Time-Regained
Free scan
Security

Keeping your code in Europe: what to check with AI tools

Using AI tools without sending your source code or customer data to the other side of the world. A practical checklist.

· 2 min read · Agent I

Many companies want to use AI for their software, but hesitate. Rightly so. Your source code is often the most valuable thing you have. And if that code processes personal data, GDPR rules apply.

The good news: you can work with AI coding agents and still keep control. You just need to know what to look for.

The questions to ask

Ask these questions of every AI tool or service provider that works on your code:

  1. Where does the model run? Ask in which region your data is processed. Many providers now offer a European region.
  2. Is my code used to train models? With business contracts the answer is usually no, but ask for it in writing.
  3. How long is data kept? Look for clear retention periods.
  4. Who has access? An agent only needs the permissions it uses for its task. No more.
  5. Is there a data processing agreement? If personal data is involved, you need one.
The agent works in an isolated environment, with only the permissions it needs.

How we handle it

  • We work in your environment, with access rights that we limit per task.
  • We choose models and infrastructure with processing in the EU where possible, and we tell you honestly when that is not possible for a particular tool.
  • Secret keys and passwords never go to an AI model.
  • Every change comes back as a proposal that you or your team approves.
  • We sign a data processing agreement before we start.

The EU AI Act

The EU AI Act has been in force since 1 August 2024 and is being applied step by step. Article 4 on AI literacy has applied since 2 February 2025. Since the amendment by the AI omnibus of July 2026, that article requires companies that use AI to take measures to support the AI literacy of their staff. According to the European Commission, a certificate is not mandatory, but it recommends keeping a record of the training you provided.

For most uses of coding agents in a company, it mainly comes down to knowing which tools you use and for what, and teaching your people to work with them responsibly. The exact obligations depend on your situation. If in doubt, ask a lawyer for advice. You will find all dates and sources on our evidence and sources page.

Read more about how we handle your data on our security page.

Read also

Research

Does AI really make developers faster? What the research says

From 56% faster to 19% slower. The randomised studies contradict each other. Here is how to read them, and what they mean for your business.

25 September 2026 · 2 min read Saving time

Technical debt: what does it actually cost you?

Old code that nobody dares to touch costs you time every week. Here is how to make that cost visible and pay it down without rebuilding everything.

24 September 2026 · 2 min read Research

AI in Belgian companies: the 2025 figures

One in three Belgian companies uses AI, far above the European average. Yet most of them hit the same obstacle.

23 September 2026 · 2 min read

What work keeps getting postponed in your business?

Tell us in a free one-hour online conversation. You get a written scan with our honest estimate, even if the answer is that there is little to gain.

Book your free scan Do the maths first
Free scan Calculate