Security & Compliance

1. Infrastructure and Encryption

We apply measures such as encryption in transit and at rest, access control, multi-factor authentication, and retention policies, according to the architecture and specific requirements of each project.

2. Access Control

In the solutions we design, we aim to implement the principle of least privilege and robust authentication mechanisms. Access to client data is managed according to the service level agreements established with each partner.

3. Artificial Intelligence and Data

We DO NOT use your confidential data to train our foundational models in closed architectures. Data processed through our agents and automations is used strictly to provide the service to your company, applying data isolation (tenant isolation) when the project infrastructure so requires.

4. Data Retention and Backups

Backup routines and data retention operate for the period strictly necessary or agreed upon with the client, aligned with the secure deletion policies of the contracted plan.

5. Partners and Subprocessors

We work with technology providers who make data processing commitments (DPA) focused on security and privacy, actively seeking to ensure data is not misused and that retention is controlled in accordance with European standards.