Organisation-level separation
Collections, metadata and indexes belong exclusively to the institution’s environment.
Security and compliance
Technical control by design
Isolation, European Union data residency and reversibility designed for institutional requirements.
Compliance
Requirements with clear status
We distinguish commitments, alignment and completed certification. Applicable evidence must be validated for each procurement.
- Roadmap
ISO/IEC 27001
Information security management certification included in the roadmap.
- Commitment
RGPD / DPIA
Data protection by design and impact assessments where applicable.
- Alignment
NIS2
Incident management and reporting processes aligned with applicable duties.
- Conformance
WCAG 2.2 AA / EN 301 549
Interfaces designed to WCAG 2.2 Level AA, including WCAG 2.1 Level AA requirements.
- Where applicable
eIDAS
Planned support for European electronic identity scenarios.
- Where applicable
Autenticação.Gov.pt / CMD
Identity integration planned for Portuguese public services that require it.
Isolation and sovereignty
Data remains within the chosen perimeter
EU residency
Cloud services are selected for processing and storage in European Union data centres.
Topology choice
Shared, Dedicated or Sovereign adapts isolation to institutional risk and duties.
Reversibility
Your data is not locked into the platform
Across all deployment models, data and configuration can be exported in open formats at contract end. The abstraction layer also enables a change of LLM provider or model without rebuilding the experience.
Request security and subprocessor documentation →Evaluate Acervo in your institution’s context
Start with a Shared environment or request a demonstration focused on your requirements.