Security and data
Last updated:
This page explains simply where your data is kept and who can reach it. The legal detail is in our privacy policy.
Where data is kept
Platform data is hosted outside the Kingdom, in Frankfurt, Germany. The database and files are with Supabase and the website is with Vercel. This counts as transferring data outside the Kingdom under the Personal Data Protection Law.
- Payments: through Stripe. We don't store card numbers.
- Email: through Resend.
- AI: through Anthropic in the United States.
Who can reach your data
- Access rules are enforced inside the database itself, so users see only what belongs to them.
- Licence images and firm documents are in private storage and are never shown publicly.
- Platform staff accounts require two-step verification.
- Authorised administrators may review messages on the platform for quality control and to handle reports. Every review is logged.
Encryption and backups
- Connections to the platform are encrypted with HTTPS, and data is encrypted in storage at our hosting provider.
- The database is backed up daily.
AI
- We don't use your data to train models, and Anthropic doesn't use data sent through its commercial service for that.
- Only the text needed for each task is sent, and it is processed outside the Kingdom.
- In «مكتبي», AI tools work only after the firm owner agrees, and only on what the user selects.
- AI output is a draft that needs review. It is not legal advice.
Your control over your data
- Download a copy of your data from your account.
- Delete your account from your account page. Its data is deleted within 30 days, except what the law requires us to keep.
- Retention periods for «مكتبي» and invoices are in our privacy policy.
What we don't claim
We don't currently hold ISO 27001 or a similar security certificate, and we don't host data inside the Kingdom. If your organisation requires either, tell us before you subscribe or upload sensitive documents.
Report a security problem
If you notice a security problem or have a question about your data, email info@qanoon.app.