Legal notice and company information
Publisher identity, digital scope and reliance conditions.
Context · Trust Center
Security and compliance governed with clarity.
Twenty-four public instruments govern corporate, contractual, privacy, security and artificial-intelligence matters, distinguishing responsibilities, duties and evidence.
Public library
Documents in force
Each PDF carries an effective date, document code and SHA-256 digest. Confidential evidence is disclosed only through a controlled procedure.
Website and contact-form privacy notice
Processing of data on the commercial site and in contact forms.
Product privacy notice and GDPR roles
Roles, data categories and GDPR responsibilities in the service.
Extended notice on cookies and other tracking technologies
Storage technologies and the distinction between website and application.
General terms of service and acceptable use policy
Public rules for access, responsibility and permitted use.
Legal and functional description of the service
Intended use, audience, capabilities, dependencies and limitations.
Personal Data Processing Addendum — DPA
Framework processing terms on behalf of the customer.
Subprocessor, location and transfer register
Material suppliers, functions and controls before engagement.
Security, architecture and technical-organisational measures overview
Architecture, shared responsibility and verifiable measures.
Infrastructure and hosting statement
Hosting scopes and separation of provider capabilities from Niltech controls.
Retention, deletion, rights and complaints
Retention, deletion and rights-management criteria.
Incident response and vulnerability disclosure summary
Channels, triage, communication and responsible disclosure.
Responsible artificial intelligence policy and AI Act transparency
Intended use, transparency, literacy and governance of AI outputs.
AI system card and legal-operational risk assessment
System, hazards, controls, residual risk and review criteria.
Human oversight statement
Actual review, override, escalation and suspension points.
Data protection impact assessment summary
Structured assessment of necessity, proportionality, risks and mitigations.
Portability, export, deletion and exit
Formats, exit assistance, deletion and dependencies.
DORA-oriented ICT supplier information sheet
Information for ICT due diligence by DORA-regulated customers.
Business continuity, backup and disaster recovery
Continuity governance without unproven targets or capabilities.
Software lifecycle security, vulnerabilities and updates
Development lifecycle, dependency management and vulnerability remediation.
Accessibility statement
Commitment, status, feedback channel and known limitations.
ESG statement and methodology
Evidence-based ESG approach with stated boundaries and methodology.
Service levels, support and maintenance terms
Channels, maintenance, dependencies and conditions for agreed levels.
Regulatory applicability and compliance-controls matrix
Dated matrix of applicability, responsibilities and required evidence.
Request the security pack
Full DPIA and ROPA, data flows, AI registers, technical and organisational measures, supplier files, incident, backup and data-rights procedures, SBOM, access reviews and ESG evidence are disclosed to authorised parties on a need-to-know basis and, where appropriate, under confidentiality terms.