Corporate
Governance
How we make decisions, who is accountable for what and how we oversee the AI we develop. Real information for enterprise clients and investors.
Real, verifiable and up-to-date governance.
Here are our registration details, verifiable in the public Estonian Commercial Register.
Estonia leads the EU index for digital public services. Its legal framework provides digital signatures with full legal validity, a 100% electronic business register and access to the European e-Residency ecosystem. For a technology company with distributed operations, this means digitally binding contracts, registry transparency that can be verified in real time and full compatibility with the GDPR, the Electronic Communications Act and the DSA framework from the first day of operation.
HumanosTech runs teams in Europe and South America. The EU-Mercosur Partnership Agreement facilitates technology exchange, the mobility of specialist talent and lower barriers for digital services between the two regions. For our clients, this means access to South American tech talent with full European regulatory compliance, contracts under Estonian law and data transfers formalised with Standard Contractual Clauses from the start of every project.
Who is accountable for what
Direct operational management, with no intermediate layers. Each area has a named owner with real authority to decide and to be held accountable.
Systems analyst with more than ten years on remote technology projects for European and North American companies. Responsible for the architecture of every HumanosTech product, with AI models running on our own infrastructure within the EU and human-in-the-loop built in as an architectural constraint from the outset.
More than twenty years at the intersection of tech talent and business needs. She sets the company vision, approves enterprise contracts, manages relationships with strategic partners and investors, and represents the company before regulatory bodies.
More than eight years in customer service. Responsible for people management and day-to-day operations: he coordinates the distributed teams and ensures they work to the same standard as an in-house team, wherever they are located.
More than ten years in virtual support. Responsible for project management and client accounts: he coordinates operational activations and integrates dashboards and omnichannel platforms to ensure smooth communication and high-quality results.
Manages day-to-day regulatory compliance: data protection, review of sub-processor contracts, the Record of Processing Activities and communications with supervisory authorities. Ensures that every professional on client projects has their NDAs and data agreements in order.
Three levels, no ambiguity
This avoids bottlenecks in day-to-day operations and ensures real scrutiny of strategic matters.
Assigning professionals to projects, configuring tools, adjusting processes. Documented in the internal system and reversible within 24–48h.
Standard service contracts, onboarding of new providers, activation of product features. These require the area owner's signature and are recorded in the minutes.
Enterprise contracts (longer than 6 months or over €50,000), launch of new products, changes to data architecture, investment agreements, corporate changes.
Tactical and strategic decisions are logged with the date, owner, context and expected outcome. Available to auditors and, under NDA, to investors during due diligence.
Human-in-the-loop is not marketing. It is architecture.
Two products in live service and four in development. All of them follow the same non-negotiable principle: AI analyses, a human expert certifies, and the client receives a result with real validity. No product delivers high-impact results without human validation.
In every product, handover to a human agent or expert is available at any point. There are no flows in which the system alone decides.
The documents, certificates and reports generated include QR identifiers that make it possible to audit which model generated what, with which parameters and when. The chain of custody is part of the product.
All models run on our own infrastructure hosted in Tallinn, Estonia. Data is processed and stored within the European Union, with full traceability of every data flow.
HT Kiire and HT Meel Voice, both in development, are classified as limited risk under Regulation (EU) 2024/1689, and we do not operate any high-risk or prohibited systems. Research projects that could be high risk will undergo the EU AI Act conformity assessment before any launch. Technical documentation is available to enterprise clients on request.
Every six months: behavioural drift, detected biases, new regulatory obligations and fitness for the real use cases in production.
AI phone support agent. Human escalation always active. GDPR by design. Data in the EU.
AI conversational technical support. QR traceability. Human oversight in critical flows.
Market intelligence for the European tech talent ecosystem. Every insight is validated by a certified human expert before publication.
Human-signed ESG analysis for European SMEs. Every report must be signed by a certified ESG consultant, giving it real validity under the CSRD.
Dataset bias auditing in line with Article 10 of the EU AI Act. Every audit requires approval from a certified ethics auditor, with a QR traceability code.
Training in European regulation (GDPR, DSA, EU AI Act, Green Deal) with certification validated by certified lawyers or DPOs, carrying real legal validity in the EU.
If your procurement process requires detailed technical documentation on any of the products (model cards, risk assessments, controls in place), we prepare it as part of enterprise onboarding before signing.
Four categories, one owner each
We do not yet have a formal risk committee. We do have a documented process for identification, assignment and follow-up.
Active monitoring of cloud infrastructure providers, foundation AI models and critical tools. A documented contingency plan for the three most critical providers.
Mandatory documentation policy for key technical roles. No critical client process depends on a single person without an identified and trained backup.
Quarterly monitoring of changes to the EU AI Act, the GDPR, the DSA and Estonian employment law. The compliance lead assesses the impact within 30 days of any relevant change.
Incident response protocol aligned with GDPR deadlines (72h to the supervisory authority). Quarterly access reviews. Mandatory security training for the whole team.
Three contexts, different controls
Internal management data, client data in outsourcing projects, and data processed by our own AI products.
Humanos Tech OÜ acts as data controller for its internal systems. On client projects, we act as processor under the client's documented instructions, with a signed data processing agreement.
Record of Processing Activities in place since the start of commercial operations. Updated with every new service or relevant change to existing processing.
We operate with teams distributed across Europe and South America. Transfers of personal data to countries outside the European Economic Area take place under Standard Contractual Clauses approved by the European Commission. No exceptions, no shortcuts.
Documented retention policy for each data category. A maximum of 36 months on completed projects unless the law requires otherwise, with certified deletion.
Where we stand today. No exaggeration.
We are a company founded in 2025. This is what has been done, what is in progress and what comes next.
Humanos Tech OÜ registered in Estonia. Number 17179670. Complete and current corporate documentation.
In place in accordance with Article 30 GDPR since the start of commercial operations.
Data processing agreements in force with our main technology providers.
Access controls, password management, device policy and incident response protocol in force for the whole team.
In preparation. Technical documentation with risk classification, controls and conformity assessments.
Full review of all client data flows and sub-processing contracts.
Planned once operations reach a volume that justifies the cost of a specialist external firm. Estimate: 2027.
On our maturity roadmap, linked to the growth of cybersecurity and Data Engineering services for enterprise clients.
The kind of companies we work with
Companies with technology processes, real customer data and a need for European compliance. These are the sectors where the team has direct experience.
Unannounced demand peaks, zero tolerance for downtime and support in the user's language at the moment the problem occurs. The team knows this first-hand, with more than 10 years operating in these environments.
Extreme seasonality and guests across multiple time zones. HT Meel Voice, in development, is planned to cover the support channel outside the in-house team's hours.
GDPR, PSD2 and the EU AI Act all at once. HT BiasGuard EU (on the roadmap) audits scoring algorithms with human certification before every production deployment.
Rapid growth without the overhead of permanent hiring. We cover engineering, QA and L1-L3 technical support under a European contract, to the standard of an in-house team.
Variable volumes and the GDPR as a non-negotiable requirement. Customer support, platform QA and data engineering with data that never leaves the EU.
HT LawMentor AI (on the roadmap) produces training on the GDPR, the DSA and the EU AI Act tailored to each professional's profile, with certification validated by a certified DPO or lawyer.
HT InsightGuard (on the roadmap) for market intelligence on European tech talent. People Operations as a service for teams that outsource administrative management.
Health data under the GDPR's most demanding level of protection. HT BiasGuard EU (on the roadmap) for diagnostic algorithms in line with Article 10 of the EU AI Act, with tailored QA and cybersecurity.
Data engineering for dynamic pricing, multichannel support and cybersecurity for vehicle sales platforms and connected mobility services.
The leadership team has more than 10 years of experience across different sectors. If you have technology processes, customer data or distributed teams, we integrate quickly and in full compliance with European regulation.
Real use cases by industry, with the services and products that solve each problem.
What you can require by contract
These are the minimum response times HumanosTech guarantees contractually on all active projects. They are not aspirations, they are SLAs.
Maximum first-response time for incidents affecting production or end-customer data.
Issues affecting core service functionality without completely blocking operations.
Response to project queries, change requests and standard communications on business days.
Delivery of governance documentation in investment or enterprise procurement processes with an NDA in force.
Maximum legal deadline for notifying the supervisory authority of a security incident affecting personal data.
Customer support services run without interruption, including weekends and public holidays.
These are the guaranteed minimums. Enterprise contracts include SLAs adapted to the volume, criticality and hours of each project. If your procurement requires specific SLAs before evaluation, contact management before starting the formal process.
A direct channel for every profile
Whether you are evaluating HumanosTech as a supplier, carrying out due diligence as an investor or asking about our AI systems, here are the right contacts for each case.
GDPR, data processing agreements, international transfers and data subject rights requests.
Corporate documentation, registrations, NDAs and information packs for investment processes and strategic partnerships.
View strategic partnershipTechnical queries about HumanosTech products, risk classification, technical documentation and conformity assessments.
View EU AI Act guideWe prepare the governance pack for your procurement.
One call, your questions, real answers. No generic forms.