Wakeel - Privacy Policy

Version 1.0 - 2026 (First Release)

Effective date: 25 Jun 2026

1. Who We Are

Wakeel is a Department of Government Enablement (DGE) platform, operated under the mandate of the Abu Dhabi Government. Controller address: P.O. Box 981, Abu Dhabi, United Arab Emirates. Website: dge.gov.ae.

2. Scope

This Policy covers your use of the Wakeel application and related in-app services, including AI decision-support, meeting and email features, enterprise system integrations, and Ask Wakeel - the large language model (LLM) functionality that powers responses, deep analysis, summaries, and briefings.

3. Who This Applies To

Wakeel is an internal government platform designed to support executive decision-making and day-to-day operations across Abu Dhabi Government Entities (ADGEs). Access is limited to authorised government employees with valid enterprise credentials. By logging in, you accept the practices described here.

4. What We Collect

We collect information you provide directly and information collected automatically as you use the service:

Personal information: captured via enterprise Single Sign-On, including name, work email, job title, and department.
Authentication and access data: sign-in events, session tokens, device and network information (browser/OS, device model, IP address, region), and access logs.
Content you provide: prompts, queries, instructions, documents you upload, and the responses generated for you.
Connected work data: where you are authorised and the required governance approvals are in place, data from connected government systems including meeting and email information (via the WorkIQ pipeline) and enterprise resource data such as notifications, approvals, and procurement records (via ADERP / Oracle Fusion integration). Wakeel only accesses data you are already entitled to see under your existing system permissions.
Usage and metadata: page views, search queries, API calls, time-stamped login attempts, feature-usage patterns, and audit-log events.
Feedback: ratings and comments you submit through Wakeel's in-app feedback controls.
Non-personal information: aggregated statistics that cannot be used to identify individual users.

5. How We Use Information

Authenticate authorised users and control access to the platform;
Generate decision-support responses, deep analysis, summaries, and briefings via Ask Wakeel in answer to your requests;
Retrieve and act on information from connected systems where you are authorised;
Ensure platform security, monitor system health, prevent abuse, and improve reliability;
Enforce data-access policies and governance regulations;
Improve Wakeel functionality via aggregated analytics and user feedback;
Meet legal, regulatory, compliance, and audit obligations applicable to Abu Dhabi Government entities under DGE's mandate.

Wakeel does not use your data for advertising, profiling, or commercial purposes.

6. How AI Processing Works

Ask Wakeel is powered by large language models accessed through OpenAI Platform endpoints deployed in-country, supported by Microsoft Azure services hosted in the UAE North region. Your prompts and relevant context are processed within this sovereign environment to generate responses, and no data is sent to servers outside the United Arab Emirates.

AI-generated outputs are decision-support aids and may contain inaccuracies. Users remain responsible for verifying outputs before relying on or acting upon them.

7. Third-Party Service Processors

Provider	Service	Data Sent	Data Residency
OpenAI Platform	Ask Wakeel language model (responses, deep analysis, summaries, briefings)	Text prompts and conversation context	In-country (UAE)
Microsoft Azure	Supporting cloud and AI services	Content required for the feature in use	Azure UAE North
Microsoft Work IQ (MCP) and Microsoft Graph API	Meeting and email data pipeline	Calendar, meeting, and email data you are authorised to access	Azure UAE North

These providers act as processors on our instructions, are contractually prohibited from using your data to train generalised AI models, and do not share it with any other party.

8. Analytics and Observability

To improve performance and quality, Wakeel uses:

Mixpanel: collects anonymised, aggregated interaction data (feature usage and navigation patterns, anonymised user IDs). No personally identifiable information that can be linked to an individual is collected. Access is restricted to authorised product and analytics teams under role-based controls.
Langfuse: used for LLM tracing, observability, and quality evaluation of prompts and model responses. Access is restricted to authorised engineering and product teams under role-based controls.

These tools support data minimisation, limited retention, and confidentiality, and cannot be used to identify, contact, or profile any individual user.

9. Legal Bases (UAE PDPL)

Under the UAE Federal Decree-Law No. 45 of 2021 (PDPL), we process personal data where permitted, including: consent, performance of a service you request, compliance with law, and legitimate interests (security, fraud prevention, and governance), balanced against your rights. Wakeel also operates in compliance with the data protection, data sharing, and information security regulations applicable to Abu Dhabi Government entities under DGE's mandate.

10. Data Sharing and Third-Party Access

User personal data is not shared with third parties except where legally required by Abu Dhabi government regulations. Data may be accessed by authorised DGE and entity personnel on a need-to-know basis, by connected government systems (for example, WorkIQ and ADERP) as required to fulfil your requests, and by government oversight and security functions for audit and compliance. Users must adhere to the data-sharing agreements defined within Wakeel.

11. User Feedback and Quality Improvement

Wakeel provides controls across the app for you to give feedback on responses. This feedback is used solely for internal quality improvement and evaluation. Your content and feedback are not used to train AI models.

12. How We Protect Information

Enterprise Single Sign-On (SSO) with multi-factor authentication (MFA), via Microsoft Entra / Keycloak;
Role-Based Access Control (RBAC), ensuring users access only permitted data;
All data hosted in UAE sovereign infrastructure (Azure UAE North) to maintain residency and sovereignty;
Continuous monitoring to detect and prevent unauthorised access;
Logging of prompts, responses, and system actions, reviewed by authorised personnel for misuse, bias, and security anomalies, under DGE cybersecurity protocols.

13. Data Retention and Compliance

All personal data is stored and processed within UAE-hosted infrastructure in compliance with data residency laws. Retention periods follow Abu Dhabi government-mandated schedules:

Session and long-term memory: 3 years;
Audit logs: 3 years (subject to final cybersecurity annex);
Uploaded files: maximum 180 days, or until user deletion.

Data is securely deleted or anonymised when no longer required.

14. Breach Notification

In the event of a data breach, affected users will be notified within the legally mandated timeframe with details on the nature of the breach and recommended security actions. Security teams will investigate and implement corrective measures.

15. Your Rights

Wakeel is a government application provided for official work purposes only. Under the UAE PDPL, you may have rights to access, correct, delete, or port your personal data, subject to limitations where data is required for security, audit, legal, or operational government purposes.

Because Wakeel is a government work platform, the Government of Abu Dhabi reserves the right to access, update, retain, or delete data held within the platform as required for governance, security, compliance, or operational needs. To raise a request, contact the details in Section 19.

16. Cookie Policy

We use cookies to enable core functionality, remember your preferences, and gather analytics. You can adjust your browser settings to block or restrict cookies, though disabling them may limit certain features or affect Wakeel's functionality.

17. Links to Other Websites

Wakeel may surface hyperlinks to external websites or third-party content. DGE assumes no responsibility for the privacy or security practices of these destinations; users should review the applicable privacy notices before disclosing any personal information.

18. User Consent

By proceeding to log in and use Wakeel, you confirm that you have read, understood, and agreed to this Privacy Policy.

19. Changes and Contact

We may update this Policy from time to time and will notify you of material changes through the app or by other reasonable means. For questions about this Privacy Policy, contact the Department of Government Enablement at P.O. Box 981, Abu Dhabi, United Arab Emirates, or visit dge.gov.ae.