ISO 9001 · ISO/IEC 27001 · ENS MEDIUM category · CVE Numbering Authority

Artificial intelligence

Safe and responsible artificial intelligence

We use AI in our products and in our work to save time and gain clarity, never to replace human judgement. And we do so under a safe-use policy built into our security management system, certified under the ENS MEDIUM category and ISO/IEC 27001.

Approach

AI proposes, people decide

Artificial intelligence is used in specific tasks where it adds value: drafting a clear report from the technician's notes, summarising statistics or spotting gaps in an inventory. In all of them, a person has the final say.

  • Supporting functions that do not make decisions about people.
  • AI-generated content is labelled and reviewed before use.
  • Generative AI risks included in our risk analysis.
  • Anyone who uses AI understands its risks and limitations.

In our products

Where AI works

Real features, in use with our clients, that save work without taking away control.

Preventive maintenance calendar in the ATISoluciones CMMS

CMMS and technicians' app

The technician writes in their own words and the AI suggests a clear report for the client, which the technician accepts or discards; the original is always kept. It also suggests a fault diagnosis by make and model, reviews the quality of the fire protection inventory and comments on the monitoring indicators.

  • Report writing
  • Fault diagnosis
  • Fire protection inventory
  • Indicators
Find out more
ACAE: Coordination of business activities

ACAE

Managers can request a summary of the job and safety form statistics, which appears on screen labelled as AI-generated analysis.

  • Statistics analysis
  • On request
Find out more
SICAD: Occupancy control

SICAD

Cameras with embedded computer vision count people entering and leaving at entrances, without turnstiles, to show the occupancy of each building and room in real time.

  • Computer vision
  • Counting at entrances
Find out more
Hands typing on a laptop on a wooden table

Custom software

We integrate generative AI into business processes through a layer that lets you switch provider: proposing objectives and indicators, suggesting the scope of a contract from the tender specifications while citing the text that supports it, or preparing surveys.

  • Generative AI
  • No provider lock-in
Find out more

Principles

How we build AI into a product

People decide

The AI proposes and a person reviews, accepts or discards. It is never the sole source of any critical decision.

Always labelled

In the application, AI-generated content is distinguished from what a person writes.

Only the information needed

The AI receives the context the task requires, and never passwords, keys or other secrets.

Assessed providers

We only use AI services that have been authorised after assessment within our security management system.

Can be disabled by contract

If your contract or tender specifications require it, AI features are not used in your service.

Incidents under control

Any improper sending of information or manipulation of instructions is handled as a security incident.

In development

AI-assisted code, reviewed by people

Our developers use authorised AI assistants to write, review and document code. What they propose goes through the same path as any other change.

  • All AI-generated code is reviewed by a developer before it is merged.
  • Nothing generated by AI goes straight into production.
  • It goes through the same security scans: SAST, dependency scanning and dynamic testing.
  • Responsibility for the software lies with the team, not with the tool.

Assistants configured by the organisation

On workstations, the AI assistants' configuration is enforced by the organisation and users cannot change it: for example, features that would send an entire conversation to the provider are disabled.

Safe-use policy

The rules we follow with AI

The use of AI is governed by a dedicated procedure within our information security management system, which applies to staff, collaborators and suppliers who use AI on behalf of ATISoluciones.

  • Authorised tools. Only those included in our inventory, assessed before use; any other tool is prohibited.
  • Minimum information. Only what is strictly necessary for the task is entered.
  • Review of results. Accuracy, the absence of errors and vulnerabilities, and legal compliance are checked before anything is used.
  • Corporate accounts. Personal, protected and never shared.
  • Training. Anyone who uses AI knows its risks, its limitations and good practice.
  • Periodic review. The policy is updated whenever tools, risks or legal requirements change.

Frequently asked questions

Questions about AI in our services

Do you use data from my installations to train AI models?

No. We do not train models with client data, and the AI services we integrate are contracted on enterprise API terms, which do not allow the provider to use that data to train its models.

Can I ask for AI not to be used in my service?

Yes. AI features are an aid, not a requirement: if your contract or tender specifications require it, they are not used in your service and the work is done without them.

Which AI providers do you use?

External providers assessed and authorised within our information security management system. If your procurement requires it, we will tell you which provider is involved, what information it receives and with what safeguards.

How does this fit with the EU Artificial Intelligence Act?

Our AI features are supporting functions (drafting, summarising, analysing and counting) and do not make decisions about people. We apply the obligations on staff AI literacy and on transparency: generated content is labelled as such and is always reviewed by a person.

Is the code in your applications written by AI?

We use AI as a development assistant, but all code is reviewed by a developer before it is merged and goes through the same security scans as everything else, within our secure development process. Responsibility for the software lies with our team, not with the tool.

Do you want to bring AI into your processes with full safeguards?

We help you integrate it into your applications with human review, assessed providers and the security of an ENS-certified management system.