Data Architecture
Client data, deal documents and reports are stored in UAE data centres. AI processing uses enterprise endpoints, some outside the UAE, under terms that prohibit training on your data. The full details are set out on this page.
GCI runs on Microsoft Azure infrastructure, our infrastructure partner, under DIFC data protection standards. Session data and account credentials are held in encrypted session storage. All connections use TLS 1.2+ encryption in transit.
How Report Generation Works
When you submit a brief, the conviction engine processes it through 25 analysis agents. The analysis uses four independent frontier AI engines, cross-checked with disagreement surfaced rather than hidden, via their respective APIs.
Your brief content is sent to these enterprise AI endpoints for processing, under terms that prohibit training on your data. Brief content and uploaded documents are used only to generate your report and are not retained beyond the active session unless you save the report to your report history. GCI does not opt into any model training programmes.
What We Do NOT Do
We do not train models on your briefs, reports, or account data. GCI does not opt into any model training programmes offered by AI providers. We do not sell your data or share it with third parties for their own marketing. Analytics and CRM providers process data on our behalf only, as listed in our Privacy Policy.
Brief content and uploaded documents are not retained beyond the active session unless you save the report to your report history. Saved reports can be deleted from your history at any time. We use Google Analytics and Microsoft Clarity to measure site usage and session behaviour; these providers set cookies and process usage data on our behalf, as described in our Privacy Policy. Feedback you provide through the rating feature improves internal quality benchmarks only and is not used to fine-tune language models.
What You Should Know
AI processing uses enterprise endpoints, some of them in the United States. You should not upload material non-public information (MNPI), insider information, or confidential third-party documents you are not authorised to share with a third-party processor.
GCI reports are screening intelligence, not regulated advice. They complement, not replace, professional due diligence. If your organisation requires a dedicated processing environment, custom data residency, or SOC 2 compliance documentation, contact difc@gulfcapitalintelligence.com for Enterprise options.
Enterprise Data Handling
Enterprise clients receive dedicated processing options, custom data retention policies, and can request a data processing agreement (DPA). Analyst review of reports is available on Enterprise engagements: a GCI analyst reads and challenges the report before delivery. Outside those engagements, GCI staff do not read your uploaded documents. Custom API access and white-label deployment are available on Enterprise tier.
Contact difc@gulfcapitalintelligence.com for Enterprise security requirements.
DIFC Compliance
GCI is registered in the Dubai International Financial Centre as Boost My Business AI Innovation Limited (CL11954). GCI operates under DIFC Data Protection Law No. 5 of 2020. For data subject requests, contact difc@gulfcapitalintelligence.com.