Trust & Security Center

Security and Trust Are at the Core of What We Do

We build Rozanah on solid foundations of protection and transparency, ensuring a trusted, stable, and compliant digital workspace for you and your clients.

Strict Tenant Isolation
Data Encryption
PDPL Compliant

Why Customers Trust Rozanah?

Rozanah is designed to support organizations and multi-user teams in managing their business and digital operations with a focus on stability and data protection — from client management and projects to billing and contracts. We consider data protection and platform reliability a core part of system design and operations, and we are committed to full transparency about the controls we implement.

Security Features

Customer Data Protection

Isolation mechanisms designed to limit unauthorized access between organizational data.

User Access Management

Precisely defined permissions based on each user's role and responsibilities.

Comprehensive Activity Tracking

Timestamped audit log of key activities enabling review and accountability.

Saudi Regulatory Compliance

We adhere to the Saudi Personal Data Protection Law (PDPL).

Digital Document Reliability

Detectable digital traces for any modification to certified documents.

Data Ownership & Control

Customer data is managed according to regulatory and contractual requirements.

Data Protection

We apply a set of controls designed to help protect client and organizational data on the platform:

  • •Tenant Isolation: We apply strict isolation mechanisms designed to limit unauthorized access and protect each client's and organization's data separately.
  • •Permission Management: Each user's permissions are precisely defined based on their role and responsibilities within the organization, ensuring access to only what is necessary.
  • •Activity Monitoring: Important activities (such as login, modification, and export) are recorded with timestamp and actor identity to enable review and accountability.

Account & Access Security

We rely on mechanisms designed to help protect user accounts and active sessions on the platform:

  • •Secure Sessions: We employ advanced mechanisms to protect login sessions, where sensitive authentication data is prevented from being stored in the user's browser, limiting session compromise risks.
  • •Multi-Layer Protection: Application of strict security procedures to verify user identity and protect their accounts.

Operational Reliability & Infrastructure

The platform is designed to meet the daily operational requirements of organizations with attention to stability and performance:

  • •Enterprise Design: The platform is built to serve organizations, considering critical daily operational requirements.
  • •Global Cloud Infrastructure: The platform is managed through reliable infrastructure with distributed computing to help improve performance and service stability.
  • •Operational Monitoring: We apply monitoring systems to help track platform performance and respond effectively to any operational issues.
  • •Communication Encryption: All communications between the user and the platform are fully encrypted to protect data in transit.
  • •Attack Protection: Advanced protection layers against denial-of-service attacks are applied to help enhance service availability and operational continuity.

Digital Document Integrity

We employ technical mechanisms designed to help maintain the integrity of digital documents and protect them from unauthorized modification:

  • •Document Integrity: Any modification to a document after certification leaves a detectable digital trace that can be immediately verified through SHA-256 hash chain technology.
  • •Flexible Signature Mechanisms: The platform supports multiple signature mechanisms based on document type and approved workflow settings, with complete signature evidence recorded.
  • •Archiving and Verification: Certified copies are stored in a secure digital archive, with mechanisms available to verify document authenticity and its verification code according to the services available on the platform.

Data Ownership & Control

This section addresses how the platform handles client data and business data:

  • •Data Ownership: Client data and their business data remain under their control, and Rozanah only uses them to the extent necessary to provide the service and fulfill regulatory obligations.
  • •Data Management: We work to enable clients to manage their data according to regulatory and contractual requirements. Clients may contact us regarding data management or deletion requests under applicable policies.
  • •Upon Service Termination: We apply organized procedures to manage data upon service termination according to regulatory and contractual requirements.

Privacy & Compliance

We comply with applicable regulatory requirements and help clients exercise their data-related rights:

  • •Regulatory Compliance: We adhere to the Saudi Personal Data Protection Law (PDPL).
  • •User Rights: We provide clients with the tools necessary to exercise their access and correction rights according to approved policies.
  • •For more details: Please refer to the Privacy Policy and Terms of Use pages for complete information.
WhatsApp