> For the complete documentation index, see [llms.txt](https://trust.memori.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://trust.memori.ai/en/plans-billing/responsibilities-by-delivery-model.md). # Responsibilities by delivery model The distribution of responsibilities between Memori and the customer varies depending on the chosen contractual model. The following table provides an indicative summary applicable to all delivery models. **Fundamental principle:** In all models, the data entered into the platform remains the **exclusive property of the customer**. Memori does not collect any data to train, modify or improve its own models. Data is used exclusively to provide the contracted service. | Area of responsibility | SaaS | PaaS | Private Cloud | On-Premise | | --------------------------------------------------------------------- | ---------------------------------------------- | ---------------------------------------------- | ---------------------------------------------- | ---------------------------------------------- | | **Infrastructure security** | Memori | Memori | Memori + dedicated provider | Customer | | **Platform updates and patches** | Memori (automatic) | Memori (automatic) | Memori (with coordination) | Released by Memori — Installed by the Customer | | **User access management** | Customer (for their own Agents) | Customer (via admin panel) | Customer | Customer | | **Agent configuration and content** | Customer | Customer | Customer | Customer | | **Backup and disaster recovery** | Managed by Memori (infrastructure) | Managed by Memori (infrastructure) | Managed by the dedicated provider | Customer (full responsibility) | | **GDPR — customer's role** | Data Controller (Agents' end-user data) | Data Controller | Data Controller | Data Controller — full responsibility | | **GDPR — Memori's role** | Data Processor (platform data) | Data Processor | Data Processor (platform data) | Not applicable — no access to operational data | | **AI Act risk assessment (specific use case)** | Customer (as deployer) | Customer (as deployer) | Customer (as deployer) | Customer (as deployer) | | **AI Act obligations as provider of the AIsuru system and MemoriNLP** | Memori | Memori | Memori | Memori (for the software) | | **Model training with customer data** | Memori does not use customer data for training | Memori does not use customer data for training | Memori does not use customer data for training | No Memori access | | **DPA (Data Processing Agreement) required** | On request | Yes — integral part of the contract | Yes — integral part of the contract | Not applicable in standard form | To request the Data Processing Agreement or for details on the contractual responsibilities of your delivery model:

Request DPA