Legal
Privacy Policy
Last updated 1 November 2026
Sovereign AI Ltd (“Sovereign AI”, “we”) is the data controller for personal data submitted through this website. We are registered in England & Wales and process personal data under the UK General Data Protection Regulation.
What we collect
- Audit requests — your name, organisation, work email and any context you volunteer.
- Server logs — IP address, user agent and requested URL, retained for 14 days for security and abuse prevention.
We set no advertising cookies, run no third-party analytics and embed no external fonts or scripts on this site.
Lawful basis
We rely on legitimate interests (Article 6(1)(f)) to respond to commercial enquiries you initiate, and on consent where you ask us to keep you updated.
Retention
Enquiry records are deleted 24 months after the last contact, or immediately on request. Server logs expire automatically after 14 days.
Sub-processors
This website is served from Cloudflare’s London and Manchester edge locations. Email is handled by a UK-based provider. We use no US hyperscaler for hosting, storage or inference.
Your rights
You may request access, correction, deletion, restriction or portability of your data, and you may object to processing based on legitimate interests. Emailaudit@sovereignai.adem.io. We respond within one calendar month.
If you are unsatisfied, you may complain to the Information Commissioner’s Office atico.org.uk.
Customer deployment data
Data you process inside a Sovereign AI deployment never transits our systems. Models run on hardware you own or on single-tenant capacity reserved for you, and we hold no copy of your prompts, documents or embeddings.