Data Portability and Switching Statement
Published at: www.metadat-ai.com/legal/data-portability
Document reference: MAI-DPS-001 Version: v1.0 Last updated: October 2026 © METADAT-AI LTD (Company No. 17486598)
| This Statement gives customers of the Metadat-AI Platform the information required by Articles 26 and 28 of Regulation (EU) 2023/2854 (the Data Act): the data that can be exported, export formats, the switching procedure and where data is held. It is referred to in clause 20.3 of the Customer Terms. It is a Living Document: the version published at the URL above is current, and updates take effect under clause 21 of the Customer Terms and section 13 of the Standard Legal Terms. Capitalised terms have the meanings in the Customer Terms and Part 1 of the Master Definitions Schedule. |
1. Switching and Data Export
This section sets out the exportable data, data exempt from export, export formats and switching procedure referred to in clause 20.3 of the Customer Terms. It applies where Metadat-AI holds the data. Data in a Customer-Hosted Deployment, or in the customer's own storage or database, is under the customer's control. Retrieval at the end of any agreement follows clause 20.1 of the Customer Terms and clause 4.7B of the Data Processing Agreement.
Exportable data. The following data, while Metadat-AI still holds it under clause 4.7B of the Data Processing Agreement:
(a) input data: Customer Content uploaded for processing or held in managed storage;
(b) output data and metadata: AI Output, job records and other metadata generated by the customer's use of the Services; and
(c) account and configuration data, including Authorised User records, settings and usage records.
Data exempt from export. (a) Data specific to the internal functioning of the Services or protected as Metadat-AI's Intellectual Property Rights or trade secrets: AI models and model weights, model architecture and training data, Custom Models (and their weights), the Software and its tooling, and Metadat-AI's internal system, security and operational logs. (b) Facial Data, Embeddings and other gallery data (including reference images and names attached to gallery entries). These are not returned or exported, on termination or on withdrawal of the Facial Recognition Features. They are biometric data about the people in the gallery: deleting them rather than exporting them protects those people and limits the risk of misuse, in line with the data minimisation, storage limitation and security principles of the UK GDPR and EU GDPR. They are also specific to Metadat-AI's models and of no use outside the Platform. They originate from the reference images and names the customer supplied, so the customer must keep its own copy of those, from which it can re-create a gallery elsewhere. Metadat-AI does not keep this data after termination for retrieval. For EU customers, this data is excluded from exportable data under Regulation (EU) 2023/2854 (the Data Act) as data specific to the internal functioning of the Services and derived biometric data; the Data Act is without prejudice to the GDPR (Article 1(5)).
| Data | Format | Delivery |
| Customer Content | Original format as uploaded | Platform export tools or API |
| AI Output, job records and metadata | JSON (CSV where offered) | API or Platform export tools |
| Account, configuration and usage data | CSV or JSON; invoices as PDF | Platform or on request to legal@metadat-ai.com |
Exports are delivered over encrypted connections (TLS 1.2 or higher).
Switching procedure.
(i) The customer gives written notice to legal@metadat-ai.com stating whether it wants to switch to another provider, move to its own infrastructure or have its exportable data erased, and its chosen notice period (no more than 2 months).
(ii) Metadat-AI aims to acknowledge within 5 Business Days and agrees with the customer the data categories, formats and timetable.
(iii) At the end of the notice period, the transitional period of 30 days starts. The Services continue, and the customer exports its data using the standard export tools and API, with Metadat-AI's reasonable assistance.
(iv) The customer then has at least 30 days to retrieve its data. Metadat-AI then erases exportable data and digital assets under the Data Processing Agreement, subject to any retention required by law, and confirms that the switching process is complete.
(v) Charges, longer transitional periods where switching is technically unfeasible, and the end of the agreement are governed by clause 20.3 of the Customer Terms.
2. Where Data Is Held
Metadat-AI-hosted processing and managed storage are in Amazon Web Services region eu-west-1 (Ireland) or at Metadat-AI's office in London, United Kingdom. By default, galleries, Facial Data, Embeddings and AI Output are held in storage or a database the customer controls; where the customer chooses Metadat-AI storage, they are held in AWS eu-west-1 or at Metadat-AI's office in London, United Kingdom. In a Customer-Hosted Deployment, processing takes place on the customer's own infrastructure. Metadat-AI's sub-processors and their locations are listed in the Sub-processor Register (www.metadat-ai.com/legal/sub-processors). The technical and organisational measures that protect customer data, including against unlawful access, are in Annex 2 to the Data Processing Agreement (www.metadat-ai.com/legal/dpa), and clause 4.9 of that agreement sets out how Metadat-AI handles requests from government authorities.
MAI-DPS-001 v1.0. © METADAT-AI LTD (Company No. 17486598). This document forms part of the Metadat-AI legal framework published at www.metadat-ai.com/legal/.