Public sector

AI for public administrations. With ENS as the starting point.

Situra is built for Spanish public bodies and regulated organisations: hosted in Madrid, with data residency enforced on every request, contracting and support in Spanish, and invoices your finance office can process.

Why ENS comes first

Royal Decree 311/2022 governs ENS, Spain’s National Security Framework. Public-sector bodies must require ENS conformity from providers delivering cloud services to their systems; for categories Media and Alta, conformity is shown by a certificate issued by an accredited body.

Designed for category Alta
Controls are designed for category Alta from day one: tenant isolation in the database, a hash-chained audit log, four-eyes approval in the back office and no staff access to content.
Certify Media first
Category Media covers most public buyers and reaches the market sooner. The joint ENS Media + ISO/IEC 27001 audit is targeted for Q2–Q3 2027; moving to Alta is then a controls upgrade.
The certified cloud is Microsoft’s
The platform runs in Azure Spain Central, whose services are certified at ENS Alto by Microsoft. That is the cloud provider’s certification; ours is in progress.
See the full roadmap

A project pinned to Spain, enforced on every request

Every project has a residency tier. An ES project only uses routes that process in Spain; if none is available, the request fails instead of leaving for the EU or beyond.

ES

Spain

Routes that process in Spain, such as regional deployments in Spain Central or Vertex Madrid. The natural choice for public-administration data.

EU

European Union

EU regional routes, plus the Spanish ones. Useful when the model you need is not yet available in Spain.

Global

Global

Any route, including each provider’s default. Not what we recommend for public data, and outside the ENS scope.

Each model’s availability in Spain is verified route by route before it enters the catalogue; the console always shows which models each project may use.

How residency tiers work

Built for how public bodies buy

No credit cards or top-ups: invoiced accounts with a credit limit, and e-invoices in the format your entry point requires.

Invoiced accounts
A monthly invoice built from metered usage, against a credit limit set for your account; other terms are agreed in the contract. The 5.5% platform fee appears as one more line on the invoice.
FACe and Facturae
Spanish administrations receive e-invoices through FACe (or the relevant regional entry point) in Facturae format. Our payment processor does not produce Facturae, so public accounts get a dedicated step: the Facturae invoice is already generated and downloadable from the console; electronic signing and automatic FACe submission are in development. We are also reviewing the VeriFactu obligations of the invoicing system.
Euro prices, clear VAT
Prices published in EUR with the exchange rate used on display. 21% VAT (IVA) in Spain; reverse charge for business customers in other EU member states with a valid VAT number.
Paperwork for the tender file
Contract, DPA, sub-processor list and security documentation in Spanish for tender specifications and the procurement file. The statement of applicability and certificates will be provided when they exist, not before.

Support, documentation and contracts in Spanish

  • Support in Spanish, from the same team that builds the platform.
  • Documentation in Spanish as well as English.
  • Contract and DPA drafted in Spanish and governed by Spanish law.
  • A Spanish company, Syntheris Advisory S.L.U., as your counterparty.

GDPR without the small print

Data processing agreement (DPA)
Situra acts as processor. The DPA sets out instructions, confidentiality, security measures and the sub-processor regime.
Public sub-processor list
A public list of infrastructure and model providers, what each one does and where it processes for each residency tier.See sub-processors
DPIA
A data protection impact assessment covering opt-in prompt logging, available to support yours. By default only metadata is logged.

Private beta

What we look for in a beta partner

What we ask

  • A real use case with production or pre-production traffic: the ENS audit needs evidence of the system in operation.
  • A technical contact and a security or compliance contact.
  • Your residency needs and the models you use today.
  • Candid feedback, with a short review every two weeks.

What we offer

  • Support with the ENS categorisation of your use case and with the DPA.
  • Hands-on integration help: changing your SDKs’ base URL is usually enough.
  • An invoiced account and, for public administrations, Facturae e-invoicing.
  • Full transparency on certification status and available routes.

Private beta · Q4 2026

We are looking for three to five organisations for the beta.

Spanish public administrations and regulated organisations that want to use AI models with data residency under control. We work with each organisation on ENS categorisation, the DPA and the integration.