02 · AI & development

Custom applications with AI integrated securely.

We build web, mobile and SaaS software and integrate AI into existing systems with privacy, isolation and compliance as requirements, not options. Your partner for fully custom, AI-ready applications, in Spain and worldwide.

Let's plan →See the six areas

Barcelona · 41.39° N, 2.17° E · Spain · Europe · Global

Client owns the codeNo lock-in to us or to closed platforms.

Data in the EU by defaultNo client data trains third-party models.

Offensive review before deliverySecurity review included, as described under cybersecurity.

What we build

Six areas, one standard

Every project includes a risk analysis, an impact assessment where required and a security review before delivery. Scope and budget are agreed in writing before we start.

Custom web and mobile applications

Complete product, from architecture to store publication and operation. Modern stack, client-owned code, privacy by design.

For companies that need their own application, a client portal or a digital product that standard solutions do not fit.

What is included

Architecture, product design and web (SPA, SSR) and mobile (iOS, Android) development
Authentication, access control and activity logging from the design stage
Integration with ERP, CRM, payment gateways and external services
Deployment, monitoring and ongoing maintenance
Technical documentation and knowledge transfer

What is not included

Brand graphic design, coordinated with your agency
Content and copywriting

We build software the way attackers would try to break it, and every delivery is reviewed offensively before it ships.

Secure AI integration into existing systems

Assistants, agents and automations connected to your ERP, CRM, catalogue or support through a gateway with minimal permissions, traceability and isolated data.

For organisations that want to use AI on systems that already work, without exposing data or giving up control.

What is included

Model and provider selection, or deployment of your own models in the EU
AI gateway with permission control, limits and a log of every action
RAG over internal documentation with per-user and per-client isolation
Agent risk assessment: prompt injection, data leakage, excessive scope
AI Act documentation where the system requires it

What is not included

Training of foundation models
Research projects without a business objective

The gateway is built on what our agent audits uncover: every weakness we find in the field becomes a design rule here.

EdTech — Online learning and LMS

Custom integrations and plugins for LMS platforms, LTI, learning analytics and AI assistants for training, with student-data protection and compliance for public and private institutions.

For schools, corporate universities and training companies that need to adapt the platform to their method.

What is included

Custom plugins and developments for LMS platforms
LTI, SSO and academic management system integrations
AI assistants for tutoring and assessment, with human supervision
Learning analytics with data minimisation
EU hosting and public-sector compliance requirements

What is not included

Creation of training content

Student data, and minors' data in particular, is handled with the GDPR's reinforced safeguards.

SaaS and cloud applications

Multi-client platforms with strict per-tenant isolation, hosted in the EU and ready for your clients' security questionnaires and audits.

For companies turning a process or product into a service that need to scale without compromising security or compliance.

What is included

Multi-tenant architecture with separated data, keys and environments
Infrastructure as code, backups, high availability and observability
Billing, subscriptions and client administration
Compliance: GDPR, preparation for DORA and CRA
Vulnerability and patch management as part of the service

What is not included

24/7 SOC operation, integrated with a specialised provider

Tenant isolation proven by offensive testing, not promised on a slide.

AI chat & voice bots

Customer service and sales via messengers such as WhatsApp or Telegram, with AI assistants connected to your catalogue and systems, configured not to retain or train on your customers' data. Voice AI is improving in quality and naturalness at remarkable speed: we advise you today on the options available to integrate it.

For retailers, service businesses and brands with conversation volume and the need to answer in several languages and time zones.

What is included

Onboarding and verification on the Meta platform as a certified technology partner
Conversation design, human hand-off and opening hours
Connection to catalogue, orders, bookings and CRM
GDPR compliance: information, consent and conversation retention
Resolution and quality metrics

What is not included

Advertising campaigns and ad management

Certified by Meta as a Business Technology Partner: official integration, not an intermediary.

Digital distribution systems

Integration of catalogues, licences, payments and digital delivery with international platforms and marketplaces, with reconciliation and traceability of every transaction.

For publishers, distributors and brands selling digital products across markets and currencies.

What is included

Integration with marketplaces and distribution platforms
Key, licence and digital delivery management
Payment gateways, currencies, taxes and reconciliation
Fraud and coupon-abuse protection
Reporting by market and channel

What is not included

Commercial negotiation with the platforms

First-hand experience in international digital distribution since 2010.

How we make it secure

Four commitments in every project

They are not budget options: they are part of the build.

Data	Minimisation, encryption in transit and at rest, EU residency by default; no client data trains third-party models.
Isolation	Environments, keys and AI contexts separated per client and per tenant; agents with minimal scope and credential review.
Compliance	GDPR by design, AI Act documentation where applicable, preparation for DORA and CRA.
Verification	Every delivery goes through the same pentesting and agent audit we offer in cybersecurity.

Next step

Tell us what you want to build

In an initial thirty-minute call we review the goal, the systems involved and the regulatory framework, and propose scope, team and schedule in writing.

→

When you write to us, we process your contact details only to handle your request, as set out in our privacy policy.

Scope: Spain, Europe and international, remote
Languages: Spanish, Catalan, English, German
Ownership: The code and the data belong to you
Data: Hosted in the EU; NDA signed before any information is received