Trust Center

Accountable by design

We hold ourselves to the principles we build into the product. Least exposure: your tenant is yours alone. Every request verified: we publish what our software connects to and why. One policy model: the same rules for every way in. Always auditable: we state the status of every certification, including the ones we have not earned yet.

Request trust documents

Read the details

Security overviewSingle-tenant design, components and trust boundaries, encryption, key handling and how we build.
What we can and cannot seeAgent traffic is encrypted end to end between devices. The ZERA gateway terminates TLS by design, to enforce policy.
Every outbound connectionEvery connection the agent, the gateway and the server make, and why, published in full.
Data residency and sovereigntyWhere identity, logs, Session Evidence and backups live, retention, and deletion when you leave.
ComplianceHonest status per framework, never a logo for a certification we do not hold.
SubprocessorsEvery third party that touches customer data, its purpose and its location.
Vulnerability disclosureHow to report a vulnerability, our safe harbour and the response you can expect.
Security advisoriesDated bulletins for issues that affect Inlinea, and what we did about them.

Compliance at a glance

Where Inlinea stands today with the frameworks buyers ask about.

Framework	Why it matters	Status
NCA Essential Cybersecurity Controls (ECC)	The Kingdom's baseline for government and critical sectors.	Planned
NCA Cloud Cybersecurity Controls (CCC)	Required for cloud services to Saudi government entities.	Planned
CST cloud service provider registration	The Kingdom's regulatory framework for cloud services.	Planned
Personal Data Protection Law (PDPL)	Personal data of people in the Kingdom.	Planned
SAMA Cyber Security Framework	Banks and insurers.	Planned
ISO/IEC 27001	The global baseline buyers ask for first.	Planned
SOC 2 Type II	US and multinational procurement.	Planned
General Data Protection Regulation (GDPR)	Personal data in the European Union.	Planned

Statuses: Certified (with certificate number, scope, auditor and date), In progress (with a target quarter), Aligned (a self-assessed mapping on request) and Planned.

Accountable by design

Read the details

Also here