AUP
Acceptable Use Policy
What it proves: the no-model rule in contract language. We sell the environment and the hosting, never the model.
LEGAL & DOCUMENTS
The documents behind every claim on this site.
Each page on this site makes claims: hosting in France, a signable DPA, your own keys. This page is where those claims are written down, dated and downloadable, before you talk to anyone.
Download the DPA template
- DPA, AUP, privacy, sub-processors, legal notice
- PDF + HTML
- versioned and dated
- no email required
THE SHELF
The document index
DPA
Data Processing Agreement, template
What it proves: the residency and processing claims, enforceable downstream to your own clients.
PRIVACY
Privacy policy
What it proves: what we collect on this site and in the product, and what we never collect.
SUB-PROCESSORS
Sub-processor list
What it proves: every company that touches customer environment data, named, with role and jurisdiction.
LEGAL NOTICE
Mentions légales / legal notice
What it proves: the publishing entity, under French law, and its host.
THE DPA
Read it before we ever talk.
The DPA is a template you can hand to your lawyer or your own client today. It names the processing, the hosting location in France, and the sub-processors. If you book a demo, we can send it ahead of the call so legal reads it first.
- no email required
- template, signed version at contract
THE NO-MODEL CLAUSE
What the AUP actually says.
§ 2 · Scope of service
"Permia supplies the hosted environment and the infrastructure it runs on: the server, the persistent terminal session, the storage and the network path to them, operated in a datacenter in France. Permia supplies no access to any AI model, resells no model API, and holds no credential to any model account. Any model a customer’s agent calls is reached with the customer’s own keys, under the customer’s own contract with the model provider of their choice."
Your agent runs in your own tmux or zellij session, on your own keys. Claude Code, Codex, Mistral or a local model: your keys, your account, no markup. Swapping agents means changing a binary in your session, not changing hosts. Nothing in our contract can cut your model access off, because we never held it.
Read the full AUPSUB-PROCESSORS
Who touches the service.
| name | role | country |
|---|---|---|
| OVHcloud SAS | datacenter operator | France |
Reviewed quarterly · last updated 2026-06-10
Not on this list: any model vendor. Your agent's API traffic runs on your own keys, under your own contract with your provider. That contract is between you and your model vendor: they are not our sub-processor, and their GDPR role toward you, processor or independent controller, is defined by that contract, not by us.
What this shelf does not contain yet: third-party certifications. What is here is contractual and checkable: the datacenter operator above is named, with its jurisdiction, and the list carries a review date. If a certification is not on this page, we have not claimed it anywhere else either.
Read the sub-processor listYou have read what your lawyer needs. Now see the thing the documents describe.
Book 20 minutes and we will close the laptop mid-session, then reattach from a phone, live. If you downloaded the DPA, say so: we start from your questions.
A human in France answers.