About Alethexis
The enterprise standard. Built for SMEs.
What Alethexis is, in facts
Alethexis is AI governance software for European companies with 20 to 750 employees. It is used to inventory the AI systems an organisation uses or builds, classify their risk, assign accountability and keep the evidence of what is decided. It is built and operated by ALETHEXIS, S.L., a Spanish company.
- Company
- ALETHEXIS, S.L. · Tax ID (NIF) B88758057 · C/ Tirso de Molina 36, 08940 Cornellà de Llobregat (Barcelona), Spain. Registered with the Barcelona Commercial Registry on 19 May 2026.
- What it does
- AI systems inventory · risk classification (P0–P6, Alethexis's own taxonomy) · governance: AI committee, RACI matrix, risk register and decision log · documentation of the AI literacy measures under Article 4, which requires taking measures without requiring any specific level of AI literacy of each individual · FRIA (Article 27 of the AI Act) and DPIA (Article 35 GDPR), as two separate assessments · PDF documents with a SHA-256 integrity fingerprint, recorded when each document is generated · governance of AI agents · provider obligations, for those who build AI.
- Who it is for
- Companies with 20 to 750 employees that use third-party AI (deployers) or build their own (providers).
- Modules and pricing
- M1 Visibility from €165 a month, M2 Governance from €250 and M3 High-Risk Ready from €330; the Agentic Add-on adds €165 a month and requires M2 or M3. Monthly price with annual billing, excl. VAT.
- Trial
- 14 days of full access, no card required.
- Languages
- Platform and website in Spanish and English. The English legal texts are a courtesy translation: the Spanish version prevails.
- Data residency
- Product data is hosted on Supabase, EU — Frankfurt (eu-central-1), with an entity in Singapore. The application runs on Vercel, with compute in the EU (fra1), a global edge network and a US entity, and Cloudflare proxies all traffic from the United States. Transfers rely on Standard Contractual Clauses (Article 46(2)(c) GDPR) and, where stated, on the EU-US Data Privacy Framework. Register of subprocessors and providers →
- Regulatory coverage
- European layer, for every account: Regulation (EU) 2024/1689 (the AI Act), as amended by Regulation (EU) 2026/1744, and the GDPR. National layer: Spain only (LOPDGDD, Real Decreto 723/2026 and Estatuto de los Trabajadores).
- What it does not do
- It does not issue conformity seals or give legal advice. It does not discover AI automatically, does not monitor models in real time and does not deliver or vouch for training: it documents what your organisation declares and decides.
- See it for yourself
These facts were last reviewed on 9 October 2026.
Mission
To give European SMEs the tools to govern their use of AI with the same rigour as a large corporation, turning the obligations of the EU AI Act and the GDPR into a traceable, auditable operational routine — without depending on a consultancy or an in-house compliance department.
Vision
That governing AI responsibly and demonstrably stops being a privilege of large companies and becomes the standard for any European organisation, whatever its size.
Values
Rigour
We do things properly rather than quickly and badly. The enterprise standard is not lowered because you are an SME.
Evidence over promises
We do not promise compliance and we do not certify anything. We give you the tools so that every decision is documented, traceable and defensible before an inspection.
Traceability
Everything that happens on the platform leaves an auditable trail. Governance that cannot be demonstrated is worthless.
Regulatory honesty
We distinguish what the law requires from what is best practice, and what is confirmed from what is pending. We do not inflate fear or sell certainties the regulation does not give.
How we apply to ourselves the method we sell, with the evidence: Customer zero: how Alethexis applies to itself the method it sells
A look at the product
The dashboard brings together your progress, what needs action and your contracted modules in four views: Summary, Path, Board and Operations. Illustrative representation of the interface.
Documentation progress
- 7 complete
- 1 review required
- 4 in progress
- 4 pending
Next step
GOB-4
ContinueM1 · Visibility
4 of 5 complete
- VIS-1
- VIS-2
- VIS-3
- VIS-4
- VIS-5
M2 · Governance
3 of 7 complete
- GOB-1
- GOB-2
- GOB-3
- GOB-4
- GOB-5
- GOB-6
- GOB-7
M3 · High-Risk Ready
0 of 4 complete
- HRA-1
- HRA-2
- HRA-3
- HRA-4