Legal

Cookie Policy

Effective 8 September 2026

Controller: Exec X AI Ltd (DIFC Registration No. 10474), Dubai International Financial Centre, Dubai, United Arab Emirates, operator of regulation10.ae (the “Site”).

This Cookie Policy explains how we use cookies and similar technologies on the Site and forms part of our Privacy Policy. It is provided in accordance with the DIFC Data Protection Law No. 5 of 2020 (the “DIFC DPL”) and applicable data-protection regulations.

Hosting and data residency: www.regulation10.ae is hosted on Microsoft Azure in the UAE North region. There is an exception: when cookieless analytics are enabled, those aggregate measurements are processed on our own infrastructure in Azure’s Sweden Central region, an EU data zone. Nothing that identifies you is sent there.

These documents are scaffolds. Final clauses are reviewed by external counsel before commercial launch.

1. What cookies are

Cookies are small text files stored on your device when you visit a website. Similar technologies (local storage, pixels, software development kits) work in comparable ways. They can be “strictly necessary” (required for the service to function) or “non-essential” (for example, analytics), and either “session” (deleted when you close your browser) or “persistent” (retained for a set period).

2. Legal basis

Under the DIFC DPL we rely on: (a) the necessity of processing to provide a service you request, and our legitimate interests in operating and securing the Site, for strictly necessary cookies; and (b) your consent for non-essential cookies that store or access data on your device. Cookieless aggregate analytics are processed under our legitimate interests in improving the Site and load without setting or reading a cookie. Other non-essential technology is not set before you make a choice in our cookie banner, and you may withdraw consent at any time (see section 5).

3. Cookies we use

Name	Type	Purpose	Duration
cc_cookie	Strictly necessary	Records the cookie choice you made, and which version of this policy you made it against, so we do not ask again and so a change of purpose can re-ask.	182 days (about six months)
reg10_tenant	Strictly necessary	Remembers which workspace you are working in after you sign in. Set only after you sign in; a visitor who never signs in does not receive it.	Session
reg10_2fa	Strictly necessary	Records that you completed two-factor authentication on this device, so you are not challenged on every page. Signed, so it cannot be forged. Set only after you sign in; a visitor who never signs in does not receive it.	Session
Sign-in session cookie	Strictly necessary	Keeps you signed in and secures your session. Set only after you sign in; a visitor who never signs in does not receive it.	Session, up to 30 days
Umami analytics	Analytics (optional)	Aggregate usage measurement on our own Umami instance. It stores nothing on your device, sets no cookie, and does not follow you to other sites. It is not currently loaded on this site, so no analytics run and nothing is measured. This row describes what the measure does when it is enabled.	No cookie stored

We do not use advertising cookies, do not sell personal data, and do not permit third-party cross-site tracking.

4. Analytics

No analytics run on this site at present. Nothing measures your visit, no analytics script is served to your browser, and no analytics company receives your data. When we do enable it, the software is Umami, which is open source and which we run ourselves on our own Microsoft Azure infrastructure in the Sweden Central region, an EU data zone. It sets no cookies, stores nothing on your device, collects no directly identifying information, and does not count a visit from a browser that sends a Do Not Track signal. This page changes in the same release that enables it.

5. Managing your choices

Use the banner shown on your first visit to accept analytics or choose “Essential only”.
To change your mind later, use the Cookie preferences link in the footer. It reopens your choices on any page.
You can also block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the Site working.

6. Your rights (DIFC DPL)

Subject to the DIFC DPL, you have the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to withdraw consent. You also have the right to lodge a complaint with the Commissioner of Data Protection at the DIFC. See our Privacy Policy for full details of how to exercise these rights.

7. Data Protection Officer

Khaled Shivji, Data Protection Officer
Email: Khaled@execxai.com
Telephone: +971 55 853 2913

8. Changes

We may update this Cookie Policy from time to time. Material changes will be reflected by the “Last updated” date above.

Have a question these documents did not answer?

Talk to us See how we handle your data