Frequently asked questions about IntelMind

IntelMind is a Spanish B2B OSINT intelligence SaaS platform. It brings together two independent products: a suite of 6 analysis tools (email, IP, domain, phone, social media and forensic image) and an automated Cyber Due Diligence for M&A report. Every deliverable is signed with a digital chain of custody (SHA-256 hash + RFC 3161 timestamp).

These are two products with different clients and goals:

· SaaS suite: 6 tools used on demand under a monthly subscription, one at a time. Ideal for SOC, CSIRT, private investigators, investigative journalists, anti-fraud and KYC teams that need recurring OSINT analysis.

· Cyber DD M&A: an automated, complete, one-off report on a target company’s cyber risk during an acquisition deal. Exclusive to PE/VC funds, family offices and M&A boutiques. It’s a deliverable, not a subscription.

IntelMind is founded and operated by Rubén Jiménez Ormad. A Spanish company incubated at the INCIBE Emprende Program of Spain’s National Cybersecurity Institute. More at About IntelMind.

Yes. Signing up with SaaS intent gets you 30 credits · 14 days of demo. Access to 4 tools: email, IP, domain and phone. Social media and forensic image (more compute-intensive) only unlock with a paid B2B plan.

Four monthly B2B plans (single-seat, 30-day renewal):

· Analista — €29/mo: 75 credits. For freelance journalists or individual OSINT analysts.
· Profesional — €79/mo: 250 credits. Firms of 1-3 people and solo investigators.
· Firma — €199/mo: 700 credits. Agencies of 5-15 professionals and family offices.
· Corporativo — €499/mo: 2,000 credits. Compliance consultancies, private banking and fraud departments.

Full details at /upgrade/.

Cost per analysis: Email 5 credits · IP 8 · Phone 7 · Domain 12 · Social media 20 · Forensic image 30. The number reflects real processing cost (external APIs, AI compute, forensic analysis time).

Your plan stays active, but you can’t launch new analyses until either: (a) your plan renews next period, or (b) you buy a top-up pack for your plan (Mini / Plus / Boost / Mega). Packs appear in your dashboard once you have an active B2B plan. The 30-credit demo does NOT support top-ups (it follows the plan).

The 6 tools:

· Email: validation + platform presence + breaches + reputation.
· IP: geolocation + ASN + reputation + services + threats.
· Domain: WHOIS/RDAP + DNS + reputation + legal identity.
· Phone: owner + carrier + operator + location + breaches.
· Social media: profiles + cross-platform correlation.
· Forensic image: EXIF + pHash + biometrics analysis + chain of custody.

An automated cyber-risk report on a target company before signing an acquisition deal. It covers 10 auditable KRIs in under 5 minutes: exposed attack surface, email configuration (SPF/DKIM/DMARC), TLS certificates, historical domain breaches, deep/dark web exposure, public vulnerabilities (CVEs), reputation, technical dependencies and more. Outside-in: no access or cooperation from the target required.

Exclusively for the company-acquisition ecosystem: Private Equity and Venture Capital funds, family offices, M&A boutiques and specialized law firms handling acquisition deals. It’s not meant for recurring use — it’s a deliverable attachable to the SPA, support for W&I cover, or an argument in price negotiation.

Priced at €390 per dossier for a single target (single price; 10-pack for €3,200). Special volume terms exist (several simultaneous targets) and a monthly retainer for funds with recurring deal flow. Details and ordering at /cyber-dd/.

So you can validate the product on your real deal, we offer the first report free to M&A funds. Request it from /solicitar-informe-cyber-dd/: fill in the form with your LinkedIn, the deal’s target and context. A team member qualifies the request within 24 business hours and, if it’s a fit, we deliver the full report at no cost. Once per client.

Yes. OSINT works exclusively with open public sources (search engines, DNS, WHOIS, open social media, EXIF metadata, official registries). No private systems are accessed and no security control is bypassed. In the EU, GDPR applies (and in Spain, the LOPDGDD); the user is responsible for applying an appropriate legal basis for processing (legitimate interest, legal obligation, consent, or public-interest task).

The difference is the point of entry. OSINT uses information that’s already public — the equivalent of reading business registries, news archives or open profiles. Hacking means accessing systems or data without authorization by bypassing controls. IntelMind operates exclusively in the OSINT domain — it never uses exploits, brute force, private-data scraping, or non-consensual access.

Every PDF meets the technical requirements of electronic evidence: a SHA-256 hash of the content + an RFC 3161 timestamp issued by the FreeTSA time authority + a public, independent verification URL. The TSR token is downloadable from the verification page, and an expert can verify the timestamp with OpenSSL (openssl ts -verify).

FreeTSA is not an eIDAS-qualified provider, but the RFC 3161 timestamp is technically valid and accepted in digital forensic expert reports in Spain. Final admissibility always rests with the court.

In accordance with GDPR (and Spain’s LOPDGDD). Data is never shared with third parties for commercial purposes. Analyses run from your account are stored only so you can reopen them. You can exercise access, rectification, erasure and portability rights from /mis-datos/ or by emailing support. Full details in the privacy policy.

No. IntelMind provides correlated signals, technical context and actionable indications that support informed decisions, but absolute confirmation depends on the case and additional validation by the professional. OSINT results are a qualified starting point for an investigation or decision, not a closed conclusion. False positives can occur and require professional judgment to rule out.

No. Every report includes a plain-language executive summary (3 lines: suggested decision, risk level, immediate action) generated by AI with specialized prompting per tool. Built for non-technical profiles making decisions (compliance officer, journalist, investment committee). Below the summary is the technical detail for anyone who needs to dig deeper.

Yes. Every tool lets you export the result as a signed PDF with chain of custody: SHA-256 hash + RFC 3161 timestamp + public verification URL. Ready to attach to an internal file, an expert report, a news piece, or due diligence. The PDF is self-contained and traceable independently of IntelMind.

Three ways: (a) IntelMind’s contact form, (b) direct email to soporte@intelmind.io, (c) check the documentation and use cases first. We’re available Mon-Fri 9:00-18:00 CET, in Spanish and English. Average response under 24 business hours.