Data Architecture
GCI runs on Vercel's global edge network with serverless compute. Session data and account credentials are stored in encrypted key-value storage. All connections use TLS 1.2+ encryption in transit.
How the Tools Work
When you submit a brief, the conviction engine you operate processes it through six specialist intelligence agents and a five-stage analytical pipeline. The analysis you generate is cross-checked across multiple independent reasoning engines accessed via secure third-party APIs. You generate your own structured analysis, interrogate the evidence, and reach your own findings and decisions; GCI does not provide investment advice, investment research as a service, or recommendations.
Your brief content is sent to these API providers for processing. It is used solely to support the analysis you generate and is not stored by GCI beyond the session. API providers process requests under their enterprise terms. GCI does not opt into any model training programs.
What We Do NOT Do
We do not train models on your briefs, reports, or account data. GCI does not opt into any model training programs offered by API providers. We do not share your data with third parties for marketing, analytics, or any other purpose.
Brief content and uploaded documents are not retained beyond the active session unless you explicitly save a report to your report history. We do not track individual user behaviour beyond anonymised pageview counts for site operations. Feedback you provide through the rating feature improves internal quality benchmarks only and is not used to fine-tune language models.
What You Should Know
Report data passes through secure, US-based third-party API infrastructure for processing. You should not upload material non-public information (MNPI), insider information, or confidential third-party documents you are not authorized to share with a third-party processor.
The output you generate using GCI is a structured signal you produce for your own screening, not regulated advice or a recommendation from GCI. It complements, not replaces, professional due diligence. If your organization requires a dedicated processing environment, custom data residency, or SOC 2 compliance documentation, contact difc@gulfcapitalintelligence.com for Enterprise options.
Enterprise Data Handling
Enterprise clients receive dedicated processing options, custom data retention policies, and can request a data processing agreement (DPA). Custom API access and white-label deployment of the self-serve tools are available on Enterprise tier.
Contact difc@gulfcapitalintelligence.com for Enterprise security requirements.
DIFC Compliance
GCI is registered in the Dubai International Financial Centre as Boost My Business AI Innovation Limited (CL11954). GCI operates under DIFC Data Protection Law No. 5 of 2020. For data subject requests, contact difc@gulfcapitalintelligence.com.