
Enterprise Security Pillars
Designed to meet the stringent security, auditing, and residency requirements of global enterprises, financial institutions, healthcare providers, and government entities.
Zero multi-tenant cross-contamination with dedicated tenant isolation, customer-managed encryption keys (CMEK), and on-premise / local GCC cloud deployment options.
Built-in automated adherence to regional and international frameworks including ZATCA Phase 2 E-Invoicing, UAE WPS SIF Payroll, DHA NABIDH, DoH Malaffi, and RERA Mollak.
Role-Based Access Control (RBAC), SSO via SAML 2.0 / OAuth2 (Azure AD, Okta), enforced MFA, and audit-logged privilege escalation.
Automated vulnerability scanning, regular third-party CREST-certified penetration testing, and zero-trust perimeter network security.
Regulatory Frameworks & Standards
Every platform across the KreupAI portfolio is pre-configured with industry-specific compliance rules and localized audit logs.
SOC 2 Type II Alignment
SaaS Cloud Security Controls (Audit Target H1 2027)
ISO / IEC 27001 Standard
ISMS Security Policies & Operational Safeguards
HIPAA & NABIDH Privacy
Healthcare EMR Data Security & Consent Controls
GCC Regional Data Residency
Local UAE & KSA Dedicated Private Hosting Options
ZATCA Phase 2 E-Invoicing
Saudi Tax Authority E-Invoice Integration Specs
UAE WPS SIF Payroll
MoHRE Salary Transfer File Generation Specs
Legal Corporate Entity
KreupAI Technologies LLC, Dubai, UAE
Enterprise Vendor Qualification Pack
Download our official procurement pack containing our architecture security whitepaper, data processing agreement (DPA) template, SOC 2 audit summary, and business continuity policy.
- Architecture Security Whitepaper
- Standard Data Processing Agreement (DPA)
- Disaster Recovery & Service SLA Matrix
- Third-Party Vendor Due Diligence Checklist
