Skip to contentTalk to us
العربيةLog inStart free
Security, privacy and data residency

Trust center: your data stays in the region, under your control

How we protect your apps and your customers' data, where it is hosted, and how Fanann helps you meet data protection rules in Saudi Arabia and the UAE.

Data residencyEncryptionSSO and roles
Request the security packageHosting regions
Our principles

Six commitments that protect your app

Security at Fanann is not a paid add-on. It is the default for every project.

Data residency

Choose a Middle East hosting region per project and lock data inside it.

Encryption

TLS in transit, and encryption at rest for databases, files and backups.

Access control

Fine-grained roles, single sign-on and two-factor authentication for teams.

Monitoring and logs

Audit logs for every change and deploy, with alerts on unusual activity.

Backups

Automatic backups and restore points — roll back to any version in one click.

Responsible disclosure

A program for reporting vulnerabilities, and regular independent penetration tests.

Swipe for more
Data residency

Choose where your data lives

Every project has a hosting region you pick. Its database, files and backups stay in that region.

RiyadhJeddahDubaiBahrainCairoData boundary: me-riyadh-1
Riyadh, Saudi ArabiaSelected hosting region
me-riyadh-1
  • App, database, files and backups stay in Saudi Arabia
  • Region lock blocks moving project data outside the region
  • Relevant framework: Saudi PDPL — regulator: SDAIA
Regulations

Designed for the region's rules from day one

The main frameworks, and how Fanann's tools help you meet them.

Personal Data Protection Law — Saudi Arabia

Sets rules for processing personal data of people in Saudi Arabia. Transfers outside the Kingdom rely on adequacy decisions or safeguards such as standard contractual clauses, binding corporate rules or certification.

In force14 September 2023
Full enforcement14 September 2024
RegulatorSDAIA
How Fanann helps
  • Host in Riyadh or Jeddah so data does not need to leave the Kingdom
  • Region lock blocks accidental transfers
  • Audit logs show who accessed data and when
  • Export or delete a customer's data on request

This page is for general information only and is not legal advice. Speak to your legal counsel about your project's requirements.

Certifications and reports

Status of certifications and reports

We claim no certification until it is issued.

ISO/IEC 27001[Status]
SOC 2 Type II[Status]
PCI DSS[Status]
NCA ECC[Status]
Shared responsibility

Who is responsible for what?

Infrastructure, networks and servers
FanannYou: not responsible
Security patches and updates
FanannYou: not responsible
Encryption and backups
FanannYou: not responsible
Choosing the hosting region
Fanann: providesYou: choose
Team access and roles
Fanann: providesYou: manage
What data you collect and customer consent
Fanann: not responsibleYou
Your app's privacy policy
Fanann: ready-made templatesYou
For legal and security teams

Request the security package

Everything your reviewers need in one place. Select the documents, add your work email and we will send them after a short verification.

Choose what you need
2 documents selected
Please enter a valid work email.
Request received We will send 2 documents to your work email within [X business days], after a quick check by our security team.
FAQ

Security and privacy questions

The things people ask us most about Fanann. Can't find your answer? Our team replies in Arabic or English.

Where is my app's data stored?

In the hosting region you choose inside the Middle East. You can turn on a region lock that prevents project data from leaving it.

Is Fanann compliant with the Saudi PDPL?

Fanann gives you tools that support compliance — data residency, encryption, roles and audit logs. Compliance itself is a shared responsibility that depends on the data you collect and how you use it.

When did the Saudi PDPL take effect?

It came into force on 14 September 2023, with full enforcement from 14 September 2024. The regulator is SDAIA.

Can I transfer customer data outside Saudi Arabia?

The law allows transfers based on adequacy decisions or safeguards such as standard contractual clauses. With Fanann you can avoid the question by keeping data in-region from the start.

Talk to our team

Build with confidence from day one

In-region hosting and secure defaults — start free.

Free to start · No credit card · Understands MSA and every major dialect

Security, privacy and data residency

Trust center: your data stays in the region, under your control

How we protect your apps and your customers' data, where it is hosted, and how Fanann helps you meet data protection rules in Saudi Arabia and the UAE.

Data residencyEncryptionSSO and roles
Request the security packageHosting regions
Our principles

Six commitments that protect your app

Security at Fanann is not a paid add-on. It is the default for every project.

Data residency

Choose a Middle East hosting region per project and lock data inside it.

Encryption

TLS in transit, and encryption at rest for databases, files and backups.

Access control

Fine-grained roles, single sign-on and two-factor authentication for teams.

Monitoring and logs

Audit logs for every change and deploy, with alerts on unusual activity.

Backups

Automatic backups and restore points — roll back to any version in one click.

Responsible disclosure

A program for reporting vulnerabilities, and regular independent penetration tests.

Data residency

Choose where your data lives

Every project has a hosting region you pick. Its database, files and backups stay in that region.

RiyadhJeddahDubaiBahrainCairoData boundary: me-riyadh-1
Riyadh, Saudi ArabiaSelected hosting region
me-riyadh-1
  • App, database, files and backups stay in Saudi Arabia
  • Region lock blocks moving project data outside the region
  • Relevant framework: Saudi PDPL — regulator: SDAIA
Regulations

Designed for the region's rules from day one

The main frameworks, and how Fanann's tools help you meet them.

Personal Data Protection Law — Saudi Arabia

Sets rules for processing personal data of people in Saudi Arabia. Transfers outside the Kingdom rely on adequacy decisions or safeguards such as standard contractual clauses, binding corporate rules or certification.

In force14 September 2023
Full enforcement14 September 2024
RegulatorSDAIA
How Fanann helps
  • Host in Riyadh or Jeddah so data does not need to leave the Kingdom
  • Region lock blocks accidental transfers
  • Audit logs show who accessed data and when
  • Export or delete a customer's data on request

This page is for general information only and is not legal advice. Speak to your legal counsel about your project's requirements.

Certifications and reports

Status of certifications and reports

We claim no certification until it is issued.

ISO/IEC 27001Information security management[Status]
SOC 2 Type IISecurity and availability controls[Status]
PCI DSSVia certified payment providers[Status]
NCA ECCEssential Cybersecurity Controls[Status]
Shared responsibility

Who is responsible for what?

Fanann runs and secures the platform. You decide what data you collect and who on your team can reach it.

AreaFanannYou
Infrastructure, networks and serversFanannNot included
Security patches and updatesFanannNot included
Encryption and backupsFanannNot included
Choosing the hosting regionFanann providesYou choose
Team access and rolesFanann providesYou manage
What data you collect and customer consentNot includedYou
Your app's privacy policyReady-made templatesYou
For legal and security teams

Request the security package

Everything your reviewers need in one place. Select the documents, add your work email and we will send them after a short verification.

  • Shared with your security and legal teams only
  • Updated with every new report or certification
  • Available in English and Arabic
Choose what you need
2 documents selected
Please enter a valid work email.
Request received We will send 2 documents to your work email within [X business days], after a quick check by our security team.
FAQ

Security and privacy questions

The things people ask us most about Fanann. Can't find your answer? Our team replies in Arabic or English.

Talk to our team
Where is my app's data stored?

In the hosting region you choose inside the Middle East. You can turn on a region lock that prevents project data from leaving it.

Is Fanann compliant with the Saudi PDPL?

Fanann gives you tools that support compliance — data residency, encryption, roles and audit logs. Compliance itself is a shared responsibility that depends on the data you collect and how you use it.

When did the Saudi PDPL take effect?

It came into force on 14 September 2023, with full enforcement from 14 September 2024. The regulator is SDAIA.

Can I transfer customer data outside Saudi Arabia?

The law allows transfers based on adequacy decisions or safeguards such as standard contractual clauses. With Fanann you can avoid the question by keeping data in-region from the start.

Who owns the data and the code?

You do. Your data and your code are yours, and you can export them at any time.

Explore more of Fanann

Fanann for EnterpriseIn-country hosting, SSO and governance.Learn morePricingStart free, pay in your currency as you grow.Learn moreCompare FanannFanann vs Replit, Lovable, Bolt, Salla and more.Learn more

Build with confidence from day one

In-region hosting and secure defaults — start free.

Free to start · No credit card · Understands MSA and every major dialect