Security and Compliance
Baseline controls and governance commitments for launch. Effective: April 29, 2026. Last updated: April 29, 2026. Private by default.
Entity and operating model
Nova Nuggets L.L.C, established in 2025, is headquartered in Dubai, UAE. ZAKI production services run on European-hosted infrastructure with GDPR-aligned processing controls.
GDPR alignment
Processing follows GDPR principles: lawfulness, fairness, transparency, purpose limitation, minimization, accuracy, storage limitation, and integrity and confidentiality.
Consent and policy governance
Signup requires explicit legal consent capture. Policy versioning and re-consent flows are enforced when terms are updated.
Security controls
Encryption in transit, controlled access, role-based internal access, secret management, logging, monitoring, and abuse-prevention controls.
Model and vendor chain
Inference may be routed through third-party inference processors. Platform systems ZAKI and TYP are operated by Nova Nuggets.
Model licensing position
Inference models are configured from provider entries with open-source license metadata at deployment time. We maintain routing controls for compliance and reliability updates.
Private-by-default product posture
We build ZAKI to be private by default: least-necessary processing, explicit user controls, clear consent records, and controlled data access. We improve model quality to support a culturally relevant Arab AI voice without weakening privacy commitments.