Trust & Assurance
Regulatory compliance.
How the company and the platform stand against the standards institutions ask about.
Where ARETE stands
ARETE Strategy AI Ltd is a technology and advisory company incorporated in the Republic of Cyprus, providing regulatory execution intelligence to institutions accountable to their supervisors. The controls in force, the evidence behind each position and the registers the platform holds are published for institutional due diligence.
| Standard | What stands today |
|---|---|
EU General Data Protection Regulation Regulation (EU) 2016/679 · Cyprus is an EU member state Privacy notice → | Processing is confined to business contact details, institutional records and platform content. Tenant data is organisation-scoped, evidence files are private, and material operations are audited. Personal data is not sold, profiled for advertising or transferred for marketing purposes. |
Cyprus company and commercial law Companies Law, Cap. 113 Corporate information → | ARETE Strategy AI Ltd is incorporated in the Republic of Cyprus under company number HE 487713, with a registered office in Nicosia, a recorded director and an appointed company secretary through which statutory filings are maintained. |
EU Artificial Intelligence Act Regulation (EU) 2024/1689 AI transparency notice → | The AI features are assistive: every run is persisted with its provenance, assumptions and uncertainty, a human reviewer must approve any output before it affects a downstream record, approval independence is enforced, and a fallback fixture can never be approved. |
Digital Operational Resilience Act Regulation (EU) 2022/2554 | The platform's constructs map to the ICT risk themes an in-scope client must evidence: a durable audit trail, an integration registry recording scope, classification and quarantine or revocation, scheduled operational tasks, and notification records for assignment, escalation and review outcomes. |
NIS2 Directive Directive (EU) 2022/2555 | Supply-chain and incident-reporting duties that in-scope clients owe their own suppliers are the duties ARETE intends to be able to answer, on the basis of the controls and disclosures published on this page. |
ISO/IEC 27001 Information security management Security standards → | Information-security controls are organised around the standard's themes: access control, tenant and evidence classification, logging and monitoring, supplier relationships, incident handling and change control — as detailed on the Security standards page. |
SOC 2 Trust services criteria report | Where a procurement process requires a SOC 2 report, ARETE responds with the control evidence behind each status on this page and direct documentation for the client's own assessment. |
Independent assurance
Control evidence, registers and acceptance tests are made available for an institution's own assessment. No certification is claimed.
Reporting a security concern
Security concerns, vulnerability reports and due-diligence requests:
info@aretestrategyai.tech