts or answers to train models and does not share them with model providers such as Anthropic. Anthropic's terms for Bedrock also forbid training on customer content, and you own the outputs.

We already have Microsoft 365 Copilot Chat. Why add this?

Private Claude Deployment keeps every log in your own account, processes requests only in the EU, lets you decide which models, tools and budgets each team gets, and gives developers Claude Code through the same controls. Many companies use both.

How long does it take?

A proof of concept runs in two to three weeks after the workshop. A full rollout typically takes 8 to 12 weeks for a mid-sized company and four to six months for an enterprise rollout in waves.

How does this help with GDPR, the EU AI Act and works councils?

Personal data is masked before it reaches the model and processed only in the EU. We provide the AI usage policy, technical input for your DPIA, a privacy-friendly logging design that cannot be used to evaluate employees, a works council template for Germany and Austria, and the AI literacy training Article 4 of the EU AI Act requires.

What do you need from us?

An AWS account structure, or permission for us to set one up; an administrator for your identity provider; a decision on network access (VPN or protected internet access); the document sources in scope; and a sponsor, an IT contact and your data protection officer.

Who runs it after go-live?

Your IT team manages users, groups and rules through the admin interface. We can operate, monitor and update the platform as your AWS managed service provider, test new Claude models before you switch and report on usage and cost.

Case study

Sedmi Odjel Delivers AI-Powered Legal Research Platform on AWS

Sedmi odjel built a generative AI solution enabling a Croatian law firm to transform legal research through intelligent court decision analysis.

Read case study
Give your teams Claude you can control.

Tell us about your company and we will come back with a plan for your first step.

Let's Talk