Legal

Data Processing Agreement

Effective: 2026-04-26 · Owner: Airomob Technologies LLC, Dubai, UAE.

Roles

For data uploaded into your ARIA workspace and prompts/outputs produced by your agents, you (the Customer) are the Data Controller and Airomob is the Data Processor. Airomob acts only on documented instructions from the Customer.

Subject matter and duration

Processing is limited to operating the ARIA service for the duration of the Customer's subscription, plus the data-retention window described in the Privacy Policy.

Categories of data subjects

• The Customer's end users who interact with deployed agents.
• The Customer's employees who administer the workspace.
• Individuals whose data appears in documents the Customer ingests.

Sub-processors

See the Privacy Policy for the current sub-processor list. Customers may request a complete list at dpa@airomob.com; we provide 30-day notice of changes on enterprise plans.

Security

Data is encrypted in transit (TLS 1.2+) and at rest. Tenant isolation is enforced at the database layer via row-level security policies. Access controls follow least-privilege, with role separation between platform operators and customer data.

Sub-DPAs and transfers

Cross-border transfers (e.g. when a Customer selects a model provider hosted outside the UAE) are governed by the corresponding provider's data-transfer mechanisms. The Customer is responsible for ensuring its provider selection complies with applicable residency requirements.

Audit and assistance

Enterprise plans include audit-log export, security-questionnaire support, and reasonable cooperation with the Customer's data-protection authority on request.

Contact

DPA execution and questions: dpa@airomob.com.