About · Trust Centre
Trust, evidenced.
Certifications, security practice and compliance artefacts in one place — so your risk, legal and audit teams get answers, not adjectives.
Certifications & frameworks
Audited, not asserted
ISO 27001Certified
Information security management system across platform and operations.
ISO 27017Certified
Cloud-specific security controls for providers and tenants.
ISO 27018Certified
Protection of personally identifiable information in public cloud.
ISO 22301Certified
Business continuity management — the practice behind our DR promises.
CSA STARIn progress
Cloud Security Alliance transparency and assurance registry.
GDPRCompliant
EU data protection obligations for applicable workloads and transfers.
PDPLCompliant
UAE and KSA personal data protection law alignment, by residency.
How the platform is secured
Encryption everywhere
AES-256 at rest, TLS 1.2+ in transit; customer-managed keys available.
Least-privilege access
Role-based access with MFA, just-in-time elevation and full audit trails.
24/7 SOC
Around-the-clock detection and response across the platform and tenants.
Vulnerability management
Continuous scanning, risk-ranked remediation and annual penetration tests.
Physical security
Tier III+ facilities with layered access control and continuous monitoring.
Immutable backups
Write-once recovery copies with clean-room restore paths for cyber events.
For your auditors
Artefacts on request
Certificates, audit summaries and security documentation are shared under NDA. Standard requests are fulfilled within two business days.
Request an artefactISO certificates
Current certificates with scope statements.
Penetration test summary
Latest annual test — executive summary.
Sub-processor list
Who touches what, with change notice period.
Data Processing Addendum
Processor commitments, transfers, breach notice.
Security whitepaper
Architecture, controls and shared-responsibility model.
Vendor alliances
Built with the vendors you already trust
Certified alliances across every layer of the platform — hardware, virtualisation, security and applications — backed by joint escalation paths into each vendor.
Virtualisation
VMware by Broadcom
Certified cloud provider — the virtualisation layer under every compute experience.
Compute & storage
Dell Technologies
Server and storage hardware across all in-Kingdom data centres.
AI infrastructure
NVIDIA
GPU platforms behind AI and high-performance workloads.
Network security
Fortinet
Firewalling, segmentation and edge security fabric.
Data protection
Veeam
Backup, replication and disaster-recovery tooling.
Open platforms
Red Hat
Enterprise Linux and OpenShift for container workloads.
Enterprise apps
SAP
Certified operations for SAP and HANA managed services.
Workspace
Microsoft
Licensing and hybrid identity for managed workspace operations.
Platform status
Live availability and incident history atstatus.yallacloud.com— no login required.
Service level agreement
99.99% platform availability target with published credits —read the SLA.
Responsible disclosure
Found a vulnerability? Report it tosecurity@yallacloud.com— acknowledged within 24 hours.