AI experiences with privacy built in.
GDPR compliant AI for places where data protection and IT security matter: Talking Paintings can run fully on-premise and offline, without an internet connection.
For privacy-sensitive organisations, on-premise keeps visitor interactions and AI processing entirely within your own walls. Visitor text is not stored by default, and the AI never trains on visitor conversations.

GDPR compliant AI: maximum control over your data
With a fully on-premise Talking Paintings, the conversational AI runs directly on hardware at your location, without external AI services or a permanent internet connection.
Your infrastructure. Your configuration. Your control.
See deployment optionsAnonymous interaction, without registration
Personal information is never required or requested by the system. As in any open conversation, visitors may volunteer it themselves.
No account needed
No sign-up, no profile and no personal identifiers are needed to have a conversation.
Push-to-talk control
Speech input only starts when a visitor deliberately presses the button. There is no permanent background recording.
Configurable logging
Visitor text is not stored by default. Logging is project-specific: temporary, stored locally, or disabled entirely.
Built for privacy-sensitive environments
Museums & cultural institutions
Multilingual AI interactions without visitor accounts or unnecessary data collection, with control over logging, retention and access.
Attractions & entertainment
Character experiences without visitor registration. Local or hybrid deployment balances interactivity with your connectivity and privacy needs.
Brands & corporate
Conversational AI in showrooms and events with more control over visitor interactions and less reliance on external AI platforms.
Education & public spaces
Conversational AI in schools, libraries and public buildings, with local processing that supports strict institutional IT requirements.
Easier GDPR and IT-security assessments
Cloud-based AI can involve several external providers, data transfers and contracts. A fully local Talking Paintings keeps conversational AI on site, so there are far fewer external data-processing relationships to review, document and manage.
Typical cloud AI deployment
4 external data-processing relationships
On-premise Talking Painting
0 external data-processing relationships
The final GDPR assessment always depends on the individual deployment, for example logging settings, retention periods and the operatorβs privacy information. The local architecture gives you much more control over those decisions.
Discuss your GDPR & IT requirements
Hybrid, when cloud capabilities are preferred
Not every project needs fully offline operation. Talking Paintings can also combine local processing with selected cloud-based AI services, adapted to your technical, functional and privacy requirements.
- Selected AI functions run locally
- Selected services operate in the cloud
- External data flows limited to defined components
- Relevant providers assessed individually
On-premise when maximum control is required. Hybrid when more flexibility is preferred.

Controlled support access
On-premise does not mean unsupported. Authorised technical staff can get controlled access for maintenance, troubleshooting or error analysis, limited to that purpose, without routinely transferring or storing conversation histories outside the local system.
During planning we work with your IT or data protection team on:
- Deployment architecture
- Network requirements
- Local and external data flows
- Logging and retention
- External services
- System access
- Support procedures
Does Talking Paintings need an internet connection?
Not necessarily. A fully on-premise installation runs locally and offline. Hybrid deployments use selected online services where required.
Are visitor conversations sent to external AI providers?
They do not have to be. On-premise, speech recognition, conversational AI and speech generation all run within the local system. For hybrid, it depends on the selected services.
Do visitors need to register?
No. There is no account, email address or personal profile.
Is the microphone always listening?
With push-to-talk, speech input starts only when the visitor deliberately starts an interaction. There is no permanent background recording.
Are conversations stored?
Visitor text is not stored by default. Depending on the project, histories can be temporary, stored locally or disabled entirely.
Is Talking Paintings GDPR-compliant?
It is designed to support GDPR-compliant deployments and gives you significant control over where data is processed and retained. Compliance depends on the complete deployment, including configuration, logging, retention, privacy information and the operator.
Can our IT or data protection team review the system first?
Yes. Architecture, data flows, network requirements, logging, retention and external services are part of project planning.
AI interaction without giving up control
On-premise. Offline. Hybrid. Every organisation has different privacy, infrastructure and IT requirements, and Talking Paintings is configured around yours.