Where your data lives
Data location is set on request and by agreement with the client: on your premises, in your private cloud or in a cloud region you choose. Language models can run there too.
Security and data handling
AI systems work with sensitive documents and records. This page explains how we protect them. The exact controls for your project are agreed with your security team and set out in the contract.
At a glance
Our commitments
The baseline for every system we build. The details for your project are agreed with your security team.
Send us your security questionnaire- Data location on request and by agreement with the client
- Never used to train models for other clients or for our own products
- Sign-in through your identity provider
- Read-only access by default
- Questions, answers and sources logged
- Encrypted in transit and at rest
How we protect your data
Your data stays yours
We use your data only for your project and never to train models for other clients or for our own products. At the end, we return or delete it as the contract states.
Access control
Sign-in goes through your identity provider. Roles and permissions follow the rules you already apply to the source documents, so access can be limited to what each person needs.
Read-only by default
Connections to your systems start read-only. Any write-back is limited to actions you approve, runs under defined permissions and is logged.
Logging and audit
Questions, answers, the sources used and administrative changes are logged. Logs are kept for the agreed period and can be made available to your auditors.
Encryption
We encrypt data in transit and at rest. Keys and secrets are kept in a managed secrets store rather than in source code, and access to them is logged.
Secure development
Changes are reviewed before release. We keep separate development, test and production environments and check third-party components for known vulnerabilities.
Incidents
If we detect a security incident that affects your data, we tell you without undue delay and work with your team to contain it and prevent it from happening again.
Compliance
We design each system to help you meet the data protection laws that apply to you, such as the UAE PDPL, and your sector rules. We answer security questionnaires and support your audits.
Have a security questionnaire?
Send it to us with your inquiry. We will answer it and join a call with your security team if needed.
For the data this website collects, see our Privacy Policy and Terms of Use.