PDPL Compliance

Last updated: April 14, 2026

Our Commitment

Emtithal+ is designed to support organizations operating under the Saudi Personal Data Protection Law (PDPL). Our controls address lawful processing, data subject rights, retention, and cross-border transfer safeguards.

Hosting & Sovereignty

Production workloads are hosted within the Kingdom of Saudi Arabia. Enterprise deployments support private cloud and air-gapped options for regulated entities.

Security Controls

We apply encryption in transit and at rest, role-based access control, audit logging, and continuous monitoring aligned with NCA guidance and ISO 27001 practices.

Data Subject Rights

We provide mechanisms to support access, correction, deletion, and portability requests submitted through your organization's data protection workflows.

Sub-processors

Any sub-processors are vetted under contractual obligations equivalent to PDPL requirements. A current sub-processor list is available to enterprise customers on request.

© 2026 Emtithal+. All rights reserved. Hosted in Saudi Arabia.