Manifesto

Protecting people's data is protecting people.

We weren't born to sell certificates. We were born so that privacy stops being a formality and goes back to being what it always was: respect.

The root of trust for your digital ecosystem.

Why we exist

Compliance was broken, and we knew it from the inside.

We come from the trenches: security, software architecture, DevSecOps, the classroom. We saw how large corporations had armies of consultants while Chilean SMEs were left with a PDF downloaded from the internet and a prayer.

With Chile's Personal Data Protection Law (Law 21.719), that gap became dangerous. The law no longer asks whether you have good intentions: it asks whether you can demonstrate what you did. And demonstrating, without the right tools, is very expensive or impossible.

We decided to put the tools that used to belong only to the giants within reach of any company.

We chose the name Alerce for the tree: native to southern Chile, one of the longest-lived beings on the planet, wood that withstands centuries without rotting. That is what we want your compliance to be — something that takes root and lasts, not a paper that expires.

Mission, vision and purpose

Our mission

To enable any organization —regardless of size— to demonstrate regulatory compliance before the authority, not just declare it, under any regulatory framework in a Spanish-, English- or Portuguese-speaking country. With the same tools that until yesterday only large corporations had.

Our vision

To be the reference GRC platform for the Spanish-, English- and Portuguese-speaking world: so that demonstrating compliance —under any framework, in any of the three languages— simply means working with Alerce.

Our purpose

We believe that protecting people's data means protecting people. Privacy is not a formality: it's respect.

Our principles

CISO-grade rigor, a human touch.

Seven principles that don't just hang on a wall: you can see them in how we build and how we work alongside you.

Security First

Security is not a product feature: it's the condition for it to exist. We design assuming something will fail, and that when it does, your data stays safe.

Client First

Your risk is our job. Before selling you the most expensive plan, we tell you which one you need —even if it's the free one.

Loyalty

To the client, to the team and to the data. We don't sell your data. We only use anonymized data, and only with your consent, to improve the platform. No fine-print games.

Horizontality

Here nobody is "the one who knows" while the rest execute. The best idea wins, wherever it comes from. No pedestals.

Empathy

Compliance is scary. We translate the law into the language of whoever has to comply with it, without making them feel ignorant.

Teamwork

Compliance is done by Legal, IT and HR together, or nobody does it. Our product —and our culture— are built to collaborate, not for the lone hero.

Rigor with warmth

Scientific precision, first-principles thinking, zero technical smoke. But explained the way you would explain it to someone you care about. It is what unites the security expert, the architect and the teacher: a single voice, demanding and human.

3,600+

years is how long an alerce can live. We aspire for the trust you build with your customers to last at least a fraction of that.

Our experience

We didn't learn cybersecurity to sell software. We sell software because we did cybersecurity.

More than two decades defending critical infrastructure: security operations centers, incident response, digital forensics, threat hunting and regulatory compliance. That track record is what's inside every Alerce control.

SOC LATAM24/7 monitoring, correlation and incident management

DFIRDigital forensics and data breach response

Cloud & DevSecOpsAWS, Azure, containers and secure development

FrameworksNIST · MITRE ATT&CK · OWASP · ISO 27001/27701

Who we are

A team, not a lone hero.

Compliance, security, engineering and governance working horizontally. These are the profiles behind Alerce.

Cybersecurity & Architecture

Technical leadership with 20+ years in operational security, forensics and critical infrastructure. Postgraduate diploma in Cybersecurity and Cyberdefense; Security+, CySA+, Pentest+. Translates technical risk into business decisions.

Compliance & Data Protection

More than a decade working with GDPR —the parent law of Law 21.719—, plus ISO 27701 and Chilean regulation. That European experience is what lets us anticipate where the law is heading here. Turns legal text into concrete, verifiable controls that hold up before the Personal Data Protection Agency.

Engineering & DevSecOps

Cloud architecture on AWS, automation and secure development. Builds a platform that is idempotent, auditable and ready to scale.

Risk, Audit & Governance

Risk management, unified controls and evidence-based audit. Ensures that what Alerce promises can be demonstrated.

Contact

Let's talk about your compliance.

Questions about Chile's Personal Data Protection Law (Law 21.719), about AlerceGRC for regulated organizations, or want a demo for your board? Write to us or call: we reply fast and in plain language, not jargon.

Phone

+56 9 3882 1702

General email

[email protected]

AlerceGRC demos

[email protected]

Office

Providencia, Santiago · Chile

If you got this far, we speak the same language.

Start with the free diagnostic (in Spanish) and find out in 15 minutes where your company stands.

Take my free diagnostic (in Spanish) → Discover the product →