/Gestoría
// Private AI for Gestoría · Ibiza · Mallorca · Formentera · Spain

Your client data
never leaves
your office.

No cloud AI exposure. No unmanaged AEPD risk.
AI that runs on your hardware — inside your building.

> Book a Call
// BOE Daily Tax Brief

What changed in Spanish tax law today.

Live summary of the Boletín Oficial del Estado — filtered for gestorías. Updated every morning at 07:00h via private AI.

◉ BOE Live Feed— 20 Ago 2026
31 items fiscalesboe.es ↗
HEADLINE

RESUMEN

Generado 21 ago, 07:00 · actualización automática 07:00h
// GESTOR — Live in Production

This isn't a demo. It's GESTOR — running every morning for a real gestoría in Ibiza.

Since 29 May 2026, GESTOR has read the BOE, BOIB, commercial registry, ATIB and INE every weekday at 06:15 — before the first client walks in.

81
Daily briefings
462
Notes in the vault
0
Alerts open today

May 29 – August 19 2026, 81 of 83 possible days — the only gaps are a Saturday and a Sunday. Catches ATIB model-version changes via SHA-256 comparison, cross-matches the commercial registry against the client roster by NIF, and explains its own false positives rather than training the gestor to ignore it.

GESTOR dashboard — Hoy tab, morning briefing
// The Problem
€20M
AEPD maximum fine

The AEPD has confirmed it explicitly: processing client data through ChatGPT, Claude.ai, Copilot or any cloud LLM without a valid legal basis and a GDPR Article 28 data processing agreement is a serious infringement. The maximum administrative fine is €20 million or 4% of global turnover — whichever is higher. This is not theoretical: it is the AEPD's own published guidance. See source 1 and source 5.

Feb 2026
AEPD operational sovereignty doctrine

In February 2026 the AEPD published two new guidances that fundamentally reframe cloud AI compliance. The first formally established operational sovereignty as a GDPR Article 32 obligation: the controller must retain the ability to define, supervise, audit and, if necessary, cease processing. Picking an EU region inside a US-controlled console no longer answers the full test by itself. The second targeted agentic AI directly — and held that systemic design failures stay with the controller regardless of human supervision. The legal ground moved. See source 2 and source 3.

60.000+
Tax agencies in Spain

Most still running software from the 1990s. No real AI. No automation. Combined with the February 2026 sovereignty doctrine, the market is now structurally open only to providers who can prove their entire stack — inference, embeddings, index, orchestrator, keys — sits on hardware the client can physically point to. The firms that move first win.

Between January and April 2026, the AEPD published three guidances that redefine cloud AI compliance for any Spanish firm: operational sovereignty under GDPR Article 32, liability for agentic AI, and voice-data processing. Picking "EU region" no longer answers the test by itself.

// Where We Operate

Ibiza. Mallorca. Formentera.
And soon, all of Spain.

Ibiza
~180 agencies

International market. Clients with complex multi-country structures. High-net-worth individuals, foreign companies, non-residents.

Mallorca
~1,200 agencies

Largest Balearic market. High concentration in Palma, Calvià, Alcúdia. Tourism, real estate, expat clients.

Formentera
~40 agencies

Boutique volume. Ultra-high-net-worth clients. Maximum confidentiality. The island where discretion is everything.

Mainland Spain
Phase 2

Madrid, Barcelona, Valencia, Seville. Same system. Same compliance. National scale. Coming soon.

// Five Things It Does For You
01
Invoice Avalanche

Invoices arrive as WhatsApp photos, PDFs, scans. The AI reads every one — extracts NIF/CIF, date, base imponible, VAT type — validates against the requisitos del Reglamento de Facturación, flags anomalies, and pre-fills A3, Sage, ContaPlus or Holded. Feeds straight into Modelo 303 (IVA), Modelo 130 (IRPF) and the SII when applicable. 70–80% less manual entry.

02
Tax Appeal Drafting

A requerimiento or propuesta de liquidación arrives from the AEAT. The AI classifies the procedure, identifies relevant articles of the LGT and the applicable consulta vinculante DGT, suggests supporting documentation, and drafts a complete recurso de reposición or alegaciones. From 6 hours to 45 minutes. Final review and signature stay with you.

03
Official Gazette Monitoring (BOE + BOIB)

Daily ingestion of BOE, BOIB and municipal bulletins, filtered for tax codes — IRPF, IS, IVA, IAE, ITP/AJD, IBI, Modelo 720, autónomos régimen. When something affects a specific client — a rate change, a new deduction, a modificación to a model — the AI alerts you, explains the impact, and drafts the client email. You review and send.

04
Collective Agreement Tracking

Tracks convenios colectivos — sector and provincial — for every employee of every client. Cross-references against the BOE and BOIB collective bargaining publications. Alerts when antigüedad thresholds trigger, when tablas salariales are revised, when complementos change. Answers the question that costs you hours: which of my clients are affected, and by how much?

05
Deductibility Engine

Client asks: can I deduct my car, my phone, my home office, this dinner, this trip to Frankfurt? The AI answers with the current AEAT criterion, the relevant consulta vinculante, and the article of the Ley del IRPF or Ley del IVA — with citations you can verify. Instantly. Correctly. Frees your team from hours of reactive research and WhatsApp threads.

THE NUMBERS
ROI in Weeks
Staff hours saved / year450 hrs
At €25/hr staff cost€11.250
New capacity freed30% more clients
System costFraction of savings
// What Runs Every Morning

Every weekday at 06:15, GESTOR runs: BOE, BOIB, ATIB, BORME, INE — 5 official sources. 81 briefings produced since 29 May 2026, 462 notes in the vault. Vault updated, briefing in Telegram, before the first client call.

// What Runs It

Solo (1–5 people), Studio (6–15), Enterprise (15–20+) and Custom — from a single DGX Spark 128GB to a multi-site cluster. Every tier is specified to include NAS × 3, Spain, AES-256 encryption. The hardware is designed to be yours from day one.

// An Architecture Built to Reduce Exposure

AI inside your office.
Not in their cloud.

Cloud AI
Private AI
Data leaves your office
✗
✓ Never
GDPR Art. 28 exposure
✗ Higher
✓ Reduced
LOPD-GDD exposure
✗ Higher
✓ Reduced
AEPD violation risk
✗ Real
✓ Reduced
AI inference needs a live cloud connection
✗ Always
✓ Never
Vendor can raise prices
✗
✓ Never
Professional secrecy
✗
✓ Built to preserve
You own the system
✗
✓ Completely
// What Ships With The System.

Compliance, out of the box.

Aranzadi gives you a SaaS contract. We give you a folder ready for an AEPD inspection.
Thirteen documents, all in Spanish, all drafted against RGPD, LOPDGDD, and the EU AI Act. All you do is fill in the blanks and sign.

// The Documentation Stack
01Privacy Policy & Legal Notice
Política de Privacidad y Aviso Legal · Arts. 13–14 RGPD
02Record of Processing Activities — Controller
Registro de Actividades del Tratamiento (Responsable) · Art. 30.1 RGPD
03Record of Processing Activities — Processor
Registro de Actividades del Tratamiento (Encargado) · Art. 30.2 RGPD
04Information Security Policy
Política de Seguridad de la Información · Art. 32 RGPD
05Data Subject Rights Procedure
Procedimiento de Ejercicio de Derechos · Arts. 15–22 RGPD
06Data Breach Notification Procedure
Procedimiento de Notificación de Brechas · Arts. 33–34 RGPD
07Processing Risk Analysis
Análisis de Riesgos del Tratamiento · Art. 32 RGPD
08DPIA Necessity Test
Determinación de necesidad de EIPD · Arts. 35.1 + 35.4 RGPD · Directrices WP248
09DPIA Template (per deployment)
Modelo de EIPD por despliegue · Art. 35.7 RGPD
10Standard Information Clauses (Art. 13)
Cláusulas Informativas Tipo · Art. 13 RGPD
11DPO Designation & Justification
Designación de DPD · Art. 37 RGPD · Art. 34 LOPDGDD
12EU AI Act Compliance Plan
Plan de cumplimiento del RIA · Reglamento (UE) 2024/1689
13AEPD Inspection Checklist
Checklist de Inspección AEPD
// ALSO INCLUDED

Data Processing Agreement

A DPA under Article 28.3 RGPD, drafted and currently in legal review, that will cover every aspect of our relationship as your data processor. Includes a reinforced professional secrecy clause — equivalent to the duty owed by your firm to your clients — with indefinite duration after the contract ends.

// AND
- Vendor risk assessment ready to file
- Sub-processor list, updated against CEPD Opinion 22/2024
- Audit log retention policy (400 days)
- Incident response runbook
- Annual review calendar

Everything aligned to the AEPD's 2025–2026 guidance on agentic AI. Reviewed for the EU AI Act's Article 50 transparency obligations, in force from August 2026 following the Digital Omnibus.

This is the difference between buying a tool and acquiring a defensible position.

// Built for
→Solo tax advisors with 50–200 clients
→Agencies with 2–15 staff
→Firms handling self-employed clients and companies
→Agencies with real-time VAT reporting clients
→Any agency drowning in the quarterly crunch
→Tax advisors who want to grow without hiring
// Not for
✗Agencies looking for a cheap chatbot
✗Anyone who wants to keep using ChatGPT with client data
✗Large corporate tax departments with enterprise vendors
✗Anyone not serious about GDPR compliance
// Questions Gestoría Firms Ask

Fifteen questions answered — maintenance, data migration, DPO, pricing — plus the Aranzadi comparison and primary sources.

Book a 30-minute call.

No technical knowledge required.
I'll show you exactly what the system does — using your type of work.
Ibiza, Mallorca, Formentera — and available remotely everywhere.

> Start the Conversation> Download Pitch (PDF)
// Start the conversation

Ready to stop watching
AI happen and start
running it?

We take a small number of new clients per quarter. If you are considering working with AI Ibiza, the conversation starts here.

base: Ibiza, Spain — clients: worldwide
response_time: within 24 hours
new_clients: limited / per quarter

Or reach Gee directly on WhatsApp

+66 80 223 7720