Encryption everywhere
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Secrets and keys are managed in a dedicated key store.
UAE-region hosting
Business-plan data is hosted on UAE-region infrastructure. Enterprise customers can request dedicated hosting with data-residency guarantees.
Granular access control
Role-based permissions, scoped per location, plus SSO for Enterprise — so each person sees only what they should.
Audit logging
Every sensitive action — refunds, price changes, exports — is recorded against a user and timestamp, feeding loss-prevention.
FTA-ready records
A complete, tamper-evident audit trail supports your VAT 201 and Corporate Tax filings.
Backups & recovery
Automated, encrypted backups with point-in-time recovery so your data is protected against loss.
How we operate
Security practices
- Least-privilege access for our team, with audited, time-bound elevation
- Regular third-party penetration testing and continuous vulnerability scanning
- Sub-processors bound by data-protection agreements (list available on request)
- Secure software development lifecycle with code review and dependency scanning
- Documented incident-response process with customer notification commitments
- Data export and deletion controls so you stay in command of your data
Report a vulnerability
Found a security issue? We appreciate responsible disclosure. Reach our team via the Contact pageand we'll respond promptly.