Stays on your infrastructure
The recording agent and its analysis run inside your own environment. Raw activity is not shipped to third-party clouds; only the aggregated insights you approve leave the machine.
Security & privacy
Your data stays yours
Process intelligence shouldn't cost you control. Here's exactly what Espai.AI captures, where it lives, and how you stay in charge of it.
The short version
Recordings are processed on your own infrastructure, are read only by the AI (never by our staff), and can be paused, scoped or deleted by you at any time. We build for GDPR compliance and offer a Data Processing Agreement.
Never seen by humans
Only the AI reads the raw recordings, and only to build your automations. No one on our team browses your screens. We'd ask for explicit permission before any other use.
Encrypted & access-controlled
Data is encrypted in transit and at rest. Access is limited to the automated pipeline, with the principle of least privilege applied to every component.
You control retention
You decide how long recordings are kept and can request deletion at any time. Pause or stop recording whenever you like — no lock-in, no long-term contract.
What is captured — and what leaves the machine
Espai.AI records system events and user actions across the applications your team uses, so the AI can reconstruct how work actually happens. That raw activity is processed locally. What leaves the machine is limited to the analysis — the workflow map, the ranked inefficiencies and the automations we build with you.
GDPR & lawful basis
The platform is designed for EU data-protection requirements, with data minimization at its core: we capture what's needed to identify and automate repetitive work, and nothing more. As your data processor we make a Data Processing Agreement (DPA) available, and we support your obligations around access, deletion, portability and objection. The typical lawful basis is the legitimate interest of improving business processes, balanced with transparency to the people involved — we're happy to help you document it.
Transparency & controls
- Scope which devices, teams and applications are recorded.
- Pause or stop recording instantly, at any time.
- Request export or deletion of stored recordings.
- Review the insights before any automation is built or deployed.
Sub-processors
We keep the number of sub-processors to a minimum and will share the current list on request. This website itself uses no tracking cookies and no third-party analytics — see our Privacy Policy for details.
Questions from your security team?
We're glad to walk security, IT and legal reviewers through the architecture, complete a questionnaire, or sign a DPA. Get in touch and we'll set up a call.