Security, compliance and availability

Trust Center

How HYP ERP protects your finance, payroll and operational data, meets GCC regulations and keeps your operations running.

Server room with secure access

Security built into the platform

HYP ERP runs on Oracle Database and Oracle APEX, with authentication, authorisation and session management designed into the application layer.

  • Role-based access and segregation of duties
  • Full audit trail on every transaction
  • Encryption in transit
  • Approval workflows and limits
IT team monitoring systems

Data residency

Your HYP ERP environment can be hosted in data centres in the UAE or Saudi Arabia, so transactional and personal data stays in the region.

  • Hosting in UAE or Saudi Arabia data centres
  • Transactional and personal data stays in the region
  • Location agreed at contract stage
  • Documented in your service agreement

Compliance

Regional regulations, handled in the workflow

  • ZATCA e-invoicing, Phase 2

    Clearance and reporting through Fatoora, with QR codes on every invoice.

  • UAE VAT

    Tax codes and VAT return preparation aligned with FTA requirements.

  • Personal data protection

    Controls aligned with KSA and UAE personal data protection laws.

  • Information security

    ISO/IEC 27001-aligned security management.

Availability

Service levels

Availability commitments backed by monitored infrastructure in the region.

Uptime target99.9%Monthly availability target for production environments.
Recovery time objective4 hoursMaximum time to restore service after a major incident.
Recovery point objective1 hourMaximum data-loss window, backed by continuous backups.
Priority 1 response1 hourResponse time for critical incidents, around the clock.

Final terms are set in each customer agreement.

Documents

Security and compliance documents

Ask our team for any of the documents below during your evaluation.

DocumentWhat it coversAccess
Security overviewArchitecture, access control, encryption, monitoringOn request
ZATCA compliance statementPhase 2 integration and invoice formatsOn request
ISO/IEC 27001 certificateInformation security managementOn request
Data processing agreementProcessing terms and sub-processorsWith contract
Business continuity summaryBackup, recovery and failoverUnder NDA

Frequently Asked Questions

Where is my data hosted?

In UAE or Saudi Arabia data centres, agreed at contract stage.

Can we review security documents before signing?

Yes. Our team shares the security overview and compliance statements during evaluation; some documents require an NDA.

Is HYP ERP ZATCA Phase 2 compliant?

Yes. Invoices are cleared and reported through Fatoora from inside the transaction.

See HYP ERP running your processes

Talk to the Dubai team about your workflows, reporting and compliance requirements. We reply within one working day.

Chat now
Chat now Request a demo