To comply with the EU's General Data Protection Regulation (GDPR), we implement the following data storage and processing practices:

• Data Segregation: Data uploaded by your end-users is automatically segregated based on the permitted verification regions and document types you define during configuration. Data identified as originating from the EU/UK is tagged and logically segregated from non-EU/UK data.
• Data Usage: Data tagged as EU/UK is not used for AI model training. Non-EU/UK data may be used, after the removal of personal identifiers, for AI model training to enhance our service capabilities.

Under applicable data protection laws, AAI is acting as a data processor on behalf on their clients for the delivery of the services contracted. Clients remain responsible for complying with their own obligations under data protection laws in their role as data controllers, including ensuring that personal data is collected lawfully and that adequate privacy notices are provided to end consumers.