Security & Compliance

How Auto Nexus protects data and supports your regulatory obligations · Last updated 18 September 2026

Draft for legal and technical review. Confirm the certifications and hosting details below before publishing.

1. Compliance-first design

Auto Nexus is built for the way brokers are regulated in the UAE. Every quotation, message, payment and issuance is recorded with the user, time and channel. Consent is captured per customer and per channel. Records are retained for the statutory period. Optional AML screening can be enabled on every enquiry and lead.

2. Data protection

Encryption in transit (TLS 1.2 or higher) and at rest (AES-256).
Hosting in UAE data centres, or on-premise on client infrastructure.
Card details never touch Auto Nexus; payment is taken on the insurer's own gateway.
Role-based access, two-factor authentication for administrators, automatic session expiry.
Daily encrypted backups with tested restore.

3. Audit trail

Every action on an enquiry, lead, renewal or policy is logged and cannot be edited. Clients can export the audit log for any period for internal audit or regulator requests.

4. Communication compliance

WhatsApp messaging uses the WhatsApp Business platform with approved templates. SMS and email are sent through licensed providers. Customers can opt out of reminders from any message, and opt-outs are recorded. Do-Not-Call registry checks are available on request.

5. Testing and monitoring

The platform is penetration-tested at least annually and monitored continuously. Vulnerabilities are triaged within one business day. Clients are notified of any incident affecting their data without undue delay and within the timeframe required by UAE law.

6. Business continuity

Redundant infrastructure, documented recovery procedures and a target recovery time of four hours for the core platform.

7. Your obligations

Clients remain responsible for the accuracy of data entered, for obtaining customer consent where required, and for their own regulatory licences. Auto Nexus provides the tools and the records to make that straightforward.

8. Requests

Security questionnaires, sub-processor lists and audit reports are available to clients and prospective clients under NDA. Contact contact@autonexus.ae.