Do your colleagues build tools with AI?
More and more often, a tech-savvy colleague builds their own tools with AI. That’s quick, but one wrong setting and your customer data is out in the open. A fixed team of senior developers with twenty years of experience keeps an eye on it, on behalf of your organisation.
- From €299 a month
- Cancel monthly
- No set-up costs
Handy tools.
But do you know what’s inside?
More and more often, a colleague builds a tool by telling an AI what it should do. It’s called vibe coding. It’s quick and it works, but some things you only see when it goes wrong.
- An AI with every permission The AI assistant can reach more than just the project.
- Customer data in an AI tool Real data ends up in a public AI service.
- Keys in the code One wrong upload and someone else can get in.
- On a private account Code and subscriptions aren’t in your company’s name.
- All in one person’s head If that colleague is away, nobody knows how it works.
- Can you prove it? Your accountant or a customer asks whether it meets the GDPR.
That’s no reason to stop. It is a reason to have someone with experience take a look.
Your colleagues keep building.
We keep watch for you.
We keep a constant eye on what gets built: is it safe, is everything in your company’s name, is it written down? What needs to improve, we discuss with your builders, and we build the tricky parts if you want us to. You get the overview, in plain language.
How we keep an eye on things
Three layers at once. Most of it runs automatically; behind it are people with twenty years of experience.
-
Ongoing
Everything they build gets scanned
A senior developer reviews what the scans find. If something is urgent, we call you the same day.
-
Every working day
Always reachable for your builders
Better to talk it through before they build than to fix it afterwards.
-
Every month
Your monthly review
What was built, what the risks were and what’s coming next. We write decisions down, so you can find them later.
01 Parts
From code to helpdesk: we take care of it.
We review every change
The portal scans the code on every change. A senior developer looks at what changed and why, and puts that on the timeline in plain language.
- Every update scanned
- Summed up in plain language
- No extra work for your builders
We see a leak coming
With every change we look for security holes, API keys left behind, vulnerable libraries and data leaks. You get a risk assessment straight away, with a proposed fix.
- Holes and vulnerable libraries
- Keys in the code
- A ready-made proposal
The AI stays inside your project
By default, AI tools work with all of the employee’s permissions. We set up a shielded environment for each project and keep checking that it stays that way.
- Own folder and own login
- Limited network access
- Checked continuously
Documentation that keeps up by itself
For every app an up-to-date description of how it works, its architecture, data flows and integrations, and for every release what changed. So nothing depends on one person.
- Per app
- Per release
- Not dependent on one person
One fixed point of contact for your builders
Your builders talk to us before they build something big, we review sensitive changes before they go live, and we build the tricky parts ourselves if you want. Out of your plan’s hours.
- Talk it through first
- Review of sensitive changes
- We take over when it’s busy or someone’s out
Everything in your company’s name
A fixed checklist: is everything in your organisation’s name, is access set up properly and does it meet the privacy and AI rules? Anything that’s off becomes a task.
- Ownership and access
- Privacy and AI rules
- Every point on record
We field your colleagues’ questions
Colleagues who work with the apps bring their questions and faults to us. That way your builders can keep working. From the Support plan up.
- One place for reports
- Always see the status
- With Partner also by phone, 24/7
You decide what gets built
Ideas pile up fast. In the planning you set the priorities yourself; signals from our checks and questions from the helpdesk land there as tasks by themselves.
- You decide the order
- Signals become tasks
- Every request in one place
02 Portal
One place where you see
how things stand.
In the portal you see what is being built, what the risks are and what has already been solved. Without having to be technical yourself.
- Signals After every change, a scan for leaks, keys and errors.
- Follow-up Every finding becomes a task with an owner.
- Records What changed and why, in plain language.
- Planning You decide what gets built, and when.
- Support Colleagues report a question and follow its status. From the Support plan up.
- Knowledge An AI assistant that knows your documentation.
- Your own, shielded environment
- Ready to use straight away
- Included in every plan
03 Assurance
Everything in order.
And you can show it.
Who owns the code, who has access and does it meet the GDPR? The portal tracks it point by point, so you can show your accountant, regulator or customer that it’s in order.
Nearly every checkpoint in order, one action point
Two-step verification is missing on one account. Task created with priority.
Ownership,
- Source code in your company’s name
- No vendor lock-in
- Data always exportable
- Rights and licences recorded
Accounts and access, , Action point
- Business accounts
- No private accounts
- Passwords in a vault
- Two-step verification Action
- Access revoked when people leave
External services,
- Integrations mapped
- API accounts in your company’s name
- No keys in the code
- Central billing
- Client requirements, such as NIS2
Privacy and GDPR,
- No real data in testing or AI
- Sensitive data shielded
- Register of personal data
- No training on confidential data
- Data processing agreements
- Retention and clean-up
Sector rules,
- Confidentiality per role
- Statutory retention periods
- Complete records
AI Act,
- Register of AI systems
- Risk classification
- Transparent use of AI
- Human oversight
- AI literacy of staff
- AI use traceable
Technology and continuity,
- Backup with restore test
- Separate environments
- Shielded development environment
- Limited permissions for AI tools
- Up-to-date libraries
- Automated tests
- In line with ISO 27001
- In line with the BIO
- Transferable to a new developer
Every point that needs attention becomes a task with:
- Priority
- A proposed fix
- An owner
- An audit trail
Something goes wrong anyway? The plan is ready.
There is one emergency number, even outside office hours. After a data breach you have 72 hours to report it; because everything is ready in the portal, you know where you stand within a few hours. We rehearse the plan every year with a realistic scenario.
-
Report
Call the emergency number. When in doubt, better too early than too late.
-
Assess
Together we work out what was hit and who is at risk.
-
Contain
Block accounts, replace keys or roll back a change.
-
Notify
If a report is required, we make it on time, with the right documents.
-
Record
Every incident goes in the register, even without a duty to report.
-
Prevent
We find the cause and add it to the monitoring.
Checked against the rules that apply to you
From the GDPR to the AI Act. Which rules count for your organisation, we decide together at the start.
04 Plans
Three plans. Cancel monthly.
The basics are in every plan. The difference is in the hours, in who does the repair work and in the helpdesk for your users.
In every plan:
- Automated checks
- The portal
- Documentation
- Planning and roadmap
- Available every working day
- Monthly meeting
-
Scan
We spot it and advise
€299 / month
- Hours per month2 hours
- ForAdvice and a sounding board
- Repair workYour own builders
- HelpdeskNone
- MeetingsOnline
- PriorityNone
-
Support
We fix it too
€449 / month
Our recommendation
- Hours per month4 hours
- ForAdvice, bug fixes and building
- Repair workUs, in consultation
- HelpdeskTickets
- MeetingsOnline or on site
- PriorityNone
Questions from the helpdesk come out of these hours.
-
Partner
With priority and a phone line
€799 / month
- Hours per month8 hours
- ForAdvice, bug fixes and building
- Repair workUs, in consultation
- HelpdeskTickets and 24/7 phone line
- MeetingsOnline or on site
- PriorityA fixed slot in our schedule
Questions from the helpdesk come out of these hours. The phone line puts callers through to someone at Flaire.
Need extra hours? Buy a bundle.
A new app takes a lot of hours at first. Buy them in advance at a lower rate and use them when it gets busy.
€95 per hour
10 hours · €950 excl. VAT
For a short peak or a first extension.
€90 per hour
25 hours · €2,250 excl. VAT
For an app in full development.
€85 per hour
50 hours · €4,250 excl. VAT
For several apps at once or a substantial build.
- Hours don’t expire
- On top of your plan’s hours
- Usable for the same work, user questions included
- Amounts excl. VAT
- Cancel monthly
- No set-up costs: the inventory, baseline check and portal are included
05 Collaboration
This is how we get started.
Nothing has to change internally. We fit in with how you work now, and agree up front who does what.
The start
No set-up costs. All of this is included.
Step 1 of 4 · Inventory
Everything mapped.
We list your apps, scripts and integrations: where they run, who has access and where AI is used to build.
Step 2 of 4 · Set-up
Portal and workspaces ready.
You get your own environment in the portal and we connect your repositories. We fence the AI tools in to the project.
Step 3 of 4 · Baseline
The baseline check.
We go through the whole checklist. For each app you get a clear picture and a list of what comes first.
Step 4 of 4 · Agreements
Agreements, and off we go.
We divide the action points, record the working agreements and the incident route, and choose which parts you’d rather have us build. Then the regular rhythm begins.
Who does what
You stay in charge of what gets built and at what pace. This is how we divide the work.
- Building
Your organisation: Your builders keep building, at their own pace. You decide what to outsource.
Flaire: Helps plan the work up front, reviews the code and builds the tricky parts if you want.
- Priorities
Your organisation: Decides what gets built and in what order.
Flaire: Advises on feasibility, architecture and maintenance.
- Security
Your organisation: Decides which improvements are made.
Flaire: Monitors continuously, flags issues and delivers the fix.
- Documentation
Your organisation: Doesn’t need to keep anything up to date.
Flaire: Records changes and choices automatically.
- Accounts and access
Your organisation: Manages accounts, the password vault and permissions.
Flaire: Checks that everything is in your organisation’s name.
- Privacy and rules
Your organisation: Remains ultimately responsible.
Flaire: Checks against the GDPR and the AI Act and provides the evidence.
Frequently asked questions
Who is Vibe Support for?
For the directors and managers of organisations where staff build their own tools and apps with AI. You want to be sure that happens safely, in your company’s name and properly documented. Even when that colleague isn’t around.
Will you slow things down?
No. Your builders keep building, at their own pace. We keep an eye on things and help them think it through. What needs to improve, we discuss with them and with you, and you decide which improvements are made.
Do I need to be technical?
No. In the portal and in the monthly meeting we explain everything in plain language: what was built, what the risks are and what needs to happen.
Who fixes what you find?
With Scan we flag and advise, and your own builders do the repair work. With Support and Partner we fix it, in consultation, out of your plan’s hours.
Who owns the code?
You do. Source code, repositories and data are in your own organisation’s name. That’s also one of the points we check.
How do questions from users work?
From the Support plan up, they come in at our helpdesk. We count them against your plan’s hours; once those run out, they come out of your hour bundle. Scan has no helpdesk for users.
Can you build things yourselves too?
Yes. Within the hours of Support and Partner, our seniors build the tricky or sensitive parts, such as the architecture, integrations and security. If more is needed, you take an hour bundle. You decide for each part what your own people do.
What if something goes wrong outside office hours?
For emergencies there is one fixed number, even outside office hours. With an acute risk we don’t wait for the monthly meeting; we call you the same day.
Am I tied in?
No. Every plan can be cancelled monthly and there are no set-up costs. The inventory, the baseline check and setting up the portal are included.
Contact
Want to know where you stand?
In a free 30-minute call we look at what is being built in your organisation, and which plan fits.
A real person who helps you think it through
No account managers or middlemen. Tell us what you’re running into, and we’ll work out together what fits your situation.
Thank you. We’ll get in touch within one working day.