Àlex GuardiolaNewAsk your documents

How I handle security

What I do before touching your data and your systems. The proof is at the end of the page.

Your data stays where you decide

Before automating anything, I ask where your data has to live. There are three options and we choose together:

  • Inside your Microsoft 365

    If you already pay for it, the flows run in your own tenant. The data never leaves your account.

  • On a server in your name, in the EU

    If you don't have Microsoft 365, I set it up on a server you contract yourselves. If we ever stop working together, everything is still yours.

  • In your office

    For health or payroll data, a local machine with an AI model that never leaves it.

The AI makes nothing up that it can't prove

  • Every value the AI extracts comes with the exact sentence of the document it came from, and the code checks that the sentence exists. If it doesn't, the value is dropped.
  • Amounts, hours and prices are never set by the AI: a program with fixed rules calculates them.
  • A document or a message may try to give orders ("ignore your instructions..."). That is treated as text, never as an order, and I test it before delivery.
  • Whatever the AI can't answer with confidence goes to a person.

Read-only by default

The systems I connect to your software start with read-only permissions. Any action that changes something (sending, deleting, paying) needs a person's approval. That's how my own systems work: my voice assistant can look everything up and can't change anything until I confirm it on my phone.

The basics, always

  • A data processing agreement (GDPR) before touching any data.
  • Dedicated service accounts with minimal permissions.
  • Passwords and keys in a secrets manager, never in the code.
  • Logs without personal data.
  • Backups with a tested restore.
  • A spending cap on AI services.
  • An independent review before delivery.

If we record a meeting

Only with your permission, stated at the start. The transcription runs on my own machine, with no cloud services, and the audio is deleted as soon as it's transcribed.

Proof

Every point on this page comes from something that already works:

A security question that isn't covered here? Write to me