Data rules in the UAE and Saudi Arabia shape architecture, so we decide hosting with you during discovery, not after launch.
Under legal review
This page states our intended practices. Final wording will be reviewed by counsel before it goes live.
| Your users are mainly in | What we design for | Rules that apply |
|---|---|---|
| United Arab Emirates | Hosting region agreed with you; personal data minimised; consent recorded | UAE PDPL (Federal Decree-Law 45 of 2021); DIFC and ADGM have their own regimes |
| Saudi Arabia | In-Kingdom hosting where required, including backups; transfers only through approved mechanisms | Saudi PDPL, enforced by SDAIA; sector rules for finance and government |
| Elsewhere | Region chosen for your users and stated in the proposal | GDPR and local law as applicable |
How we handle your systems
Your accounts, least access. We work in your cloud and repository with named, individual access, removed at handover.
No production data on laptops. We use anonymised or synthetic data for development.
Secrets in a vault. Never in code, chat or email.
This website. The contact form collects only what's needed to reply, stored in region.