Legal

Data Processing & UAE Compliance

Last updated 15 June 2026

⚠ Template for a UAE SaaS — please review with legal counsel before launch.

This page summarises how Tallium handles data processing and supports UAE regulatory compliance for your business. It complements the Privacy Policy and Terms of Service.

1. Roles

For the business data you store in Tallium, you are the data controller and Tallium is the data processor, acting on your instructions.

2. FTA & tax compliance

Tallium maintains a complete, tamper-evident audit trail and generates VAT 201 and Corporate Tax outputs in line with FTA requirements, to support your filings.
You remain responsible for the accuracy and timeliness of submissions to the authorities.

3. Data residency & hosting

Business-plan data is hosted on UAE-region infrastructure. Enterprise customers can request dedicated UAE-region hosting with data-residency guarantees.

4. Security controls

Encryption in transit and at rest, role-based access control, audit logging, and regular security testing. Sub-processors are bound by data-protection terms.

5. Data Processing Addendum

A Data Processing Addendum (DPA) is available for customers who require one. Request it via the Contact page.