Features E-Invoicing Guides Integrations Pricing Security Log in
Security & Trust

Trust, built into the ledger.

Security isn’t a feature we bolted on — it’s how FinSanad is built. Double-entry integrity is enforced in the database, every record is encrypted at rest and in transit, each tenant is isolated at the row level, and nothing ever leaves an immutable audit trail.

Deployment options
★★★★★ The controls finance teams & auditors expect — documented and demonstrable

Compliance posture & hosting

SOC 2 ISO 27001 GDPR-ready UAE PDPL · Oracle Cloud UAE 99.9% Uptime SLA
How your data is protected

Six pillars of a trustworthy ledger

From the database schema to the data centre, every layer is designed so your financial and personal data stays correct, private and recoverable.

Double-entry integrity

Correctness is enforced where it can’t be bypassed — the database itself.

  • Debits = credits guaranteed by a DB CHECK constraint
  • Immutable audit trail — old/new values, user, timestamp
  • Soft-delete: records are never truly destroyed
  • Period locking — no back-dated changes after close/filing
🔑

Access control

Granular, role-based permissions for every user and every action.

  • RBAC per module / company / action
  • Accountant & practice model — one login, many client companies
  • Maker-checker approval above configurable thresholds
  • SSO (SAML / OIDC), MFA (TOTP + SMS fallback)
  • Password policy, session controls & admin activity log
🔒

Encryption & secrets

Strong cryptography in transit and at rest, with managed keys.

  • AES-256 encryption at rest
  • TLS 1.2+ for all data in transit
  • Secrets in HashiCorp Vault / cloud KMS
  • Key rotation every 90 days

Multi-tenant isolation

Your company’s data can never be seen by another tenant.

  • PostgreSQL row-level security (RLS)
  • Absolute tenant isolation, enforced in the database
  • Per-tenant scoping on every query
  • 1:1 tenant ↔ company boundaries

Backups & reliability

Your books survive hardware failure, mistakes and disasters.

  • Automated, encrypted backups
  • Point-in-time restore (PITR)
  • 99.9% uptime SLA on the cloud platform
  • Monitored infrastructure with alerting
📍

Data residency

Keep regulated data in-region, under local privacy law.

Hosted in Oracle Cloud UAE
  • Oracle Cloud UAE hosting (UAE PDPL residency)
  • Aligned with UAE PDPL
  • No cross-region replication of financial/personal data
  • Documented data-processing boundaries
Where FinSanad runs

Deployment options to match your policy

Run on our multi-tenant cloud, on dedicated infrastructure, or entirely inside your own network — the same platform, your choice of boundary.

Multi-tenant SaaS

The fastest way to go live. Your company runs on its own subdomain with row-level isolation, automated backups and the 99.9% uptime SLA — nothing to host or patch.

  • Per-tenant subdomains
  • PostgreSQL row-level security
  • Managed updates & monitoring
Enterprise

Dedicated / white-label

A single-tenant deployment on isolated infrastructure, optionally white-labelled with your own domain and branding — ideal for large groups and practices.

  • Single-tenant, isolated stack
  • Custom domain & branding
  • Dedicated capacity & support
🖥

On-premise

Deploy inside your own data centre with Docker + PostgreSQL. Air-gapped-friendly for organisations that keep financial data fully in-house.

  • Docker + PostgreSQL
  • Air-gapped friendly
  • You control hosting & keys
Under the hood

A modern, proven technology stack

FinSanad is built on well-understood, battle-tested components — so the platform is fast, observable and easy to reason about.

React 18 + TypeScript Python FastAPI / Java Spring Boot PostgreSQL 13+ Redis cache Elasticsearch search S3 / GCS storage RabbitMQ events Docker / Kubernetes Prometheus / Grafana
Performance targets

Secure and fast are not a trade-off

<300ms
Voucher save, fully validated & balanced
<3s
Financial reports generated live
<100ms
Search across your ledgers & parties
99.9%
Uptime SLA on the cloud platform

Want to walk your auditor through it?

We’ll show you the audit trail, the access controls and the encryption in a live session — and answer your security questionnaire in the same call.

Request Demo