Privacy Policy

Last updated: February 2026

1. We don't take custody of your data

Arakan operates on a non-custodial basis. When your documents are analysed, our engines process them without copying or storing the underlying files on our servers. We index metadata and compute integrity hashes — the originals stay where they are.

2. Data residency

All data processing occurs within the UAE. We use AWS me-central-1 (Dubai) as our primary compute and storage region. No data is transferred outside the UAE during any phase of the Arakan workflow.

3. What we collect

We collect the information you provide when creating an account (name, email, organisation name), entity metadata you enter into the platform (company name, jurisdiction, activity code), and document metadata derived from files you connect (file name, hash, classification result).

We do not collect or store the contents of your financial records, original documents, or client data beyond what is required to operate the platform.

4. How we use your data

To operate and improve the platform, to generate compliance analysis for your entities, and to send you notifications about deadlines and findings. We do not sell your data or use it to train AI models.

5. Data retention

We retain your data for as long as your account is active, or as required by UAE law (a minimum of 7 years for audit trail records under Article 52). You can request deletion of your account and associated data at any time.

6. Contact

Questions about privacy: privacy@arakan.ai