Security & data

Clear about what we collect and where it lives

Field apps handle locations, photos and staff names. Here is how access works and what we still have to finish for Gulf hosting.

Role-based access

Administrators, managers and field reps see only what their role allows. Managers work with their own team.

Company workspaces

Each customer works in its own company workspace, and data is scoped to it.

Activity history

Important actions are logged so you can see who did what and when.

Controlled uploads

Photo and file uploads are checked for type and size before they are stored.

Data residency and personal data laws

The UAE Federal Decree-Law No. 45 of 2021 and the Saudi Personal Data Protection Law both restrict how personal data can be transferred across borders. Saudi rules are enforced now, and UAE compliance is required from 1 January 2027.

  • Hosting inside the UAE or Saudi Arabia is planned for production customers.
  • Where and how your data is hosted is agreed in writing before a pilot starts.
  • Data processing terms are agreed with each customer.
  • We recommend that you confirm your own compliance obligations with legal counsel.

What the app collects

  • GPS location when a visit starts and when it finishes
  • Photos taken during visits
  • Checklist answers and visit notes
  • Names, roles and work email addresses of your users