Security
A clearer operation should not require weaker controls.
Your customers’ names, addresses, conversations and invoices sit in Sahor. We treat that as the responsibility it is.
This page lists the controls in place today, in plain words, so your team or your customers’ procurement team can review them. We do not claim certifications we do not hold.
Controls in place
| Area | Control | What it means | Status |
|---|---|---|---|
| Data protection | Encryption at rest and in transit | Customer data is encrypted where it is stored and on every connection to the apps and portal. | In place |
| Data protection | Daily backups | Data is backed up every day so it can be recovered if something goes wrong. | In place |
| Isolation | Business data separation | Every business works in its own isolated space. Records never mix between businesses. | In place |
| Access | Own login for everyone | No shared passwords between office staff and technicians. | In place |
| Access | Two-factor sign-in | A second step on sign-in for accounts that need it. | Available |
| Access | Role-based access | Owners decide who sees prices, balances, settings and other branches. | In place |
| Access | Immediate offboarding | Deactivate a user and their access ends at once; their history stays. | In place |
| Accountability | Activity records | Important changes record who made them and when. | In place |
| Payments | Card data or customer funds held | Card details are entered on the provider’s checkout. Sahor never holds funds. | Never |
Access is layered, and every layer is yours to set.
The most common risk in a service business is a shared login on a shared phone. Sahor is designed to remove it.
Sensitive work stays with specialist providers.
Some sensitive work is done by licensed and accredited providers, so it never needs to live inside Sahor. Sahor sends each provider only the data it needs.
Sahor One
- The job, customer and invoice records
- Payment results recorded against invoices
- Only the data each provider needs is sent
Licensed and accredited providers
- Card details, on the provider’s secure checkout
- Holding and settling customer funds
- Identity and business verification checks
- UAE e-invoice exchange and tax reporting
Found a security issue? Tell us directly.
Email us with what you found and how to reproduce it. We review every report and reply to the reporter.
Is our data encrypted?
Yes. Customer data is encrypted at rest, where it is stored, and in transit, on every connection to the business app, field app and client portal.
How often is data backed up?
Every day. Backups exist so data can be recovered if something goes wrong.
Can other businesses on Sahor see our data?
No. Each business works in its own isolated space, and records never mix between businesses.
Does Sahor store card numbers?
No. Customers enter card details on the licensed payment provider’s secure checkout. Sahor receives the payment result, never the card number, and never holds the funds.
What happens when someone leaves the team?
Deactivate their user and their access ends at once. The jobs and records they worked on stay in place.
Do you have SOC 2 or ISO certification?
Not today, and we will not claim certifications we do not hold. This page lists the controls in place. If your procurement process needs a security questionnaire, email security@sahorone.com.
Where can I see which providers process our data?
The Subprocessors page lists each provider, its purpose and the data it handles.
How do we report a security issue?
Email security@sahorone.com with what you found and how to reproduce it. We review every report and reply to the reporter.