Is KI BMS subject to the CLOUD Act?

No. The CLOUD Act compels US-based companies (or US subsidiaries) to hand over data they control, regardless of where it physically lives. KI BMS has no US entity, no US contracts, and no US-controlled infrastructure in the data plane. Stripe processes payment data and is US-headquartered, but that boundary is well-defined: payment metadata only, never your records.

Where exactly is my data stored?

On dedicated servers we operate ourselves, physically located in Germany. The audit log, attachments, embeddings - everything in the data plane - lives there. Backups stay within the same EU jurisdiction in different physical locations and roll off on a 30-day window. We deliberately do not name the exact data centre - knowing the rack does not buy the customer anything and would make operator changes a public event.

Do you log IPs or session metadata to a US service?

No third-party analytics, no Google Analytics, no Meta pixel, no third-country tag manager. The first-party device + session ledger lives in our own Postgres + Redis - same EU boundary as the rest of the data plane. Logs are operational only and rotate at 30 days.

What happens if I'm a customer outside the EU?

You can use KI BMS from anywhere. The data still lives in the EU; the request travels from your location to our servers and back. That's a posture choice on our side, not a geo-restriction on yours.

KI BMS

Pricing

Compare

KI BMS: the EU alternative to d.vinci

Same job, hosted in the EU. KI BMS runs in Germany under German law - your data stays in EU jurisdiction end to end.

EU alternative

ATS

Comparison

DACH

Julia YukovichCo-Founder + CEO

·March 26, 2026·

2 min read

If your reason for moving off d.vinci is data sovereignty, the comparison gets simpler. KI BMS is hosted in Germany on infrastructure we operate ourselves - no US-headquartered company in the request path. The CLOUD Act does not reach what physically lives here.

At a glance

d.vinci is right for German corporates and large mid-markets from 250 staff that want an established ATS with deep approval workflows, multi-level permissions, and long market presence. KI BMS is right for modern mid-markets up to 100 staff that want KI pre-sort as a default, value monthly contracts, and don't want a 6-month implementation process. Both are German-centric, both understand GDPR - they target different generations of buyers.

EU jurisdiction

What 'EU-hosted' actually means here, end to end

KI BMS runs on dedicated machines we operate ourselves, physically located in Germany. There is no US-headquartered subprocessor in the request path - the data plane (your records, your files, your audit log) lives entirely in EU jurisdiction. Two third parties exist outside that boundary: Stripe (payment information only, under the EU-US Data Privacy Framework) and the mail relay for transactional email. Neither sees your records. d.vinci's setup is the variable - if their primary infra is US-based, the CLOUD Act applies regardless of what their privacy page claims.

KI BMS vs d.vinci: EU comparison

	Ours KI BMS	Theirs d.vinci
Hosted in Germany
Approval workflows + permissions	Mid	Very deep
KI fit-score built in		First KI features from 2025
Careers page builder
Multi-posting job boards
Audit log + GDPR auto-anonymisation		Manually configurable
Multi-voice scorecards
Setup time	Hours	Weeks with implementation partner
Pricing model	Public (€0 / €1 / €10 per month)	Quote-only, individually negotiated
Minimum term	None - monthly	1-3 years typical
API + webhooks + MCP		API yes, MCP no

When to pick which

Pick KI BMS when

You're up to 100 staff and recruiting has no dedicated 6-month implementation slot.

You want KI pre-sort with reasoning as default - not as a KI module rolled out from 2025.

Public prices and monthly cancellation matter to you - no 3-year contract with quote-only pricing.

Pick d.vinci when

You're 250+ staff and need multi-level approval workflows with fine-grained permissions.

Established market presence with implementation-partner network has concrete procurement value.

Your corporate compliance expects a tool 20+ years in market - not a 2026 player.

EU-jurisdiction questions

Specific to where the data lives, who can subpoena it, and what crosses borders.

Start with KI BMS

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Julia Yukovich

Co-Founder + CEO

Julia is one of the Co-Founders. She handles design, product direction, and most of the support replies that arrive in the morning.

julia.yukovich at aicuflow dot comLinkedIn