About Conresti
Digitise, automate, deliver more. In that order.
Conresti is an AI-native services company from Romania that digitises and automates the processes of small and mid-sized companies. We started with construction - the largest digitisation gap in the economy, and where our product runs in production - but the same ladder works in certification, executive search, retail or any company whose process lives in Excel and email.
Our thesis is simple: digitisation produces clean operational context, automation runs on it, and the result is capacity - you deliver more with the same people. Whoever has context solves the problem; whoever doesn’t, treats the symptom.
What we do
What we do for a company with 20–150 employees
We map the real process
We start from how the file moves today between Excel, email and WhatsApp, with the people who do the work, not from an industry template.
We build the workflow and take it live
One process, on one of your projects, in weeks: documents read automatically, approvals with deadlines, reports that build themselves, with an AI Agent wherever it replaces copy-paste work.
Fixed price per scope, next to your systems
You know the cost and the deliverable from day one. The workflow runs alongside the ERP and accounting you already have and feeds them clean data.
We say openly what is in production and what is direction: what we call delivered runs at real clients, and the rest is the road we are on, named as such.
Security
Bogdan Burtea, Administrator and Security Lead
MSc in IT&C Security, Bucharest University of Economic Studies
The platforms we build handle our clients' documents, approvals, contracts and financial data. Many of them serve several organizations at once, integrate with email, Excel, ERP systems and WhatsApp, and use AI agents that read and process documents. That is why security is part of every delivery stage, not only the final one.
The risks we address
- strict data separation between organizations and between roles, so each user sees only what they are allowed to see;
- access control at database and API level, including for unauthenticated users;
- protection of uploaded documents and automatically generated files;
- management and rotation of secrets and access keys;
- supply chain security: open source dependencies, container images and CI/CD pipelines;
- safe use of AI agents that work with client data.
What we do
- a security audit before every handover to a client, with a clear go or no-go verdict;
- code review and automated checks on every change: secret scanning, static analysis and vulnerability scanning of dependencies and containers;
- access control testing on our development and staging environments;
- separate development, staging and production environments;
- error and incident monitoring after launch;
- vulnerability remediation, with every fix verified before it is closed.
We use AI tools to review code and configurations faster and more thoroughly. We use them only on systems we build or operate, or where the client has given written authorization.
Security contact: bogdan@conresti.com