Sovereign by design: why your customers' conversations stay in the UK
A dealership's conversations are its customer data. Names, cars, budgets, finance, when they are free on Saturday. Kestrel runs on UK infrastructure, under UK law, and nothing a customer tells the agent is sent abroad to be processed. Here is what that means in practice.
Kestrel Automotive Intelligence, Scotland, UK
When a customer rings a dealership at nine at night to ask whether the grey Tucson is still there, they are not thinking about data. They are thinking about the car. But in the two minutes that follow they will tell you their name, the car they are driving now, roughly what they can spend a month, how much deposit they have, and when they can come in. That is a customer record, a finance conversation and a diary entry, all in one call.
The question we put to ourselves at the start was simple. If an AI agent is going to have that conversation on a dealer's behalf, where does the conversation go?
What "sovereign" means here
Sovereign services is a phrase that gets used loosely, so we use it precisely. For Kestrel it means four things, and all four are true of the service today.
- Data stays in the UK. Transcripts, recordings, customer details, bookings and reporting are stored and processed on infrastructure in the United Kingdom. Nothing is replicated to, or processed in, another country.
- The models run on UK infrastructure. The AI that understands and answers the customer runs on infrastructure we control, in the UK. A customer's words are not sent to an overseas model provider's API to get a reply.
- UK law applies, and only UK law. Your customers' data is governed by UK GDPR and the Data Protection Act 2018, with a UK data processor. No overseas legal regime has a claim on it because of where a server happens to sit.
- Your data is yours. Each dealership's data is held separately. We do not use one dealer's conversations to improve the service for another, and we do not train shared models on your customers.
Why a dealer should care
Three reasons, in the order they usually come up.
Finance. A large share of the conversations an agent has are about how to pay: PCP, HP, deposits, monthly figures. Those are regulated conversations, and the people who ask about them are giving you financial information. A dealer's compliance lead, or the group's, will ask where that information went. "A datacentre in the UK, under UK law, with a UK processor" is an answer that closes the question.
Trust. Customers increasingly ask, and increasingly notice. A dealership that can say plainly "your details stay in this country" has something most of its competitors cannot say about the chat box on their website.
Continuity. Services built on an overseas model API inherit that provider's pricing, terms, outages and policy changes. When the provider changes its terms on data retention, the dealer finds out afterwards. Running on infrastructure we control means the terms are ours to keep.
The test is not whether a supplier says "secure". Every supplier says "secure". The test is whether they can tell you, in one sentence, which country your customer's words are in right now.
What sovereign does not mean
It does not mean slower or less capable. The agent answers in the same breath as any other, from your live stock, and books into your diary the same way. It does not mean isolated: Kestrel still connects to your website, your phone line, your stock feed and your DMS, because those are yours and they are already where your business runs. And it does not mean we make claims about "military-grade" anything. It means the ordinary, checkable things above, kept.
Questions worth putting to any AI supplier
Whether or not you talk to us, these are the questions we would want a dealership to ask before letting any AI service near its customers.
- In which country are transcripts and recordings stored?
- When the customer speaks, where is the model that produces the reply running?
- Which law governs the data, and who is the data processor?
- Is our data used to train or improve models used by other customers?
- How long is a conversation kept, and who decides?
- Can we get everything back, in a usable form, if we leave?
We are happy to answer all six in writing, and to walk your compliance lead through the detail on a call. If you would like the answers against your own stock, on your own website, book a demo below.