Data protection
The procedures connect data use to its purposes, responsibilities and client instructions. They cover retention, data requests, export and service exit.
Andrea AI · Our approach
Security & compliance
A shared method, tailored to your context.
Andrea AI is a product of Niltech Europe S.r.l. Our approach to security, data protection and responsible artificial intelligence follows the Niltech procedural framework, taking account of the features enabled and the context in which the service is used.
Explore our approachFrom principles to service
Six areas, one shared approach.
Responsibilities, processes and technical choices guide the use of Andrea AI in relation to the data processed and the agreements with each client.
Access and security
The security process covers authorisations, data separation, configuration and access reviews. Permissions are defined in relation to roles and the scope of the Andrea AI service.
AI and human oversight
AI features are considered in their context of use: data, risks, limitations and how results are used. The procedures provide for output review and decisions by the people responsible for the process.
Development and updates
The procedures guide software changes from impact assessment to checks before release. They cover external components, vulnerabilities and corrective action.
Suppliers and responsibilities
The company framework provides for assessing suppliers, data access, agreements and relevant transfers. The scope is defined for the features and services actually used.
Continuity and incidents
The procedures organise reporting, incident response, backups and recovery. Priorities, responsibilities and recovery objectives are defined in relation to the service and client agreements.
A shared company framework, applied to the configurations, features and conditions of the Andrea AI service.
Understanding the approach
The essential questions.
How this approach relates to the use of Andrea AI in your organisation.
Who reviews AI results?
The procedures provide for assisted outputs to be examined by the people responsible for the process. A review may lead to using, correcting or rejecting a result, depending on the feature and professional context.
Where is data processed and how long is it retained?
This depends on the Andrea AI configuration, the suppliers involved and the service relationship. Locations, flows and retention criteria are specified in the documentation relevant to the service and processing activity.
How are compliance requirements addressed?
The process starts with the actual use of Andrea AI: who uses it, for what purpose, with which data and responsibilities. Relevant requirements are connected to the technical, organisational and contractual activities of the service.
Is the approach the same for every configuration?
The starting point is the Niltech procedural framework. Its application depends on the enabled features, infrastructure, data and client agreements. Operational information therefore relates to the service actually used.
Let’s talk
Let’s explore your context.
Want to assess data, security, AI features or service continuity for Andrea AI? Tell us what your organisation needs, so we can identify the information relevant to your request.