# Trust Center, Security & Compliance > Transparency on our security architecture, data sovereignty in Saudi Arabia, availability SLAs, and compliance standards. - **الرابط المعتمد:** [https://www.rozanah.com/en/trust/](https://www.rozanah.com/en/trust/) - **المنصة:** روزانة لنمو الأعمال | Rozanah for Business Growth - **المقر والترخيص:** المملكة العربية السعودية --- Trust & Security Center # Security and Trust Are at the Core of What We Do We build Rozanah on solid foundations of protection and transparency, ensuring a trusted, stable, and compliant digital workspace for you and your clients. Strict Tenant Isolation Data Encryption PDPL Compliant ## Why Customers Trust Rozanah? Rozanah is designed to support organizations and multi-user teams in managing their business and digital operations with a focus on stability and data protection — from client management and projects to billing and contracts. We consider data protection and platform reliability a core part of system design and operations, and we are committed to full transparency about the controls we implement. --- ## Security Features ### Customer Data Protection Isolation mechanisms designed to limit unauthorized access between organizational data. ### User Access Management Precisely defined permissions based on each user's role and responsibilities. ### Comprehensive Activity Tracking Timestamped audit log of key activities enabling review and accountability. ### Saudi Regulatory Compliance We adhere to the Saudi Personal Data Protection Law (PDPL). ### Digital Document Reliability Detectable digital traces for any modification to certified documents. ### Data Ownership & Control Customer data is managed according to regulatory and contractual requirements. --- ## Quick Overview - [Data Protection](#data-protection) - [Account & Access Security](#account-security) - [Operational Reliability & Infrastructure](#operational-reliability) - [Digital Document Integrity](#document-integrity) - [Data Ownership & Control](#data-ownership) - [Privacy & Compliance](#privacy-compliance) ## Data Protection We apply a set of controls designed to help protect client and organizational data on the platform: - • Tenant Isolation: We apply strict isolation mechanisms designed to limit unauthorized access and protect each client's and organization's data separately. - • Permission Management: Each user's permissions are precisely defined based on their role and responsibilities within the organization, ensuring access to only what is necessary. - • Activity Monitoring: Important activities (such as login, modification, and export) are recorded with timestamp and actor identity to enable review and accountability. ## Account & Access Security We rely on mechanisms designed to help protect user accounts and active sessions on the platform: - • Secure Sessions: We employ advanced mechanisms to protect login sessions, where sensitive authentication data is prevented from being stored in the user's browser, limiting session compromise risks. - • Multi-Layer Protection: Application of strict security procedures to verify user identity and protect their accounts. ## Operational Reliability & Infrastructure The platform is designed to meet the daily operational requirements of organizations with attention to stability and performance: - • Enterprise Design: The platform is built to serve organizations, considering critical daily operational requirements. - • Global Cloud Infrastructure: The platform is managed through reliable infrastructure with distributed computing to help improve performance and service stability. - • Operational Monitoring: We apply monitoring systems to help track platform performance and respond effectively to any operational issues. - • Communication Encryption: All communications between the user and the platform are fully encrypted to protect data in transit. - • Attack Protection: Advanced protection layers against denial-of-service attacks are applied to help enhance service availability and operational continuity. ## Digital Document Integrity We employ technical mechanisms designed to help maintain the integrity of digital documents and protect them from unauthorized modification: - • Document Integrity: Any modification to a document after certification leaves a detectable digital trace that can be immediately verified through SHA-256 hash chain technology. - • Flexible Signature Mechanisms: The platform supports multiple signature mechanisms based on document type and approved workflow settings, with complete signature evidence recorded. - • Archiving and Verification: Certified copies are stored in a secure digital archive, with mechanisms available to verify document authenticity and its verification code according to the services available on the platform. ## Data Ownership & Control This section addresses how the platform handles client data and business data: - • Data Ownership: Client data and their business data remain under their control, and Rozanah only uses them to the extent necessary to provide the service and fulfill regulatory obligations. - • Data Management: We work to enable clients to manage their data according to regulatory and contractual requirements. Clients may contact us regarding data management or deletion requests under applicable policies. - • Upon Service Termination: We apply organized procedures to manage data upon service termination according to regulatory and contractual requirements. ## Privacy & Compliance We comply with applicable regulatory requirements and help clients exercise their data-related rights: - • Regulatory Compliance: We adhere to the Saudi Personal Data Protection Law (PDPL). - • User Rights: We provide clients with the tools necessary to exercise their access and correction rights according to approved policies. - • For more details: Please refer to the Privacy Policy and Terms of Use pages for complete information. [WhatsApp](https://wa.me/966506647677) --- *المصدر الرسمي: [https://www.rozanah.com/en/trust/](https://www.rozanah.com/en/trust/)* *حقوق النشر © 2026 روزانة لنمو الأعمال (Rozanah). جميع الحقوق محفوظة.*