Paseer AI Center

Data protection and privacy

Classify, detect and mask personal data, financial data and secrets before any call, with residency, retention, deletion policies, and processing and no-training agreements. ENT-AI-029..034 AI-SEC-005

Data protection before sending

Applied in the gateway on every call ENT-AI-030AI-SEC-006

Block sending “Secret” and “Restricted” to any external model

Platform rule, cannot be disabled

Mask personal identifiers and contact details

Names, phone numbers, email, ID number

Mask financial numbers and accounts Detect secrets and keys within text Exclude attachments not needed for the task

Safety and review controls

AI-V4-01AI-V4-04ENT-AI-021

Isolate instructions from retrieved content

Protection against prompt injection within documents

Human approval before committing a high-impact output Distinguish fact, inference and suggestion in the interface Deterministic calculation via the calculation engine, not the model

Retention of the instructions and outputs log

Provider commitments

Processing agreement and no training on customer data ENT-AI-034

Provider	Data processing agreement	No training	Processing location	Highest classification	Confirmed by
Anthropic	Confirmed	Confirmed	Outside the Kingdom	Internal	Sarah Al-Otaibi · 2 Sep
Azure OpenAI	Confirmed	Confirmed	Depends on subscription region	Internal	Data office · 20 Aug
Private model	Not applicable	Internal	Riyadh	Secret	Digital Transformation Department

Organization data policy

Residency, encryption, retention and deletion ENT-AI-031G-05.2

Index and memory residency

Encryption

Delete user data on request

Memory isolation and re-identification prevention

ENT-AI-032ENT-AI-033

Conversation memory is isolated per user and organization Block queries that re-identify individuals

Minimum sample size of 10 in analytics

DLP on outputs before display

Last re-identification test: 2 of 150 cases. The fix was referred to the quality team AI-SEC-006

Data protection and privacy

Data protection before sendingi

Safety and review controlsi

Provider commitmentsi

Organization data policyi

Memory isolation and re-identification preventioni

Policy version historyi

Data protection before sending

Safety and review controls

Provider commitments

Organization data policy

Memory isolation and re-identification prevention

Policy version history