v1.0 · Effective 8 July 2026
This page describes how Vantage AI Ltd (DIFC Commercial License CL13806) protects the data it touches. It is written for the people who check these things before their company signs: procurement, IT, and information security. Short and honest beats long and padded.
The systems we build run in your accounts, on your infrastructure, from day one. Your data stays in systems you control and can export at any time. Vantage operates the layer on top with scoped credentials you grant and can revoke. We never take custody of your business away from you.
All traffic between browsers, our services, and third-party APIs is encrypted in transit with TLS. Data stored by the managed platforms we run on is encrypted at rest by those platforms. We do not run our own unencrypted servers.
Access follows least privilege. Client environments are separated; each client-facing surface sits behind its own access credential, and internal consoles are gated separately. Credentials are stored in managed secret stores, never in code or repositories, and are rotated when staff or scope changes. Vantage is deliberately small: the people with access are named to you, and there is no offshore delivery layer.
We keep a current, named list of sub-processors in our Privacy Policy, including what each one does and where model providers are configured not to train on your data. If the list changes, the policy is updated.
We sign an NDA before we see anything. We never resell your data, never train models on it, and never use it for anything except building and running your system. When an engagement ends, your data is already in your accounts; there is nothing to hand back.
If a security incident affects your data, we commit to notifying you within 72 hours of becoming aware, with what we know, what we have contained, and what happens next. Security contact: ivan@wearevantage.ai.
We do not display badges we have not earned. Vantage AI Ltd holds no third-party security certifications today; as we earn them, they will be named here. Our regulatory footing: incorporated in the DIFC, with data handling aligned to the DIFC Data Protection Law 2020 and the UAE Federal PDPL 2021 as described in the Privacy Policy.
Vantage AI Ltd · DIFC Commercial License CL13806 · IH-00-01-03-OF-05, Level 3, Innovation One, DIFC, Dubai, United Arab Emirates