Log inFree trial

AI and data security, without giving away your know-how

With Neurally, AI security never takes a back seat. The system runs on servers in Italy and the company is ISO/IEC 27001 certified. Your company’s data stays private and is never used to train AI models.

Start your free trialRequest a demo
7-day free trialNo credit card required
  • Information security certified to ISO/IEC 27001
  • Transparency required by the AI Act, already in the product

From your repository to the answer. Neurally, step by step

What happens to your documents when you connect them to Neurally, query them and disconnect them?

Step 1 · Connection

You connect a repository, read-only.

Neurally only reads: it doesn’t change, move or delete anything in your repositories. And it does nothing until you choose the folders to add to a knowledge base.

What it guarantees
  • Read-only on every connected repository
  • Only the folders you choose
  • Connection tested before it is saved

Everyone sees only what they have access to.

AI security starts with permissions. Each knowledge base is shared with people, teams or the whole company, read-only or with edit rights, and Neurally answers each person using only the documents they can access.

See it through the eyes of
Supplier contracts128 documents · shared with Purchasing teamCan edit
Equipment manuals342 documents · shared with Production team, whole company (read-only)Can read
Financial statements and budgets56 documents · shared with ManagementNo access
Internal procedures41 documents · shared with whole company (read-only)Can read

Paola edits her team’s contracts and reads what is shared with the whole company. She can’t see the financial statements: she can’t choose them in a conversation. Sample data.

Start your free trial7-day free trialNo credit card required

Who gets in, what they do and what gets logged

With Neurally, your accounts and sessions are always protected.

Accounts and access

  • Strong passwords

    8 characters, with upper and lower case letters, numbers and symbols.

  • Verified email

    At sign-up.

  • Sessions under control

    Active sessions can be viewed and revoked.

  • Expiring invitations

    Each invitation carries its role and team.

  • API keys

    With an expiry date, and can be deactivated.

  • Sign-in with SSO / SAML

    User provisioning with SCIM.

Data and governance

  • Data in Italy

    Data and infrastructure stay in Italy.

  • No training

    Your data does not train AI models.

  • Audit log

    Who, what, when and from which IP.

  • Content moderation

    Optional.

  • DPA

    On request.

The AI Act, deadline by deadline. Transparency is already in the product.

At Neurally, AI security, transparency, content labelling and traceability have been built into the product from the start. Here are the EU AI Act deadlines that affect companies, and what you already find in Neurally today.

  1. 2 February 2025In force

    Training and first bans

    Companies that use AI must train their staff to use it in an informed way. Some uses of AI become prohibited.
  2. 2 August 2026In force

    General rules and transparency

    Most of the rules apply, including those on transparency towards people who use AI.
  3. 2 December 2026Upcoming

    New bans

    Some transition periods end and further restrictions on prohibited practices are added.
  4. 2 December 2027Upcoming

    High-risk AI

    Obligations for high-risk AI systems, used in sensitive areas such as recruitment.
  5. 2 August 2028Upcoming

    AI in regulated products

    Obligations for AI built into products already subject to EU safety rules, such as machinery.
Dates from Regulation (EU) 2024/1689 on artificial intelligence. Read more: “The AI Act in 2026: what is changing for companies”.

  • Transparency

    While it works, Neurally shows its reasoning and instructions step by step.

  • Traceability

    Every answer cites the document and opens the passage it comes from.

  • Human oversight

    Decisions stay with people: every answer can be checked against its source, and Neurally reminds you that AI can make mistakes.

  • Approved AI

    A single AI system governed by the company, instead of public chatbots used with personal accounts.
Learn about the regulation

Find out how to put your company knowledge to work, securely

Request a demo

ISO 27001 and GDPR, point by point.

What each standard requires and how Neurally meets it: with certifications, internal rules and product features.

ISO/IEC 27001

A certified management system, not a promise.

Neurally is ISO/IEC 27001 certified. Its management system covers the design, development and support of software solutions, including artificial intelligence solutions, and rests on five principles: confidentiality, integrity, availability, control and privacy.

What it requiresHow Neurally meets it
Know your informationNeurally assesses the criticality of the information it handles case by case, to protect it at the right level.
Protect accessOnly authorised people can access information. The offices and premises are also restricted to authorised staff.
Manage incidents and continuityAnomalies, incidents and vulnerabilities are detected promptly and dealt with, to ensure service continuity.
Involve people and suppliersStaff and third parties are trained in security and follow the same rules. Partners are chosen from reliable providers.
Comply with laws and contractsNeurally complies with the law, the security commitments made in its contracts and the GDPR, both as data controller and as data processor.
Improve over timeThe policy is reviewed every year as part of the management review, and senior management regularly checks its effectiveness.
GDPR

Personal data handled under clear rules.

Neurally applies privacy by design and by default, as its information security policy requires. The data controller is Neurally S.r.l.; the data protection officer is the lawyer Francesca Fumana.

What it requiresHow Neurally meets it
Use data only for the stated purposeDocuments are used to answer people who have access to the knowledge base that contains them. They are not used to train AI models.
Protect confidentialityEach knowledge base is shared with the people or teams you choose, read-only or with edit rights. From the Company plan, the audit log records who did what.
Know where data is storedData and infrastructure in Italy, and therefore in the EU, on every plan.
Uphold data subjects’ rightsAccess, rectification, erasure, restriction, portability and objection (Articles 15–22), as set out in the privacy policy.
Govern data processorsList of processors (Article 28) on request. DPA on request, with the Custom plan.
Inform people who use the serviceThe privacy policy is accepted at sign-up; marketing consent is optional.
Stop processing when requiredIf you delete a knowledge base, its documents drop out of answers; if you disconnect a repository, Neurally stops updating it. After deletion, indexed data is kept for 7 days and then permanently erased.

Frequently asked questions

The most common questions about AI security: data, certifications and the AI Act. Can’t find the answer? Contact us.

Are my company’s documents used to train AI models?

No. Customers’ company data and information stay private and are not used to train AI models. Neurally reads documents only to answer people who have access to the knowledge base that contains them, and always cites the source of every answer.

Is Neurally ISO/IEC 27001 certified?

Yes. Neurally operates an information security management system certified to ISO/IEC 27001 and an ISO 9001 quality management system. The scope covers the design, development and support of software solutions, including artificial intelligence solutions.

Where is data stored and indexed?

On servers in Italy, and therefore in the European Union, on every plan. Neurally reads documents from your repositories read-only and indexes them so it can answer, while the original files stay where they are.

How does Neurally help with the AI Act?

It makes AI use transparent and traceable: it shows its reasoning as it works, cites the document and opens the passage behind every answer, and reminds users that AI can make mistakes. For the company, it is a governed agent in place of public chatbots used with personal accounts.

Who can see uploaded documents?

Anyone with access to the knowledge base that contains them. Each knowledge base is shared with people, teams or the whole company, at two levels: can read or can edit. Owners and admins have full access. People who use a shared repository don’t see its files, only those in their own knowledge bases.

Can Neurally change or delete files in our repositories?

No. Connectors are read-only: Neurally reads the files and folders you choose and notices when they change, but it doesn’t change, move or delete anything. If you disconnect a repository, documents already read stay in your knowledge bases but are no longer updated.

A solution for every department

  1. Technical documentation

    Revisions, bills of materials, specifications and CAD drawings.
    “Which revision is in production?”

  2. Sales contracts

    Clauses, deadlines, penalties and terms for each customer.
    “Which contracts renew in December?”

  3. Equipment manuals

    Alarms, procedures, spare parts and service history.
    “What does alarm E-07 mean?”

  4. Finance and administration

    Financial statements, reports and budgets, with calculations and sources.
    “How much has revenue grown?”

  5. Sales

    Deals, quotes, discounts and customer contracts.
    “What discount did we agree with Ferri?”

Your know-how belongs to you. Neurally just puts it to work.

Try Neurally on your company’s documents

Start your free trial7-day free trialNo credit card required

Request a demo.

We’ll show you Neurally at work on your team’s cases.

All fields are required. By submitting this form you accept the privacy policy (in Italian).