Encryption
Encryption in transit and at rest.
Trust, demonstrated.
We would rather show than claim. Here is precisely how we protect data, govern our work and earn the confidence of the organisations we serve.
Security overview
Protection, specified.
Two-factor sign-in
Every account signs in with a second factor.
Access control
Role-based permissions, with each customer company isolated from every other.
Secure development
Security review is part of every release, from the first line of code.
Independent security testing
Our products are tested by independent specialists.
Practices
Built to SOC 2 and ISO/IEC 27001-aligned practices.
Data residency
Data stays in the country it comes from.
Each country runs as its own isolated system, including backups.
United Arab Emirates
UAE data in the UAE
RegulixOne customer data for UAE businesses is hosted in UAE data centres.
Kingdom of Saudi Arabia
Saudi data in Saudi Arabia
RegulixOne customer data for Saudi businesses is hosted in Saudi data centres.
Compliance roadmap
Honest status, updated as it changes.
We claim a certification only after an independent audit has granted it.
- ISO/IEC 27001Preparing
- SOC 2Planned
Policies and sub-processors
Documents for your review.
- Information security policy
- Included in the procurement pack.
- Privacy policy
- Published under the DIFC Data Protection Law. See Legal.
- Responsible AI policy
- Included in the procurement pack.
- Acceptable use policy
- Included in the procurement pack.
- Sub-processors
- The hosting and service providers that touch customer data are listed in the procurement pack.
Responsible disclosure
If you believe you have found a vulnerability in a Futurixone product or website, write to enquiry@futurixone.com with "Security" in the subject line. Please give us reasonable time to investigate before any disclosure. Our security.txt file is published at /.well-known/security.txt on every domain.
Procurement pack
Vendor onboarding, prepared in advance.
A downloadable kit for procurement, legal and security teams. Request it below.
- Company profile PDF
- DIFC commercial licence and the official DIFC verification link
- VAT registration certificate (TRN), once registered
- Bank reference letter
- Insurance certificates: professional indemnity and cyber liability
- Pre-filled security questionnaire (CAIQ or SIG Lite)
- Standard contracts: MSA, NDA, data processing agreement (DPA), SLA
Procurement pack
Request the procurement pack.
We send the pack to business email addresses after a short check.