The need for local processing today extends beyond the initial extraction of data from identity documents. The risk of exposure emerges once again when employees subsequently use customer information in AI-assisted workflows – according to Cyberhaven’s 2026 AI Adoption & Risk Report, 39.7% of employee interactions with AI tools involve sensitive data.
The partnership is intended to protect sensitive information at these two critical stages – when it is obtained and when it is later used. OCR Studio provides the first layer by securely extracting data from identity documents and bank cards used across the GCC. Its technologies support passports, national ID cards, residence permits, driver’s licenses, visas, and other identity documents issued in over 250 jurisdictions. OCR Studio’s solutions operate directly on the user’s device or within an on-premises server in both native mobile apps and popular browsers.
Wemik extends this protection to the next stage – when employees need to work with the extracted information using GenAI. Wemik automatically detects sensitive information directly on the device, including names, ID numbers, IBANs, account details, and other personal and financial information. Then, it replaces these details with safe tokens, allowing only sanitized text to reach the AI system. The mapping also remains client-side, and the original information can be restored after the AI returns its response.
“Employees increasingly rely on AI in their everyday work, which creates an entirely new point of exposure for customer information,” said Jorge Elizalde, Co-Founder and CTO of Wemik. “Our goal with OCR Studio is to give businesses a way to avoid unnecessary transfers of sensitive data both during KYC and when working with the received information afterwards. We found strong common ground in the belief that client-side architecture is the only viable approach when working with customers’ personal information."
OCR Studio and Wemik also aim to help organizations enhance compliance with data protection requirements across the GCC such as Qatar’s Personal Data Privacy Protection Law (PDPPL). The combination of the companies’ client-side technologies will give regulated organizations new opportunities for automation while keeping raw personal and financial information within their controlled environment.
Javier Montemayor Aguirre
Wemik
javier@wemik.com
Visit us on social media:
LinkedIn
Instagram
Facebook
TikTok
Legal Disclaimer:
EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
