AgentBase Legal & AI Protection
PDPA Compliance & Data Security Charter
Last Updated: July 29, 2026
Complete compliance overview under Thailand's Personal Data Protection Act (PDPA B.E. 2562) and AI Safety Operations.
1. Statement of PDPA Commitment
AgentBase Co., Ltd. is committed to maintaining full compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). We operate comprehensive technical and organizational safeguards to ensure that personal data belonging to real estate agents, property owners, and prospective buyers is lawfully processed and protected against unauthorized access, loss, or leakage.
2. Data Protection Roles (Controller vs Processor)
- Agent Personal Data: AgentBase acts as Data Controller for agent account credentials, billing details, and subscription management.
- Client / Buyer LINE OA Inquiry Data: When an agent uses AgentBase LINE OA Auto-Responder to process buyer leads, the Agent acts as Data Controller, and AgentBase acts as Data Processor under a binding Data Processing Addendum (DPA).
3. Enterprise AI Security & Model Non-Training Guarantees
To ensure strict alignment with PDPA obligations when using generative AI features (OpenAI API and Google Gemini API):
- Strict Zero Data Retention: API requests are transmitted securely via TLS 1.3. Neither OpenAI nor Google retains or stores your prompts to train foundational AI models.
- Automatic PII Scrubbing: AgentBase implements automated regex and Named Entity Recognition (NER) filters to strip sensitive identifiers (Thai National ID numbers, bank accounts, seller personal phone numbers) prior to submitting requests to AI LLM endpoints.
4. Technical Security Controls (ISO 27001 Alignment)
AgentBase maintains enterprise-grade cyber safeguards:
- Encryption: All database entries are encrypted at rest using AES-256 encryption. Communications are secured via TLS 1.3.
- Access Control: Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) are enforced for all administrative systems.
- Data Hosting: Data is hosted in AWS Singapore Data Centers with ISO 27001, SOC 2 Type II, and PCI-DSS certifications.
5. Data Protection Officer (DPO) Contact Details
For inquiries regarding PDPA compliance, Data Processing Agreements (DPA), or exercising data subject rights, please contact our Data Protection Office:
- Data Protection Officer: AgentBase Compliance Department
- Email: dpo@agentbase.co.th
- Address: AgentBase Co., Ltd., Empire Tower, 38th Floor, South Sathorn Rd, Bangkok 10120, Thailand
- Phone: +66 (0) 2-800-9889
