Data Protection
& Privacy Governance.

1. Corporate Structure & Data Controllers

FIMRIQ operates internationally through corporate entities in the United Arab Emirates and Sri Lanka:

• UAE Headquarters (Global HQ & Contracting Entity): FIMRIQ Technologies FZE, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.
• Sri Lanka Back Office (Engineering Hub & Operations): FIMRIQ Software Factory (Pvt) Ltd, Level 26, East Tower, World Trade Center, Echelon Square, Colombo 01, Sri Lanka.

For data governance questions, reach our Data Protection Officer at: [email protected].

2. Single-Tenant Data Isolation Principle

Unlike multi-tenant SaaS providers that pool customer data into shared databases, FIMRIQ architects dedicated single-tenant virtual private clouds (VPCs) for each client. Your databases, storage buckets, and application workers are cryptographically isolated and controlled entirely by your organization.

3. Zero-Data-Retention AI Guarantee

All artificial intelligence pipelines, OCR document extractions, and semantic vector matchers implemented by FIMRIQ adhere strictly to zero data retention. Ephemeral processing buffers are purged immediately post-execution. Client data is never transmitted to, retained by, or used to train third-party foundation models.

4. International Regulatory Compliance

Our engineering practices comply with international privacy frameworks:

• GDPR (European Union / Sweden): Full compliance with Article 28 data processor obligations, right to erasure, and data portability.
• UAE Federal Decree-Law No. 45/2021 (PDPL): Strict onshore data handling safeguards for Middle Eastern corporate clients.
• Australian Privacy Principles (Privacy Act 1988): Transparent collection, storage, and cross-border protection of Australian personal information.