Your data, protected in every AI project
Connecting AI to your company’s data requires guarantees. This is how we protect your information by design, during the project and when it ends.
- GDPR compliant
- EU AI Act
- Your data is yours
Security by design, not as an add-on
We apply these principles in every solution we build.
Only the data needed
Each solution accesses only the information essential to its function, nothing more.
Permission-based access
You decide who can query what, with the least privilege necessary.
Encrypted connections
Information travels encrypted between your systems and the solution.
Trusted AI providers
We choose and configure business-grade AI services that do not use your data to train their models.
Everything in writing
We sign a data processing agreement under the GDPR and, if you need one, a confidentiality agreement.
Human oversight
For important decisions, a person reviews what the AI proposes.
Protection throughout the project lifecycle
Security doesn’t end when we deliver the solution.
- 01
Diagnosis
We identify which data is involved, how sensitive it is and which regulations apply.
- 02
Strategy
We design the architecture with the necessary access controls and protection. This is when we prepare the quote.
- 03
Development
We build and test with test data whenever possible, with access limited to the project team.
- 04
Evolution
We review access and security updates during maintenance. When the project ends, we return your data and delete our copies.
Regulation, built into every solution
We design every project in line with the GDPR and the EU AI Act, and take NIS2 and DORA into account when your sector requires it. We also offer this same expertise as a service through Legal Tech.
Frequently asked questions
Do you use my data to train AI models?
No. We configure AI services in business mode, which does not use your data to train their models, and your data is only used to run your solution.
Where is my data stored?
Whenever the project allows, we choose services hosted in the European Union. We tell you in writing where your solution’s data is hosted before we start.
Who has access to my information?
Only the team members working on your project, and only to what is necessary. In the final solution, you set each user’s permissions.
Do you sign a confidentiality agreement?
Yes. In addition to the data processing agreement required by the GDPR, we sign a confidentiality agreement when you need one.
What happens to my data when the project ends?
It is yours. We return it in a usable format and delete any copies we hold, except those the law requires us to keep.
And what if there were a security incident?
We would notify you without delay and help you manage it, including notifying the data protection authority within the 72 hours set by the GDPR where applicable.
Learn more
Questions about the security of your project?
Tell us which data you want to connect and we will explain how we would protect it. Reply in under 24 hours.
Talk to a specialist →