# noze S.r.l. > Open Intelligence. Secure Governance. Questo file è bilingue: italiano (predefinito) poi inglese. This file is bilingual: Italian (default) then English. - Versione sintetica / Concise version: [llms.txt](https://www.noze.it/llms.txt) --- ## IT — Italiano Prodotti e soluzioni per portare l'intelligenza artificiale nelle aziende e nella PA in modo aperto, in locale e conforme alle regole europee. noze è un'azienda italiana fondata nel 2000 da Stefano Noferi, con sede presso il Polo Tecnologico di Navacchio (Pisa, Italia). Si occupa di Intelligenza Artificiale, Cyber Security, Architetture Cloud, Web Apps, Digital Health, Innovation Management e R&D. Collabora attivamente con l'ecosistema di ricerca pisano (Università degli Studi di Pisa, Scuola Normale Superiore, Scuola Superiore Sant'Anna, CNR) e con altre università, istituti di ricerca italiani ed europei. Da sempre focalizzata sui mondi Open, noze è stata tra i soci fondatori di CIRS — il primo consorzio italiano di aziende FLOSS (Free Libre Open Source Software) — e di T-OSSLab, il centro di competenza regionale toscano sul software open source. ### Numeri chiave - 25+ anni di esperienza - 100+ clienti e partner - 30+ progetti di ricerca applicata - 100% dati in UE ### I sei pilastri 1. **Open by default** — Tecnologie aperte, codice ispezionabile, nessun lock-in. 2. **Self-hosted by design** — On-premise, LLM locali, dati sempre in UE. 3. **EU-Compliant** — AI Act, NIS2, GDPR, MDR by design — non come add-on. 4. **25+ anni di R&D** — Dalla ricerca clinica al Codice Appalti: ricerca applicata. 5. **AI-first, human where it counts** — Automazione spinta dove ha senso, persone dove conta davvero. 6. **Agentic & Change Management** — Agenti AI nei flussi reali, adozione accompagnata, impatto misurato. ### Soluzioni #### Intelligenza Artificiale URL: https://www.noze.it/intelligenza-artificiale/ Machine Learning, AI Generativa e Agentic AI. Le nostre soluzioni sfruttano tecnologie all'avanguardia per aiutare le aziende ad automatizzare i processi, ottenere informazioni dai dati e creare sistemi intelligenti che imparano e si adattano. Servizi principali: - **Machine Learning e Deep Learning**: Modelli ML/DL su misura per analisi predittiva, visione artificiale ed elaborazione del linguaggio naturale. - **Large Language Models e AI Generativa**: Integrazione e personalizzazione di LLM leader (ChatGPT, Claude, Gemini) e modelli open source (Llama, Gemma, DeepSeek, Qwen). - **Retrieval-Augmented Generation (RAG) e LLM Locali**: RAG con LLM locali o cloud per integrare dati proprietari. - **Agentic AI e Multi-Agent Systems**: Agenti AI autonomi con ragionamento, memoria persistente e tool use. - **Model Context Protocol (MCP)**: Implementazione MCP per consapevolezza contestuale dell'AI. - **Etica e Governance dell'AI**: Framework di governance per sviluppo AI responsabile e conforme a EU AI Act. - **Integrazione AI**: Integrazione delle capacità AI nei sistemi e flussi di lavoro esistenti. - **Framework Agentic AI Open Source**: LangChain, LangGraph, CrewAI, AutoGen, LlamaIndex, smolagents, Google ADK, Cheshire Cat. - **AI per Dati Sensibili e Sanitari**: Soluzioni AI sicure per dati sensibili e sanitari in ambienti on-premise. Competenze: apprendimento supervisionato/non supervisionato/per rinforzo, reti neurali e deep learning, NLP/NLU, Computer Vision, analisi di serie temporali, rilevamento anomalie, fine-tuning di LLM. #### Cyber Security URL: https://www.noze.it/cybersecurity/ Analisi e protezione delle infrastrutture IT. Adottiamo un approccio olistico alla cyber security, affrontando vulnerabilità tecniche, fattori umani e di processo. Servizi principali: - **Valutazione della Sicurezza**: Valutazioni approfondite per identificare vulnerabilità nei sistemi e infrastrutture. - **Penetration Testing**: Hacker etici simulano attacchi reali per testare le difese. - **Monitoraggio della Sicurezza**: Monitoraggio continuo per rilevare e rispondere agli incidenti in tempo reale. - **Threat Intelligence**: Informazioni sulle minacce per anticipare le minacce informatiche emergenti. - **Risposta agli Incidenti**: Team pronto a rispondere rapidamente agli incidenti di sicurezza. - **Formazione sulla Sicurezza**: Formazione completa sulla consapevolezza della sicurezza per i dipendenti. - **Conformità**: Supporto per GDPR, NIS2, ISO 27001. - **AI per la Cyber Security**: Soluzioni di intelligenza artificiale per potenziare le difese. - **Zero NOC e Zero SOC**: Sistemi automatizzati per il monitoraggio dell'infrastruttura di rete e la risposta agli incidenti. #### Cloud & Web Apps URL: https://www.noze.it/cloud-web-apps/ Architetture Cloud-native per applicazioni web/mobile scalabili. Servizi completi dal concetto e design iniziale allo sviluppo, deployment e manutenzione continua. Servizi principali: - **Sviluppo Cloud-Native**: Microservizi, container e architetture serverless. - **Applicazioni Web**: Da siti web semplici ad applicazioni complesse con React, Angular, Vue. - **Applicazioni Mobile**: Cross-platform con esperienze native su iOS e Android. - **Architettura Scalabile**: Scalabilità orizzontale senza degradazione delle prestazioni. - **CI/CD**: Pipeline per rilasci rapidi e affidabili. - **Containerizzazione**: Docker e Kubernetes. - **Serverless Computing**: Riduzione dei costi operativi e miglioramento della scalabilità. Soluzioni: applicazioni web aziendali, piattaforme e-commerce, CMS, Progressive Web Applications, strumenti di collaborazione in tempo reale, dashboard di visualizzazione dati, sviluppo e integrazione di API. #### Digital Health URL: https://www.noze.it/digital-health/ Software data-driven per la ricerca biomedica. Soluzioni per migliorare i risultati dei pazienti, ottimizzare i flussi di lavoro clinici e accelerare la ricerca biomedica. Servizi principali: - **Sistemi di Supporto alle Decisioni Cliniche**: Analisi dati medici con raccomandazioni basate sull'evidenza. - **Analisi di Immagini Mediche**: Soluzioni AI per radiologi e clinici. - **Cartelle Cliniche Elettroniche**: Sistemi EHR sicuri e interoperabili. - **Analisi di Dati Biomedici**: Machine learning per set di dati biomedici complessi. - **Monitoraggio Remoto dei Pazienti**: Soluzioni IoT per monitoraggio a distanza. - **Gestione di Studi Clinici**: Sistemi per ottimizzare la gestione degli studi clinici. - **Interoperabilità Sanitaria**: Scambio dati con HL7 FHIR e DICOM. Conformità: CE, MDR, GDPR. Specializzazione in cybersecurity e privacy per il settore sanitario. #### Servizi & Sistemi Linux URL: https://www.noze.it/servizi-sistemi-linux/ Domini, hosting, PEC, infrastruttura email, servizi di rete e sistemi Linux. #### Come Lavoriamo (Innovation Management integrato) URL: https://www.noze.it/come-lavoriamo/ Per noze, l'innovation management non è un servizio separato: è il modo naturale in cui lavoriamo. La nostra indole tecnica ci porta a esplorare continuamente nuove tecnologie e a valutarne l'applicabilità concreta. Questo approccio è parte del nostro metodo da sempre. Il nostro metodo include: innovation management, technology scouting, roadmap di adozione, gestione del cambiamento, metodologia agile, Design Thinking, Lean Startup, metriche e miglioramento continuo. #### Ricerca & Sviluppo URL: https://www.noze.it/ricerca-sviluppo/ Quantum Computing, Blockchain, IoT, Robotica, Energia & Clima. Aree di ricerca: - **Quantum Computing**: Algoritmi e applicazioni quantistiche. - **Blockchain e Distributed Ledger**: Applicazioni innovative di blockchain, smart contract, criptovalute e NFT. - **Internet of Things (IoT)**: Ecosistemi di dispositivi connessi, piattaforme IoT, edge computing. - **Robotica**: Sistemi robotici avanzati basati su ROS (Robot Operating System), sistemi autonomi, interazione uomo-robot. - **Energia e Clima**: Tecnologie sostenibili per energia rinnovabile e monitoraggio climatico. Attività: ricerca collaborativa con istituzioni accademiche, prototipi proof-of-concept, contributi open-source, pubblicazioni scientifiche, workshop e hackathon, trasferimento tecnologico, brevetti. ### Prodotti #### CyberAgent URL: https://www.noze.it/prodotti/cyberagent/ L'agente AI che presidia la superficie d'attacco e prepara la compliance NIS2. La cybersecurity continua, condotta da un agente AI. CyberAgent presidia rete, web app e API, indaga le vulnerabilità come un analista, le prioritizza per impatto reale sul business e prepara le evidenze NIS2 e ISO 27001. La decisione su cosa correggere resta sempre al tuo team. - Target: PMI italiane (10-250 dipendenti), studi professionali, PA locale & ASL, MSP & system integrator - Prezzi: da €99/mese (piani Starter, Business, Enterprise) - Conformità: NIS2, ISO 27001 - Dati: conservati in UE - Disponibilità: InStock Funzionalità principali: - Vulnerability Assessment: scansione continua di rete, web app e API con database CVE aggiornato in tempo reale - Pentest automatizzato: test di intrusione su rete, web e API senza dover noleggiare un red team - Social Engineering: campagne phishing simulate, awareness training, scoring per dipendente - AI Risk Prioritization: triage automatico delle vulnerabilità per impatto reale sul business - NIS2 / ISO 27001 ready: report e checklist allineati ai framework di compliance - Dashboard real-time: una console unica per CISO, IT manager e management #### DataGovern URL: https://www.noze.it/prodotti/datagovern/ L'AI agentica che governa documenti, processi e attività aziendali secondo NIS2, GDPR e AI Act. DataGovern porta agenti AI sulla governance di documenti, processi e attività aziendali: mappa gli obblighi (NIS2, GDPR, EU AI Act e non solo) sui flussi reali, prepara evidenze e adempimenti e si configura azienda per azienda, verticalizzandosi sul singolo caso. On-premise, con LLM open source; l'approvazione resta al team. - Target: aziende che devono gestire compliance GDPR, NIS2 e EU AI Act - Deployment: on-premise - AI: modelli open-source Funzionalità principali: - AI Risk Classification: classificazione dei sistemi AI secondo EU AI Act e generazione automatica della documentazione richiesta - NIS2 Compliance Manager: valutazione della postura di sicurezza, gap analysis, workflow di notifica incidenti - GDPR Governance Hub: registri dei trattamenti, DPIA, diritti degli interessati, monitoraggio delle basi giuridiche - Data Residency Engine: LLM open-source on-premise (Llama, Mistral, DeepSeek, Gemma, Qwen) — nessun dato esce dal perimetro UE - Cross-Regulation Gap Analysis: gap analysis incrociata GDPR / NIS2 / AI Act con piano di remediation unificato - Dashboard unificata: vista unica su asset, rischi, scadenze e KPI di compliance con reporting board-ready #### IntelliPA URL: https://www.noze.it/prodotti/intellipa/ AI in locale chiavi-in-mano per Comuni ed enti pubblici. Workstation dedicata, LLM open-source locali e RAG sui documenti dell'ente. Tutto on-premise, senza cloud — il dato resta nell'ente. Sviluppato a partire dal pilota di Sesto Fiorentino. - Target: Comuni ed enti pubblici - Deployment: on-premise, workstation dedicata - AI: LLM open-source locali con RAG - Dati: restano nell'ente, nessun cloud - Acquisti: disponibile via MePA / Consip Funzionalità principali: - Generazione assistita documenti: bozze di capitolati, disciplinari, determine e delibere basate su template dell'ente e normativa vigente - Verifica automatica congruenza: revisore digitale pre-firma — incongruenze interne, riferimenti normativi obsoleti, contraddizioni ed errori formali - RAG su normativa e regolamenti: knowledge base interrogabile su Codice Appalti, linee guida ANAC, regolamenti comunali e delibere precedenti - Assistente AI per i dipendenti: chatbot interno per domande su normativa, procedure e regolamenti - Multi-ufficio: configurazione modulare per Gare, Protocollo, Demografici, Tributi, Urbanistica con knowledge base dedicate - Interfaccia web locale: Open WebUI sulla LAN dell'ente, nessuna installazione sui PC degli operatori, da 3 a 8 utenti simultanei #### AgenticHealth URL: https://www.noze.it/prodotti/agentichealth/ Piattaforma dati clinica in locale, on-premise, MDR-ready. Dati clinici in locale. AI a fianco del medico. Chatbot clinico con LLM locali, RAG su dati FHIR/DICOM, supporto alla diagnosi, follow-up remoto e digital twin del paziente. Controllo del dato, percorso MDR pianificato, con esperienza Meyer e CNR. - Target: ospedali, ASL, IRCCS, cliniche, centri di ricerca biomedica - Deployment: on-premise - Standard: FHIR, DICOM, MDR - AI: LLM locali con RAG su dati clinici - Esperienza: Meyer, CNR, centri di ricerca europei Funzionalità principali: - Chatbot clinico AI: LLM open-source locali (Llama, Mistral, Qwen, modelli medicali) per interrogare la base dati clinica in linguaggio naturale - RAG su dati sanitari: indicizzazione di referti, esami di laboratorio, lettere di dimissione e imaging report (HL7 FHIR, DICOM, PDF clinici) - Supporto alla diagnosi: diagnosi differenziali basate su linee guida e letteratura medica, con citazione delle fonti (percorso SaMD Classe I MDR) - Follow-up remoto: monitoraggio post-dimissione con questionari AI-guided, alert sul peggioramento, integrazione IoMT - Digital twin paziente: modello digitale longitudinale — simulazione di scenari terapeutici e predizione degli outcome - Audit & interoperabilità: audit trail completo, connettori EHR/HIS, ICD-10, SNOMED CT, LOINC #### Admina Enterprise URL: https://www.noze.it/prodotti/admina/ La piattaforma open Admina + servizi enterprise per AI governata e sovrana. Admina Enterprise è il framework open-source Admina (Apache 2.0, disponibile su admina.org) più i servizi enterprise di noze — integrazione, audit di governance, training, supporto e customizzazioni. Conforme a NIS2 e AI Act. - Open source: Apache 2.0 su admina.org - Servizi enterprise: integrazione, audit, training, supporto, customizzazioni - Conformità: NIS2, EU AI Act Funzionalità principali: - Integrazione enterprise: architetture, deployment Docker/K8s, integrazione con i vostri sistemi (LangChain, CrewAI, MCP) e i vostri LLM - Audit di governance: verifica della postura AI — data residency, PII redaction, prompt injection, audit trail - Hardening & SLA: pacchetti di supporto enterprise con SLA, hotfix prioritari e canale diretto con il core team - Training per il team: formazione on-site o remota per team IT, security e data - Customizzazioni & plugin: sviluppo di plugin custom, policy di dominio, connettori verso i vostri data layer e modelli - Compliance EU AI Act: mappatura delle applicazioni AI sui requisiti EU AI Act / NIS2 / GDPR via classificazione nativa di Admina ### Settori #### PMI URL: https://www.noze.it/settori/pmi/ NIS2, sicurezza e governance AI senza un team interno enorme. Aziende italiane fra 10 e 250 dipendenti che devono adeguarsi a NIS2, GDPR e EU AI Act senza poter contare su un SOC interno. Sfide principali: - NIS2 entro le scadenze - Visibilità sugli asset - AI senza guardrail - Budget e personale limitati #### Pubblica Amministrazione URL: https://www.noze.it/settori/pa/ AI in locale per Comuni, Province e Regioni — senza cloud extra-UE. Comuni, Province, Regioni, ASL e Camere di Commercio che vogliono portare l'AI dentro l'ente senza far uscire i dati. Sfide principali: - Dati che non possono uscire - Acquisti vincolati a MePA / Consip - Personale tecnico ridotto - Compliance trasversale #### Sanità URL: https://www.noze.it/settori/sanita/ AI clinica in locale, percorso MDR, dati che restano nell'ospedale. AOU, ASL, IRCCS, cliniche private e centri di ricerca biomedica che vogliono usare l'AI sui dati clinici senza farli uscire dal perimetro. Sfide principali: - Dati clinici sotto GDPR e MDR - Cartelle frammentate - Decision support difensivo - Follow-up post-dimissione #### Ricerca URL: https://www.noze.it/settori/ricerca/ 25+ anni di R&D applicato, partner di consorzi europei. Università, centri di ricerca, dipartimenti che cercano un partner industriale per progetti europei, ricerca applicata, prototipi clinici o soluzioni AI sovereign-by-design. Sfide principali: - Partner industriali credibili - Trasferimento tecnologico - Compliance dei dati di ricerca - Ricerca → impresa #### MSP & System Integrator URL: https://www.noze.it/settori/msp-system-integrators/ Soluzioni white-label, supporto enterprise e canale dedicato. Managed Service Provider, system integrator e consulenti IT che vogliono offrire ai propri clienti vulnerability assessment, governance dei dati e AI sovrana senza dover sviluppare la piattaforma in casa. Sfide principali: - Servizi NIS2 da rivendere - AI governance in conto terzi - Margini su servizi ricorrenti - Supporto di secondo livello #### Studi Professionali & Consulenti URL: https://www.noze.it/settori/studi-consulenti/ Studi legali, commercialisti e consulenti che gestiscono compliance, AI Act e NIS2 per i propri clienti. Sfide principali: - NIS2 + GDPR + EU AI Act (regolamenti sovrapposti) - Postura misurabile - Compliance integrata - Servizi di compliance da erogare - Report board-ready ### Open Source URL: https://www.noze.it/open-source/ Crediamo nell'open source come pratica industriale: rilasciamo strumenti, partecipiamo a community, supportiamo progetti. Principali progetti: - **Admina** — Open framework for building AI-governed applications by design (Apache 2.0). https://admina.org - **DAKE** — Data Knowledge Engine. - **DebugABot** — Debug Agent Bot. - **Mindraces** — Progetto di ricerca. - **Ripeg** — Progetto di ricerca. noze è stata tra i soci fondatori di CIRS (primo consorzio italiano di aziende FLOSS) e di T-OSSLab (centro di competenza toscano sul software open source). ### Progetti di Ricerca URL: https://www.noze.it/progetti/ 30+ progetti di ricerca applicata. Da Mindraces a Ripeg, dal Meyer ai Comuni: portiamo nei prodotti ciò che impariamo nei progetti di ricerca. Collaborazioni con: Università degli Studi di Pisa, Scuola Superiore Sant'Anna, Scuola Normale Superiore, CNR, Università di Oxford, UN Secretariat Geneva, ILO Geneva, Regione Toscana. ### Come Lavoriamo URL: https://www.noze.it/come-lavoriamo/ Approccio agile e iterativo. Sprint di 2 settimane, review 1:1, iterazione continua. Fasi di progetto: 1. **Discovery** — Analisi approfondita dei requisiti e degli obiettivi. 2. **Design** — Progettazione dell'architettura e delle soluzioni. 3. **Sviluppo** — Implementazione iterativa con feedback continuo. 4. **Test** — Verifica approfondita della qualità e delle funzionalità. 5. **Deployment** — Rilascio controllato e monitorato. 6. **Adozione e Change Management** — Formazione, onboarding e accompagnamento al cambiamento organizzativo per garantire che la tecnologia venga realmente adottata. 7. **Supporto** — Manutenzione e miglioramento continuo. Pratiche: code review sistematiche, test automatizzati, CI/CD, documentazione accurata, stand-up quotidiani, sprint review, retrospettive. ### Lavora con noi URL: https://www.noze.it/lavora-con-noi/ Siamo sempre alla ricerca di talenti e persone in gamba da conoscere e con cui collaborare su progetti tecnologici innovativi. Per candidarsi: inviare CV e lettera di presentazione a info@noze.it con oggetto "Candidatura". ### Insights URL: https://www.noze.it/insights/ Articoli e approfondimenti su AI, cybersecurity, compliance e innovazione. --- ## EN — English Products and solutions that bring AI into companies and the public sector in an open, self-hosted and EU-compliant way. noze is an Italian company founded in 2000 by Stefano Noferi, based at the Technological Centre of Navacchio (Pisa, Italy). We specialise in Artificial Intelligence, Cyber Security, Cloud Architectures, Web Apps, Digital Health, Innovation Management and R&D. We actively collaborate with the Pisa research ecosystem (Università degli Studi di Pisa, Scuola Normale Superiore, Scuola Superiore Sant'Anna, CNR) and with other Italian and European universities and research centres. Focused on open technologies since day one, noze was a founding member of CIRS — the first Italian consortium of FLOSS (Free Libre Open Source Software) companies — and of T-OSSLab, the Tuscan regional competence centre on open-source software. ### Key figures - 25+ years of experience - 100+ clients and partners - 30+ applied R&D projects - 100% data inside the EU ### Six pillars 1. **Open by default** — Open technologies, inspectable code, no lock-in. 2. **Self-hosted by design** — On-premise, local LLMs, data always inside the EU. 3. **EU-Compliant** — AI Act, NIS2, GDPR, MDR — by design, not as add-ons. 4. **25+ years of R&D** — From clinical research to public procurement: applied research. 5. **AI-first, human where it counts** — Extensive automation where it makes sense, people where it really matters. 6. **Agentic & Change Management** — AI agents in real workflows, guided adoption, measured impact. ### Solutions #### Artificial Intelligence URL: https://www.noze.it/en/artificial-intelligence/ Machine Learning, Generative AI and Agentic AI. Our AI solutions leverage cutting-edge technologies to help businesses automate processes, gain insights from data, and create intelligent systems that learn and adapt. Core services: - **Machine Learning & Deep Learning**: Sophisticated ML/DL models tailored to specific business needs — predictive analytics, computer vision and natural language processing. - **Large Language Models & Generative AI**: Integration and customisation of ChatGPT, Claude, Gemini and open-source models (Llama, Gemma, DeepSeek, Qwen). - **Retrieval-Augmented Generation (RAG) & Local LLMs**: RAG with local or cloud LLMs to integrate proprietary data. Private solutions with open-source models for maximum security. - **Agentic AI & Multi-Agent Systems**: Autonomous AI agents with reasoning, persistent memory and tool use. Multi-agent systems with LangChain/LangGraph, CrewAI, AutoGen, smolagents, Google ADK, Cheshire Cat and A2A architectures. - **Model Context Protocol (MCP)**: Enhanced AI capabilities with contextual awareness and access to external tools and data sources. - **AI Ethics & Governance**: Responsible AI development with robust governance frameworks, bias detection and transparency measures. - **AI Integration**: Seamless integration of AI capabilities into existing systems and workflows. - **Agentic AI Open-Source Frameworks**: LangChain, LangGraph, CrewAI, AutoGen, LlamaIndex, smolagents, Google ADK, Cheshire Cat. A2A (Agent2Agent) protocol support. - **AI for Sensitive & Healthcare Data**: Secure AI solutions for sensitive and healthcare data with local models, advanced encryption and regulatory compliance. Expertise: supervised/unsupervised/reinforcement learning, neural networks and deep learning, NLP/NLU, Computer Vision, time series analysis, anomaly detection, LLM implementation and fine-tuning. #### Cyber Security URL: https://www.noze.it/en/cybersecurity/ Analyse and secure your IT infrastructures. We take a holistic approach, addressing technical vulnerabilities as well as human and process factors. Core services: - **Security Assessment**: Thorough assessments to identify vulnerabilities in systems and infrastructure. - **Penetration Testing**: Ethical hackers simulate real-world attacks to test defences and identify security gaps. - **Security Monitoring**: Continuous monitoring to detect and respond to security incidents in real time. - **Threat Intelligence**: Latest threat intelligence to anticipate emerging cyber threats. - **Incident Response**: Team ready to respond quickly and effectively to security incidents. - **Security Training**: Comprehensive security awareness training for employees. - **Compliance**: Support for GDPR, NIS2, ISO 27001. - **AI for Cyber Security**: Advanced AI solutions to enhance defences, automate threat detection and accelerate incident response. - **Zero NOC & Zero SOC**: Automated systems for network infrastructure monitoring and security incident response. Services: network security assessment and hardening, application security testing, cloud security architecture, security policy development, incident response planning, security awareness training, compliance assessment and remediation. #### Cloud & Web Apps URL: https://www.noze.it/en/cloud-web-apps/ Cloud-native architectures for scalable web and mobile applications. End-to-end services from initial concept and design to development, deployment and ongoing maintenance. Core services: - **Cloud-Native Development**: Microservices, containers and serverless architectures. - **Web Application Development**: From simple websites to complex web applications with React, Angular, Vue. - **Mobile Application Development**: Cross-platform with native-like experiences on iOS and Android. - **Scalable Architecture**: Horizontal scaling without performance degradation. - **CI/CD**: Pipelines for rapid, reliable delivery of new features. - **Containerisation**: Docker and Kubernetes. - **Serverless Computing**: Reduced operational costs and improved scalability. Solutions: enterprise web applications, e-commerce platforms, CMS, Progressive Web Applications, real-time collaboration tools, data visualisation dashboards, API development and integration. #### Digital Health URL: https://www.noze.it/en/digital-health/ Data-driven software for biomedical research. Solutions that leverage cutting-edge technology to improve patient outcomes, streamline clinical workflows and accelerate biomedical research. Core services: - **Clinical Decision Support Systems**: Intelligent systems analysing medical data to provide evidence-based recommendations. - **Medical Imaging Analysis**: AI-powered solutions for radiologists and clinicians. - **Electronic Health Records**: Secure, interoperable EHR systems. - **Biomedical Data Analysis**: Machine learning for complex biomedical datasets. - **Remote Patient Monitoring**: IoT-enabled solutions for remote monitoring. - **Clinical Trial Management**: Systems to streamline clinical trial management. - **Healthcare Interoperability**: Seamless data exchange with HL7 FHIR and DICOM. Compliance: CE, MDR, GDPR. Specialisation in cybersecurity and privacy for the healthcare sector. #### Linux Services & Systems URL: https://www.noze.it/en/linux-services-systems/ Domains, hosting, PEC, email infrastructure, network services and Linux systems. #### How We Work (Integrated Innovation Management) URL: https://www.noze.it/en/how-we-work/ At noze, innovation management is not a separate service: it is the natural way we work. Our technical DNA drives us to continuously explore new technologies and assess their practical applicability. This approach has been part of our method since the very beginning. Our method includes: innovation management, technology scouting, adoption roadmaps, change management, agile methodology, Design Thinking, Lean Startup, metrics and continuous improvement. Activities: innovation readiness assessment, technology adoption planning, open innovation, portfolio management, training and coaching, innovation lab setup. #### Research & Development URL: https://www.noze.it/en/research-development/ Quantum Computing, Blockchain, IoT, Robotics, Energy & Climate. Research areas: - **Quantum Computing**: Quantum algorithms and applications. - **Blockchain & Distributed Ledger**: Innovative blockchain applications, smart contracts, cryptocurrencies and NFTs. - **Internet of Things (IoT)**: Connected device ecosystems, IoT platforms, edge computing. - **Robotics**: Advanced robotic systems based on ROS (Robot Operating System), autonomous systems, human-robot interaction. - **Energy & Climate**: Sustainable energy technologies, renewable energy and climate monitoring. Activities: collaborative research with academic institutions, proof-of-concept prototypes, open-source contributions, scientific publications, workshops and hackathons, technology transfer, patents. ### Products #### CyberAgent URL: https://www.noze.it/en/products/cyberagent/ The AI agent that watches your attack surface and prepares NIS2 compliance. Continuous cybersecurity, run by an AI agent. CyberAgent watches your network, web apps and APIs, investigates vulnerabilities like an analyst, prioritizes them by real business impact and prepares NIS2 and ISO 27001 evidence. The decision on what to fix always stays with your team. - Target: Italian SMEs (10-250 employees), professional firms, local PA & healthcare, MSPs & system integrators - Pricing: from €99/month (Starter, Business, Enterprise plans) - Compliance: NIS2, ISO 27001 - Data: stored in the EU - Availability: InStock Key features: - Vulnerability Assessment: continuous scanning of network, web apps and APIs with real-time CVE database - Automated pentest: network, web and API penetration tests without hiring a red team - Social Engineering: simulated phishing campaigns, awareness training, per-employee scoring - AI Risk Prioritisation: automatic vulnerability triage based on real business impact - NIS2 / ISO 27001 ready: reports and checklists aligned to compliance frameworks - Real-time dashboard: one console for CISO, IT manager and management #### DataGovern URL: https://www.noze.it/en/products/datagovern/ The agentic AI that governs business documents, processes and activities against NIS2, GDPR and the AI Act. DataGovern brings AI agents to the governance of business documents, processes and activities: it maps obligations (NIS2, GDPR, EU AI Act and beyond) onto real workflows, prepares evidence and filings, and configures itself company by company, verticalizing to the individual case. On-premise, with open source LLMs; the decision stays with the team. - Target: NIS2-bound SMEs, companies running AI systems, public sector & healthcare, DPOs, CISOs, law firms - Deployment: on-premise - AI: open-source models Key features: - AI Risk Classification: classify AI systems under the EU AI Act and auto-generate required documentation - NIS2 Compliance Manager: security posture assessment, gap analysis, incident notification workflow - GDPR Governance Hub: records of processing, DPIAs, data subject rights, lawful basis monitoring - Data Residency Engine: on-premise open-source LLMs (Llama, Mistral, DeepSeek, Gemma, Qwen) — no data leaving your EU perimeter - Cross-Regulation Gap Analysis: cross GDPR / NIS2 / AI Act gap analysis with unified remediation plan - Unified dashboard: one view on assets, risk, deadlines and compliance KPIs with board-ready reporting #### IntelliPA URL: https://www.noze.it/en/products/intellipa/ Turnkey self-hosted AI for Italian municipalities and public bodies. A dedicated workstation, local open-source LLMs and RAG over the entity's documents. Fully on-premise, no cloud — data stays inside the entity. Developed from the Sesto Fiorentino pilot. - Target: Italian municipalities, provinces, regions, chambers of commerce, public bodies - Deployment: on-premise, dedicated workstation - AI: local open-source LLMs with RAG - Data: stays inside the entity, no cloud - Procurement: available via MePA / Consip Key features: - Assisted document drafting: drafts of tenders, specifications, decrees and resolutions based on entity templates and current regulations - Automatic consistency check: digital reviewer before signature — internal inconsistencies, outdated references, contradictions and formal errors - RAG on regulations: queryable knowledge base on procurement law, guidelines, municipal rules and past resolutions - Employee AI assistant: internal chatbot answering questions on rules, procedures and regulations - Multi-office: modular setup for tenders, records, civil registry, tax, urban planning with dedicated knowledge bases - Local web interface: Open WebUI on the entity LAN, no installation on user PCs, 3 to 8 concurrent operators #### AgenticHealth URL: https://www.noze.it/en/products/agentichealth/ Self-hosted clinical data platform, on-premise, MDR-ready. Clinical chatbot with local LLMs, RAG over FHIR/DICOM data, diagnosis support, remote follow-up and patient digital twin. Data control, planned MDR pathway, with Meyer and CNR experience. - Target: hospitals, health authorities, IRCCS, private clinics, biomedical research centres - Deployment: on-premise - Standards: FHIR, DICOM, MDR - AI: local LLMs with RAG over clinical data - Experience: Meyer, CNR, European research centres Key features: - Clinical AI chatbot: local open-source LLMs (Llama, Mistral, Qwen, medical models) to query clinical data in natural language - RAG on health data: indexing of reports, lab results, discharge letters and imaging reports (HL7 FHIR, DICOM, clinical PDFs) - Diagnosis support: differential diagnoses based on guidelines and medical literature, with source citations (SaMD Class I MDR path) - Remote follow-up: post-discharge monitoring with AI-guided questionnaires, deterioration alerts, IoMT integration - Patient digital twin: longitudinal digital model — therapy scenario simulation and outcome prediction - Audit & interoperability: full audit trail, EHR/HIS connectors, ICD-10, SNOMED CT, LOINC #### Admina Enterprise URL: https://www.noze.it/en/products/admina/ The open Admina platform + enterprise services for governed, sovereign AI. Admina Enterprise is the open-source Admina framework (Apache 2.0, available on admina.org) plus noze enterprise services — integration, governance audits, training, support and customisations. Compliant with NIS2 and AI Act. - Open source: Apache 2.0 on admina.org - Enterprise services: integration, audit, training, support, customisations - Compliance: NIS2, EU AI Act Key features: - Enterprise integration: architectures, Docker/K8s deployment, integration with your stack (LangChain, CrewAI, MCP) and your LLMs - Governance audit: AI posture review — data residency, PII redaction, prompt injection, audit trail - Hardening & SLA: enterprise support packages with SLA, priority hotfixes and direct line to the core team - Team training: on-site or remote training for IT, security and data teams - Customisations & plugins: custom plugin development, domain-specific policies, connectors to your data layers and models - EU AI Act compliance: mapping of AI applications to EU AI Act / NIS2 / GDPR requirements via Admina native classification ### Industries #### SMEs URL: https://www.noze.it/en/industries/smes/ NIS2, security and AI governance without a huge in-house team. Italian companies between 10 and 250 employees that need to comply with NIS2, GDPR and the EU AI Act without an in-house SOC. Key challenges: - NIS2 deadlines: directive in force, real fines, policies and remediation still to be defined - Visibility on assets: incomplete IT inventory, vulnerabilities discovered only after an incident - AI without guardrails: departments using cloud LLMs without policies or traceability - Limited budget and people: no in-house CISO, no dedicated DPO, no red team How we help: CyberAgent for automated vulnerability assessment, DataGovern for integrated compliance, Admina Enterprise for open AI governance, CISO-as-a-service consulting. #### Public Administration URL: https://www.noze.it/en/industries/public-administration/ In-house AI for municipalities, provinces and regions — no extra-EU cloud. Municipalities, provinces, regions, healthcare authorities and chambers of commerce that want to bring AI inside the entity without letting data leave. Key challenges: - Data that cannot leave: acts, resolutions, regulations — public but sensitive data that cannot end up on extra-EU clouds - Procurement constraints: complex procurement, long timelines, vendor pool limited to the public catalogue - Limited technical staff: few IT resources, almost no AI training - Cross-cutting compliance: GDPR + procurement law + AI Act + ANAC guidelines, all to be governed together How we help: IntelliPA for dedicated AI workstations with RAG, CyberAgent for vulnerability assessment, DataGovern for integrated compliance, Admina Enterprise for on-premise AI governance. #### Healthcare URL: https://www.noze.it/en/industries/healthcare/ In-house clinical AI, MDR pathway, data that stays in the hospital. Hospitals, health authorities, IRCCS, private clinics and biomedical research centres that want to use AI on clinical data without letting it leave the perimeter. Key challenges: - Clinical data under GDPR and MDR: strict constraints on residency, audit trail, clinical validation, CE marking - Fragmented records: reports, discharge letters, imaging, PDFs — data scattered and hard to query - Defensive decision support: AI must help the doctor, not replace them, and always cite sources - Post-discharge follow-up: continuity of care hard to manage without dedicated tools How we help: AgenticHealth for local clinical chatbot with RAG on FHIR/DICOM and digital twin, CyberAgent for hospital network security, Admina Enterprise for clinical AI governance, consulting on MDR/CE pathway. #### Research & Academia URL: https://www.noze.it/en/industries/research/ 25+ years of applied R&D, partner of European consortia. Universities, research centres and departments looking for an industrial partner for European projects, applied research, clinical prototypes or self-hosted AI solutions. Key challenges: - Credible industrial partners: calls require partners with a real track record - Tech transfer: prototypes must become products, not stay as papers - Research data compliance: clinical, biometric, sensitive data — EU residency and audit trails mandatory - Research to industry: spin-offs and PoCs that fail to close the loop towards the market How we help: participation in FP / Horizon projects, AgenticHealth for clinical platforms with audit trail, Admina Enterprise as open framework for reproducible AI governance research. #### MSPs & System Integrators URL: https://www.noze.it/en/industries/msp-system-integrators/ White-label solutions, enterprise support and a dedicated channel. Managed Service Providers, system integrators and IT consultancies that want to offer vulnerability assessment, data governance and self-hosted AI without building the platform in house. Key challenges: - NIS2 services to resell: clients asking for compliance, no enterprise scanner available - AI governance for clients: clients integrate LLMs, need protection without rewriting their stack - Margins on recurring services: need recurring offers, not just one-off projects - Second-level support: fast channel to the product team needed How we help: CyberAgent multi-tenant and white-label, Admina Enterprise packages on the open framework, co-delivery of assessments and training. #### Professional Firms URL: https://www.noze.it/en/industries/professional-firms/ Law firms, accountants and consultants managing compliance, AI Act and NIS2 for their clients. Key challenges: - NIS2 + GDPR + EU AI Act: three overlapping regulations requiring an integrated compliance plan - Measurable posture: real visibility on assets, risks and exceptions - Compliance built-in, not bolted on: AI Act, NIS2, GDPR designed in upfront - Compliance services to deliver: tools to industrialise audits and gap analysis for clients - Board-ready reports: metrics the board and management can actually understand How we help: DataGovern for integrated GDPR/NIS2/AI Act compliance, CyberAgent for asset discovery and automated pentest, Admina Enterprise for AI governance, CISO-as-a-service consulting. ### Open Source URL: https://www.noze.it/en/open-source/ We believe in open source as an industrial practice: we release tools, participate in communities, and support projects. Main projects: - **Admina** — Open framework for building AI-governed applications by design (Apache 2.0). https://admina.org - **DAKE** — Data Knowledge Engine. - **DebugABot** — Debug Agent Bot. - **Mindraces** — Research project. - **Ripeg** — Research project. Founding member of CIRS (first Italian FLOSS consortium) and T-OSSLab (Tuscan open-source competence centre). ### R&D Projects URL: https://www.noze.it/en/projects/ 30+ applied research projects. From Mindraces to Ripeg, from Meyer to municipalities: we bring into products what we learn from research projects. Collaborations: Università degli Studi di Pisa, Scuola Superiore Sant'Anna, Scuola Normale Superiore, CNR, University of Oxford, UN Secretariat Geneva, ILO Geneva, Regione Toscana. ### How We Work URL: https://www.noze.it/en/how-we-work/ Agile, iterative approach. Two-week sprints, 1:1 reviews, infinite iteration. Project phases: 1. **Discovery** — In-depth analysis of requirements and objectives. 2. **Design** — Architecture and solution planning. 3. **Development** — Iterative implementation with continuous feedback. 4. **Testing** — Thorough quality and functionality verification. 5. **Deployment** — Controlled, monitored release. 6. **Adoption and Change Management** — Training, onboarding and organisational change support to ensure the technology is actually adopted. 7. **Support** — Maintenance and continuous improvement. Practices: systematic code reviews, automated testing, CI/CD, accurate documentation, daily stand-ups, sprint reviews, retrospectives. ### Work With Us URL: https://www.noze.it/en/work-with-us/ We are always looking for talented people to collaborate with on innovative technology projects. To apply: send CV and brief cover letter to info@noze.it with subject "Application". ### Insights URL: https://www.noze.it/en/insights/ Articles and in-depth analysis on AI, cybersecurity, compliance and innovation. --- ## Contatti / Contact noze S.r.l. Via Giuntini, 25 — 56023 Navacchio (PI), Italia Email: info@noze.it Tel: +39 050 7916874 PEC: info@pec.noze.it P. IVA / VAT ID: IT01547110500 Codice SDI / SDI code: M5UXCR1 ### Link — IT - [Home](https://www.noze.it/) - [Chi siamo](https://www.noze.it/chi-siamo/) - [Come lavoriamo](https://www.noze.it/come-lavoriamo/) - [Prodotti](https://www.noze.it/prodotti/) - [Open Source](https://www.noze.it/open-source/) - [Progetti R&D](https://www.noze.it/progetti/) - [Partners](https://www.noze.it/partners/) - [Insights](https://www.noze.it/insights/) - [Lavora con noi](https://www.noze.it/lavora-con-noi/) - [Contatti](https://www.noze.it/contatti/) - [Privacy](https://www.noze.it/privacy/) - [Disclaimer](https://www.noze.it/disclaimer/) - [Codice Etico](https://www.noze.it/codice-etico/) ### Links — EN - [Home](https://www.noze.it/en/) - [About](https://www.noze.it/en/about/) - [How We Work](https://www.noze.it/en/how-we-work/) - [Products](https://www.noze.it/en/products/) - [Open Source](https://www.noze.it/en/open-source/) - [R&D Projects](https://www.noze.it/en/projects/) - [Partners](https://www.noze.it/en/partners/) - [Insights](https://www.noze.it/en/insights/) - [Work With Us](https://www.noze.it/en/work-with-us/) - [Contact](https://www.noze.it/en/contact/) - [Privacy](https://www.noze.it/en/privacy/) - [Disclaimer](https://www.noze.it/en/disclaimer/) - [Code of Ethics](https://www.noze.it/en/code-of-ethics/)