Security and data sovereignty
Security is the product. These are the controls Cynk is built around, stated plainly.
Two ways to work with us.
Both keep your data out of shared AI services, and both are built around UAE data-protection law, including the PDPL and the DIFC and ADGM rules. Each row states what leaves your network.
| For firms: private UAE cloud | For enterprises: inside your environment | |
|---|---|---|
| Where Cynk runs | A UAE cloud region, for your firm alone, run by our team | Your own servers, or your own cloud account in the region you choose |
| Model | A model served in the same UAE region | A self-hosted open-weight model, or a model served through your own cloud account |
| What leaves | Nothing leaves the UAE, unless you turn on web search | With a self-hosted model, nothing leaves your network unless you turn on web search |
| Workflows | Ready-made workflows for your sector | Custom agents our team builds with you |
Cynk reads what you grant it. Nothing more.
Granted access only
Connectors read the accounts, folders and systems you authorise. Remove access and Cynk stops reading.
Team isolation
Every query is scoped to the asking user's team. One team's data never appears in another team's answers.
No training on your data
Cynk does not use your data to train models.
Sources on every answer
Answers cite the document and page they came from, and web sources are labelled separately, so a person can check any claim.
Bring your security questionnaire.
Architecture reviews, data-flow diagrams and security questionnaires are covered in the private briefing, against your own requirements.
Tell us what your team needs to ask.
In a private briefing we show Cynk answering it on documents like yours. Our first pilots run in Dubai.