Effective 25 September 2026
This page describes how Vantage AI Ltd (DIFC Commercial License CL13806) protects the data it touches. It is written for the people who check these things before their company signs: procurement, IT, and information security. Short and honest beats long and padded.
Depending on the service, systems may run in a client’s accounts or in Vantage-managed infrastructure. Vantage Desk runs in Vantage-managed infrastructure with a separate database for each client. The client keeps control of its own connected platform accounts; Vantage uses scoped credentials to connect them. Clients can request an export of the data Desk holds under their engagement terms.
All traffic between browsers, our services, and third-party APIs is encrypted in transit with TLS. Data stored by the managed platforms we run on is encrypted at rest by those platforms. We do not run our own unencrypted servers.
Access follows least privilege. Client environments are separated; each client-facing surface sits behind its own access credential, and internal consoles are gated separately. Credentials are stored in managed secret stores, never in code or repositories, and are rotated when staff or scope changes. Vantage is deliberately small: the people with access are named to you, and there is no offshore delivery layer.
Our Privacy Policy describes categories of providers involved in processing. The Vantage Desk provider list and processing locations are under review before public release.
We protect client information under the applicable confidentiality and data-processing terms. We never resell your data or use it to train models for other clients or third parties. When an engagement ends, clients may request an export of data held in Vantage-managed systems. The signed engagement agreement and documented instructions determine the return or deletion of active records. Some records may have legal retention requirements, and protected backups remain until overwritten in their provider’s ordinary cycle.
If a personal data breach affects your data, we notify you without undue delay after becoming aware, with what we know, what we have contained, and what happens next as that information becomes available. Security contact: ivan@wearevantage.ai.
We do not display badges we have not earned. Vantage AI Ltd holds no third-party security certifications today; as we earn them, they will be named here. Our regulatory footing: incorporated in the DIFC, with data handling aligned to the DIFC Data Protection Law 2020 and the UAE Federal PDPL 2021 as described in the Privacy Policy.
Vantage AI Ltd · DIFC Commercial License CL13806 · IH-00-01-03-OF-05, Level 3, Innovation One, DIFC, Dubai, United Arab Emirates