Privacy Policy

Last Updated: February 2026

Zero-Custody Mandate

Arakan operates on a non-custodial basis. Unlike traditional SaaS platforms, our forensic engines visit your data environment to perform analysis. We do not copy, mirror, or store your underlying financial records on our persistent servers.

Data Residency & Sovereignty

In compliance with UAE Decree-Law 47, all data processing occurs within sovereign UAE nodes (Moro Hub / e& Enterprise). No statutory data exits the UAE Federal Digital Perimeter during any phase of the Arakan audit cycle.

Stateless Compute

Our analysis is executed in volatile RAM. Once a forensic session is terminated, the compute environment is purged. The only data we persist are the metadata-based "Intelligence Reports" (The Corporate DNA) which are encrypted using AES-256 at rest.

Information We Collect

Account credentials (via Google OAuth / Professional Email).
Encrypted metadata required for FTA compliance reporting.
System logs for security and performance monitoring.