Enterprise Privacy Policy

1. Data Sovereignty and Residency

Nom AI guarantees that all document processing, optical character recognition (OCR), and machine learning inference occurs strictly within the geographical boundaries specified by the client's AWS Region (e.g., AWS ME-SOUTH-1). Data is never routed outside the MENA region, ensuring absolute compliance with the Saudi National Cybersecurity Authority (NCA) and Personal Data Protection Law (PDPL).

2. Ephemeral Processing

We operate an "Ephemeral by Default" pipeline. Documents uploaded for extraction are loaded directly into RAM or volatile NVMe storage (Amazon EC2 Instance Store) and are cryptographically shredded (wiped) the millisecond the API returns the JSON response. We do not use your proprietary documents to train our foundation models.

3. Sub-processors

Nom AI limits third-party exposure. Our sole sub-processor for core infrastructure is Amazon Web Services (AWS). We do not embed third-party tracking pixels, analytics engines, or external logging agents in our enterprise data plane.