Data residency and security
Name the region. Say what still leaves it.
Summary: The 10ⁿ Agentic Service Platform runs in Microsoft Azure UAE North. Whether a language model processes data in the UAE depends on the deployment type, not the region of the account, so we state it on every answer. In production the model route is UAE-processed, while two channels, WhatsApp and third-party voice, still cross the border by design. For entities that need everything on their own premises, we design the same stack for their Kubernetes cluster and GPU servers.
What runs where
| Part | Our demo | Production in the cloud | On premises |
|---|---|---|---|
| Agents, tools and APIs | Azure Container Apps, UAE North | The same, in a dedicated subscription with private connectivity | The entity’s Kubernetes cluster |
| Records, transcripts and audit | PostgreSQL, UAE North | The same, zone-redundant, with customer-managed keys | The entity’s database |
| Knowledge index | Service descriptions inside the application; Azure AI Search, UAE North, in our document demos | Azure AI Search, UAE North | A search and vector store inside the entity’s network |
| Speech, Arabic and English | Azure AI Speech, UAE North | The same | A speech service on the entity’s servers |
| Language model processing | Global deployments, which may process outside the UAE; every answer says so | A UAE-processed route: regional provisioned capacity in UAE North or a UAE sovereign cloud endpoint | Open-weight models on the entity’s GPU servers |
| Meta and a WhatsApp Business provider, outside the UAE | The same; the entity decides which services use it | Not available on a closed network | |
| Browser voice | A voice service outside UAE North | The entity’s telephony with speech in UAE North | The entity’s telephony |
Sovereign AI: three deployment options
| Option | Where the models run | When it fits |
|---|---|---|
| Azure UAE North, regional provisioned capacity | In UAE North, on reserved capacity | Most government and regulated services; the cost becomes a fixed monthly fee |
| Azure UAE North with a UAE sovereign cloud model endpoint | With a UAE sovereign cloud provider | When the entity already buys from one, or needs its certifications |
| On premises | Open-weight models on the entity’s GPU servers | Closed networks and classified data; see on-premise AI and what a sovereign platform needs on site |
Security controls in a production design
- A dedicated Azure subscription for the entity, with a site-to-site VPN or private link to its systems.
- A web application firewall and an API gateway in front of every channel and every model call.
- Managed identities between services, keys in Key Vault with HSM protection, and customer-managed keys for stored data.
- Role and context checks on every retrieval and every action.
- Logs streamed to the entity’s security monitoring (SIEM).
- Zone redundancy and a recovery site in the UAE.
- Production access for named UAE-based staff only. Engineers and coding tools work on code and synthetic data.
Our demo shares a pilot environment with our other demonstrations and has none of the infrastructure controls above: no dedicated subscription, private link, zone redundancy or SIEM feed. That is acceptable for fictional data and wrong for a government service, so every production deployment starts from a dedicated design and the entity’s written security approval.
Regulation we design against
We map controls per deployment to the rules the entity applies, usually the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the UAE Information Assurance Standards and, for Dubai entities, the Information Security Regulation of the Dubai Electronic Security Center. The entity’s security team assesses compliance for each deployment; we supply the data-flow and residency assessment, the threat model and the control mapping.
Want to see it on your own service? We run the demo live with you, in Arabic or English.
Related: Agentic AI Platform, on-premise AI in the UAE, data residency on Azure UAE North, what in-country actually requires.
Frequently asked questions
Is your demo UAE-resident?
Partly. The platform, records and audit run in Azure UAE North, but the demo’s language models use global deployments, which may process data outside the UAE. Every answer says so, and that is why the demo holds fictional data only.
Can the platform run fully on premises?
Yes, by design: agents and tools on the entity’s Kubernetes cluster, open-weight models on its GPU servers, search and storage inside its network. WhatsApp and third-party voice drop out or move to the entity’s own telephony. Each on-premises deployment is sized as its own project.
Do you train models on our data?
No. The platform uses models as they are and grounds them on your sources at run time. Your data, prompts and transcripts are not used to train shared models.
Who at 10ⁿ Tech can see production data?
Our rule: only named UAE-based staff get production access. Everyone else, people and coding tools alike, works on code and synthetic data.
