Arivox

Trust

Security & compliance, built for the region

Sovereign by design: keep data where the law requires, map consent to local rules, and audit everything — across Israel, the Gulf and the EU.

Talk to salesSelf-hosted option

Encryption everywhere

Encrypted transport (TLS/SRTP) and storage. Secrets held in a vault, never in plaintext.

Data residency

Keep call data and vector stores resident in Israel, the Gulf or the EU — or fully self-hosted.

Consent & compliance

Guardrails map to Israel's Privacy Protection Law (Amendment 13), the UAE and KSA PDPLs, and GDPR — per region and per agent.

Audit & DSR

Every call and action is logged. Handle data-subject requests and deletions with a clear trail.

Residency

Your data, where the law wants it

We name the frameworks plainly: Israel's Privacy Protection Law Amendment 13 (in force August 2025), the UAE PDPL, the KSA PDPL, and the EU GDPR. Residency and consent controls map to each — we don't claim certifications we don't hold.

DATAISRAEL

Privacy Protection Law — Amendment 13 (in force Aug 2025) · local residency

DATAGULF

UAE PDPL · KSA PDPL · regional residency

DATAEU

GDPR · EU data residency · DPA

These are residency statements, not certification seals. We name the legal framework each region maps to — and don't display badges we haven't earned.

Security FAQ

Where is my data stored?
You choose: resident in Israel, the Gulf or the EU on our managed infrastructure, or entirely on your own servers in a self-hosted deployment.
Is Arivox GDPR-compliant?
Arivox supports GDPR obligations including EU data residency, a Data Processing Agreement, audit logging and data-subject-request handling. Self-hosting gives you full control of the data boundary.
How is consent handled for outbound calls?
Per-agent guardrails enforce call windows, disclosure and consent language mapped to Israel's Privacy Protection Law (Amendment 13, in force August 2025), the UAE and KSA PDPLs, and GDPR; every call is logged for audit.
Do you redact sensitive data?
Knowledge-base sources are redacted on ingest: card numbers, national ID numbers and email addresses are masked before the text is stored or embedded. Call transcripts are not redacted today — they stay in the region you choose, under retention windows and deletion you control.

Need a compliance review?

We'll walk your team through residency, consent and self-hosting for your region.

Talk to salesPrivacy policy