Version 1.0, effective 8 September 2026.

For public institutions and companies that embed the Agentique Web Assistant on their own website. Three parts: product sheet, specific terms for the embedding institution, and a ready-to-display notice for visitors.

The service is provided by ITAILORS - SOFT S.R.L. („iTailors”), a Romanian limited liability company, tax ID (CUI) 48450662, Trade Register no. J2/1018/2023, registered office at Calea Aurel Vlaicu, Arad, Arad County, Romania. Website: https://agentique.eu. Support and data protection contact: the address shown on the website under „Support contact”.

A. Product sheet

1. What it is

The Agentique Web Assistant v1 is a chatbot that the institution displays on its own website. Visitors ask questions in plain language and the assistant answers solely from the documents the institution has published in its Agentique workspace: regulations, forms, decisions, guides, fee schedules.

Every answer names the document and page it comes from, so visitors can check the source. The official information is the cited document, never the generated text.

2. What it does

Answers using only the documents the institution has made available (PDF, DOCX, XLSX, XML, TXT, scanned images).
Cites the source: document name and page number.
Says when it cannot find the answer in the documents, instead of improvising.
Replies in the language of the question, in Romanian or English.

3. What it does not do

It does not browse the internet and uses no source but the institution's documents.
It makes no decisions on the institution's behalf and issues no documents, opinions or approvals.
It does not file applications, complaints or petitions and has no access to the institution's internal systems.
It does not ask visitors for an account, name or other identifying details and stores no such data; visitors do not need to log in.
It is not used to train AI models.
Answers may be wrong or incomplete, which is why the source is always shown.

4. How it is installed

iTailors provides a code snippet that the institution adds to the pages where the assistant should appear: an HTML script configured with the identifier of the workspace dedicated to the assistant, with options for language, colour, position and welcome text.

Designated staff upload documents to the institution's Agentique workspace. The institution decides which documents the assistant may use by placing them in the workspace dedicated to the assistant (the assistant answers from the whole workspace, not from a per-document selection) and can update or withdraw them at any time.

5. Where the data is

Hosting: Amazon Web Services, region eu-central-1 (Frankfurt, Germany): files (S3), database (RDS MySQL), search (OpenSearch), application servers (ECS), queues (Redis).
AI models: Anthropic Claude and Amazon Titan through Amazon Bedrock, in EU AWS regions (Frankfurt, Ireland, Paris, Stockholm, Milan, Spain). Bedrock neither stores prompts and responses nor uses them for training; the data does not reach Anthropic.
Each institution has an isolated workspace: separate search index and storage prefix, kept apart from other customers.
Encryption: TLS in transit; at rest, files in S3 with server-side encryption (AES-256) on all buckets, the RDS database encrypted, and application secrets protected with AWS KMS.
Technical logs: AWS CloudWatch, retained for 7 days.
No transfer outside the EU/EEA in normal operation.

6. Common requirements of public institutions

Requirement	How it is met
Data hosted in the EU	Storage and processing in AWS Frankfurt; AI models run in EU AWS regions.
No transfer outside the EU	None in normal operation. Google (USA) is involved only if the institution connects Drive/Sheets, which the assistant does not need.
Conversation log on request	Visitor conversations are retained for 30 days, for technical support and for the institution to consult, then deleted; the institution may request earlier deletion. During that period they are provided to the institution on request.
Export and deletion	The institution deletes documents and conversations in the application. Export on request, in JSON format (and CSV for tables), within 10 working days. At contract end, data is deleted within 30 days; backups expire within a further 7 days.
Role-based access	Workspace roles owner, admin, member, viewer; invitations by email; API keys stored only as hashes.
Security incident notified within 72 hours	See Part B, point 7.
No training, no sale of data	iTailors neither trains models on the institution's data nor sells data.
No tracking tools	The platform uses no Google Analytics, pixels or other third-party scripts. The snippet uses localStorage in the visitor's browser only to keep the current conversation; it sets no cookies and does not track the visitor.

B. Specific terms for the institution that embeds the assistant

1. Roles of the parties

For visitors' data and the content of the published documents, the institution is the controller and iTailors is the processor. iTailors processes this data only on the institution's instructions, under the Data Processing Agreement (DPA).

For the institution's user accounts (name, email, role, language, activity logs) and billing data, iTailors is the controller, as described in the Privacy Policy.

2. Notice for visitors

The institution displays the Part C notice next to the chatbot, visibly, before the first question, with its name and privacy policy link filled in. The wording may be adapted as long as it still says that visitors are talking to an automated assistant, that answers come from published documents and may be wrong, what data is processed and where the policy is.

3. Published content

The institution is responsible for the documents it makes available: accuracy, currency, the lawfulness of publishing them and, where they contain personal data, the legal basis for processing it. iTailors does not review or edit the content.

4. Logs

Visitor conversations are retained for 30 days, for technical support and for the institution to consult, then deleted; the institution may request earlier deletion. Access to logs is role-based, limited to people the institution designates.

5. Export

At the institution's request, iTailors provides the uploaded documents and, if retained, the conversations, in JSON format (and CSV for tables), within 10 working days of the request.

6. Deletion

The institution can delete documents, conversations, memories and entities in the application at any time. At contract end, iTailors deletes the institution's data within 30 days of termination (backups expire within a further 7 days), except invoicing records, kept for 10 years under the Romanian Accounting Act no. 82/1991.

7. Security incident

If iTailors becomes aware of a security breach affecting the institution's data, it notifies the institution without undue delay and within 72 hours at the latest. The notification describes the incident, the categories of data and people affected, and the measures taken and recommended. iTailors supports the institution in notifying the supervisory authority (ANSPDCP) and, where required, the people concerned.

8. Rights of data subjects

Visitors' requests about their data (access, erasure, objection and the other GDPR rights) are handled by the institution. iTailors assists in time for the institution to reply within 30 days.

9. Sub-processors

Amazon Web Services EMEA SARL (hosting, Amazon Bedrock). Google, only if the institution connects Drive/Sheets. The full list and the change notification procedure are in the DPA.

10. Availability

During the trial the service is provided „as is”. Availability for subscriptions: during the beta the service is provided without an availability guarantee (best effort). The current environment is a beta with scheduled night-time downtime, between 23:30 and 09:00 Romanian time, for maintenance; the institution should bear this in mind before showing the assistant to the public.

11. Applicable documents

This document is supplemented by the Agentique Terms and Conditions, the Privacy Policy and the Data Processing Agreement (DPA), available at https://agentique.eu/legal/termeni, https://agentique.eu/legal/confidentialitate and https://agentique.eu/legal/dpa. For personal data processing, the DPA prevails. Romanian law applies and disputes are settled by the courts of Romania. Changes are notified 30 days in advance, by email or in the application.

C. Notice for visitors

For the institution to display next to the chatbot, replacing the text in square brackets.

You are talking to an automated assistant, not a member of staff. Its answers are generated from the documents published by [institution name] and may contain errors or omissions. Each answer names the document and page it comes from; for official information, read that document or contact the institution.

The questions you type and connection details (IP address, browser type) are processed on the institution's behalf by the service provider, iTailors, on servers in the European Union, and are not used to train AI models. Please do not enter personal data such as ID numbers, bank details or medical information.