ECIX TECH https://ecix.tech/en/ Compliance services and solutions Fri, 03 Jul 2026 10:52:53 +0000 in-GB hourly 1 https://wordpress.org/?v=6.8.5 Offensive artificial intelligence https://ecix.tech/en/2026/07/03/offensive-artificial-intelligence/ Fri, 03 Jul 2026 10:49:14 +0000 https://ecix.tech/?p=34932 La inteligencia artificial ofensiva ya no es una amenaza futura: Es una capacidad operativa real. Rellena el formulario La inteligencia artificial ofensiva ya no es una amenaza futura: es una capacidad operativa real. Este paper analiza el impacto de la IA ofensiva desde una perspectiva jurídica, regulatoria y organizativa, y explica por qué las empresas […]

The post La inteligencia artificial ofensiva appeared first on ECIX TECH.

]]>

Offensive artificial intelligence is no longer a future threat:

It is a real operational capability.

Fill out the form
Offensive artificial intelligence is no longer a future threat: it is a real operational capability.

This paper analyses the impact of offensive AI from a legal, regulatory, and organisational perspective, and explains why companies must review their cybersecurity, governance, and compliance models in the face of a new landscape of automated, scalable, and increasingly difficult-to-contain threats.

Through frameworks such as GDPR, NIS2, DORA, AI Act The Cyber Resilience Act, the document identifies the main risk vectors associated with offensive AI and proposes a structured roadmap for moving from reaction to demonstrable control.

Complete the form to download the paper.

[contact-form-7]

Do you want to know more publications?

See more

The post La inteligencia artificial ofensiva appeared first on ECIX TECH.

]]> Third-party risk management https://ecix.tech/en/2026/06/18/third-party-risk-management/ Thu, 18 Jun 2026 16:30:10 +0000 https://ecix.tech/?p=34880 Third-party risk management. Keys to efficient supply chain control operations Fill in the form Do you know why third-party risk management has become a strategic priority for senior management? Fill in this form and download this document, in which we tell you: Why […]

The post La gestión de riesgo de terceros appeared first on ECIX TECH.

]]>

Third-party risk management.

Keys to efficient supply chain control operation

Fill out the form
Do you know why third-party risk management has become a strategic priority for senior management?

Fill out this form and download this document, in which we tell you:

  • Por qué el riesgo de terceros tiene un impacto en la continuidad operativa, la reputación y el valor empresarial.
  • How dependence on technology vendors expands the risk surface
  • What do GDPR, NIS2, DORA, and RIA require in terms of assessment, classification, and supervision
  • Why does responsibility remain with the organisation that decides to outsource
  • How to demonstrate diligence through selection, control, monitoring, and traceability
  • How to build a coherent, scalable, and regulatory-defensible model
[contact-form-7]

Do you want to know more publications?

See more

The post La gestión de riesgo de terceros appeared first on ECIX TECH.

]]> Purposeful AI https://ecix.tech/en/2026/02/17/ia-with-purpose/ Tue, 17 Feb 2026 10:00:58 +0000 https://ecix.tech/?p=32769 AI with purpose Fill in the form This paper proposes the concept of "AI with purpose": an AI designed from the use case, governed under the TEN Framework, which approaches the design of a successful AI strategy from three frameworks: Technological, Ethical and Normative, and structured in four critical key aspects in the design of an AI strategy.

The post IA con propósito appeared first on ECIX TECH.

]]>

Purposeful AI

Fill out the form
This paper proposes the concept of "AI with purpose": an AI designed from the use case, governed under the TEN Framework, which approaches the design of a successful AI strategy from three frameworks: Technological, Ethical and Regulatory, and structured in four critical key aspects in the design of any project aiming for success: Privacy, Performance, Specialisation and Integration.

Complete the form to download the paper.

[contact-form-7]

Do you want to know more publications?

See more

The post IA con propósito appeared first on ECIX TECH.

]]> New Guidelines to facilitate the implementation of the European Artificial Intelligence Regulation https://ecix.tech/en/2025/12/18/new-guidelines-to-facilitate-the-implementation-of-the-european-regulation-on-artificial-intelligence/ Thu, 18 Dec 2025 11:54:15 +0000 https://ecix.tech/?p=30934 Ecix News Ecix News New Guides to facilitate the application of the European Regulation on Artificial Intelligence During this month of December, the Secretary of State for Digitalisation and Artificial Intelligence (SEDIA) has published 16 practical guides to facilitate the application of the European Regulation on Artificial Intelligence, which are already available in Spanish and English.

The post Nuevas Guías para facilitar la aplicación del Reglamento Europeo de Inteligencia Artificial appeared first on ECIX TECH.

]]>

Ecix News

Ecix News

New Guidelines to facilitate the implementation of the European Artificial Intelligence Regulation

In December, the Secretary of State for Digitalisation and Artificial Intelligence (SEDIA) published 16 practical guides to facilitate the application of the European Regulation on Artificial Intelligence, which are now available on the website of the AESIA (Spanish Agency for the Supervision of Artificial Intelligence).

These guides (the result of the Spanish regulatory sandbox) are particularly useful material for organisations that develop, market or deploy AI systems and need to move from the legal text to actual operations.

They address issues such as risk management, data governance, human oversight, quality, cybersecurity or post-market surveillance, with a particular focus on high-risk systems.

With many obligations starting to apply from August 2026, now is a good time to start working on compliance in a measured and unhurried manner.

Spain thus provides practical references to help reduce uncertainty and move towards a responsible adoption of AI.

Ecix has prepared an infographic that summarises the key points of the 16 Guidelines, which provide key criteria that will help organisations to comply with the development, commercialisation and deployment of AI systems, especially high-risk ones.

We hope it will be useful to you.

Latest news
Categories
Ecix Communication

comunicacion@ecix.tech

+34 910 01 67 67

Share on

Other contents of interest

The post Nuevas Guías para facilitar la aplicación del Reglamento Europeo de Inteligencia Artificial appeared first on ECIX TECH.

]]> Key guidelines for RIA implementation https://ecix.tech/en/2025/12/17/key-guidelines-for-the-implementation-of-the-ria/ Wed, 17 Dec 2025 14:33:10 +0000 https://ecix.tech/?p=30879 Key guidelines for RIA implementation Fill in the form At Ecix we have prepared an infographic that summarises the key points of the 16 Guidelines of the Secretary of State for Digitalisation and Artificial Intelligence (SEDIA), which provide key criteria that will help organisations in regulatory compliance in the development, commercialisation and deployment of RIA.

The post Guías clave para la aplicación del RIA appeared first on ECIX TECH.

]]>

Key guidelines for RIA implementation

Fill out the form
Ecix has prepared an infographic that summarises the key points of the 16 Guidelines of the Secretary of State for Digitalisation and Artificial Intelligence (SEDIA), which provide key criteria that will help organisations with regulatory compliance in the development, commercialisation and deployment of AI systems, especially high-risk ones.

Fill in the form to download.

[contact-form-7]

Do you want to know more publications?

See more

The post Guías clave para la aplicación del RIA appeared first on ECIX TECH.

]]> We renovated our headquarters in Madrid and Barcelona in the midst of a cultural and technological transformation.  https://ecix.tech/en/2025/12/12/we-renovate-our-madrid-and-barcelona-offices-in-the-midst-of-cultural-and-technological-transformation/ Fri, 12 Dec 2025 11:40:19 +0000 https://ecix.tech/?p=29304 Ecix News Ecix News We renovate our headquarters in Madrid and Barcelona in the midst of a cultural and technological transformation We promote our new strategic plan "On Air", which strengthens collaboration between the legal and technological areas and integrates artificial intelligence in all our services. Change of offices and corporate website We are starting a new phase with a [...]

The post Renovamos nuestras sedes de Madrid y Barcelona en plena transformación cultural y tecnológica  appeared first on ECIX TECH.

]]>

Ecix News

Ecix News

We renovated our headquarters in Madrid and Barcelona in the midst of a cultural and technological transformation.

We are promoting our new strategic plan "On Air", which reinforces collaboration between the legal and technological areas and integrates artificial intelligence in all our services.

Change of offices and corporate website

We began a new stage with the renovation of our headquarters in Madrid and Barcelona, moving them to C/ López de Hoyos 35 and Passeig de Gràcia 101, respectively, and with the launch of the new corporate website, which seeks to reflect a process of reinvention, without forgetting the essence of Ecix.

For Álvaro Écija, managing partner and founder of Ecix Group, "the new offices reflect the cultural change we are experiencing: open and collaborative spaces that facilitate integration between legal and technical teams, eliminating barriers between areas".

On Air Strategic Plan

This change of offices is part of our On Air Strategic Plan, with which we seek to reinvent Ecix without losing the essence and consolidate our leadership in digital compliance and technological risks.

As part of this Plan, we have created an AI Lab that analyses market tools and develops proprietary AI models to incorporate this technology into each service, with the aim of using AI to solve specific problems, increasing efficiency and accuracy in clients' regulatory and legal challenges.

At Ecix, we have been developing artificial intelligence applied to specific use cases for more than seven years, in areas such as compliance, privacy, cybersecurity and legal operations, taking a step beyond the general trend of automation.

In the words of Carlos Alberto Sáiz, partner at Ecix Group, "we are anticipating what we imagine the market will look like tomorrow. We innovate, produce and sell services and solutions in a different way to how the industry has been doing it for 30 years. Our AI doesn't replace the professional, it empowers them".

Model based on hyperspecialisation, independence and ethics

Ecix thus consolidates a model based on hyper-specialisation, independence and ethics, values that have defined the firm since its inception.

With more than 25 years of experience of its partners, a 97% of client loyalty and the trust of more than 70% of IBEX companies, Ecix accompanies the Legal Advisors, DPOs, CISOs and Compliance Officers of large organisations in navigating the regulatory complexity and digital risks.

According to Esmeralda Saracibar, partner at Ecix Group, "we act in a way that is consistent with our values, we are very committed to young talent and the integrity of our colleagues. We are a Firm where lawyers, consultants, mathematicians and technicians work in a way and with a purpose that makes us different".

About us

With a presence in Madrid and Barcelona, our areas of activity include privacy, cybersecurity, artificial intelligence risks, compliance and control of supply chains, as well as legal operations, the latter being one of the most strategic positioning focuses of the new phase.

Latest news
Categories
Ecix Communication

comunicacion@ecix.tech

+34 910 01 67 67

Share on

In the media

The post Renovamos nuestras sedes de Madrid y Barcelona en plena transformación cultural y tecnológica  appeared first on ECIX TECH.

]]> Digital Omnibus https://ecix.tech/en/2025/12/10/digital-omnibus/ Wed, 10 Dec 2025 10:32:21 +0000 https://ecix.tech/?p=29042 Digital Omnibus Fill in the form The package of measures known as "Digital Omnibus" is a first step to optimise the application of the European Union's digital regulatory acquis, seeking to provide immediate relief to businesses, public administrations and citizens. If you want to find out more about the changes, fill in the form to download this infographic created by our team of [...]

The post Digital Omnibus appeared first on ECIX TECH.

]]>

Digital Omnibus

Fill out the form
The "Digital Omnibus" package is a first step towards optimising the implementation of the EU's digital regulatory acquis, seeking to bring immediate relief to businesses, public administrations and citizens.

If you want to know about the modifications, fill in the form to download this infographic prepared by our team.

[contact-form-7]

Do you want to know more publications?

See more

The post Digital Omnibus appeared first on ECIX TECH.

]]> Review and compliance of our Internal Information System https://ecix.tech/en/2025/12/10/review-and-compliance-of-our-internal-information-system/ Wed, 10 Dec 2025 10:21:24 +0000 https://ecix.tech/?p=29016 Entry into operation of the AINPI

The post Revisión y cumplimiento de nuestro Sistema Interno de Información appeared first on ECIX TECH.

]]>

Review and compliance with our Internal Information System

Entry into operation of the AINPI

Fill out the form
Did you know that most institutions are obliged to implement and supervise Internal Information Systems and that the Independent Authority for Whistleblower Protection has them under its supervisory focus?
  • Have you properly implemented the Internal Information System and its elements?
  • Are you in compliance with all the obligations established in Law 2/2023 regarding deadlines, confidentiality, channels, access, records, information, communication...?
[contact-form-7]

Do you want to know more publications?

See more

The post Revisión y cumplimiento de nuestro Sistema Interno de Información appeared first on ECIX TECH.

]]> Integrated third party risk and contract management in an international gaming operator https://ecix.tech/en/2025/12/04/integrated-third-party-risk-and-contract-management-in-an-international-gaming-operator/ Thu, 04 Dec 2025 12:06:43 +0000 https://ecix.tech/?p=28403 Comprehensive Third-Party Risk and Contract Management at an International Gambling Operator Challenge A gambling operator with a presence in Europe and Latin America managed an extensive network of technology, payment, marketing, support, hosting, cybersecurity, customer service, etc. suppliers. This is a highly regulated sector, […]

The post Gestión integral de riesgos de terceros y contratos en un operador internacional de juegos de azar appeared first on ECIX TECH.

]]>

Integrated third party risk and contract management in an international gaming operator

Challenge

A gaming operator with a presence in Europe and Latin America managed an extensive network of technology providers, payment methods, marketing, support, hosting, cyber security, customer care, etc.

It is a highly regulated sector, subject to stringent requirements in terms of

  • Prevention of fraud and money laundering.
  • Personal data protection and information security.
  • Responsible gambling and user protection.
  • Contractual compliance with regulators and strategic partners.
The operator needed:
  • Consistently assess and rate your suppliers in different risk domains (privacy, cybersecurity, criminal compliance, contractual, etc.).
  • Manage an international supply chain, with suppliers in several countries and documentation in multiple languages.
  • Review and improve contracts with its suppliers to ensure that identified risks were reflected in sufficient clauses, obligations and guarantees.
Manual evidence and contract review processes were very costly, slow and difficult to scale as business and regulatory complexity grew..

Approach

ECIX Tech deployed a service Legal Operations supply chain, combining the platform with an integrated eTPC with the specialised artificial intelligence of MIA Enterprise.

The approach was articulated along two main lines:

  1. Automated supplier evaluation and qualification (eTPC + MIA)
    • Centralisation of all suppliers and service lines at eTPCwith impact levels defined according to the criticality of the service (gaming platform, payments, support, etc.).
    • Design of evaluation forms advanced for different compliance domains (privacy, cybersecurity, legal person criminal, sectoral regulatory).
    • Use of MIA Enterprise to automatically analyse the responses and evidence provided by suppliers, even in multiple languages, generating:
      • A risk rating by domain.
      • A overall level of reliability per supplier.
    • Visualisation of the entire process in the rating panel eTPC, allowing for prioritisation of higher-risk suppliers and informed decision-making.
  2. Review and improvement of supplier contracts through AI
    • Application of the algorithms of MINE for the mass analysis of supplier contracts:
      • Identification of critical clauses (security, privacy, outsourcing, audits, responsibilities, incident reporting, jurisdiction, etc.).
      • Detection of contractual shortcomings or weaknesses based on the risks identified at each supplier and the applicable regulatory requirements.
    • Drawing up proposals for contractual improvement, aligning:
      • The actual supplier risk.
      • The compliance obligations arising from the gambling sector and international regulations.
    • Integration of the result into internal procurement and legal advice processes, facilitating improved model contracts and standard clauses by type of service and level of risk.
All of this operating in an environment multilingual and multistandardcombining documentation and communications in several working languages, without losing coherence in the evaluation criteria or in the legal-regulatory recommendations.

Results

The joint implementation of eTPC and MIA Enterpriseintegrated into an ongoing Legal Operations service, enabled the gambling operator:

  • Standardise supplier evaluation throughout its international supply chain, with homogeneous risk criteria by domain (privacy, cyber, criminal, regulatory).
  • Significantly reduce manual effort dedicated to reviewing questionnaires, evidence and documentation, and being able to manage a much larger number of suppliers with the same resources.
  • Detecting and correcting contractual weaknesses systematically, aligning each contract with the risk profile of the supplier and the regulatory requirements of the gaming sector in the different jurisdictions.
  • To have a consolidated and updated view of third party riskswith clear and traceable reporting for internal audits, regulators and strategic partners.
Overall, the project enabled the operator to move from a reactive and highly manual model to a proactive supply chain managementsupported by specialised AI and a compliance platform designed for critical and highly regulated sectors.

Learn more about Client Stories

See more

The post Gestión integral de riesgos de terceros y contratos en un operador internacional de juegos de azar appeared first on ECIX TECH.

]]> Advanced assessment of the DORA compliance gap https://ecix.tech/en/2025/12/04/advanced-assessment-of-the-dora-compliance-gap/ Thu, 04 Dec 2025 09:12:35 +0000 https://ecix.tech/?p=28374 Advanced DORA Compliance Gap Assessment
Challenge
A national financial supervisor needed to accurately ascertain their level of DORA adherence. The organisation was required to:
Assess the corporate state of DORA compliance, alongside other key financial sector application frameworks across the entire organisation.
Identify non-compliance, shortcomings, and overlaps in their policies, procedures […]

The post Evaluación avanzada del gap de cumplimiento DORA appeared first on ECIX TECH.

]]>

Advanced assessment of the DORA compliance gap

Challenge

A national financial supervisor needed to know precisely their degree of compliance with DORA.

The agency was to:

  • Assessing the corporate DORA compliance status, together with other main application frameworks for financial environment throughout the organisation.
  • Identify non-compliances, shortcomings and overlaps in its security policies, procedures and controls.
  • Prioritise adequacy measures with a risk visiondistinguishing non-compliance with the greatest potential impact.
The main challenge was the volume and dispersion of information: hundreds of internal documents (internal regulations, procedures, security policies, incident management, business continuity, supplier relations, etc.) drawn up over the years by different areas.

A purely manual approach would have been assumed:
  • Months of intensive work by legal, security and compliance teams.
  • Risk of inconsistencies in the evaluation criteria.
  • Difficulty in obtaining a comprehensive, structured and prioritised picture of DORA compliance.

Approach

ECIX Tech deployed a service Legal Operations evaluation of DORA supported by the capacities of MIA Enterprise to automate documentary analysis and normative interpretation. The approach was structured in three steps:

  1. DORA reference model together with other main application frameworks for financial environment
    • Definition of a DORA requirements map adapted to the agency's role as an essential entity in the financial sphere.
    • Construction of a evaluation matrix which related each obligation to expected evidence in policies, procedures and internal controls.
  2. Mass documentation analysis with MIA Enterprise
    • Use of the algorithms of MINE to analyse hundreds of internal documentsidentifying relevant references to security governance, incident management, continuity, supplier management and other application domains.
    • Automatic classification of the contents according to the requirements of the standard and detection of gaps, inconsistencies or lack of evidence.
  3. Gap assessment and risk-based prioritisation
    • Development of a structured compliance assessmentindicating for each DORA requirement the level of adequacy achieved.
    • Identification of non-compliance and deviations with a vision of risks: highlighting those with highest potential impact on the continuity of essential services or exposure to supervisors.
    • Proposal for mitigation and adaptation measures The DORA roadmap is based on the prioritised priorities, facilitating the elaboration of a realistic roadmap for alignment with DORA.

Results

The combination of the Legal Operations service and the technology of MIA Enterprise allowed the body:

  • Obtain in a short period of time a complete and structured overview of your situation vis-à-vis DORAwithout the need to manually review each document.
  • Clearly identify which requirements were met, which ones had weaknesses and which ones posed a relevant risk from an operational and regulatory point of view.
  • To have a gap report DORA prioritised by riskwhich became the basis for the design of its adequacy and security investment plan.
  • Improve your responsiveness to future supervisory demands and auditsby having an analysis that is traceable, explainable and supported by objective criteria.
Overall, the project demonstrated how MIA Enterprise can accelerate and strengthen the assessment of compliance in complex frameworks such as DORA, providing a national financial supervisor with a clear, prioritised and actionable view of its level of cybersecurity maturity.

Learn more about Client Stories

See more

The post Evaluación avanzada del gap de cumplimiento DORA appeared first on ECIX TECH.

]]>