Andrea AI · Our approach
Privacy, data and artificial intelligence. A European commitment.
Niltech Europe develops Andrea AI in accordance with the European requirements applicable to personal data protection and artificial intelligence. The GDPR and AI Act guide an approach that integrates privacy, security and human oversight from the design stage. For Andrea AI, this means supporting document analysis and insurance workflows with defined responsibilities and professional oversight.
Explore our approachFrom principles to service
Responsibilities, processes and technical choices guide the use of Andrea AI in relation to the data processed and the agreements with each client.
Defined purposes, data minimisation and confidentiality guide data processing. Procedures cover roles and responsibilities, retention criteria and requests for access, correction, export and erasure, according to the service and applicable obligations.
The security process covers authorisations, data separation, configuration and access reviews. Permissions are defined in relation to roles and the scope of the Andrea AI service.
Our approach to the AI Act considers intended use, risks and the obligations applicable to enabled features. Transparency about limitations, verification of results and human oversight support the use of AI. Andrea AI summaries and guidance support operators; case assessments and decisions remain with the responsible professionals.
The procedures guide software changes from impact assessment to checks before release. They cover external components, vulnerabilities and corrective action.
Supplier management includes assessing services, responsibilities and data access. Any transfers outside the European Economic Area are assessed within the GDPR safeguards framework, according to the configuration in use.
The procedures organise reporting, incident response, backups and recovery. Priorities, responsibilities and recovery objectives are defined in relation to the service and client agreements.
Compliance evolves with the service: requirements, risks and safeguards are reviewed in relation to features, the context of use and regulatory developments.
Understanding the approach
How this approach relates to the use of Andrea AI in your organisation.
The procedures provide for assisted outputs to be examined by the people responsible for the process. A review may lead to using, correcting or rejecting a result, depending on the feature and professional context.
This depends on the Andrea AI configuration, the suppliers involved and the service relationship. Locations, flows and retention criteria are specified in the documentation relevant to the service and processing activity.
The GDPR for personal data protection and the AI Act for artificial intelligence, together with other requirements relevant to the service. Their application considers purposes, roles, risk level and statutory timelines. These criteria guide Niltech Europe’s technical, organisational and contractual procedures.
The starting point is the Niltech procedural framework. Its application depends on the enabled features, infrastructure, data and client agreements. Operational information therefore relates to the service actually used.
Let’s talk
Want to assess data, security, AI features or service continuity for Andrea AI? Tell us what your organisation needs, so we can identify the information relevant to your request.