Enterprise Security for Document Intelligence

Encryption in transit and at rest

Document data is encrypted while it moves across the network and while it is stored, using industry-standard encryption. Uploads, processing, and retrieval all travel over encrypted connections.

Access control

Role-based permissions govern who can see and edit documents inside your organization. Access is scoped to your account, so your documents are not visible to other customers.

• Role-based permissions for who sees and edits documents
• Account-scoped isolation of your data
• Least-privilege access for administrative actions

Audit trails

Document operations, changes, and reviews are tracked so there is a complete record of what happened to a document, when, and by whom — supporting accountability and internal oversight.

Human-in-the-loop controls

Low-confidence results are routed to human review and validation workflows instead of being trusted automatically. People stay in control of the decisions that matter, and reviewers confirm or correct results before they flow downstream.

Data privacy

We do not use your documents to train AI models without your explicit consent, and we do not share your data with third parties for their own purposes. You can request deletion of your data at any time in line with our privacy policy.

• No training on your data without explicit consent
• No selling or sharing of your documents with third parties
• Data-deletion requests honored per the privacy policy

PDPL-oriented controls

AlQari is designed around the requirements of Saudi Arabia's Personal Data Protection Law (PDPL), and document processing takes place within the Kingdom. Our privacy policy describes the data subject rights we support, including access, correction, and deletion.

API security

The AlQari REST API is authenticated: every request requires your API credentials, and integrations connect over encrypted HTTPS. Webhooks let your systems receive processing events without exposing your data on public endpoints.

• Authenticated REST API with per-account credentials
• Encrypted HTTPS for every API call
• Webhooks for secure, event-driven integration

Enterprise deployment options

AlQari fits into enterprise environments through its API and webhooks, and document storage and retention can remain in your own systems. For organizations with specific deployment or residency needs, our team can discuss the right configuration for you.

Data processing principles

Documents are processed to deliver the results you request — OCR, extraction, validation, and workflows — and nothing more. Confidence scores make uncertainty visible rather than hidden, and human review provides oversight so automated processing never runs unchecked on your most sensitive documents.