Security, compliance and availability
Trust Center
How HYP ERP protects your finance, payroll and operational data, meets GCC regulations and keeps your operations running.
Security built into the platform
HYP ERP runs on Oracle Database and Oracle APEX, with authentication, authorisation and session management designed into the application layer.
- Role-based access and segregation of duties
- Full audit trail on every transaction
- Encryption in transit
- Approval workflows and limits

Data residency
Your HYP ERP environment can be hosted in data centres in the UAE or Saudi Arabia, so transactional and personal data stays in the region.
- Hosting in UAE or Saudi Arabia data centres
- Transactional and personal data stays in the region
- Location agreed at contract stage
- Documented in your service agreement
Compliance
Regional regulations, handled in the workflow
ZATCA e-invoicing, Phase 2
Clearance and reporting through Fatoora, with QR codes on every invoice.
UAE VAT
Tax codes and VAT return preparation aligned with FTA requirements.
Personal data protection
Controls aligned with KSA and UAE personal data protection laws.
Information security
ISO/IEC 27001-aligned security management.
Availability
Service levels
Availability commitments backed by monitored infrastructure in the region.
Final terms are set in each customer agreement.
Documents
Security and compliance documents
Ask our team for any of the documents below during your evaluation.
| Document | What it covers | Access |
|---|---|---|
| Security overview | Architecture, access control, encryption, monitoring | On request |
| ZATCA compliance statement | Phase 2 integration and invoice formats | On request |
| ISO/IEC 27001 certificate | Information security management | On request |
| Data processing agreement | Processing terms and sub-processors | With contract |
| Business continuity summary | Backup, recovery and failover | Under NDA |
Frequently Asked Questions
Where is my data hosted?
In UAE or Saudi Arabia data centres, agreed at contract stage.
Can we review security documents before signing?
Yes. Our team shares the security overview and compliance statements during evaluation; some documents require an NDA.
Is HYP ERP ZATCA Phase 2 compliant?
Yes. Invoices are cleared and reported through Fatoora from inside the transaction.
See HYP ERP running your processes
Talk to the Dubai team about your workflows, reporting and compliance requirements. We reply within one working day.