Introduction: What matters when choosing a basebox alternative
Anyone evaluating a sovereign AI platform for hospitals or the public sector in Germany will quickly come across basebox.ai by basebox GmbH from Utting am Ammersee. Those comparing alternatives usually look at three points:
- Licensing model: how do costs develop when AI is rolled out company-wide – at 1,000, 5,000 or 10,000 employees?
- §203 StGB (German professional secrecy) is a key criterion for hospitals, law firms and tax advisors – architecture and contracts have to fit together.
- Where it runs: STACKIT, your own hyperscaler subscription or your own server – which operating model is mandatory?
As of October 2026 – the basebox information was last checked directly on basebox.ai and docs.basebox.ai in October 2026. basebox publishes prices and terms at basebox.ai/preise; the provider’s current information is authoritative.
Short answer: CompanyGPT by innFactory AI Consulting is the platform that addresses exactly these three points. As a partner of all major cloud providers (Azure, AWS, GCP, STACKIT), we deploy the solution directly inside the customer’s subscription – with no per-user licence, with §203 architecture, with local LLMs and frontier models – plus Office features (including a native add-in for Word, Excel, PowerPoint and Outlook), SharePoint integration, n8n and MCP.
This comparison shows in detail when basebox.ai is the right fit and when CompanyGPT is the better fit.
Looking for a market overview? Read GDPR-compliant AI platforms for enterprises 2026.
The providers at a glance
basebox.ai – AI platform from Utting
basebox GmbH, Bahnhofplatz 3, 86919 Utting am Ammersee, positions basebox as an AI platform for hospitals and the public sector. The platform offers chat, an app store with pre-built apps (incl. Assistant, Summarise, Translate, questions to documents), custom no-code apps (App Builder with AI agents announced for November 2026), knowledge bases with source citations, a document generator (Word, PowerPoint, Excel, PDF), MCP-based connectors (incl. SharePoint, Exchange, Confluence, FHIR) using each user’s own permissions, an admin dashboard, and SSO via Active Directory, LDAP, SAML and OIDC. Developers get an OpenAI-compatible API (per the docs since release 1.7.0). Operating models: cloud (separate environment per organisation in a data centre in Munich), server (Kubernetes/Helm, on-site – optionally without internet – or hosted by basebox; docker-compose possible but not officially supported per the docs) and hybrid. basebox states it is ISO 27001:2022 certified; the BSI C5 attestation for the cloud is in progress per the vendor. References named by the vendor include Klinikum Nürnberg, Universitätsklinikum Leipzig and TUM Universitätsklinikum.
CompanyGPT by innFactory AI Consulting
CompanyGPT builds enterprises their own AI infrastructure inside their cloud subscription – Azure, AWS, Google Cloud or STACKIT – or on-premise. The foundation is open source (mainly LibreChat), extended by the proprietary add-ons companyRAG, companyFILES, companyTRANSLATE, companyDASHBOARD and n8n hosting. innFactory AI Consulting is an official partner and reseller of the major hyperscalers and ships the construct as a partner model of the cloud providers – cloud contracts go directly from the customer to the provider, with no surcharge by innFactory and no per-user licence.
Comparison table: CompanyGPT vs. basebox.ai
| Criterion | CompanyGPT | basebox.ai |
|---|---|---|
| Architecture | Dedicated infrastructure in customer cloud, on-premise or STACKIT | Cloud (separate environment, Munich data centre), server on-site or hosted (Kubernetes/Helm), hybrid |
| Licence model | No per-user licence | Cloud: licence per person and year; server: licence per server (per provider) |
| Pricing model | Fixed-price setup + maintenance, no per-user licence (specific prices on request / product page) | Public price list; minimum term 1 year, all features included (see provider) |
| Token billing | Pay-as-you-go at the cloud provider, no surcharge by innFactory | Cloud: token quota for the organisation included, top-ups available; server: no quota (per provider) |
| BYOC (Bring your own Cloud) | Standard – from the first user | Managed cloud with basebox; customer cloud via on-premise path |
| STACKIT deployment | Yes – CompanyGPT runs productively as an official STACKIT partner | Cloud in own data centre; STACKIT named by the provider as an option for additional compute |
| §203 StGB architecture | Yes, customer’s own Azure subscription + §203 add-on agreement with Microsoft; alternative STACKIT/on-premise | Agreement under §203 StGB as an annex to the licence contract (per provider) |
| GDPR | Via cloud-partner contracts | GDPR-compliant, DE/EU data centres |
| VS-NfD / classified workflows | Designed individually via on-premise/STACKIT setup | Per provider no VS-NfD approval; not intended for classified information |
| Open-source base | Yes (LibreChat, n8n) | Proprietary platform |
| Sovereign flagship model | Qwen3-235B on STACKIT – plus on-demand GPT-5.6 / Claude Opus 5 / Gemini 3.5 (Azure/AWS/GCP) | Open-source models selected and operated by basebox; external models optional (per provider) |
| Local / open-source LLMs | Llama, Mistral, DeepSeek, Qwen, GPT-OSS, LeoLM via vLLM/Ollama | Incl. GPT-OSS, Llama, Qwen, DeepSeek via own inference servers (GPU-specific recommendations) |
| App store / pre-built apps | Implemented via LibreChat agents + companyRAG + n8n | Own app store with curated apps |
| No-code app builder | Agents + n8n workflows | App builder, no code required |
| Knowledge base / RAG | companyRAG with SharePoint permission mirroring | Knowledge management system |
| SharePoint integration | CompanyGPT provides native SharePoint integration with permission mirroring | SharePoint connector (MCP), access with each user’s own permissions (per provider) |
| Office files: active editing | companyFILES: read and write (Excel, Word, PowerPoint) | Document generator: creates Word, PowerPoint, Excel, PDF (per docs) |
| Office add-in (Word, Excel, PowerPoint, Outlook) | Yes – native add-in from companyM365 as a task pane, no Microsoft Copilot licence per user | Not publicly documented |
| Translation service | companyTRANSLATE (DeepL alternative, GDPR-compliant) | “Translate” app via LLM |
| Workflow automation | n8n hosting + MCP extensions | Apps and flows; App Builder with AI agents from November 2026 (per provider) |
| Usage analytics | companyDASHBOARD incl. training recommendations | Admin dashboard (per provider) |
| SSO / identity | Azure AD, OIDC, LDAP | Active Directory, LDAP, SAML, OIDC (Keycloak) |
| REST API | Yes, plus MCP | Yes (OpenAI-compatible API) |
| Mobile | Responsive web | See provider |
| Training | Always included | Bookable, virtual or on-site (per provider) |
| AI compliance consulting (lawyer) | Included (Andreas Nörr) | Contract documents and templates (DPA, TOMs, DPIA); see provider |
| Scaling | 10 to 12,000+ users | See provider |
| Contract model | Service & maintenance contract, cloud on the customer’s side | Licence contract, minimum term 1 year (server licence also as one-time purchase, per provider) |
The decisive differences in detail
1. Licence model: annual licence vs. partner model
According to its pricing page, basebox licenses in two variants: the cloud per person and year with a token quota shared across the organisation, the server per server – according to the vendor anyone may sign in and accounts are not counted. The minimum term is one year and all features are included. The vendor publishes concrete prices on its pricing page.
CompanyGPT has no per-user licence at all. We deliver the solution as a partner of the cloud providers: your contract is directly with Microsoft Azure, AWS, Google Cloud or STACKIT. innFactory AI Consulting deploys the platform inside your subscription and operates it for a fixed price – tokens, GPU and storage are billed at the list price of the cloud provider, with no surcharge by innFactory. Per-user models scale with the number of users and usage; CompanyGPT’s fixed-price / maintenance model stays independent of that. Specific prices are on the product page or available on request.
Background: in CompanyGPT vs. Langdock we show the same mechanism against classic SaaS models.
2. §203 StGB: professional secrecy, properly modelled
§203 StGB is the most critical point for hospitals, clinics, law firms and tax advisors that want to use AI. According to the vendor, basebox offers professional-secrecy holders an agreement under §203 StGB as an annex to its licence contract – for both cloud and server – and names healthcare references such as Klinikum Nürnberg and Universitätsklinikum Leipzig. With the server option the platform runs on the customer’s hardware, optionally without an internet connection.
CompanyGPT takes a different route: we deploy the platform inside the customer’s own Azure subscription, sign the §203 add-on agreement with Microsoft and deliver an architecture engineered for exactly this case. For organisations that need a stricter setup – e.g. state hospitals or public-sector entities – CompanyGPT runs on STACKIT or fully on-premise, so no token touches a hyperscaler. We add a specialised IT lawyer (Andreas Nörr) for an individualised AI policy – a level of compliance that goes beyond the scope of a pure software product.
3. STACKIT and the customer’s own hyperscaler subscription
Many companies in the public sector and in critical industries explicitly require STACKIT as the sovereign German cloud stack from Schwarz Digits. basebox runs its cloud in its own data centre in Munich and, according to its FAQ, names STACKIT as a possible provider of additional compute capacity in the EU.
innFactory AI Consulting is a STACKIT partner and runs CompanyGPT productively on the STACKIT stack – including STACKIT AI Model Serving for local LLMs. In parallel, we deliver all frontier models (GPT, Claude, Gemini) in a GDPR-compliant way via Azure, AWS or GCP if you want a hybrid setup. You get maximum data sovereignty without giving up modern models.
4. Local LLMs AND frontier models in parallel
According to the vendor, basebox runs open-source models it selects itself (incl. GPT-OSS, Llama, Qwen, DeepSeek) and gives GPU-specific model recommendations; external models are optionally available via a dedicated app. The cloud includes a token quota for the organisation (top-ups available); the server has no quota, per the vendor.
CompanyGPT runs Qwen3-235B on STACKIT as the default sovereign flagship, complemented by Llama 3/4, Mistral, DeepSeek, GPT-OSS and LeoLM via vLLM/Ollama – and switches on demand to the frontier models (GPT-5.6 (in the EU data zone GPT-5.4/5.5), Claude Opus 5, Gemini 3.7 Flash / Pro) GDPR-compliant via Azure, AWS and GCP. Billing follows actual usage – cloud and token costs are charged at the list price of the cloud provider, with no surcharge by innFactory.
5. Cost model honestly considered: 1,000, 5,000 and 10,000 employees
According to its FAQ, basebox publishes cloud list prices for up to 20,000 people and ready-made servers for up to 2,000 people; for larger organisations, groups and corporations the vendor quotes the price individually.
The decisive logic behind it: Licence models tied to headcount scale with the number of users and usage – every additional employee increases the licence cost. CompanyGPT’s fixed-price / maintenance model stays independent of that; on top come only token costs at the list price of the cloud provider, with no surcharge by innFactory. As the flagship model for the sovereign setup we position Qwen3-235B on STACKIT AI Model Serving – a quasi-frontier-class OSS model, hosted by Schwarz Digits in German data centres. For routine workloads, GPT-5 mini on Azure extends the stack, and for special cases (long contexts, legal briefs, agentic coding) we switch on demand to GPT-5.6 (in the EU data zone GPT-5.4/5.5), Claude Opus 5 or Gemini 3.7 Flash / Pro – all GDPR-compliant via Azure, AWS and GCP.
Specific CompanyGPT prices are on the product page or available on request; the current basebox tiers and pricing are stated by the provider directly.
Scaling effect: the bigger the organisation, the more a user-independent model pays off. Wherever licence cost is tied to headcount, it grows with every employee. With CompanyGPT only the token cost grows, at the cloud provider’s list price – and frontier models stay available, you only pay for them when you really use them.
6. Does in-house GPU hardware pay off? – A question of utilisation
A question many §203 hospitals and municipalities ask: should we buy our own GPUs to be fully self-contained? Whether in-house GPU hardware pays off depends on utilisation, electricity prices and operating effort; for typical office workloads cloud inference is often more economical – an individual calculation is advisable.
Our recommendation – and the core of the CompanyGPT model:
- STACKIT AI Model Serving as the default, with Qwen3-235B as the flagship, Mistral and Llama for lighter workloads. Made in Germany, Schwarz Digits, GDPR- and §203-ready, pay-per-token at the list price of the cloud provider, with no surcharge by innFactory.
- Hyperscaler fallback on demand: GPT-5 mini for routine workloads, GPT-5.6 (in the EU data zone GPT-5.4/5.5) (Azure), Claude Opus 5 (AWS), Gemini 3.7 Flash / Pro (GCP) for special cases – all in your own tenant, with the §203 add-on agreement at Microsoft.
- On-prem where high utilisation can be expected – e.g. central knowledge services in large insurers or public authorities with sustained high load.
That makes GDPR sovereignty and §203 compliance achievable with a predictable, user-independent fixed-price model – in-house GPU clusters are not strictly required.
Real-world relevance for hospitals of the Schön Kliniken kind, for utilities and municipalities like the City of Rosenheim, and for health insurers in PKV/GKV: the architecture covers §203 StGB without the software licence scaling per employee.
7. CompanyGPT features at a glance
According to the vendor, basebox bundles an app store, custom apps, knowledge bases, connectors and an admin dashboard. This is how CompanyGPT covers comparable requirements:
- App store / pre-built bots → LibreChat agents + companyRAG + n8n workflows, freely combinable.
- No-code app builder → agent builder + n8n editor with hundreds of connectors.
- Questions to documents → companyRAG for knowledge bases + companyFILES for actively creating and editing Office files.
- Translation app → companyTRANSLATE: a standalone GDPR-compliant translation service that replaces DeepL.
- Admin dashboard → companyDASHBOARD with training recommendations.
- API → REST + MCP for in-house tools and external systems.
- SSO → OIDC, Azure AD, LDAP – included in every CompanyGPT setup.
- Working inside the Office applications → native Office add-in from companyM365 for Word, Excel, PowerPoint and Outlook.
8. SharePoint, Office and the native Office add-in
For Microsoft-365-heavy organisations, three features are decisive – and CompanyGPT brings all of them natively:
- SharePoint permission mirroring: companyRAG inherits SharePoint permissions 1:1 in the RAG search – users see only what they are allowed to see anyway.
- Writing Office files: companyFILES generates Excel reports, Word templates and PowerPoints – i.e. actively creating and editing Office files. basebox, too, creates Word, PowerPoint, Excel and PDF files with its document generator, according to its documentation.
- Native Office add-in: the add-in from companyM365 – our MCP server for Microsoft 365 – brings CompanyGPT into Word, Excel, PowerPoint and Outlook as a task pane, technically via Office.js.
Work like with Copilot – using your own CompanyGPT
Draft texts, analyse spreadsheets, build slides or answer emails without leaving the application: the Office add-in mirrors the way of working people know from Microsoft Copilot – but with the models, agents and permissions of your own CompanyGPT.
- Runs natively in Word, Excel, PowerPoint and Outlook.
- No Microsoft Copilot licence per user required – innFactory AI Consulting installs the add-in together with you for your Microsoft 365 users.
- Requests go through your CompanyGPT in your own cloud – GDPR-compliant, with your roles and access rights.
- That keeps work inside Office within the same architecture you already operate – whether that is a §203 setup in your own Azure subscription, STACKIT or on-premise.
A comparable add-in for Word, Excel, PowerPoint and Outlook is not publicly documented for basebox.
9. Extensibility: n8n and MCP
According to the vendor, basebox is extended via MCP-based connectors – from its own library, built by basebox, or as your own MCP server on a basebox server – and via an OpenAI-compatible API. CompanyGPT relies on n8n (hundreds of ready-made connectors) and MCP (Model Context Protocol) for custom connections to SAP, DATEV, hospital information systems, Notion, Jira or proprietary APIs. You host your own MCP servers directly in Kubernetes next to the platform.
10. Training and AI compliance included
According to the vendor, basebox offers bookable training (virtual or on-site, including AI literacy under the EU AI Act) plus contract documents and templates, e.g. for the DPA, TOMs, DPIA and a model works agreement. CompanyGPT includes training by default, and via innFactory AI Consulting we add individualised AI compliance consulting with a specialised lawyer and the training of your AI officer – a major differentiator, especially for §203 and EU AI Act topics.
When is basebox.ai the right choice – and when not?
basebox.ai fits when …
- you want a finished product UI with its own app store,
- the annual licence model is fine for you,
- the cloud token quota fits your needs or you prefer to run your own server without a quota,
- you value a ready-made connector library (incl. SharePoint, Exchange, FHIR) and a server that can run without an internet connection.
CompanyGPT is the better fit when …
- you want a user-independent fixed-price model without buying your own hardware,
- you want to cover §203 StGB with the Microsoft add-on agreement in your own Azure subscription or on STACKIT,
- STACKIT is mandatory or required as an option,
- you want local LLMs and frontier models in parallel,
- you need the native Office add-in for Word, Excel, PowerPoint and Outlook and n8n automation,
- training and lawyer-backed compliance are expected as part of the package.
Conclusion: CompanyGPT as a basebox alternative for regulated companies in Germany
basebox.ai is a solid player in the German “sovereign AI” space. Whether it fits depends mainly on which licence model (cloud per person or server per server) fits your headcount and whether you prefer a finished product platform with an app store — both are best clarified directly with the provider. The larger the organisation, the more a user-independent fixed-price model like CompanyGPT pays off, because our maintenance model stays independent of employee count.
CompanyGPT delivers the same mission (sovereign, secure, German AI for regulated industries) consistently as a partner model of the cloud providers: no per-user licence, with §203 StGB architecture, with STACKIT as the default and Qwen3-235B as the flagship, with on-demand access to GPT-5.6 (in the EU data zone GPT-5.4/5.5), Claude Opus 5 and Gemini 3.5, with Office editing, a native Office add-in for Word, Excel, PowerPoint and Outlook, native SharePoint permission mirroring, n8n and MCP – plus training and lawyer-backed compliance. Hospitals like Schön Kliniken, municipalities like the City of Rosenheim and health insurers find here an architecture with predictable, user-independent cost. Specific prices are on the product page or available on request.
If you are looking for a basebox alternative today – because a user-independent fixed-price model matters to you – CompanyGPT is a solution with a native Office add-in, n8n integration and lawyer-backed compliance, production-ready within a few days.
Note on the information given: All statements about other vendors’ products are based on their publicly available documentation as of the date stated. Vendors continuously develop their products, features and terms — the vendor’s current information is always authoritative. If any statement appears outdated or inaccurate to you, drop us a line at info@innfactory.ai; we will check and correct it promptly. This comparison is not a substitute for legal or data protection advice in an individual case.
Further reading
- CompanyGPT vs. Langdock – comparison against the Berlin-based SaaS provider
- CompanyGPT vs. Telekom Business GPT – comparison against the German telco AI stack
- CompanyGPT vs. Neuland.ai – another alternative from the German market
- companyTRANSLATE: DeepL alternative for enterprises – GDPR-compliant translation service
- LibreChat vs. Open WebUI vs. Copilot – open-source platforms compared
