Security

On your servers or on ours. You decide.

We adapt to each company’s technology and security policy. Security is not a project phase: it is a design requirement from the first conversation.

Nine principles. No exceptions.

You choose where

On your servers or your cloud, under your rules, or on our infrastructure, where we host, operate and monitor the solution.

Least privilege

We only access what each process needs, with named accounts and permissions you can review and revoke.

AI in private environments

We use models through enterprise services that do not train on your data, preferably within the European Union.

GDPR by design

Data minimisation, a clear legal basis, records of processing and a data processing agreement where applicable.

Traceability

Every automated action is logged: what was done, when and with which data. Nothing happens without a trace.

Testing with your team

We install and test the solution with you until it does exactly what was asked, before go-live.

Complete documentation

Architecture, workflows, access and procedures, documented and handed over with every phase.

Continuous monitoring

We monitor systems in operation and act before a problem affects your operations.

Confidentiality

From the very first conversation, with a written non-disclosure agreement whenever you need one.

Two options. The same standards.

Choose according to your company’s policy. The level of security is the same in both cases.

On your infrastructure

  • We install everything on your servers or your cloud
  • Your data and systems stay in-house
  • We work under your access and security rules

On ours

  • We host, operate and monitor the solution
  • You simply use it, with no servers to worry about
  • We handle backups, updates and monitoring

Questions about security.

Do you send our data to consumer AI tools?

No. We use models through enterprise services whose terms prevent your data from being used for training, and always with your prior approval.

Where is the data processed?

Wherever you decide: on your infrastructure or on ours. When an external service is needed, we choose providers with data centres in the European Union, document it and ask for your approval.

How do you comply with GDPR?

We apply data protection by design: we process only the data needed, document every processing activity and sign the appropriate data processing agreement.

Can we audit what the system does?

Yes. The activity logs and the documentation are available to you to review or audit at any time.

Let’s talk about your processes.

A first conversation to get to know your company and see where we can help.