Privacy Policy

Last updated: March 24, 2026

1. Data Controller

Audit Intelligence Suite ("we", "us") is the data controller for personal data processed through AuditIntelligenceSuite.com. For questions regarding your personal data, contact our Data Protection Officer at dpo@auditintelligencesuite.com. This policy complies with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree M/19 and its Implementing Regulations.

2. Data We Collect

We collect the following categories of personal data: • Account Data: name, email address, organization name, job title, and password hash. • Usage Data: pages visited, features used, timestamps, device type, browser, and IP address. • Content Data: documents you upload, prompts you enter, and outputs generated by the AI. • Hakim Conversation Logs: questions submitted to Hakim and the AI-generated responses, stored to improve accuracy. • Payment Data: billing address and payment method details processed securely through our payment provider. We do not store full card numbers.

3. Sensitive Data

We do not intentionally collect sensitive personal data as defined under PDPL Article 5 (health, genetic, biometric, religious, or criminal data). If you inadvertently submit sensitive data through the Platform, please contact us immediately for deletion.

4. Legal Basis & Purpose (PDPL Art. 6)

We process your data based on: (a) your consent provided at registration (PDPL Art. 6); (b) performance of the service contract; (c) our legitimate interest in improving Platform accuracy and security; and (d) compliance with applicable Saudi regulations.

5. Data Sharing

We share personal data with the following processors, solely to operate the Platform: • Anthropic (San Francisco, USA) — AI model provider powering Hakim and regulatory analysis. • Supabase (Singapore/USA) — database hosting and authentication. • Vercel (USA) — application hosting and edge delivery. • Resend (USA) — transactional email delivery. Each processor is bound by data processing agreements. We do not sell your personal data.

6. Cross-Border Transfers (PDPL Art. 29)

Your data may be transferred to processors located outside the Kingdom of Saudi Arabia as described above. In accordance with PDPL Article 29, we ensure that adequate safeguards are in place, including contractual protections equivalent to PDPL requirements and assessments of the receiving country's data protection adequacy.

7. Your Rights (PDPL Art. 14–18)

Under the PDPL, you have the right to: • Access your personal data and obtain a copy (Art. 14). • Correct inaccurate or incomplete data (Art. 15). • Request destruction of your data when no longer needed (Art. 16). • Withdraw consent at any time, without affecting prior processing (Art. 17). • Object to processing based on legitimate interest (Art. 18). To exercise any right, email dpo@auditintelligencesuite.com. We will respond within 30 days.

8. Data Security (PDPL Art. 19)

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS 1.3) and at rest, role-based access controls, regular security assessments, and audit logging. In the event of a data breach that poses a risk to your rights, we will notify the competent authority and affected individuals in accordance with PDPL Article 20.

9. Cookies

We use essential cookies for authentication and session management, functional cookies for language preferences, and optional analytics cookies. See our Cookie Policy at /cookies for full details. You may manage cookie preferences through your browser settings.

10. Children

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the Platform. Your continued use after changes constitutes acceptance. The "Last updated" date above reflects the most recent revision.