Security & residency

Enterprise-grade, in-region by design.

Your conversations are sensitive. Kafuu keeps them encrypted, auditable, and hosted where your regulators expect — without slowing your team down.

Data residency

Your calls never leave the region.

KSA workloads run in-region on AWS Bahrain; UAE workloads run on Azure UAE. Calls, transcripts and CRM syncs stay inside the regional boundary — with no cross-border transfer of customer data.

Region availability is illustrative and may vary by plan.

Data residency

Hosted where you operate.

Riyadh · KSA
AWS Bahrain
Dubai · UAE
Azure UAE
Controls & compliance

Built for the requirements you answer to.

SOC 2GDPRSAMATDRAIn-region hostingSSO & RBAC

Certifications shown are target frameworks; status is illustrative.

Encrypted in transit & at rest

TLS 1.2+ on every connection and AES-256 for stored calls, transcripts and CRM data.

Full audit trails

Every access, export and admin action is logged and exportable for your security team.

Role-based access

SSO and granular RBAC keep each rep, manager and admin scoped to exactly what they need.

Questions

Security, answered.

In-region: KSA workloads on AWS Bahrain and UAE workloads on Azure UAE. Customer calls and data stay within the regional boundary with no cross-border transfer.

We build to SOC 2, GDPR, SAMA and TDRA requirements. Current certification status (illustrative) is shared under NDA with our security team.

Yes. Enterprise plans support dedicated in-region tenancy and, where required, isolated single-tenant deployments. Talk to our security team for options.

You can delete calls, transcripts and accounts on request or via retention policies, with deletion propagated across backups within the contracted window.

Talk to our security team.

Get the data-handling, residency and certification details for your review.