Can Nexora keep my data inside KSA or the UAE?

Yes. In-region data residency is optional - customer data is stored inside the UAE or Saudi Arabia on infrastructure aligned with PDPL and SDAIA controls.

Is in-region hosting required?

No, it is optional. Teams that need data residency for regulatory reasons can enable it without changing how the product works.

Which plans can turn it on?

Pro, Enterprise and Custom - not Starter or Growth today.

Are you the data controller or processor?

Processor. You stay the controller; we only handle your data on your instructions, under our DPA.

Can I see audit reports before signing?

Our security whitepaper, control mappings and audit-readiness pack are available under NDA via the trust portal - SOC 2 Type II and ISO 27001 certification is in progress.

Local Data Storage - Optional In-Region Data Residency

Turn on in-region storage when your regulator, auditor or board asks.

In-region data residency

Add-on

🇦🇪United Arab EmiratesDubai · Abu Dhabi region Primary residency

Storage live in Dubai & Abu Dhabi - every byte stays inside UAE

AES-256 at rest TLS 1.3 in transit BYOK · your KMS

Regulator-ready mappings

PDPL UAE Data Office ISO 27001

Managed regional cloud by default · switch on localisation when you need it.

Optional, not default

An opt-in add-on on Pro, Enterprise and Custom. Start on our regional cloud and switch it on when compliance calls for it.

Pick your region

Pin everything - profiles, events, segments, journeys - to the UAE or KSA. Crossing the border takes explicit config and a legal basis.

Encrypted end to end

AES-256 at rest, TLS 1.3 in transit, and your own keys via your KMS - rotate or revoke on your terms.

Everything is logged

Immutable logs of every admin action, granular roles, SSO (Entra, Okta, Azure AD) and just-in-time support access - all exportable.

Built for your auditor

Hand over ready-made control mappings to PDPL, SDAIA, NCA ECC, UAE Data Office and GDPR - with SOC 2 Type II and ISO 27001 certification underway.

Live in one to two weeks

Most teams migrate in-region in a week or two - no campaign downtime, no journeys to rebuild.

FAQ

Frequently asked questions

It costs more to run and needs region-specific support. Pricing it on its own keeps the base platform affordable for the many teams that don't strictly need it.