Digitaliso
Italian cloud platform for running ISO management systems covering quality, safety and environment. Its built-in AI, AMMIRA, answers questions from your own system documentation, backed by four expert bots. Sold through demonstration, with no public pricing.
What is Digitaliso?
Digitaliso is a cloud platform for running management systems built to ISO standards, bringing quality, safety and environment into a single workspace. It is published by QSA.net Srl, an Italian company that moved into software after 26 years of consultancy in ISO-compliant management systems, and it is presented as a proprietary product rather than a configuration of somebody else's tool.
The software runs as Software as a Service, with no local installation, and is reached through a browser from any connected device. Its architecture follows the High Level Structure defined by ISO, which is what lets one installation serve several standards at once instead of one system per certification. Functionality is grouped into four areas. Documented information distributes controlled documents and notifies the users concerned. Resources tracks staff training, instruments, maintenance and calibration registers. Improvement carries audits, non-conformities, corrective and improvement actions. Analysis and evaluations handles customer and supplier assessment and data visualisation. Each menu launches a ready-to-use process drawn from methodologies the publisher has refined over three decades, then configured through a setup menu.
The artificial intelligence sits on top of that corpus rather than beside it. AMMIRA reads the organisation's own system documentation and answers questions about it in real time, which the vendor positions as a way to spread organisational knowledge beyond the handful of people who normally hold it, to support the onboarding of new staff, to help check documents for consistency and to produce documentary evidence for clients and assessors. Alongside it, four NAVIGATOR bots work on narrower ground and run on OpenAI 4o technology: ISO Navigator for interpreting and applying standards, HSE Navigator for identifying binding health, safety, environment and privacy obligations, NC Navigator for root-cause work on an 8D approach, and Risk Navigator for risk and opportunity analysis along ISO 31000 lines.
Commercially the platform comes in three configurations, Beginner, Standard and Enterprise, or a bespoke setup. No prices are published and the entry point is a booked demonstration.
What it does
- Answer questions about your own system documentation in real time through the AMMIRA assistant
- Centralise ISO system documents and control their distribution, access and revision notifications
- Track audits, non-conformities, complaints, corrective actions and improvement actions
- Manage deadlines and reminders for staff training, instruments, maintenance and calibration
- Run risk and opportunity analysis using a Risk Based Thinking and ISO 31000 approach
- Evaluate customers and suppliers, then build indicators, dashboards and reports from the data
- Identify applicable health, safety, environment and privacy obligations through the HSE Navigator bot
When to use Digitaliso / When not to
A quick filter to help you decide if Digitaliso is the right fit.
When to use Digitaliso
- Quality and management system managers who maintain ISO documentation, deadlines and audit evidence
- Small and medium-sized enterprises certified to ISO 9001, 14001 or 45001, or working towards it
- Independent consultants and management system professionals, who have a dedicated partner programme
- Organisations still running their management system on Microsoft Office files and shared folders
- Auditors and assessors who need documentary evidence produced quickly from a clear HLS structure
When not to use Digitaliso
- Buyers who need a published price before opening a conversation, since no figure appears anywhere
- Teams wanting to self-serve: there is no free plan, no free trial and no online sign-up
- Non-Italian-speaking organisations, as the English site is thinner and references are largely Italian
- Anyone needing a mobile app, since the platform is browser-only with no iOS or Android release
- Developers expecting public API documentation, which is sold from the Standard tier but never published
How to use Digitaliso
A typical end-to-end flow, from setup to results.
- Book a demonstration through the request form or the vendor's online scheduling link
- Discuss scope with the vendor, since there is no self-service sign-up or online purchase
- Choose one of the three predefined configurations, Beginner, Standard or Enterprise, or a bespoke one
- Go through the bundled setup service, where the initial parameterisation is done with the vendor
- Adjust terminology, organisational structure and permission levels to match how your company works
- Set each user's default language, profile and role so records reach the right people
- Load your system documentation so that AMMIRA has a corpus to read and answer from
- Configure notifications, reminders and deadlines for training, instruments and maintenance
- Bring customers and suppliers in through the dedicated portals, available from the Standard tier
- Build dashboards, indicators and reports, extending to AppSheet and Looker Studio at Enterprise level
Pros & Cons
Pros
- The AI works on your own document corpus rather than answering from generic knowledge
- Four purpose-built bots cover distinct normative territory instead of one catch-all assistant
- High Level Structure means a single platform can serve several ISO standards at once
- Deep customisation of terminology, permissions, organisational structure and per-user language
- The publisher is itself certified UNI EN ISO 9001 for software design and SaaS provision
- No fixed upfront investment: the vendor describes a flexible, modular usage fee
- Setup, training and assistance are bundled services rather than paid extras from the entry tier
Cons
- No price is published at any tier, so the cost cannot be assessed without a sales conversation
- No permanent free plan and no free trial are offered anywhere on the site
- No terms and conditions are published, leaving ownership of customer content undocumented
- Privacy documentation covers the marketing site and client relationship, not the platform's contents
- No public API documentation, although APIs are sold from the Standard tier upward
- No mobile application: the platform is browser-only
- The cookie section of the privacy policy still describes www.qsa.net, a leftover from the publisher's site
Pricing & Plans
No pricing is published. Digitaliso advertises neither a permanent free plan nor a free trial, and no amount or currency appears anywhere on the site; the sitemap contains no pricing page. Three named configurations, Beginner, Standard and Enterprise, are presented with their functional contents but without figures, and a bespoke configuration is offered alongside them. The vendor describes the commercial model as a flexible and modular usage fee, proportionate to actual use, and positions it against fixed upfront investment. Obtaining a price requires booking a demonstration and going through the sales process.
- presented as suited to micro enterprises getting started
- core system
- environment and security modules
- with data analysis
- supervision dashboard
- setup
- connectors
- standard assistance
- presented as suited to digitalising management systems in small and medium-sized enterprises
- adds customer and supplier portals
- plus APIs and developer tools
- a dedicated product specialist
- an on-demand video course
- a customised URL and unlimited storage. Price not published
- presented as adding advanced features for custom WebApps and reporting
- adds a dedicated Google Workspace
- access to AppSheet and Looker Studio
- a disaster recovery service and the NC entry
- maintenance and audit checklist WebApps. Price not published
- built around specific objectives rather than a predefined package. Price not published
Data, GDPR & hosting
A consolidated view of how Digitaliso handles your data.
GDPR overview
GDPR is addressed explicitly. The privacy policy states that personal data is handled by QSA.net Srl in accordance with Regulation (EU) 2016/679 and Italian national law, and sets out the lawful bases relied on under Article 6: legitimate interest, contract and legal obligation. Data subject rights are listed in detail with articles cited, covering access (15), rectification and erasure (16 and 17), restriction and objection (18) and portability (20), alongside withdrawal of consent and the right to complain to the supervisory authority. The controller is identified with its VAT number and contact details. As the publisher is established in Italy, no Article 27 representative is required or named. Beyond that the record thins: no data protection officer is designated, no processing agreement is offered, no subprocessors are named and no security certification is claimed.
Who owns the data?
The published privacy policy names QSA.net Srl, VAT 10634300965, as the data controller, reachable at im@qsa.net, at the certified address qsanet@pec.it or by telephone. That document, however, governs the personal data of the publisher's own clients and of visitors to the marketing site. It says nothing about the material a customer places inside the platform. No terms and conditions are published anywhere on the site, and no clause was found stating who owns the system documents, records and audit trails once they are in Digitaliso, nor what the vendor may do with them. On the available evidence, ownership of customer content is simply undocumented.
Reuse rights
Because no terms and conditions are published, nothing states whether a customer may re-use, export or redistribute the material they hold in Digitaliso without asking permission. What the privacy policy does describe is the publisher's own use of personal data: legal, administrative, accounting and tax obligations, duties tied to commercial relationships, a customer register, promotional activity, multimedia communication and customer management. The lawful bases claimed are legitimate interest, contract and law. Recipients are given only as categories, namely banks and credit institutions, consultants and independent professionals, and internal collaborators, never as named processors. No statement says customer data is used to train AI models, and none rules it out.
Data retention & training
Hosting summary
No hosting jurisdiction is declared. Neither the privacy policy nor the commercial pages state which country or region holds customer data, and the policy mentions hosting providers only as one of several categories of possible recipient, without naming any. The one concrete clue is commercial rather than legal: TIM infrastructure is listed among the services bundled into every configuration from the entry tier upward, TIM being an Italian telecommunications operator. A backup service is included at the same level, and a disaster recovery service is added at Enterprise, where a dedicated Google Workspace and access to AppSheet and Looker Studio also appear, implying Google-side processing for those components without describing it. Separately, and as a network observation rather than a vendor statement, the domain resolves to an address geolocated in Milan on Telecom Italia's network. That is consistent with Italian hosting but is not evidence of where customer data actually resides. Anyone with a data residency requirement should obtain this in writing.
Things to keep in mind
Risks and trade-offs to weigh before adopting Digitaliso.
- An assistant that answers from your procedures is easy to mistake for an authority on them; the vendor gives no accuracy guarantee, and a wrong answer about a normative requirement can surface at an audit rather than at the screen
- Leaning on the bots to interpret standards can quietly erode the in-house competence that certification actually depends on, leaving nobody able to challenge the machine
- No price is published at any tier, so budget exposure is unknown until a sales conversation is well under way
- No terms and conditions are published, which leaves ownership of the documents and records placed in the platform undocumented
- The privacy policy covers the publisher's marketing site and client relationship, not the data held inside the platform, so retention and deletion of your system content are unaddressed
- The NAVIGATOR bots run on OpenAI 4o technology, implying a transfer to a third-party provider that the site neither documents nor frames contractually
- No processing agreement, no named subprocessors and no documented opt-out from AI training, which may block procurement in regulated sectors
Setup & Integrations
Technical difficulty
Low on the technical side, moderate on the organisational side. The platform is pure SaaS reached through a browser, so there is nothing to install, provision or maintain locally. Setup itself is a bundled service from the entry configuration upward, meaning the initial parameterisation is carried out with the vendor rather than left to the customer, and it is backed by classroom training, an on-demand video course and, from the Standard tier, a dedicated product specialist. The remaining effort is decision-making: terminology, organisational structure, permission levels, notifications and user profiles all have to be settled.
Deployment
Integrations
Behind Digitaliso
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Digitaliso.
Frequently asked questions
What does Digitaliso actually do?
What is AMMIRA?
What are the NAVIGATOR bots?
How much does Digitaliso cost?
Is there a free plan or a free trial?
Does it need to be installed, and is there a mobile app?
Is there an API?
How is personal data handled under the GDPR?
Should you pick Digitaliso?
Digitaliso is a deliberately narrow product, and that is its strength. It does not try to be a general business suite: it exists to run ISO management systems, and it is built by a publisher who spent 26 years consulting in exactly that field before writing software for it. The High Level Structure architecture, the four functional areas and the bundled setup service all point to a tool shaped by people who know how these systems actually fail in small companies.
The AI is more than a bolt-on. AMMIRA reads the organisation's own documentation and answers from it, which addresses a real and specific problem: organisational knowledge concentrated in two or three heads while everyone else avoids the document library. The four NAVIGATOR bots, each trained on narrower normative ground, are a more credible design than a single general assistant claiming to cover standards, safety law, root-cause analysis and risk at once.
The reservations are mostly about disclosure rather than capability. Nothing is published about price, at any tier. No terms and conditions exist on the site, so who owns the content placed in the platform is simply not addressed. The privacy policy is thorough about the publisher's own client relationship and silent about the platform itself, and there is no processing agreement, no named subprocessor and no documented way to keep customer data out of model training. Given that the bots run on a third-party model, that silence matters.
For an Italian or Italian-speaking organisation running a certified management system, this is worth a demonstration. Anyone with data residency obligations or procurement rules requiring published terms should get the missing answers in writing first.
- Choosing a selection results in a full page refresh.
- Opens in a new window.