Privacy Policy
Last updated: 8 August 2026
KOMPLAI ("KOMPLAI", "we", "us") is an Agentic AI platform for Governance, Risk & Compliance developed and operated by PT Karsa Sibernetik Internasional. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you visit our website, request a demo, or use the KOMPLAI platform.
1. Information We Collect
We collect information you provide directly, such as your name, position, company name, company email address, and the details of your compliance needs, when you request a demo or contact our sales team. We also collect standard technical information (IP address, browser type, pages visited) when you use this website.
2. Data You Process Through KOMPLAI
When your organization uses KOMPLAI, our RegOps, PrivOps, RiskOps, AuditOps, ESGOps, and DataOps modules process the compliance, risk, and governance records you input — including policies, assessments, ROPA entries, risk registers, audit evidence, and data asset inventories, which may contain personal data of your employees, customers, or vendors. In this context, your organization is the data controller and KOMPLAI acts as a data processor, handling this data only under your instructions and the terms of our agreement with you.
3. How We Use Information
We use the information we collect to provide and improve the KOMPLAI service, respond to inquiries and support requests, send product and account communications, and maintain the security and integrity of our platform. We do not use customer compliance data for advertising purposes.
4. Sharing and Disclosure
We do not sell your personal information. We may share information with trusted subprocessors who help us operate our infrastructure (such as cloud hosting, storage, and email delivery providers) under confidentiality obligations, or where required to comply with a legal obligation, protect our rights, or with your consent.
5. Data Retention
We retain account and lead information for as long as needed to provide our services and for a reasonable period afterward for legal and record-keeping purposes. Compliance data you enter into KOMPLAI is retained according to the retention settings and audit requirements configured in your workspace.
6. Security Measures
We apply technical and organizational safeguards including JWT-based authentication, role-based access control with granular permissions, encryption in transit and at rest, complete multi-tenant data isolation, and comprehensive audit logging with 70+ tracked action types.
7. Your Rights
Subject to applicable law, including Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and other regulations such as GDPR, you may request access to, correction of, or deletion of your personal data, and may object to certain processing. To exercise these rights, contact us at the email address below.
8. Cookies
This website uses essential cookies to remember your language preference and to keep the site functioning correctly. We do not use third-party advertising cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us through our website or at PT Karsa Sibernetik Internasional, Jakarta, Indonesia.