Skip to contentTalk to us
17 articles

All hosting & security articles

Hosting & security

API keys and secrets: how to keep them out of your code

One exposed API key can cost you a huge bill or your customers' data. Here is where secrets belong, how to check your app is not leaking them, and what to do when one leaks.

October 9, 20269 min read
Hosting & security

Backups and disaster recovery for small businesses

A backup is not a button you press once. Here is a simple plan that protects your orders and customers and gets you running again in hours, not days.

October 9, 20269 min read
عHosting & security

Hosting your app's data in Saudi Arabia: what is actually required

Not every app has to keep its data in the Kingdom, but some sectors and data classes do, and many buyers prefer it. Here is how to work out where you stand.

October 9, 20268 min read
عHosting & security

Data hosting in the UAE: when in-country hosting matters

Not every app must host data inside the UAE, but some sectors and buyers expect it. Here is how to tell where you stand and choose with confidence.

October 9, 20268 min read
Hosting & security

DIFC and ADGM data protection vs the federal PDPL: what applies to you

Is your company in DIFC, ADGM or on the mainland? That decides which data protection law applies. Here is a clear comparison and what it means for your app.

October 9, 20268 min read
Hosting & security

Is AI-generated code secure? What to check before you launch

AI writes code that works fast, but working is not the same as secure. Here are the common flaws and how to spot them without being a developer.

October 9, 20269 min read
Hosting & security

NCA cybersecurity controls: do they apply to your startup?

The NCA controls mainly bind government bodies, critical infrastructure and their suppliers. If you sell to them, the requirements reach you through the contract. Here is how to prepare.

October 9, 20268 min read
Hosting & security

Stop fake sign-ups, OTP abuse and order fraud

Fake sign-ups, SMS pumping and bogus orders cost you real money. Here are the protections to add without annoying genuine customers.

October 9, 202610 min read
Hosting & security

How to write a privacy policy for a Saudi app (what to include)

A privacy policy is not text you copy from another site. Here is what a Saudi app's policy must cover, and a ready structure to build on in plain language.

October 9, 20268 min read
عHosting & security

.sa domains: how to choose, register and connect one to your app

A Saudi domain gives your site a local identity and more trust. Here is how to pick the right extension, register it in your business's name and connect it without headaches.

October 9, 20268 min read
Hosting & security

Saudi PDPL checklist for apps and websites

Saudi Arabia's Personal Data Protection Law is now enforceable. Here is a plain-language checklist to run through before you launch your app or website.

October 9, 20269 min read
Hosting & security

Security checklist for AI-built apps

Before you open your app to the public, go through these items one by one. Prioritized and written for non-developers.

October 9, 202610 min read
Hosting & security

SSL and HTTPS explained for business owners

The padlock next to your site name means more than looks. Here is what an SSL certificate does, and why payments and trust fail without it.

October 9, 20268 min read
Hosting & security

Staging vs production: test changes without breaking your live app

Every change the agent makes can touch many files. Staging is where you find the problem before your customers do.

October 9, 20269 min read
Hosting & security

UAE PDPL checklist for websites and apps

What the UAE personal data protection law asks of your website or app, as a checklist that turns the law into clear features and settings.

October 9, 20269 min read
Hosting & security

Uptime, monitoring and SLAs: how to keep your app online

An app that goes down on Eid night loses orders and trust. Learn what uptime numbers mean, what to monitor, and how to read an SLA before you sign it.

October 9, 20269 min read
Hosting & security

Data residency and data-protection laws in the Gulf: a guide

Where does your customers' data live, and who can access it? A practical guide to data residency and data-protection laws in Saudi Arabia and the UAE, with a pre-launch checklist.

September 20, 20269 min read
FAQ

Questions people ask

Where should I store API keys in my app?
In environment variables on the server or in a secrets store provided by your host. Backend code reads the key at runtime. It is never written into code files and never reaches the browser or mobile app.Read the full guide
How do I back up my website or online store?
First confirm your platform takes daily database backups and lets you roll back deploys. Then add a regular export of orders, customers and products to storage you own, connect your code to GitHub, and keep domain settings and service logins somewhere safe.Read the full guide
Do I have to host my website or app inside Saudi Arabia?
Not necessarily. There is no general rule for all apps, but government-classified data stays in the Kingdom, and some regulated sectors and large contracts require local hosting. For everyone else, in-region hosting is preferred but usually not mandatory.Read the full guide
Does UAE law require data to be hosted in the UAE?
Not for every app. The federal data protection law regulates transfers abroad under conditions, while sectors such as health, government and finance may require data to stay in the country. Check with your sector's competent authority.Read the full guide
Does the UAE PDPL apply in free zones?
In most of them, yes. It excludes free zones that have their own data protection laws, most notably the Dubai International Financial Centre and Abu Dhabi Global Market.Read the full guide
Is AI-generated code secure?
It is neither secure nor dangerous by nature. It depends on the platform, how clearly you state requirements and testing before launch. With a good platform, a description that spells out permissions and simple two-account tests, it can be very solid for typical business apps.Read the full guide

Your idea deserves to see the light.

Describe it in Arabic or English and Fanann builds, tests and ships it — no coding knowledge needed. Start free, no credit card.