Data Residency

Saudi Arabia is the default region for customer-tenant data, training data derived from your imagery, and model artifacts. GCC (UAE) and EU regions are available on request for multi-region deployments. A small set of optional sub-processor flows (error tracking, product analytics) may transit outside KSA and are individually disable-able.

Last updated: 2026-05-09

Default Region

New tenants are provisioned in the Kingdom of Saudi Arabia by default. This applies to:

Application compute and primary databases
Object storage for imagery, video, and analytics outputs
Backups and snapshots
Audit logs and tenant-scoped telemetry

Available Regions

KSA (primary): default for all new customers; required for KSA government and regulated entities
GCC (secondary): United Arab Emirates region available for cross-Gulf deployments
EU (optional): European hosting available for European customers or those with explicit EU residency requirements

Region selection is documented in the Order Form and the Data Processing Addendum.

Data That Stays in KSA

Tenant user records and authentication metadata
Site imagery, video, and drone telemetry
Detection results and analytics outputs
Training data derived from your tenant (only if you opt in)
Model artifacts trained on your data
Audit logs and access records

Data That May Leave the Region

The following optional flows transit outside the primary region. Each is individually disable-able by tenant administrators.

Error tracking (Sentry): stack traces and minimal context, scrubbed of user content. Can be disabled on enterprise plans.
Product analytics (PostHog EU): aggregated usage events; EU-hosted. Can be disabled.
Transactional email (Resend): outbound notifications; recipient address only.
Marketing site forms: public marketing-site form submissions are stored in Airtable for lead handling and are separate from the product tenant.

Residency Matrix

Data category	Default region	Configurable?	Notes
Authentication & user records	KSA	EU on request	Per-tenant isolation
Imagery, video, drone telemetry	KSA	GCC / EU on request	Object storage, encrypted at rest
Detection results & analytics	KSA	Same as imagery	Co-resident with source
Training data (opt-in)	KSA	Disable	Off by default for enterprise
Model artifacts	KSA	EU on request	Tenant-specific weights only
Audit logs	KSA	EU on request	Min 12-month retention
Backups	KSA	Mirror to GCC on request	Encrypted, region-isolated
Error tracking (Sentry)	Outside KSA	Disable	Optional; no user content
Product analytics (PostHog)	EU	Disable	Aggregated usage events
Transactional email (Resend)	Outside KSA	Use customer SMTP	Recipient address only

Customer Controls

Region selection at tenant provisioning, locked thereafter
Tenant admin toggles for optional sub-processor flows (analytics, error tracking)
Bring-your-own-SMTP for transactional email In progress
Customer-managed encryption keys (BYOK) on enterprise plans In progress

Procurement note: for Aramco, NEOM, SABIC and other regulated KSA buyers we will execute residency commitments in the Order Form / DPA on request.