Where your data lives
Your Soult vault is stored with Amazon Web Services (AWS) in its Mumbai, India data centres. That's the case whether you live in India or in the UAE. This page explains that choice, how your data is protected, and the laws we build around. Our Privacy Policy remains the legal document; this page explains it in plain words.
| Where you live | Where your data is stored | Privacy laws we build around |
|---|---|---|
| 🇮🇳 India | AWS Mumbai, India | India's Digital Personal Data Protection Act, 2023 (DPDP) |
| 🇦🇪 UAE | AWS Mumbai, India, with your explicit consent to the cross-border transfer when you register | The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and India's DPDP Act, because Soult is an Indian company |
| Other GCC countries | Not available yet. We'll publish the arrangement for each country before we launch there. | |
Why UAE users' data is kept in Mumbai
We wanted to store UAE users' data inside the GCC. AWS has two regions in the Gulf, the UAE (me-central-1) and Bahrain (me-south-1), and both are affected by a prolonged regional disruption; AWS recommends that customers use alternate regions for now. Rather than keep your vault somewhere that can't reliably protect it, we store it in AWS Mumbai, where Soult already runs with the same safeguards for every user.
Because this means your data leaves the UAE, we ask for your explicit consent to the transfer when you create your vault, and you can withdraw it at any time by deleting your account. When an in-region option is reliable, we'll review it, and we'll tell you before anything about where your data lives changes.
How your data is protected
- Encrypted at rest with AES-256, and in transit with TLS.
- Encryption keys managed in AWS Key Management Service (KMS).
- Advanced Password Keeper entries are encrypted on your phone with a key Soult never receives, so we can't read them.
- Access is limited to the people and systems that need it, and access and changes are logged.
- Our security programme is aligned with ISO 27001; accredited certification is in progress.
No system can promise zero risk, so we focus on strong safeguards, transparency and your control.
Who is responsible for your data
Soult is provided by Soult Digital Private Limited, a company registered in India, for users in India and the UAE. We don't have a UAE company yet. We never sell your personal data.
Your choices and rights
- See and correct the information in your vault at any time in the app.
- Delete your account and vault from the app, or ask us to.
- Withdraw consents you've given, including consent to cross-border transfer, by deleting your account.
- Ask us anything about your data at privacy@soultdigital.com.