Trust Center

About transparency and data handling.

Our Credentials

CL11954

DIFC Trade Licence

DIFC Innovation Hub Member
British Chamber of Commerce Dubai Member

Leadership

HA

Hemant Agrawal

Director & Co-Founder

Director of both Gulf Capital Intelligence and SGD Consult, a management consulting firm operating in the UAE for over 9 years. Brings deep regional market expertise and advisory experience across GCC private markets.

GA

Gaurav Kumar Aggarwal

Co-Founder & Director, Revenue Growth

Director, Revenue Growth & Commercial Strategy at DIFC. Exited founder and investor with deep experience scaling clinics, F&B, and local businesses across UAE, UK, KSA, and China. LSE alumnus. Builds multi-agent AI strategy engines for investment teams.

What This Platform Is and Is Not

What GCI Is

  • AI-assisted screening and analysis framework
  • Structured conviction methodology for due diligence
  • Evidence-based intelligence reporting
  • Decision support tool for financial professionals
  • Transformative approach to conviction analysis

What GCI Is Not

  • Regulated financial advice or recommendations
  • Replacement for professional due diligence
  • Automated trading or investment execution
  • Guarantee of investment returns
  • Substitute for qualified financial professionals

Explore Our Methodology

See a sample conviction report to understand the depth and structure of GCI intelligence. This anonymised report demonstrates our screening framework and analytical approach.

Download Sample Conviction Report (Anonymised)

Data Policy

Processing

User data processed exclusively by Claude (Anthropic) for generating investment intelligence reports. Data submitted to Claude API only when user requests a screening report.

Data Retention

Session-based storage only. Data not stored beyond current session. Reports generated belong entirely to the user.

Training

Data never used to train Claude or any other ML models. No contribution to model improvement, feature development, or research datasets.

No Third-Party Sharing

Except for Anthropic (AI processing), Stripe (payments), and Vercel (hosting), data not shared with any third parties. Complete ownership of all generated reports.

AI Model Usage

Claude Sonnet 4

Developed by Anthropic. All outputs are AI-generated screening intelligence, not regulated financial advice.

Use Case

Processes company information, financial metrics, regulatory data, market intelligence through proprietary screening methodology. Reports serve as intelligence tools for financial professionals.

Important Disclaimer: All outputs should be independently verified by qualified financial professionals. This platform generates analytical intelligence to support decision-making, not regulated financial advice.

Quality Assurance

GCI implements a 5-layer QA process to ensure consistent, high-quality intelligence outputs:

1

Doctrine Injection

System prompts embed GCI screening doctrine and investment principles into every analysis.

2

Sector Playbook Matching

Reports validated against sector-specific playbooks to ensure methodology consistency.

3

Verifier Scoring

Automated verification scores outputs against quality benchmarks and completeness criteria.

4

Repair Loop

Outputs below thresholds automatically regenerated and re-evaluated until quality standards met.

5

Human Review Triggers

Deals above AED 5 million automatically flagged for manual review by qualified analysts.

Data Retention

Session-Based Model

Data exists only during active session. No persistent storage of user queries or analysis.

Report Ownership

All generated reports owned by user. You may download, store, and archive reports indefinitely.

No Long-Term Storage

No screening history, queries, or intermediate results stored on GCI infrastructure.

Third-Party Limitations

Anthropic follows their standard API data retention policies. Stripe retains payment records per their policies.

Security

🔒

Encryption

HTTPS with TLS 1.2 or higher for all communication. End-to-end encryption of sensitive data.

🔑

API Key Management

Server-side only. No credentials exposed to client browser. Secure key rotation protocols.

🛡️

Client-Side Security

No credentials, tokens, or keys stored in browser storage or local caches.

☁️

Deployment

Vercel enterprise-grade security, DDoS protection, SOC 2 compliance, global redundancy.

👤

Access Controls

Secure OAuth and passwordless authentication with industry-standard session management.

📊

Monitoring

Continuous security monitoring, threat detection, and incident response protocols.

Subprocessors

GCI uses the following subprocessors to deliver our platform. Only minimum necessary data is shared with each. All subprocessors are contractually obligated to maintain confidentiality and comply with data protection regulations.

Anthropic

Purpose:

Claude API - AI model processing for intelligence reports

Data:

Analysis queries and company information

Region:

United States

Stripe

Purpose:

Payment processing and subscription management

Data:

Payment information and billing records

Region:

United States / Global

Vercel

Purpose:

Platform hosting and content delivery

Data:

Application code, sessions, logs

Region:

Global