Trust & Security
Trust isn't promised. It's proven.
Betterfly is published by E-Quality Engineering, certified ISO/IEC 27001:2022 and ISO/IEC 42001:2023 following the March 2026 audit. Our ISMS and AI management system are audited, documented and operational — so your security and AI governance don't rely on promises.
Six pillars for peace of mind
Each pillar answers a question your CISO, DPO or auditor will ask. Here are our answers, plainly stated.
Strict per-client isolation
Database-per-tenant architecture: every client has its own database. One client's data never leaks to another.
Human in the loop
At sensitive points — publishing, signing, closing — a human validates. The AI proposes and proves; it never signs or validates on its own.
AI traceability
Every AI response carries a trace: identifier, cited sources, model used and cost. Coverage keeps expanding.
No training on your data
We train no AI model on your data. Inference runs through the Azure OpenAI API, on pre-trained models.
Sovereign, encrypted hosting
Your data is hosted on Microsoft Azure (France Central region), a certified platform. TLS encryption in transit.
A certified consulting firm
Betterfly is published by E-Quality Engineering, certified ISO/IEC 27001:2022 and ISO/IEC 42001:2023 following the March 2026 audit. We live what we sell.
A publisher that practices what it sells
E-Quality Engineering (EQE), Betterfly's publisher, obtained dual certification ISO 27001:2022 and ISO 42001:2023 following the March 2026 audit. So is our hosting platform. For us, compliance isn't a sales pitch — it's our daily routine.
ISO/IEC 27001:2022
Certification of E-Quality Engineering's information security management system, obtained following the March 2026 audit. Protecting your data is governed by a proven, documented and audited framework.
ISO/IEC 42001:2023
Certification of the artificial intelligence management system, obtained following the March 2026 audit. We govern our AI under the first international standard dedicated to responsible use.
Microsoft Azure — France Central
Hosting on a certified cloud platform, in the France Central region. TLS encryption in transit and a contractual framework (DPA) for Azure OpenAI services.
Your data stays your data
QHSE data is sensitive: non-conformities, incidents, audits, indicators. Betterfly is architected so it stays partitioned, encrypted and under your control, from the first import to the last query.
We do not monetize your data and we do not use it to train models. What is yours stays yours.
Database-per-tenant isolation: each client has its own database, with no mixing and no leakage to another client.
TLS encryption of your data in transit, on a certified hosting platform.
Your data is never used to train any AI model.
Compliance with Moroccan law 09-08 on personal data protection and the CNDP framework.
GDPR compliance for processing governed by European law.
Trustworthy AI, not a black box
BetterAssist is an audit-grade AI copilot: it augments the expert, it does not replace them. Its scope is deliberately vertical — QSE and ISO standards — and compliance is built into the product (compliant-by-design), not bolted on afterwards.
Every AI response is traceable, and when it doesn't know, it says so. We prefer an honest abstention to an invented answer.
Every AI response carries a trace: trace identifier, cited sources, model used and cost.
Human in the loop: the AI proposes and proves; the human decides and commits, especially at sensitive points.
Honest abstention: the AI answers "I don't know" rather than inventing a response.
Vertical QSE/ISO scope, with no general-purpose AI outside your domain.
Traceability coverage keeps expanding — we document what is traced, without over-promising.
Aligned with the frameworks that matter
Betterfly is built for organizations that are accountable. We align with the Moroccan and European regulatory frameworks that apply to your data and your use of AI.
Law 09-08 & CNDP
Personal data protection under Moroccan law 09-08 and the framework of the national data protection authority (CNDP).
GDPR
Alignment with the General Data Protection Regulation for processing governed by European Union law.
EU AI Act
Designed in the spirit of the AI Act: human oversight (Art. 14) and transparency of AI systems (Art. 50, applicable around December 2026).
What BetterAssist is not
Trust begins with honesty. Here is what you can repeat, word for word, to your leadership or your auditor. BetterAssist is not:
a replacement for the auditor;
a compliance certifier;
a guarantee that no non-conformity exists;
the final decision-maker;
legal advice.
BetterAssist augments the expert, it does not replace them. The machine proposes and proves; the human decides and commits.
Let's talk about your trust requirements
RAI, CIO, CISO, DPO: bring your hardest questions. We'll answer them with evidence.