Skip to content
Compliance and governance

Built for buyers who will not accept less

These four are what a procurement or security team needs to know first. Here are the answers, explained in full on the intro call.

Data isolation and residency

Every organisation sits in a fully isolated tenant workspace, enforced at the database with row-level security. During the closed beta the platform is hosted outside the Kingdom, and hosting moves inside the Kingdom at general availability.

Personal Data Protection Law

Explicit consent, export of your data whenever you ask, and full erasure. Built into the platform as functions you use, not a promise on a page.

E-invoicing

Subscription invoices are issued from the platform, and ZATCA e-invoicing is switched on once a contract with an accredited e-invoicing provider is in place.

Capital: the licensed-partner model

The platform is designed so that any CMA-regulated investment activity runs through a licensed partner, never through ilaf directly.

The functions themselves

Consent, export and erasure, as every person sees them in their account

  1. Consent, recorded per person
  2. Export, on request, as a file
  3. Erasure, complete, on request
Illustrative exampleWhat every person sees in their account: consent recorded, download and erasure on request.
The documents

What a procurement review asks for

The four documents, as they stand today, with the date each was last reviewed.

From the FAQ

The questions a procurement team asks

The same answers published on the FAQ page, kept current by the ilaf team from HQ.

  1. Who owns our ecosystem data?

    You do. Each organisation's data is isolated in its own workspace at the database, with consent, export and erasure tools built into the platform.

  2. Where is the data held, and do you meet compliance requirements?

    Each organisation's data is fully isolated at the database. During the closed beta the platform is hosted outside the Kingdom, and hosting moves inside the Kingdom at general availability. The platform is built around Personal Data Protection Law requirements, subscription invoices are shaped for e-invoicing, and the platform is designed so that any regulated investment activity runs through a CMA-licensed partner, never through ilaf directly.

  3. What happens to our data if we leave?

    Every person can download their data as a JSON file and erase their account from their own account page at any time. A whole-workspace export and deletion is run by the ilaf team on your written instruction, and the workspace is erased after the agreed retention period.

Four answers here. Bring your security team to the call for the rest

A 45-minute session on a live environment carrying your brand, and a reply within one business day.