AXIOM

1. Information We Collect

AXIOM collects information you provide directly, including name, email address, company name, and usage data generated through your interactions with our AI platform. We also collect technical data such as IP addresses, browser type, and diagnostic information to improve our services.

2. Data Processing and GCC Compliance

All data processing occurs exclusively within GCC region data centers located in Riyadh, Dubai, and Doha. We comply with:

• Saudi Arabia: Personal Data Protection Law (PDPL) and its implementing regulations
• United Arab Emirates: Federal Decree-Law No. 45 of 2021 on Personal Data Protection (TDRA)
• Qatar: Law No. 13 of 2016 on Combating Cybercrime (NSA compliance)

3. Data Security Measures

We implement industry-leading security measures including AES-256 encryption at rest, TLS 1.3 for data in transit, private cloud inference with zero data egress, and comprehensive audit logging of all data access.

4. Data Retention

User data is retained for the duration of your subscription plus 90 days. You may request complete data deletion at any time, and we will process such requests within 30 days in accordance with applicable GCC data protection laws.

5. Third-Party Disclosure

We do not sell, trade, or transfer your personal data to third parties. Your code and data never leave the GCC region unless explicitly authorized by you through documented consent for specific integration purposes.

6. Your Rights

Under GCC data protection laws, you have the right to access, correct, delete, and port your personal data. Contact our Data Protection Officer at privacy@axiom-dev.io to exercise these rights.

7. Contact Us

AXIOM Technologies Ltd.
Data Protection Officer
Email: privacy@axiom-dev.io
Riyadh, Saudi Arabia

1. Acceptance of Terms

By accessing or using AXIOM's AI platform and services, you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use our services.

2. Description of Services

AXIOM provides private LLM infrastructure, AI agents, and multi-agent orchestration services for enterprise software development. Our platform enables code generation, review, testing, deployment, and documentation within GCC region data centers.

3. User Obligations

You agree to: (a) provide accurate information during registration; (b) maintain the security of your account credentials; (c) comply with all applicable GCC laws and regulations; (d) not use our services for any illegal or unauthorized purpose; (e) not attempt to gain unauthorized access to our systems.

4. Intellectual Property

You retain all intellectual property rights in your code and data. AXIOM claims no ownership rights over content you submit. You grant us a limited license to process your data as necessary to provide our services.

5. Service Level Agreement

We commit to 99.9% platform availability. Scheduled maintenance will be communicated at least 48 hours in advance. Credits for downtime are provided per the specific service tier agreement.

6. Payment Terms

Subscription fees are billed monthly in advance. Enterprise contracts follow custom payment schedules. All fees are non-refundable except as required by applicable GCC consumer protection laws.

7. Limitation of Liability

AXIOM's total liability shall not exceed the fees paid by you in the twelve months preceding the claim. We are not liable for indirect, incidental, special, or consequential damages.

8. Governing Law and Dispute Resolution

These terms are governed by the laws of the Kingdom of Saudi Arabia. Any disputes shall be resolved through binding arbitration in Riyadh under the rules of the Saudi Center for Commercial Arbitration.

9. Modifications to Service

We reserve the right to modify or discontinue any service with 30 days' written notice. Material changes will be communicated via email and platform notifications.

10. Contact

AXIOM Technologies Ltd.
Email: legal@axiom-dev.io
Riyadh, Saudi Arabia

1. Our Security Commitment

AXIOM is built on a zero-trust security architecture. Your code and data never leave the GCC region — guaranteed. We undergo regular security audits and maintain certifications for PDPL, TDRA, and NSA compliance.

2. Infrastructure Security

• Data Centers: SOC 2 Type II certified facilities in Riyadh, Dubai, and Doha
• Network Isolation: Private VPC with strict network segmentation
• DDoS Protection: Enterprise-grade protection with automatic mitigation
• Physical Security: 24/7 monitoring, biometric access controls, and mantrap entries

3. Encryption

• Data at Rest: AES-256 encryption with customer-managed keys
• Data in Transit: TLS 1.3 with perfect forward secrecy
• Key Management: Hardware Security Modules (HSM) for key storage

4. Access Controls

• Role-based access control (RBAC) with principle of least privilege
• Multi-factor authentication (MFA) required for all accounts
• Just-in-time access provisioning for administrative tasks
• Comprehensive access logging and audit trails

5. AI-Specific Security

• PII Removal Layer: Automatic detection and removal of personally identifiable information
• Prompt Injection Protection: Input sanitization and adversarial attack mitigation
• Model Isolation: Dedicated inference environments per customer
• Output Filtering: Content safety checks on all model outputs

6. Vulnerability Management

Our security team conducts continuous vulnerability scanning, penetration testing (quarterly by independent firms), and maintains a responsible disclosure program. Critical vulnerabilities are addressed within 24 hours.

7. Incident Response

In case of a security incident, we follow a documented incident response plan with defined escalation paths. Customers are notified within 72 hours of confirmed breaches affecting their data, in compliance with GCC data protection regulations.

8. Compliance Certifications

9. Report Security Issues

If you discover a security vulnerability, please contact us at security@axiom-dev.io. We appreciate responsible disclosure and commit to acknowledging reports within 24 hours.