Trust Centre
Trust is earned, not declared
As a unified governance platform, we hold ourselves to the same standards across every domain we help you govern. Transparency is our foundation.
- Multi-tenant isolation
- TLS 1.3 + AES-256 encryption
- UAE data residency
- SSO & MFA enforced
- Data Protection by Design
- Security by Design
- Responsible AI Built-In
- Risk-Managed Operations
Our Trust Pillars
Foundational commitments that guide how we build, operate, and evolve our platform.
Privacy
Our commitment to data protection and privacy by design
Click to learn more
Security
Enterprise-grade security embedded throughout our platform
Click to learn more
Availability
How the UAE edition protects your data against loss
Click to learn more
Compliance
Aligned with international standards and frameworks
Click to learn more
Responsible AI
Human-centric AI with transparency and oversight
Click to learn more
Ethics
Integrity, accountability, and ethical business practices
Click to learn more
Certifications & Compliance
We're committed to achieving and maintaining industry-recognized certifications. Here's our current status and roadmap.
ISO/IEC 27001
Information Security Management System
Target: 2026
SOC 2 Type II
Security, Availability & Confidentiality Controls
Target: 2027
ISO 27701
Privacy Information Management System
Target: 2027
Our Commitment to Transparency
We believe in being honest about where we are on our certification journey. As a governance platform, we understand the importance of these standards and are actively working toward achieving them. We'll update this page as we progress.
Platform Security
Security is embedded throughout our platform, from architecture to operations. We use the same governance tools we build to manage our own security posture.
Pritect's maturity assessment framework, the same tools we use internally to track our security posture
Multi-Tenant Architecture
Complete tenant isolation enforced by the database itself: row-level security on every tenant table, with cross-tenant access denied by design.
Encryption Standards
TLS 1.3 for data in transit, AES-256 for data at rest. All sensitive fields encrypted at the application level.
Role-Based Access Control
Granular RBAC with platform, tenant, module, and entity-level permissions. Custom roles supported.
Authentication & SSO
Enterprise SSO over SAML 2.0 with Okta, Microsoft Entra ID, Google Workspace or any other SAML 2.0 identity provider. MFA with step-up enforcement, available on every account by policy.
Comprehensive Audit Logging
Every action logged with user, timestamp, and context. Audit logs retained for compliance periods.
Secure Infrastructure
Dedicated Microsoft Azure virtual machines in UAE North, separate from the EU platform, with TLS at the edge and encrypted backups replicated to UAE Central.
Continuous Monitoring
Continuous automated monitoring with threat detection, alerting, and regular vulnerability scanning.
Incident Response
Documented incident response procedures with defined SLAs, run on the same Incident Centre we ship to customers.
Responsible AI
AI that stays in the UAE, or stays off
The UAE edition runs its AI features on Azure OpenAI in UAE North, using a regional deployment so prompts and responses are processed inside the UAE. Until that is confirmed for the model we use, AI features stay switched off on this edition.
- Every AI output is a draft that a named person reviews and approves
- Customer data is never used to train a model
- No global or cross-region model deployments on the UAE edition
- The model provider appears on the sub-processor list before it is switched on
Documentation
Access our compliance documentation. Some documents require verification for access.
Publicly Available
Master Service Agreement
Terms and conditions for using Pritect.ai
Implementation Services Terms
Terms governing onboarding, configuration, and platform consulting
Sub-processor List
List of third parties who process data on our behalf
Acceptable Use Policy
Permitted and prohibited uses of the platform
Third-Party Licences
Open source software licences and attributions
Cookie Notice
Cookies used on this website and their purposes
Security Architecture
Overview of Pritect.ai's security architecture and controls
Penetration Test Report
Independent white box penetration test of the Pritect.ai platform, May 2026
Request Access
Data Processing Agreement
Data processing terms for the UAE edition, under UAE PDPL
UAE edition available on requestPrivacy Notice
How we process personal data on the UAE edition
UAE edition available on requestISO/IEC 27001:2022
Information security management system certification
Coming 2026Consensus Assessment Initiative Questionnaire (CAIQ)
Cloud security self-assessment responses
Available on requestFrequently asked questions
Security Inquiries
Get in Touch
Have security questions or need documentation access? We respond to all inquiries within 2 business days.