Tayf is built and hosted in Oman, around the Personal Data Protection Law (Royal Decree 6/2022). Data residency, a signed data-processing agreement, and privacy-by-design are part of every engagement — not an upgrade.
Client data is stored in-country, supporting data-residency requirements for institutions and government-adjacent buyers.
We sign a DPA with every client and act as a processor — handling data only for the agreed purpose.
Encryption in transit, per-tenant separation and role-based access so people see only what they should.
Where AI summarises reports, data is aggregated and anonymised before any external processing.
Built around Royal Decree 6/2022 — privacy notices, data-subject rights and breach response.
Our direction moves AI inference onto in-country infrastructure for fully local, sovereign processing.
Procurement teams read every page. So here is the precise version, the one we'd want to read ourselves.
Your platforms, databases and files are hosted in Oman, under PDPL, with a signed DPA. Per-tenant separation, role-based access, encryption in transit. This is the default on every engagement — including Tayf Daily.
tayf.dev itself is a marketing site served from a global edge network for speed. It holds no client data. Contact-form submissions are delivered to us and covered by our privacy notice.
Where AI writes summaries, figures are aggregated and anonymised before any external call — totals and variances, never names or identifiers. What the model sees could be printed in a newspaper without identifying anyone.
Our direction is in-country inference on NVIDIA-powered servers — AI that never leaves Oman at all. We haven't deployed it in a project yet, and we won't claim it until we have.
Tayf is built around the Omani Personal Data Protection Law (Royal Decree 6/2022). We sign a data-processing agreement with every client, provide privacy notices, and keep client data hosted in Oman. We act as a processor on your behalf and handle data only for the agreed purpose.
Client data is hosted in Oman. Data residency is a default, not an add-on — important for institutions and government-adjacent buyers who require their data to stay in-country.
Where AI models summarise reports, data is aggregated and anonymised before any external processing, and our roadmap moves inference onto in-country infrastructure for fully local AI.
Yes — request the data note below: a one-page summary of hosting, the DPA, and how AI processing is handled, ready to attach to a procurement file.
One page: hosting, the DPA, AI processing. Written for your compliance file, not for marketing.