Two-step verification
MFA by role
Code app, key or fingerprint, or a code by WhatsApp and email. It can be mandatory, optional or disabled depending on the role, with recovery codes and trusted devices.
Security and compliance
Security for your data and tools to comply with the law
What we do to protect access to your information and which tools the platform includes to comply with European regulations. Your data is on our servers in Europe or, if you prefer, on your premises.
Access and data
Who gets in, from where and what they do
Several layers so that only the right people get in.
Verification by country
Alert if something looks odd
If you log in for the first time from a new browser or another country, it asks for a 6-digit code and flags logins from abroad.
Backups
Automatic backups
Of the database, locally, by SFTP or on Amazon S3, as often as you choose. Restores are validated.
Log
Who did what
It records who opened, exported or changed another person's data, with IP and country. The same goes for security scans launched by ADRI.
Monitoring
Nightly review
Every night the system logs are reviewed and tickets are created if something fails.
Europe
Cloud, premises or hybrid
Your data on our servers in Europe, on a server in your office with our AI, or everything on your premises with a dedicated AI machine. The AI models are open source.
Roles and permissions
12 roles, and each person sees only their own
Permissions are very fine-grained. The 12 factory roles cannot be edited, but you can clone them and adjust the copy.
- Less is more: each person receives only the permissions they need.
- Two functions, two roles: whoever does two jobs receives two roles.
super-adminadminmanagerrrhhcommercialofficeaccountantemployeecustomerex-employeecompliance officerworker representative
Compliance
Tools to comply with the regulations
The platform includes what you need to work within the law. Compliance remains each company's responsibility, and we make it easy for you.
| Regulation | What is included |
|---|---|
| EU AI Act | Literacy documents (art. 4), notice to the works council (art. 26.7) and impact assessment (GDPR art. 35) already filled in. 19 types of legal notice per module, AI-content labelling (art. 50) and ADRI's Phone says it is an AI. CV screening is treated as high-risk and call analysis does not diagnose emotions. |
| GDPR | Unsubscribe link in commercial messages and a record of what is sent, export of conversations (arts. 15 and 22), 6-month candidate consent with renewal and a log of access to sensitive data. |
| VeriFactu (Royal Decree 1007/2023) | Invoicing is ready for VeriFactu: chained SHA-256 fingerprint, registration XML, verification QR code and event log. An issued invoice is locked. |
| eIDAS | Reinforced simple electronic signature (arts. 3 and 25), with an evidence page and SHA-256 fingerprint. |
| Law 2/2023 (whistleblower protection) | Whistleblowing channel for reports. |
| LSSI (Spanish e-commerce and electronic communications law) | Legal notice in sales prospecting: responsibility for sending lies with whoever configures it. |
| Workers' Statute (Spain) | Acknowledgement of receipt of the payslip (art. 29). |
| Pay and equality | Pay register (RD 902/2020), pay transparency (EU Directive 2023/970) and equality plan (RD 901/2020). |
Transparency
What ADRI does and what it does not
We tell you plainly.
AI customer service
Switched off by default
You turn on automatic replies to customers and tickets whenever you want.
Markets
Information, not advice
Market analysis is not financial advice.
Vision
On demand
It is not video surveillance and does not identify people.
Prospecting
You decide and you answer for it
The legal notice makes clear that the user is responsible for what is sent.
No platform can promise zero risk. That is why we combine several layers of protection, a record of what happens and backups so you can recover your data.
Let's talk
Does your sector have specific requirements? Tell us about them
We go through with you what you need to comply with and how the platform covers it.