EN

Compliance

Our regulatory compliance framework. Full transparency about what we do, why we do it and which regulations we apply in each area of activity.

Company position

Compliance is not a requirement. It is part of who we are.

Humanos Tech OÜ is incorporated in Estonia, one of the most robust digital legal frameworks in Europe. We operate in European and North American markets, manage data belonging to companies and professionals, and develop artificial intelligence products. Each of these activities entails regulatory obligations that we take on rigorously, not at the bare minimum.

The badges shown on this page are self-declared. They have not been issued by an external certification body. We describe exactly what we do in each area, so that any client, partner or regulator can assess it on the basis of real information.

GDPR Ready Self-declared · See section 1
EU AI Act Compliant Self-declared · See section 2
Estonian Law Incorporated in Estonia · Reg. 17179670
DSA Compliant Regulation (EU) 2022/2065

GDPR Personal Data Protection

Humanos Tech OÜ acts as the controller of the personal data it collects through humanostech.com. All processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR).

Data minimisation

We only collect the data you provide in the site's forms (name, email, company and similar), sent via Web3Forms. We do not collect sensitive data or use analytics or advertising tools.

No analytics or advertising cookies

The site uses necessary cookies and, only with your consent, its own preference cookies. There are no analytics, advertising or profiling cookies.

Art. 28 agreements with processors

Hostinger, Web3Forms and hCaptcha act as processors under the corresponding data processing agreements or terms.

Data subject rights in place

A dedicated channel for access, rectification, erasure, restriction, portability and objection. Response within 30 days.

Retention limited to 12 months

Data is deleted 12 months after the last activity, unless there is a legal obligation to retain it.

No automated decision-making

No decision with legal effects on users is taken without direct human intervention (Art. 22 GDPR).

Supervisory authority

Andmekaitse Inspektsioon: Tatari 39, 10134 Tallinn  ·  www.aki.ee

Full documentation: Privacy Policy · Cookie Policy · Terms and Conditions

EU AI Act Regulation (EU) 2024/1689 on Artificial Intelligence

HumanosTech develops its own AI products (Suite HT, in development) and provides AI development services to clients. We apply the EU AI Act by design, not as an afterthought.

Planned risk classification of the software on the roadmap

Low risk
HT LawMentor AI

Training platform on European regulation. No legal effects on users. Human-in-the-loop for certification.

Limited risk
HT InsightGuard

Labour market trend analysis. No automated individual decisions. Mandatory human validation before publication.

High risk (Art. 14)
HT SustainGuard · HT BiasGuard EU

ESG analysis and dataset auditing. Classified as high risk due to their impact on business decisions. Mandatory human oversight, immutable audit log, QR traceability.

Human-in-the-loop by architecture

No high-impact output is delivered without validation by a human expert. It is a system constraint, not a user option.

Open, auditable models

All AI models used are open source, auditable and run on our own infrastructure in the EU.

QR traceability

Each output includes a QR code that opens the full log: input data, model, decisions, human reviewer annotations and timestamp.

Technical documentation (Art. 11): in progress

The full technical documentation for each AI system is being prepared alongside product development.

Detailed product development status: HT Roadmap

Estonia Applicable Estonian Legislation

Humanos Tech OÜ is registered in the Estonian e-Business Register under registry code 17179670. Our operations are subject to the following Estonian laws:

Võlaõigusseadus: Law of Obligations Act

Governs contracts with clients and service providers. Applicable to all agreements for the provision of technology services.

Elektroonilise side seadus: Electronic Communications Act (§ 102)

Requires prior consent for cookies that are not strictly necessary. The site does not use analytics or advertising cookies and asks for consent, with a reject option as visible as the accept option, before enabling preference cookies.

Isikuandmete kaitse seadus: Personal Data Protection Act (§8.2)

Regulates the processing of children's data. We do not process the data of children under 13 without the verifiable consent of their legal guardian.

Infoühiskonna teenuse seadus: Information Society Services Act

Classifies our services as information society services under Directive 2000/31/EC.

DSA Digital Services Act: Regulation (EU) 2022/2065

As a provider of intermediary services, Humanos Tech OÜ applies the DSA through the following mechanisms:

Notice and action (Art. 16)

A dedicated channel at for reporting illegal content.

Statement of reasons (Art. 17)

Any restriction of content or accounts is notified with an explicit legal justification.

Complaint-handling system (Art. 20)

Internal review mechanism with qualified human oversight, available for 6 months after each decision.

Misuse policy (Art. 23)

Users who repeatedly provide illegal content may be suspended, after a reasoned warning.

B2B Contracts and Liability

Every business relationship between Humanos Tech OÜ and a client company is formalised through a contract signed by both parties. Independent service providers working through HumanosTech do not enter into a direct contractual relationship with the end client.

B2B contract between HumanosTech and the client

HumanosTech assumes operational, quality and legal responsibility towards the client. The service provider operates under the terms agreed with HumanosTech.

Confidentiality clauses

All contracts include strict confidentiality clauses tailored to the level of access to client information.

Client intellectual property

All code, design and documentation produced for a client belongs to the client from day one. HumanosTech retains no rights of use.

Jurisdiction: Courts of Tallinn

In accordance with the Rome I Regulation (EC No 593/2008). Without prejudice to the client's right to bring proceedings in their own Member State in data protection matters (Art. 79(2) GDPR).

Infra Infrastructure and Data Location

🇪🇪
Hosting: Hostinger, Tallinn

All web infrastructure is hosted on servers within the European Union. The only third-party services that may process data outside the EU are those listed below.

🔒
Lawful transfers to the USA

hCaptcha (form protection) may process data in the USA, under the EU-US Data Privacy Framework (2023) or Standard Contractual Clauses (Schrems II). It is only loaded when you start filling in a protected form. All fonts on the site are hosted on our own server.

🤖
AI in development: EU servers only

The AI models of Suite HT are run and trained on our own infrastructure within the EU. No client data is sent to third-party APIs outside the EU.

📋
Automated DPIA for high-risk systems

HT SustainGuard and HT BiasGuard EU, on the roadmap, will include an automated data protection impact assessment (DPIA) in every processing cycle.

Roadmap Compliance Roadmap

Compliance is an ongoing process. These are the actions planned as the company scales and the products enter their validation and launch phases.

Incorporation in Estonia and tax registration

Completed. Registry code 17179670, VAT No. EE102831229.

Legal policies published (GDPR, Cookies, Terms)

Completed. Current version: November 2026.

Cookie consent with categories

Completed. Consent banner with “Accept all”, “Reject non-essential” and “Settings”; preference cookies disabled by default; cookie policy updated.

EU AI Act technical documentation for products in development

In progress. Being prepared alongside the development of Suite HT.

Complete record of processing activities (RoPA)

In progress. Being expanded in line with the growth in the volume of data processed.

External GDPR audit

Planned for the growth phase of the HT Freelancers platform.

ISO 27001 certification

Planned as cybersecurity and Big Data services scale with enterprise clients.

Transparency

This page is updated with every relevant change to our compliance practices. For specific enquiries or audit requests:

  1. Exploring
  2. Comparing
  3. Deciding

Comparing options: what usually comes next

Simulate your savings

Estimate in two minutes the savings against the equivalent in-house cost.

View

How we work

Engagement models, phases and what you can expect from us.

View

Our three service areas

Technology & Data, Operations & Support, Compliance & Sustainability.

View