Your data, on your terms
This page lists only what we already do. If we have not confirmed something yet, it is not here.
Last updated:
Backups
- Every night we take an encrypted backup and store it away from the server itself.
- It covers every site, every database and every client data folder.
- Backups are kept for 30 days.
- Restores are tested. We have brought back real client files from backup after an incident.
Changes and deploys
- Before any change, we set a rollback point.
- Updates go live without taking the site down.
- After every deploy you get a written report: what changed, what we checked, and the rollback point.
Server protection
- Servers sit behind a protection layer that refuses direct access.
- Traffic is encrypted with SSL on both legs: visitor to protection layer, and protection layer to server.
- No passwords or keys in the code, and none shared in chat.
- Each site is isolated from the others, with its own database user, resources and connection limit.
- Alerts run around the clock, tuned to what actually needs attention.
Who can access what
In our systems:
- Role-based permissions, so each person sees only what their work needs.
- Two-step sign-in.
- An audit log of who did what, and when.
- Keys for connected services are encrypted and never appear in logs.
Where your data lives, and AI demos
- When we run a demo on your files before you sign, it happens in a test environment, and the files are deleted afterwards.
- Hosting inside Saudi Arabia, or on your own servers, is available on request.
Ownership
- Once the final payment is made, the code and the data are yours.
- You receive them with a user guide and documentation.
Security testing
- We never test a system without written authorisation from its owner.
- Results are confidential.
Next step
Want to know where your data will sit and who can reach it? We answer in writing, before we write any code. Links: Infrastructure and hosting · About us