Legal
Data Residency
ContractorPass is built in Dubai for Dubai contractors. Your company data, staff records, subcontractor details, projects, and uploaded documents are all hosted in the UAE.
1. Where Your Data Lives
- Application and database — hosted in the UAE (Dubai region)
- Document vault — stored on Microsoft Azure Blob Storage, UAE North (Dubai)
- Backups — retained within the UAE
Your core compliance records never leave the UAE unless you export them yourself.
2. Encryption
- All connections use TLS 1.2 or higher — HTTPS is enforced site-wide
- Documents are encrypted at rest using AES-256 (Azure Blob standard)
- Database and backups are encrypted at rest
3. Access Controls
- Role-based access control limits who can touch infrastructure
- Multi-factor authentication required for administrative access
- Access logs retained and audited
4. Third-Party Services
A small number of specialist services help us run the product. Each receives only the data it needs:
- Microsoft Azure — document storage, UAE North region
- Stripe — payment processing (receives card details only; no access to compliance data)
- Anthropic (Claude) — powers the AI tools. Receives only the specific document you upload to the BOQ Analyzer, Cover Letter Drafter, or Contract Scanner at the moment you use the tool. Not used to train Anthropic's models. Not accessed outside the request.
- Meta (WhatsApp Business) — delivers WhatsApp notifications. Receives recipient phone number and the template content being sent.
- Google (Gmail SMTP) — delivers transactional email. Receives recipient address and the message body.
We will notify customers before adding new third-party services that handle your data.
5. Backups and Recovery
- Automated daily database backups
- Point-in-time restore capability
- Document vault retention follows the 10-year rule under Law No. 7 of 2025
6. Data Export and Deletion
- You can export your company records, staff, subcontractor data, and documents at any time
- Deleted records are removed from active systems within 24 hours
- Account termination deletions follow the retention policy in our Privacy Policy
7. Contact
For questions about data residency or to request a data processing agreement, contact us at info@contractorpass.ae.