Data isolation and residency
Every organisation sits in a fully isolated tenant workspace, enforced at the database with row-level security. Data residency inside the Kingdom lands with general availability.
Built for buyers who will not accept less
Procurement and security teams ask about these four first. Here are the answers, explained in full on the intro call.
Personal Data Protection Law
Explicit consent, export of your data whenever you ask, and full erasure. Built into the platform as functions you use, not a promise on a page.
E-invoicing
Subscription invoices are issued from the platform, and ZATCA e-invoicing activates with our accredited provider.
Capital via a licensed partner
Any CMA-regulated investment activity runs through a licensed partner, never through ilaf directly.
Consent, export and erasure, as every person sees them in their account
- Consent, recorded per person
- Export, on request, as a file
- Erasure, complete, on request
What a procurement review asks for
The four documents, as they stand today, with the date each was last reviewed.
- Terms of useLast updated: 2026-07-28
- Privacy policyLast updated: 2026-07-28
- Your data rightsLast updated: 2026-07-28
- Service levelsLast updated: 2026-08-26
The questions a procurement team asks
The same answers published on the FAQ page, kept current by the ilaf team from HQ.
Who owns our ecosystem data?
You do. Every partner has an isolated instance holding its own data, with consent, export and erasure tools built into the platform.
Where is the data held, and do you meet compliance requirements?
Your ecosystem data stays inside the Kingdom. The platform is built around Personal Data Protection Law requirements, subscription invoices are shaped for e-invoicing, and any regulated investment activity runs through a CMA-licensed partner.
What happens to our data if we leave?
Every person can download their data as a JSON file and erase their account from their own account page at any time. A whole-workspace export and deletion is run by the ilaf team on your written instruction, and the workspace is erased after the agreed retention period.
Four answers here. Bring your security team to the call for the rest
A 45-minute session on a live environment carrying your brand, and a reply within one business day.