What’s European about AIM CODEX, and what isn’t yet
Saying “European” is easy. Here is every piece: who the company is, where your data is stored, who handles it and under which rules. What can be read live, this page reads live.
This page was served to you, just now, by a server in
Amsterdam, the Netherlands (European Union)
Region europe-west4-drams3a · read from the server itself on every visit; the database is in the same region.
The company
- Who
- BIOMAG, S.L.U. · NIF B-01037241. AIM is its software division.
- Where
- c/ Barrachi, 39 – Pab. 3, 01013 Vitoria-Gasteiz (Álava), Spain
- Since
- 1987, in technology. Incorporation date on record
- What else it does
- Its own brands —Mars Gaming, Tacens, Anima— selling in several European countries. Legal notice
Who handles your data, and where
Your account and your documents are stored in the European Union. These are all the companies that handle data to provide the service, with their country and where they handle it (Paddle charges as a reseller and handles payment data as controller, not on our behalf; if you use meeting minutes, the recording goes to the AI provider):
- RailwayIn the EU
Hosting the application and the database.
- Company from
- USA
- Handles the data in
- The Netherlands
- ResendIn the EU
Sending the service’s emails: notices, links and reminders.
- Company from
- USA
- Handles the data in
- Ireland
- MigaduEU adequacy
The hola@aim-codex.ai mailbox and fallback sending if Resend fails.
- Company from
- Switzerland
- Handles the data in
- Switzerland
- OpenRouterOutside the EU
Taking to the AI models the text you ask them to draft, review or explain.
- Company from
- USA
- Handles the data in
- United States and other countries
- PaddleEU adequacy
Charging and invoicing the paid plans. Paddle makes the sale as a reseller: it handles that data as controller, not on our behalf.
- Company from
- United Kingdom
- Handles the data in
- United Kingdom
The OpenTimestamps calendars and the time-stamping authorities receive only each document’s fingerprint, never the document. Each provider in detail, with its agreement: subprocessors.
Under which rules
RGPD
A data processing agreement, a public list of subprocessors, and export and deletion of everything from your account. The agreement
eIDAS
Acceptance is a simple electronic signature (art. 25), with its sealed proof. We are not a qualified provider and don’t claim to be. What it’s worth in court
The AI
It helps draft, review and explain; it makes no decisions about people. No data retention and no training on your content: we require it on every request.
The proof
Truly sovereign: an open standard, the PDF carries its own proof and is checked on Bitcoin, without us and without asking any country or company for permission. The standard
- Railway, Resend and OpenRouter are US companies. Even with your data on EU servers, a US company can receive demands from its government, including for data stored outside the US. That’s why we don’t claim “absolute” data sovereignty.
- The AI still runs outside the EU. On 10 November 2026 it moves to Mistral AI (France), in its European region and with zero retention: the announced change. Meanwhile, if you don’t use the AI, none of your documents leave the European Union.
- Need European providers only? Write to hola@aim-codex.ai and we’ll tell you what can be done and when.
The flag of the European Union shows where we are. It is not a seal, nor an endorsement by the European Union or its institutions.