Data Residency
No cross-border data transfer under normal operations. Each region runs on dedicated, sovereign infrastructure.
KSA OCI — Saudi Arabia West (Jeddah) 
UAE AWS — UAE Region (3 AZs) 
France S3NS France (Sovereign Cloud) 
EU / MY AWS — Paris / Singapore 
Global The international standard for information security management. The 2022 edition is the most current version.
Global Independent audit standard that tests how well a company’s security, availability, and confidentiality controls actually operate over a period of time.
UAE Global standard that defines how an organisation prepares for, responds to, and recovers from disruptions such as cyber incidents, system outages, or supply chain failures.
EU UAE EU data protection law that sets strict rules for how personal data is collected, processed, stored, and shared, regardless of where the company is based. It emphasises privacy by design, user consent, transparency, and strong rights for data subjects.
UAE The UAE Federal Tax Authority, FTA compliance means our platform meets the standards for how tax data is submitted, stored, and protected in the UAE context. If you are a business operating in the UAE, FTA compliance is a baseline requirement for any platform handling your VAT data.
Saudi Arabia SAMA sets cybersecurity and technology risk requirements for financial institutions and technology service providers operating in the Kingdom of Saudi Arabia. The SAMA Cybersecurity Framework covers governance, risk identification, protective controls, and incident response.
Malaysia Bank Negara Malaysia's Risk Management in Technology framework is mandatory for financial institutions and their technology service providers. It covers cloud adoption, cyber resilience, IT service management, and third-party risk. If your regulator asks, we can provide documentation.
Oman It helps enterprises prepare, validate, exchange, and report VAT and e-invoice data in line with Oman’s Fawtara framework. Accurate tax calculations, traceable records, and streamlined workflows help finance teams stay compliance-ready as the framework evolves.
Each geography we operate in has its own regulatory requirements. Here is where we stand in each.
India UAE Saudi Arabia Malaysia EU 
Belgium Ecosystem and integrations
Security does not stop at the platform boundary. When ClearTax connects to your ERP, procurement system, or government portal, those connections carry the same security standards as the core platform.
Request a demo
.svg){kind=small}