Built for financial service providers.

Unless aligns its infrastructure, governance, and security with DORA across ICT risk management, incident handling, and third-party oversight. The platform runs an ISO 27001-aligned risk framework, undergoes annual penetration tests and threat-led testing where required, and gives you transparent service descriptions, subcontractor disclosure, and audit and termination rights. The architecture is configurable for the requirements of GDPR, DORA, ISO 42001, EU AI Act, and entities supervised by BaFin and AFM.

Unless is an ICT third-party service provider in DORA terms, so it belongs in your Register of Information alongside your other suppliers. We give you the contract terms, subcontractor disclosure, and data-location detail the register asks for, so the entry is straightforward to complete. Should Unless ever be designated a critical ICT third-party provider, we maintain EU subsidiaries and cooperation procedures for direct ESA oversight, so your resilience holds either way.

Yes. From August 2026 the EU AI Act requires that people are told when they are interacting with an AI system, and Unless provides this disclosure functionality for you to enable and configure in your deployment. The agent grounds every answer in your approved sources and cites them inline, so a customer always sees where an answer came from. For a use case that would qualify as high-risk, like a credit decision, you tell us in advance and we allocate responsibilities together, since Unless is the provider and you are the deployer under the Act.

No. The agent answers from your approved Living Knowledge and stays inside the boundaries you set, so it explains your products and processes without straying into regulated advice. Anything outside that scope is handed to a qualified person with full context. There is no autopilot, and no irreversible action happens without a human approving the boundary first.

The Privacy Vault detects and tokenizes sensitive identifiers at the gateway, so card numbers, account details, and other PII are obfuscated before any third-party generative model sees them, then re-identified in the response back to the customer. The underlying models are hosted inside EU cloud regions, and Unless does not transmit identifiable customer data to separate LLM vendors. Visma Onguard, a market leader in order-to-cash and credit management with users in 50+ countries, runs its support operations on exactly this setup.

It can act, within limits you define. Through Living Context the agent connects to your CRM, billing, and core systems, so it can check a balance, update a profile, or trigger an approved workflow. Every action is logged and reversible, and the agent never crosses into an irreversible step without human sign-off.

Most customers see measurable results inside four weeks. On the Fixed plan that four-week window is a guided pilot run on your own data, so you watch the first numbers land on your real questions. Across the platform, customers see a 78% ticket deflection rate and an observed first-year return on investment of 512%.