Aleth for your sector.
See how Aleth addresses the compliance challenges specific to your line of business.
Fintech & Neobanks
The context
DORA has applied since 17 January 2025. You must maintain a register of information listing all your third-party ICT providers, and AI tools are part of it (Article 28), then submit it to the ACPR through the OneGate portal. Yet your teams use undeclared AI assistants and copilots (Shadow AI) without IT or compliance knowing. An incomplete register is a DORA breach, open to inspection by the ACPR, with sanctions from the regulator.
What Aleth brings
- Detection of all your AI tools, including Shadow AI.
- Risk classification across 5 levels and an overall AI Health Score.
- Feeds your DORA register of information, with exportable evidence for the ACPR / AMF.
- Agentless connection to M365 / Google Workspace, in 15 minutes.
Asset Management & Private Equity
The context
Your data (deals, LPs, financial documents) is among the most sensitive on the market. Your teams may be using uncontrolled AI tools to analyse contracts or investment files, exposing that information. At stake: data leakage, loss of investor confidence, and a DORA breach (the AMF is your competent authority).
What Aleth brings
- Detection of every AI tool touching your sensitive data.
- Feeds your DORA register of information (Art. 28), with evidence ready for your audits.
- Metadata only, never the content of your files.
- Hosted in the EU.
Insurance & Insurtech
The context
A twofold requirement: DORA (register of ICT providers, in force, supervised by the ACPR) and, from December 2027 (Annex III) / August 2028 (Annex I), the AI Act's high-risk obligations for certain uses such as life / health pricing. Your teams use AI tools to analyse customer data or model premiums, with no centralised visibility.
What Aleth brings
- Detection of all your AI tools, including those tied to pricing.
- Feeds your DORA register and a mapping useful for your AI Act preparation.
- Exportable evidence for your ACPR audits.
- Anonymised sector benchmark (coming soon).
IT services & Tech consulting
The context
Your regulated clients (banks, insurers) audit you in cascade on your AI usage and your ICT providers: you are their "third-party provider" within the meaning of DORA. If you do not know which AI tools are used on their data, you expose yourself to lost contracts and contractual liability. Your answers to security questionnaires become a direct commercial issue.
What Aleth brings
- Complete inventory of your AI tools, ready for your client audits.
- Mapping of your ICT suppliers, ready for your clients' security questionnaires.
- Reduced risk of client data leakage.
Law firms & Legaltech
The context
Professional ethics rules strictly govern the use of generative AI: no information covered by legal professional privilege may be passed to a tool that does not offer sufficient confidentiality guarantees. Yet your staff may be using consumer AI tools, often hosted outside the EU and exposed to the Cloud Act, on client matters.
What Aleth brings
- Detection of consumer AI tools used within the firm.
- Visibility of tools hosted outside the EU (Cloud Act exposure).
- Visibility of the OAuth permissions the firm has granted to third-party tools.
- Hosted in the EU.
Your sector has its requirements. Aleth has the answer.
Start with a free diagnostic, or talk to an expert. The free diagnostic requires no commitment and no credit card. Hosted in the EU.
No credit card required. No commitment.