audit rights dpa residency · Privacy Policy

Arva AI policy finding

“ 2.1 Service Description. Arva AI provides AI-powered financial crime compliance solutions to the Customer, including Screening AI, KYB/KYC AI, Transaction Monitoring AI, and Ongoing Monitoring (the “Services”). The Customer accesses the Services through Arva AI’s platform for the purpose of enabling the Customer to assess compliance decisions, risk assessments, and due diligence reports. 2.2 Article 2(8) of the EU Data Act defines “data processing service” as a digital service enabling “ubiquitous and on-demand network access to a shared pool of configurable, scalable and elastic computing resources”. All elements of this definition must be satisfied cumulatively. 2.3 The European Commission has established that a SaaS provider falls outside scope where customers contract for a purpose-specific outcome and the underlying computing is merely incidental to the Service’s main functionality. 2.4 A financial institution or business subscribes to Arva AI Services for compliance support (which may include automated alert resolution, risk assessments and due diligence) and not for access to configurable computing resources. The AI processing underpinning Arva AI’s Services is the delivery mechanism for those compliance outcomes and is not itself the product. 2.5 Three critical elements of the Article 2(8) definition are absent:”

Document

Privacy Policy

Captured

2026-07-19

Location

§ 2.1

Snapshot SHA-256

b648265358d14405070c2cab3c101ee9800f6319b9d4d6efd12b4907f3e6611f

Informational only, not legal advice. Terms change; verify the source and capture date.