Enterprise Security, Data Sovereignty & Saudi PDPL Compliance
WaselOne is engineered from the ground up to respect Saudi and GCC regulatory frameworks, guaranteeing complete in-Kingdom data residency, statutory DSAR SLAs, and ZATCA compliance.
KSA Data Residency
Hosted in Oracle Cloud (OCI) Riyadh with automated Jeddah Disaster Recovery.
Maroof Verified #284910
Officially accredited commercial registry and verified electronic business in KSA.
SBC Accreditation
Adherent to the standards and consumer protection directives of the Saudi Business Center.
End-to-End Cryptography
AES-256 at rest, TLS 1.3 in transit, and HMAC SHA-256 for all webhook signatures.
security 1. Saudi Personal Data Protection Law (PDPL) Principles
WaselOne processes personal and conversational data strictly under the statutory framework set forth by the Saudi Data and AI Authority (SDAIA) and the National Data Management Office (NDMO). Personal data is collected solely for specified, explicit, and legitimate purposes relating to conversational communication, transactional notifications, and customer service fulfillment.
No customer conversational logs, phone numbers, or metadata are ever transferred across borders or utilized for third-party commercial advertising.
fingerprint 2. Data Subject Access Rights (DSAR) & Statutory 14-Day SLA
Under the Saudi PDPL, any individual or client enterprise has the unconditional legal right to exercise their Data Subject Rights at any time:
- Right to Know (حق العلم): Understand the legal basis and exact purpose of processing.
- Right to Access (حق الوصول): Request an exported copy of all personal data held.
- Right to Rectification (حق التصحيح): Update obsolete, incomplete, or inaccurate information.
- Right to Destruction (حق الإتلاف والمحو): Request the permanent deletion of personal data when the original purpose expires.
- Right to Withdraw Consent (حق سحب الموافقة): Revoke communication permissions at any moment.
receipt_long 3. ZATCA Phase-2 E-Invoicing Archival
When WaselOne connects with Onyx ERP, GoldCore ERP, or Jwaher ERP, generated invoices contain ZATCA cryptographic stamps, tamper-proof hashes, and Base64 QR codes. Electronic invoices are retained in immutable, encrypted storage for the statutory retention period required by Saudi tax law.
Submit Data Subject Request
Exercise your statutory privacy rights under Saudi PDPL. Our Data Protection Office responds within 14 days.
badge Data Protection Officer (DPO)
For legal inquiries, regulatory disclosures, or government audit correspondence, reach our dedicated office: