How is each company’s data kept separate?
Audiree is multi-tenant: many companies use the same platform, but each company’s data is isolated at database level using row-level security. Every query is restricted to the rows of the company the user belongs to.
Inside a company, access is set per job site (obra) and per role, so a site manager can see the documents of their own job sites without seeing the rest of the company.
What security measures are in place?
As the privacy policy says, no system is completely immune to risk; these are the measures in place, not a guarantee.
- Isolation of data per company at database level (row-level security).
- Encryption in transit.
- Role-based access control, per job site.
- Audit logs of actions on the platform.
- Breach notification duties under the GDPR are followed if a personal data breach occurs.
What data does Audiree process?
For the customer content, your company decides how it is processed (it is the controller) and Audiree acts as processor on its behalf.
- Account data: name, email, company, role and login credentials.
- Customer content: the contracts, delivery notes and invoices you upload, and the data extracted from them (descriptions, quantities, prices, units, supplier names and NIFs, amounts and job site references).
- Billing data needed to manage the subscription, handled through payment providers.
- Usage and technical data: access logs, IP address, device and browser type, and actions on the platform.
- Communications: support messages and, where enabled, notifications sent by email or WhatsApp.
Who else handles the data?
Audiree does not sell personal data. Data is shared only with service providers acting as processors under contract and instructions:
- Hosting and database providers (cloud infrastructure).
- AI model providers, used to read and check the content of documents.
- Payment, communication and usage analytics providers — the public website uses PostHog, hosted in the EU, in cookieless mode.
- Public authorities, when legally required.
Where is data processed and how long is it kept?
Wherever possible, data is processed in the European Economic Area. If a processor handles data outside the EEA, adequate safeguards such as the European Commission’s Standard Contractual Clauses are used.
Account data and customer content are kept while the account is active and for as long as needed to provide the service. After the account is closed, data is deleted or anonymised within a reasonable period, unless the law requires it to be kept longer (for example, tax retention periods).
What are my rights?
Under the GDPR you can access, correct, erase and restrict the processing of your personal data, and you have the rights to portability and to object. Write to contact@audiree.com to exercise them. You can also complain to the supervisory authority — in Portugal, the CNPD.
The full privacy policy is in Portuguese and prevails over this summary.
Frequently asked questions
Can another company using Audiree see our documents?
No. Each company’s data is isolated at database level with row-level security.
Can a site manager see every job site?
Not necessarily. Access is set per job site and per role, so each person sees the job sites they are given access to.
Is our data used for advertising?
No. Audiree does not sell personal data, and WhatsApp notification data is not used for advertising.
Is the data stored in the EU?
Data is processed in the European Economic Area wherever possible. If a processor handles data outside the EEA, safeguards such as Standard Contractual Clauses apply.