Security and data

Built in Saudi Arabia
Your data stays in the Kingdom

HAKTIV is designed for the security and procurement requirements of Saudi authorities, banks, and regulated enterprises: in-Kingdom data residency, tenant isolation, encryption in transit and at rest, full audit logging, and 24/7 monitoring.

HAKTIV
Security & data
Built for Saudi procurement requirements
In-Kingdom residencyDammam
Encrypted in transit and at restHSM
Tenant isolationSaaS · dedicated
24/7 monitoringGCP SCC
Support personnel have no access to customer data
Google Cloud · Dammam, KSA
Data residency

Customer and compliance data stays in the Kingdom

For cloud deployments, customer and compliance data is hosted, stored, and processed in the Google Cloud Dammam region, with no processing or transfer outside the Kingdom of Saudi Arabia.

Google Cloud · Dammam region
No processing or transfer outside the Kingdom
HostedStoredProcessed
Tenant isolation
Each tenant is isolated, on SaaS and on a dedicated tenant

HAKTIV enforces tenant isolation across both the SaaS and dedicated-tenant deployments. Each tenant's data is separated, so one organization's data is never visible to another.

Tenant A
Tenant B
Tenant C
Encryption
Encrypted in transit and at rest

Data in transit is secured through Google Certificate Manager. Data at rest is protected with symmetric keys at HSM protection level for cloud storage and the database.

In transitGoogle Certificate Manager
At restSymmetric keys · HSM level
Access control
Role-based access, with duties kept separate

Permissions are role-based and server-enforced, with segregation of duties built into the workflows preparation, review, and approval stay in separate hands.

UploaderReviewerApprover
Audit logging
Logged at the infrastructure and the application level

HAKTIV logs activity at both the infrastructure and the application levels. Within the application, changes are recorded with actor & timestamp.

SAapproved evidence · v214:32:08
Backup and recovery
Daily backups, with point-in-time recovery

HAKTIV runs daily automated backups with point-in-time recovery.

30 days
backup retention
1 year
log retention
Point-in-time
recovery
Monitoring and incident response
Monitored 24/7, with incident response

HAKTIV uses GCP Security Command Center with 24/7 monitoring and incident response.

GCP Security Command Center24/7
Support personnel have no access to customer data.

Helping you does not require us to see what is inside your tenant.

No support access
Deployment

SaaS, a dedicated tenant, or on-premises

Choose the deployment that fits your requirements. Cloud deployments keep customer and compliance data in the Google Cloud Dammam region, with no processing or transfer outside the Kingdom.

SaaS

Shared cloud, tenant-isolated, hosted in the Dammam region.

Dedicated tenant

Your own isolated environment, in-Kingdom, managed by HAKTIV.

On-premises

Available today for entities that require it.

AI and your data
AI assists, Your team stays in control

AI in HAKTIV drafts and recommends; your team reviews, edits, approves, or rejects each output. Our AI data-handling practices and the subprocessors involved are disclosed in our privacy policy.

Read the privacy policy

Bring your security and procurement questions to a demo

Book a 30-minute walkthrough. We will cover residency, isolation, encryption, access control, deployment, and anything your security team needs to evaluate HAKTIV.

Book a demo