Your data stays
inside your boundary.
We build inside the systems you already run, under accounts your company owns. This page sets out where your data lives, who can see it, and what we will not do with it.
Your systems,
your accounts.
- 01In your own accounts
Your Microsoft 365, Google Workspace, CRM and accounting, under accounts your company owns. No copy in a database of ours.
- 02In your region where possible
UAE or GCC hosting wherever the provider offers it. Where it doesn’t, you hear the processing region before anything is built.
- 03Only what the step needs
Each step reads the fields its task needs, not the whole system. A booking reminder reads the appointment, not the medical history.
- 04Handed back when we part
Workflows, prompts, documentation and every log stay with you. Our access ends the same day.
Who can see it,
and who can’t.
Pick a viewer to see what they can read on one record.
Business terms,
your data stays yours.
We use the business tiers of established AI providers, set up so your prompts and outputs stay yours.
- 01Business or enterprise terms only. Never consumer chat apps for client work.
- 02Training on your data switched off, in writing, for each provider we use.
- 03Retention kept to the minimum each provider allows.
- 04The provider and processing region are listed in your Discovery report before the build starts.
A person approves
what matters.
Anything that leaves your company, such as a client message, a payment or a filing, waits for a named person. Every step is logged against the record.
- Drafted by your assistant, from the courier’s alert
- Approved by the team lead on duty
- Sent on WhatsApp, in English and Arabic
- Logged against the order, with the approver’s name
The rules
we design around.
We are not your legal adviser. We work with your compliance lead or counsel, and we change the design when they ask.
- UAEUAE PDPL
Federal Decree-Law No. 45 of 2021: its rules on purpose, consent and transfers outside the UAE.
- DIFC · ADGMFree-zone data laws
The DIFC Data Protection Law 2020 and the ADGM Data Protection Regulations 2021, for firms in either.
- KSASaudi PDPL
The Personal Data Protection Law and its rules on transfers outside the Kingdom.
- SectorYour regulator’s rules
Health authorities, courts and financial regulators add their own. We map them in Discovery, before the build.
Certifications held: none claimed on this page.
What we
don’t do.
- Train anyone else’s AI models on your data.
- Use consumer AI apps for client work.
- Send anything outside your company without a person’s approval.
- Keep copies of your records after the engagement ends.
- Name you as a client without your written permission.
Want a model trained on your own data? We can build one privately for you. It stays in your accounts, and you own it.
Show us
one process.
In 30 minutes we'll tell you whether AI can fix it, and if it can't, we'll say so.