Compliance and trust

EnaInbox is built so the town clerk has nothing to object to: minimal data, maximal traceability and an explicit separation from the official entry registry.

We are not the official registry

EnaInbox is the complaints-and-suggestions channel (service charter), not the official entry registry. The form states it and links to the electronic office (e-TRAM) for formal procedures. No competence conflict, no legal objection.

GDPR: real minimization

Email is the only required field — name and phone are optional. We act as data processor with a standard DPA. Configurable retention: by default, resolved tickets are anonymized after 2 years while keeping the stats.

Anonymous option

Complaints often carry sensitive context (neighbour disputes, social services). Anonymous submission is possible by design: no email, no notifications, same internal traceability.

Photos without metadata

Uploaded images are re-processed and EXIF metadata (including GPS coordinates) is stripped before storage. A photo of a pothole should not reveal where it was taken from.

Transparent AI

AI only suggests (category, department, priority) and is always marked as an automatic suggestion; decisions are human. Automatic translations always carry their indicator. Aligned with the AI Act’s transparency duties.

ENS and hosting

EU hosting, immutable audit log, backups and role-based access control. Roadmap towards Spain’s ENS basic-level conformity for local government.

Accessibility

Citizen pages target UNE-EN 301 549 / WCAG 2.1 AA: semantic HTML, labelled inputs, visible focus, contrast. “Grandma can file the complaint” is design requirement number one.