Legal & Compliance.
Last Updated: May 12, 2026 • Version 2.1 (PDP Compliant)
Data Residency
Data Protection
Encryption
Support
Section 01 — Privacy as a Human Right
We believe data sovereignty is a fundamental right for MSMEs. Our platform is architected to ensure that business owners retain 100% control over their customer relationships. Unlike public LLMs, our Sovereign AI Mesh ensures that your private business data is never used for training third-party models.
ASEAN (Data Privacy)
Full alignment with regional personal data protection standards.
Singapore (PDPA)
Standardized data protection practices meeting SG-PDPA requirements for regional operations.
Section 02 — Technical Protections
Security is not an afterthought; it is built into the protocol. All data moving between the KopasAI Cloud and the WhatsApp Business API is protected via:
- TLS 1.3 Encryption for data in transit.
- AES-256 Encryption for data at rest.
- Multi-factor authentication for the dashboard is not available yet; protect your account with a strong password.
For deep technical details on our infrastructure security:
Explore Security Whitepaper →Section 03 — Sub-processors
We use the following sub-processors to run KopasAI. Each row shows what they do and where that part of the service runs.
| Entity | Service Provided | Location |
|---|---|---|
| Google Cloud | Infrastructure & Data Storage | the ASEAN region |
| Meta Platforms | WhatsApp API Operations | Global (Edge nodes) |
| Midtrans | Payment processing for subscriptions and, on Menengah and above, customer payments | ASEAN |
| Google Analytics | Website Analytics (only if you allow it) | Global |
| Google & Groq | AI reply generation (Google Gemini, with Groq as a backup) | Global |
Section 04 — Data Subject Rights
Right to be Forgotten
MSME owners can request the permanent deletion of their account and all associated customer data at any time. Upon receiving a valid Data Deletion Request via the dashboard or email, we will purge all identifiable records within 30 days, subject to legal retention requirements for transaction history.
View Account Deletion Instructions →Identity of Data Protection Officer (DPO):
Privacy & Compliance Team
legal@kopasai.com
KopasAI Sovereign Hub • ASEAN