Data Architecture
GCI runs on Vercel's global edge network with serverless compute. Session data and account credentials are stored in encrypted key-value storage. All connections use TLS 1.2+ encryption in transit.
How Report Generation Works
When you submit a brief, the conviction engine processes it through 19 specialist sub-agents. The analysis uses three independent engines (Claude by Anthropic, GPT by OpenAI, and Gemini by Google) via their respective APIs.
Your brief content is sent to these API providers for processing. It is used solely to generate your report and is not stored by GCI beyond the session. API providers process requests under their enterprise terms. GCI does not opt into any model training programs.
What We Do NOT Do
We do not train models on your briefs, reports, or account data. GCI does not opt into any model training programs offered by API providers. We do not share your data with third parties for marketing, analytics, or any other purpose.
Brief content and uploaded documents are not retained beyond the active session unless you explicitly save a report to your report history. We do not track individual user behaviour beyond anonymised pageview counts for site operations. Feedback you provide through the rating feature improves internal quality benchmarks only and is not used to fine-tune language models.
What You Should Know
Report data passes through US-based API infrastructure (Anthropic, OpenAI, Google) for processing. You should not upload material non-public information (MNPI), insider information, or confidential third-party documents you are not authorized to share with a third-party processor.
GCI reports are screening intelligence, not regulated advice. They complement, not replace, professional due diligence. If your organization requires a dedicated processing environment, custom data residency, or SOC 2 compliance documentation, contact difc@gulfcapitalintelligence.com for Enterprise options.
Enterprise Data Handling
Enterprise clients receive dedicated processing options, custom data retention policies, and can request a data processing agreement (DPA). Enterprise tier includes analyst review, which means a human reviews reports before delivery. Custom API access and white-label deployment are available on Enterprise tier.
Contact difc@gulfcapitalintelligence.com for Enterprise security requirements.
DIFC Compliance
GCI is registered in the Dubai International Financial Centre as Boost My Business AI Innovation Limited (CL11954). GCI operates under DIFC Data Protection Law No. 5 of 2020. For data subject requests, contact difc@gulfcapitalintelligence.com.