Framework 07 · PDPL, masking, hosting
Sensitive numbers are masked before any request reaches an outside model, data is hosted where your rules require, and every system we build follows the UAE data protection law.
In short
Every system we build follows the UAE Personal Data Protection Law, or the DIFC and ADGM rules where they apply. Card numbers, IBANs, Emirates ID and passport numbers are replaced with tokens before a request reaches an outside model. AI models are used under business terms that do not train on your data, and data can be hosted in a UAE cloud region or on a private model when your rules require it. Enterprise clients get an AI policy and a data processing agreement.
Every system the AI reads from or writes to, and the personal data each one holds.
Each agent gets only the fields it needs for its task.
Sensitive numbers are replaced with tokens before a request leaves your environment.
Business-plan models, a UAE cloud region or a private model, depending on the data and your rules.
Roles, single sign-on and logs of who saw and changed what.
Retention periods for chats, recordings and documents, and a way to delete a person’s data everywhere.
Deliverables
Who does what
Which law applies
UAE PDPL, Federal Decree-Law No. 45 of 2021.
DIFC Data Protection Law, DIFC Law No. 5 of 2020.
ADGM Data Protection Regulations.
Federal Law No. 2 of 2019 on ICT in health fields, in addition.
This is a summary, not legal advice. The AI policy and PDPL readiness pack is available as an add-on for AED 6,500.
We use AI models under business terms that do not train on your data, or a private model in your own environment where the data requires it.
Yes. We can run systems on cloud regions in the UAE or on a private model on your own infrastructure, depending on your rules.
Card numbers, IBANs, Emirates ID and passport numbers are replaced with tokens before a request reaches an outside model. Other fields can be added.
Yes. A data processing agreement and an AI policy come with the Enterprise package, and are available as an add-on for other packages.
Insights
Using AI with customer or staff data in the UAE? This checklist walks through the PDPL points that matter for AI projects, plus the separate rules for health data and free zones.
Read report
Some data should never leave your environment. Here is when a private AI model makes sense, what the UAE hosting options are, and the trade-offs against public AI services.
Read report
UAE companies handle a constant flow of Arabic and bilingual paperwork. Here is how AI reads it, where it still needs a person, and how to set up checks so the data you get is right.
Read reportThe AI Audit includes a data and PDPL readiness check for the departments in scope.