Data Residency Options

Our commitment

Deis Technologies provides AI-powered document processing, identity verification, and compliance-management solutions with transparent data-handling practices.

We understand the importance of data sovereignty, and all services are designed with privacy-by-design principles and aligned to applicable South African data-protection requirements, including POPIA.

Where customers have stricter residency, hosting, or regional-processing obligations, Deis can discuss region selection, dedicated infrastructure, and contractual retention controls as part of implementation planning.

OCR Platform

• Data processing location: data submitted to the OCR APIs is processed in Microsoft Azure data centres, including South Africa, Europe, or other configured regions depending on customer requirements and availability.
• Data usage: customer data is processed solely to deliver OCR results and is not used for model training or secondary purposes.
• Data retention: OCR input data and extracted results are retained only for the duration necessary to provide the service unless otherwise agreed contractually.
• Regional options: customers with specific residency requirements can engage Deis Technologies to discuss regional deployment options.

Document tampering detection

• Data processing location: forensic-analysis services use hybrid AI analysis across secure cloud infrastructure in regions configured per customer requirements.
• Data usage: documents are analysed solely for tampering detection, with heatmaps and risk scores generated in real time, and customer documents are not used for model training.
• Data retention: documents and analysis results are retained only for the duration of the analysis session unless customers opt for extended retention for audit purposes.
• Regional options: enterprise customers may request dedicated processing infrastructure in specific regions.

Global OCR and document extraction

• Data processing location: global OCR services process documents through Microsoft Azure Cognitive Services with regional processing across South Africa, Europe, the United States, and Asia-Pacific depending on configuration.
• Data usage: documents are processed exclusively to extract structured fields and are not used for model improvement or shared with third parties beyond the necessary Azure infrastructure.
• Data retention: original documents and extracted data are retained only during active processing sessions, may be cached temporarily to support response delivery, and are then purged according to retention policies.
• Regional options: multi-region deployment is available for enterprise customers requiring data sovereignty across jurisdictions.

SecureCode

• Data processing location: SecureCode cryptographic operations are performed on Microsoft Azure infrastructure with South African hosting and European failover options.
• Data usage: document metadata embedded in SecureCode QR codes is encrypted using industry-standard cryptographic algorithms and verification data is processed solely to confirm document authenticity.
• Data retention: cryptographic signatures and verification logs are retained according to customer-specified policies to support audit requirements for document lifecycle tracking.
• Regional options: private-key storage and cryptographic processing can be isolated to specific regions upon request.

Lending technology

• Data processing location: lending workflows process financial documents and applicant data within South African data centres to align with local financial regulations, with credit-bureau integrations processed through secure, locally hosted connections.
• Data usage: applicant financial data, bank statements, and payslips are processed solely for affordability assessment and lending decisions, and are not used for model training.
• Data retention: financial records are retained in accordance with National Credit Act requirements, with configurable retention periods where customer obligations require it.
• Regional options: international deployments are available on consultation for appropriate regional configurations.

ComplyHub

• Data processing location: ComplyHub processes identity-verification and compliance-screening data within South African infrastructure with locally hosted secure integrations.
• Data usage: customer identity data is processed exclusively for KYC verification, AML screening, and regulatory-compliance purposes, with screening results generated in real time.
• Data retention: compliance records, verification logs, and screening results are retained in accordance with FICA and other relevant regulatory requirements, including standard five-year AML retention periods.
• Regional options: cross-border compliance configurations are available for multinational operations.

Smart Data Gateway

• Data processing location: the Smart Data Gateway routes data through secure South African infrastructure with regional failover capabilities.
• Data usage: gateway payloads are processed solely for routing and transformation, and Deis Technologies does not inspect, store, or analyse payload data beyond what is necessary for successful delivery.
• Data retention: API request logs and transaction metadata are retained for operational monitoring and debugging, while payload storage remains disabled unless explicitly configured.
• Regional options: gateway nodes can be deployed in customer-specified regions to minimise latency and comply with data-sovereignty requirements.

Municipal indigent management

• Data processing location: municipal indigent-management services process citizen data exclusively within South African government-approved infrastructure using secure, locally hosted integrations.
• Data usage: citizen data is processed solely for eligibility verification, grant allocation, programme management, fraud prevention, and service-delivery optimisation.
• Data retention: municipal records are retained according to local record-keeping requirements and PAIA obligations, including historical records used for programme analysis and renewals.
• Regional options: the platform is designed for South African municipal operations and processes all data within South African borders.

Questions about data residency

For questions regarding data residency, regional deployment options, or specific compliance requirements, contact [email protected].

This statement is intended to support implementation and procurement discussions. Detailed contractual retention and deployment commitments are handled during commercial and technical onboarding.