Legal notice and company information
Publisher identity, digital scope and reliance conditions.
Trust center
Documented security and compliance.
The catalogue contains 24 public documents in Italian and English. It governs corporate, contractual, privacy, security and artificial-intelligence matters, distinguishing responsibilities, duties and evidence.
Evidence standardTerms such as certified, encrypted at rest, uptime, RTO, RPO, or EU-only processing are not used unless current contractual and technical evidence supports them.
Public library
Policies and supplier information
Each document is available in HTML and PDF, with a document code, effective date and SHA-256 digest. The Italian text controls.
Website and contact-form privacy notice
Processing of data on the commercial site and in contact forms.
Product privacy notice and GDPR roles
Roles, data categories and GDPR responsibilities in the service.
Extended notice on cookies and other tracking technologies
Storage technologies and the distinction between website and application.
General terms of service and acceptable use policy
Public rules for access, responsibility and permitted use.
Legal and functional description of the service
Intended use, audience, capabilities, dependencies and limitations.
Personal Data Processing Addendum — DPA
Framework processing terms on behalf of the customer.
Subprocessor, location and transfer register
Material suppliers, functions and controls before engagement.
Security, architecture and technical-organisational measures overview
Architecture, shared responsibility and verifiable measures.
Infrastructure and hosting statement
Hosting scopes and separation of provider capabilities from Niltech controls.
Retention, deletion, rights and complaints
Retention, deletion and rights-management criteria.
Incident response and vulnerability disclosure summary
Channels, triage, communication and responsible disclosure.
Responsible artificial intelligence policy and AI Act transparency
Intended use, transparency, literacy and governance of AI outputs.
AI system card and legal-operational risk assessment
System, hazards, controls, residual risk and review criteria.
Human oversight statement
Actual review, override, escalation and suspension points.
Data protection impact assessment summary
Structured assessment of necessity, proportionality, risks and mitigations.
Portability, export, deletion and exit
Formats, exit assistance, deletion and dependencies.
DORA-oriented ICT supplier information sheet
Information for ICT due diligence by DORA-regulated customers.
Business continuity, backup and disaster recovery
Continuity governance without unproven targets or capabilities.
Software lifecycle security, vulnerabilities and updates
Development lifecycle, dependency management and vulnerability remediation.
Accessibility statement
Commitment, status, feedback channel and known limitations.
ESG statement and methodology
Evidence-based ESG approach with stated boundaries and methodology.
Service levels, support and maintenance terms
Channels, maintenance, dependencies and conditions for agreed levels.
Regulatory applicability and compliance-controls matrix
Dated matrix of applicability, responsibilities and required evidence.
Controlled evidence
Request the security pack
Authorized prospects and customers can request sensitive assurance evidence. Access is reviewed and may require confidentiality terms.