Trust centre
Everything you sign to work with us, and everything you can read before that. Each document says what it is and when it comes up. None of it has to be requested: it is published.
Last updated: September 2026
Before you show us anything
What gets signed for the free phase, in which we analyse your Odoo and solve an agreed trial on a twin. Your live installation is not modified.
Nodu confidentiality agreement
The one you sign with us. It covers what you tell us, the access to your Odoo and the copy of your database, and sets when everything is deleted if we do not go ahead.
Data processing agreement (DPA)
On aikit.ioWhat article 28 of the GDPR requires when we process personal data on your behalf. You are the controller and we are the processor. It is signed together with the confidentiality agreement.
Annex I · Subject matter of the processing
On aikit.ioWhich data is processed, what for, for how long and whose it is. It is the part of the DPA that describes your specific case.
Annex II · Subprocessors
On aikit.ioWhich providers are involved and from where. You can object to a change in the list within the period the DPA itself sets.
Annex III · Technical and organisational measures
On aikit.ioHow the data is protected: encryption, access control, backups, logging and incident response.
When you subscribe
What governs the service from signature onwards. It is published in full from before the first call, so you can read it without asking.
Subscription contract
What the fee covers, how deliveries work, the first-month guarantee, who authorises the switch of environment and what you take with you if you leave. The one you sign carries your details and your service sheet.
Platform security
Nodu is a brand of AIKIT RESEARCH, S.A., and the AI layer we use — and that you can use yourself — is its platform. Its security information is published there and linked from here.
AiKit trust centre
On aikit.ioThe public security summary: where it is hosted, how it is encrypted, how access is controlled, what testing is done and which standards it follows.
AI transparency notice
On aikit.ioWhat the AI does, with what data and within what limits. It is what the European AI Regulation requires.
Vulnerability disclosure policy
On aikit.ioHow to report a security flaw and what happens with that report.
Platform terms of use
On aikit.ioAiKit’s terms as a product. They apply when you use the platform on your own, not to your Nodu subscription.
Platform confidentiality agreement
On aikit.ioAiKit’s NDA as a product. It is not the one you sign with Nodu: if you are going to work with us, yours is the first on this page.
This website
What applies simply because you are reading this, without signing anything.
Legal notice
Who is behind this website: company name, tax ID, address and registry details.
Privacy policy
What we do with the data you leave us — the form, the diagnosis — and how to exercise your rights.
Cookie policy
What is stored in your browser and how to change your mind.
AiKit’s documents link to their website, which is where the version in force always lives. The two contracts signed with Nodu are in Spanish, which is their original language and the one that prevails.
Not sure which one applies to you right now? Ask us in half an hour.