Security evidence

Each certification, audit and compliance document, with its current status. Where something is not held, we say so.

Certifications

ISO/IEC 27001:2022
No certification held. We do not claim compliance or certification.
Not held
SOC 2
No SOC 2 report held.
Not held
Dubai DESC cloud certification
Not held.
Not held
CSA STAR Level 1 self-assessment
A self-assessment, not a certification. Answers can be shared under NDA until listed.
In preparation

Independent penetration test
Not yet completed. Automated dependency and platform scanning runs on every release.
Not held

Data Processing Agreement
Signed before onboarding. UAE PDPL-aligned; not a certification.
Available on request
Subprocessor list and data-flow summary
Part of the security pack.
Available on request
Security controls summary
Shared with qualified buyers.
Available under NDA
Standard security questionnaire responses
Completed against your own template.
Available under NDA
Support SLA and severity definitions
Published support terms.
Available on request
Company documents (trade licence, incorporation)
On request.
Available on request
Incident response and breach notification summary
Being written.
In preparation
Business continuity and disaster recovery summary
Being written.
In preparation
Vulnerability management and patch policy
Being written.
In preparation
UAE PDPL data protection position paper
Being written.
In preparation