KSA data residency (Google Cloud Dammam), encryption, retention. Swappable AI vendors with pseudonymised data for any offshore call

All data stored in Saudi Arabia, encrypted
arrow_forwardNames and rooms replaced before any offshore AI call
arrow_forwardRetention rules delete data on time
arrow_forwardAn AI vendor can be swapped without moving data

Platform · data protectionWhere your data livesGuest and staff data stay in Saudi Arabia, encrypted. AI vendors can be swapped.

Data region

KSADammam

At rest

AES-256

In transit

TLS 1.3

Names sent offshore

0pseudonymised

AI vendors

Task	Vendor	Where	What is sent
Speech to text	Vendor A	KSA	Audio, not kept
Assistant voice	Vendor B	KSA	Reply text
Language model	Vendor C	Outside KSA	Text with names and rooms replaced
Translation	Vendor D	KSA	Note text

Retention

Data	Kept for
Call transcripts	180 days
Tickets	2 years, then anonymised
Backups	35 days

check_circle

Data stored in KSA

check_circle

Encryption keys held in KSA

check_circle

Pseudonymised before offshore calls

radio_button_unchecked

Penetration testBefore the pilot

Swap a vendor

Run the test set on the new vendor, compare, then switch. No data moves.

compare_arrowsCompare vendors

Sample screen · synthetic data onlySample

← Back to the feature map

Other PLAT features (20)

PLAT-01Multi-tenant model (tenant → region → property → dept → area) with Postgres row-level securityLive
PLAT-02Role-based access per the roles docLive
PLAT-03Arabic/English with full RTL everywhereLive
PLAT-04Staff-app workforce languages + auto-translation of notes (supervisor writes Arabic, attendant reads Bengali). Pilot (owner 2026-10-04, Q-13): AR, EN, HI, UR, BN, NE, TLLive
PLAT-05Offline-first staff app with sync + photo upload outboxLive
PLAT-06Push notifications (iOS/Android/web)Live
PLAT-07Immutable audit log for sensitive actionsLive
PLAT-09Monitoring, alerting, uptime, error trackingLive
PLAT-10Hijri + Gregorian dates, prayer times per city, Arabic-Indic digits optionLive
PLAT-14Installable app on any device: install from the browser today (PWA on iPhone and Android, no store), store apps (iOS/Android via Expo) after the pitch, and secure use on hotel-provided phones or tablets under the hotel's device management (MDM: managed config, remote wipe, no personal data on device)Live
PLAT-12Per-property branding: each hotel's primary and accent colours and logo (light/dark variants) applied across guest, staff and manager screens; set by the platform owner for the client or by the property admin; derived shades keep text readable; synthetic demo stays on Direction ALive
PLAT-13Light / dark / system colour mode on every screen, remembered per device; a property may set its defaultLive
PLAT-11Security programme: pen test before pilot; ISO 27001 → SOC 2 Type II roadmap · Owner 2026-10-12 (answers workbook, Q-68): scrypt PIN-hash upgrade with silent re-hash on next sign-in, scheduled right after the 28 Oct freeze; pen-test firm and month not namedLive
PLAT-15Public status page: live status of the platform (web, API, voice, database) with incident history, published for clientsLive
PLAT-16Trust page: how Tahiyya protects data: permanent audit history (PLAT-07), encryption, Saudi hosting (PLAT-08), PDPL toolkit (COMP-02), the ISO 27001 → SOC 2 Type II plan (PLAT-11), failover plans; never claims a certification not yet heldLive
PLAT-17Public API with owner-approved access: a documented REST API (what the app already uses) with per-hotel API keys, scopes (read rooms/requests, create requests, read reports…), rate limits and a full audit of every call; keys are issued only after the platform owner approves the client and purpose, and a hotel can switch its keys off at any timeLive
PLAT-18MCP server (Model Context Protocol): an AI assistant a hotel already uses (Claude, ChatGPT or another) can, with the owner's and the hotel's permission, read the hotel's live state and act through the same scopes as PLAT-17 ("what is late in housekeeping?", "open a work order for Rm 410"); every action is attributed to the person who connected the assistant and audited; nothing a human could not do themselvesLive
PLAT-19Plug-in / connector for AI models (a Claude connector, a ChatGPT app, and the equivalents): the packaged, listed form of PLAT-18 that a hotel installs from the assistant's own directory, with the owner's approval per hotel and per scopeLive
PLAT-20Staff activity and access centre for the GM and the IT head: who is signed in and active now (by department, device and last seen), each person's activity timeline from the audit log and task events, activity reports and exports (per person, department, period), and controls: sign a session out, suspend or reactivate an account, force a PIN change, see and remove devices, change what a role may do (within the hotel's approval rules); every control action in the audit log. Transparent to staff (a "what is recorded about me" page), work activity only (no location off shift, no keystrokes or screen capture), retention as a hotel rule (PDPL)Live
PLAT-21Demo and pitch mode: everything is open at any hour and on any day. A rehearsal at 02:00, a pitch on a Friday or a walk-through at 22:30 must not meet a closed pool, a dish "not served now", an upsell that waits for 06:00, an empty cleaning plan or a sample guest who has already "left". The demo hotel's spa, gym and pool, dishes (and the iftar and suhoor windows), upsell suggestions, cleaning-plan build time and sample stays ignore the clock; a real hotel keeps its own hours and rules, and cannot switch this onLive