PDPL-oriented data handling
Policy and operational controls are documented with explicit retention and escalation paths.
Enterprise Trust Center
Trust artifacts for PDPL, security, and procurement reviews
A live view of current controls, available evidence, and certification roadmap status for Saudi enterprise buyers.
🇸🇦 PDPL🇸🇦 KSA-resident🇸🇦 ZATCA
In-Kingdom workload posture
Enterprise review tracks focus on Saudi processing controls and verifiable infrastructure ownership.
Auditability by design
Job lifecycle and administrative actions are aligned to exportable evidence requirements.
PDPL
PDPL Privacy Policy Controls
AvailableAs of 2026-04-01
Operational privacy controls, retention windows, and legal basis summaries.
View artifact →Security
Security Baseline Whitepaper
AvailableAs of 2026-04-01
Network, container, and key-management controls currently enforced in production.
View artifact →Operations
SLA and Trust Appendix
AvailableAs of 2026-04-01
Service-level terms and trust control checklist for enterprise reviews.
View artifact →Audit
Audit Log Export Contract
PlannedAs of 2026-04-01
Planned export bundle for evidence-ready job, payment, and admin traces.
Published when the milestone completesResidency
In-Kingdom Data Residency Attestation
PlannedAs of 2026-04-01
Planned formal attestation package for procurement and legal teams.
Published when the milestone completesSOC 2 Type II
Control mapping is active; evidence collection cadence is weekly.
Scope freeze by Q3 2026Security + Platform
ISO 27001
Statement of applicability and policy harmonization are queued.
Gap assessment in Q3 2026Compliance
Data Residency Audit Pack
Attestation templates and escalation workflow are being finalized.
Customer-ready pack in Q2 2026Enterprise Success
Run it in your own VPC — under your full control.
For banks, hospitals, regulators, and agencies: deploy DCP inside your own VPC on Saudi-owned infrastructure, with a Data Processing Agreement (DPA), Master Services Agreement (MSA), and a data-flow appendix. Your data never leaves your perimeter unless you ask it to.
- In-VPC deployment on Saudi-owned infrastructure
- Signed DPA + MSA + data-flow appendix
- Dedicated or reserved capacity on request
- A named CSM and explicit decision checkpoints
- Joint security review before go-live
- No cross-border models without your explicit opt-in
Start an enterprise review
Share your compliance scope and workload profile; the enterprise team returns a review plan with explicit controls and decision checkpoints.
Intake route/support?category=enterprise&source=trust-center
Start an enterprise review
Response target: first contact within one business day.