Encryption in transit & at rest
Traffic is served over HTTPS/TLS, and data at rest is protected with industry-standard encryption.
Trust & Compliance
Epsilon AI Global operates through registered entities in the United States, Egypt and Saudi Arabia, with regional delivery and partner arrangements in additional markets. The structure and responsible contracting entity are confirmed for each engagement.
Last updated: September 2026
Legal registration and tax identifiers for each operating entity.
| Entity | Status | Commercial Reg. | Tax ID |
|---|---|---|---|
| USA — Headquarters | Registered entity | 7078427 | 38-4095665 |
| Egypt | Registered entity | 118268 | 672-411-008 |
| Saudi Arabia | Registered entity | 1009109714 | 7041953188 |
| UAE In partnership with Elbadya Quantum | Partner delivery | — | — |
| Iraq | Regional office | — | — |
Contracting is always through one of the registered entities above. The responsible contracting entity and the place of delivery are confirmed before any agreement is signed.
Security is built into how we run services and write software — not bolted on afterwards.
Traffic is served over HTTPS/TLS, and data at rest is protected with industry-standard encryption.
Role-based access, least-privilege defaults, and periodic reviews limit who can reach production systems and data.
Changes pass through code review and dependency checks before release, following a secure SDLC.
Assets are self-hosted with security headers (CSP, HSTS, nosniff). We use no third-party advertising or cross-site tracking; with consent, one privacy-configured analytics service measures site performance.
You stay in control of your data — where it lives, how long it is kept, and when it is removed.
Personal data is minimised, collected for a stated purpose, and processed on a lawful basis aligned with GDPR principles.
For analytics engagements, the Unified Intelligence Layer can run in the cloud, on-premises, or hybrid — so data stays in the jurisdiction you choose.
Data is retained only as long as needed for its purpose and deleted on request; you can exercise access and erasure rights at any time.
Enquiries are routed to the regional office you select — no cross-border marketing profiles are built.
Our information security management system has been independently audited against ISO/IEC 27001, and our wider controls follow recognised security and privacy frameworks as guiding principles. Each certification below states its own scope and current status.
Epsilon AI Global's information security management system was certified to ISO/IEC 27001:2022 by Infinity Cert International (EGAC / IAF accredited, Reg. EG120325S) for the provisioning of cloud and AI products, solutions and services. The certificate was issued 12 March 2025 and ran to 11 March 2026, with recertification scheduled for 11 March 2028; the renewal is in progress. We publish the issued certificate as the record of the audited scope rather than describe ourselves as currently certified while it is being renewed — ask us for the certificate and the renewal status and we will send both.
Epsilon AI's quality management system is certified to ISO 9001:2015 by Infinity Cert International (EGAC accredited, CAB #012005, under the IAF multilateral recognition arrangement) for the provision of AI services, solutions and training. Certificate EG220126A was issued 22 January 2026 and is valid to 21 January 2027, with recertification due before 21 January 2029. It is verifiable at infinitycert.com and iafcertsearch.org.
Epsilon AI Learning's educational organization management system is certified to ISO 21001:2018 by Infinity Cert International (EGAC accredited, CAB #012005) for the provision of AI services, solutions and training. Certificate EG220126M was issued 22 January 2026 and is valid to 21 January 2027, with recertification due before 21 January 2029. It is verifiable at infinitycert.com.
Operations are guided by the SOC 2 trust principles of security, availability, and confidentiality.
The Learning issues internationally accredited, independently verifiable certificates (see below).
Registered entities in the United States, Egypt and Saudi Arabia, with public commercial and tax identifiers; regional delivery and partner arrangements elsewhere.
“Aligned with” means our practices follow the principles of these frameworks; it is not a claim to hold a specific certification unless stated elsewhere on this page.
We design for availability and stand behind clear response commitments.
Hosted services are engineered toward a high monthly-uptime objective (target ~99.9%), not a blanket guarantee.
You get an automatic confirmation straight away — that is the system, not a colleague. A person replies within one business day. Messages arriving at a weekend or on a public holiday are answered on the next working day.
A defined process detects, contains, and communicates incidents, with notification to affected customers.
Regular backups and recovery procedures are in place to restore service and data.
Figures below are service targets and objectives. Contractual uptime or recovery guarantees, where offered, are set out in your specific agreement.
AI at Epsilon augments people and respects the confidentiality of your data.
Humans stay in the loop; AI supports decisions rather than replacing accountable owners.
Models are evaluated for quality and bias, and outputs are traceable to their sources where possible.
We explain how systems work and are clear about their limitations.
We do not use your confidential data to train shared or third-party models.
Certificates are issued by Epsilon AI Learning — USA under an international accreditation framework, with secure anti-counterfeit hardcopies and online verification.
Download our published certifications, policies, and registration documents.
Form submissions are processed by our own infrastructure and routed to the regional office you choose — no third-party marketing or advertising trackers.
The website is fully static and self-hosted: fonts, scripts, and assets are served first-party.
Anti-abuse controls protect every form: honeypots, rate limits, and recipient allow-listing.
We rely on a limited set of vetted infrastructure and service providers, engaged under confidentiality and data-protection terms. A current subprocessor list is available to customers on request.
Security questions, a subprocessor list, or reporting a vulnerability? Reach us and we'll route it to the right team.
Security Features
Verification successful
Secure · Private · Verified