Dike
Statutory Governance

Compliance

Sovereign legal intelligence requires strict regional statutory alignment. Dike operates under tailored Data Processing Addendums (DPAs) designed for Saudi Arabia, the UAE, and Egypt.

🇸🇦

Saudi Arabia

— Personal Data Protection Law (PDPL)

All search queries and reasoning prompts are processed ephemerally with zero customer retention for model training (PDPL Art. 5). Cybersecurity controls map directly to National Cybersecurity Authority (NCA ECC-1:2018) requirements, and grounding is anchored in authentic Umm Al-Qura official gazette publications.

🇦🇪

United Arab Emirates

— Federal Personal Data Protection Law

Compliant with federal processor obligations under standard Data Processing Addendums. Architecture maintains full interoperability with financial free-zone regulations, including DIFC Data Protection Law No. 5/2020 and ADGM Data Protection Regulations 2021.

🇪🇬

Egypt

— Personal Data Protection Law

Strict data subject rights enforcement with instant session purge capabilities. Grounding citations are resolved against Al-Jarida Al-Rasmiyya and Court of Cassation (Mahkamat Al-Naqd) commercial and civil rulings.

Enterprise Compliance Deliverables

On-Demand

Enterprise legal and procurement teams can request our standard Data Processing Addendum, SOC 2 bridge letter, or CAIQ vendor questionnaire directly from our compliance office.

Enterprise Data Processing Addendum (DPA)Standard bilateral DPA incorporating KSA PDPL, UAE Law 45, and Egyptian Law 151 processor terms.
SOC 2 Type II Bridge LetterIndependent third-party auditor security and confidentiality assessment available under NDA.
Cloud Security Alliance Questionnaire (CAIQ)Completed consensus assessment questionnaire spanning 260+ enterprise cybersecurity controls.
Technical Security ArchitectureZero retention runtime, TLS 1.3 encryption, and WebAuthn passkeys.
View security