Core data stays in Jeddah
The primary database, uploaded company files and encrypted backups are hosted in Oracle Cloud’s Jeddah region. Optional AI, email and error-monitoring functions can involve the limited provider flows listed below.
Named providers
| Provider | Purpose | Data involved |
|---|---|---|
| Oracle Cloud · Jeddah | Compute, database, files and backups | Core customer data |
| OpenAI | Optional AI assistant and document drafting | Minimum context needed; salary band rather than exact salary; no iqama or IBAN |
| Resend | Transactional email | Recipient name, email and message content |
| Sentry · when enabled | Error monitoring | Technical diagnostics and identifiers; incidental data is minimised |
Controls implemented in the product
- AES-256-GCM application-level encryption for sensitive salary, iqama and banking fields.
- Role-based permissions, company ownership checks and database row-level security on sensitive tables.
- A hash-chained audit trail that makes later modification detectable.
- Encrypted backups, HTTPS transport and file-type verification for uploads.
- Configurable retention and deletion workflows, with conservative defaults.
AI boundaries
The assistant is scoped by company and user role. Company policy answers are grounded in permitted documents with citations. Exact salaries, iqama numbers and IBANs are excluded from the AI context by design.
What customers still control
The employer chooses who has access, provides lawful employee data, reviews payroll before approval and decides which optional functions to use. We provide technical controls and disclose the providers involved.