Security & privacy
Security and data protection on Ataam
Your company’s data and deals stay yours: two-step sign-in, strict isolation between companies, encrypted key storage, and a full copy of your data whenever you want it.
Available in the dashboard
- Two-step sign-in
- Strict isolation of each company’s data
- Regular encrypted backups
Two-step sign-in
After your password, a verification code is required — a leaked password alone cannot open your account.
E-mail code
A short-lived code is sent to your verified e-mail address.
Or an authenticator app
Use an authenticator app on your phone to generate the code without waiting for e-mail.
Mandatory for admins
Platform admin accounts cannot work without two-step sign-in; for users it is optional and one click away.
Your company decides
A company manager can require two-step sign-in for the whole team.
How we protect your company’s data
Strict company isolation
Every request, order and invoice belongs to its company, and deal details are visible to the deal parties only.
Encrypted key storage
ERP API keys and secrets are stored encrypted and never shown in full after saving.
Team permissions
Defined roles — manager, purchasing, sales, accountant — each working within its scope.
Audit logs
Sign-ins, security actions and key operations are logged with who did them and when.
Encrypted backups
Encrypted backups are taken regularly; daily off-site backups are being rolled out.
Separate demo accounts
Trial and demo accounts are isolated from real company data.
“My data copy”: your data, any time
Export all of your company’s data on Ataam in one file whenever you like — or have it created automatically.
Two-step confirmation
For the company owner or manager only, after entering a verification code.
Create the copy
A compressed file with all of your company’s data, with an optional file password.
Secure download link
A one-time download link; the copy is deleted automatically after 7 days.
Scheduled copies
Daily, weekly or monthly schedules that keep your latest copies.
Payments: your deal amounts go directly between the parties
In company deals on Ataam (B2B), deal amounts are transferred directly between the parties, and Ataam does not hold them. Payments that go through a payment gateway — such as subscriptions, add-ons and home-services orders — are processed by a licensed payment gateway.
Deal amounts go directly between the parties
Purchase orders, progress claims and receivables are paid by transfer from the buyer straight to the seller's bank account; Ataam records the payment and its confirmation, and the money never passes through it.
Online payments through a licensed payment gateway
Subscriptions, add-ons and home-services orders are paid online and processed by a licensed payment gateway, and your card details are not stored by Ataam.
Recorded payments are for tracking only
Recording a payment or receipt on the platform is evidence entered by the parties; it does not mean Ataam received or guaranteed the amount.
Financing and insurance from licensed companies
Financing instalments and insurance premiums never pass through Ataam; they are paid to the licensed company under your contract with it.
Protecting your account and deals
Recovery codes
Backup codes to sign in if you lose access to your e-mail or authenticator app.
Trusted devices
No code on every sign-in from your trusted device, for the period set in the security settings.
Private deals
Chats, attachments and guarantee letters are visible to the deal parties only.
Encrypted connection
All traffic to Ataam and the dashboard goes over HTTPS.
A ZATCA e-invoice for every subscription
Everything you pay Ataam gets a ZATCA e-invoice compliant with ZATCA (FATOORA) requirements — download it from «My subscription invoices».
Our approach to personal data
We build Ataam on the principles of the Saudi Personal Data Protection Law: we collect only what the service needs, use it for the stated purpose, and let you access and export your company’s data. Details are in the privacy policy.
Frequently asked questions
Do I get a tax invoice from Ataam?
Yes — a ZATCA e-invoice for every subscription and everything you buy from Ataam, issued automatically after payment from Ataam’s accounting system and sent to ZATCA; download the PDF with its QR code.
Where does my money go when I pay?
In company deals on Ataam (B2B), deal amounts are transferred directly between the parties, and Ataam does not hold them. Payments that go through a payment gateway — such as subscriptions, add-ons and home-services orders — are processed by a licensed payment gateway. Your card details are not stored by Ataam.
Is two-step sign-in mandatory?
It is mandatory for platform admin accounts and optional for company users, and a company manager can require it for the team.
Which verification methods are available?
A code sent to your e-mail, or a code from an authenticator app on your phone, plus backup recovery codes.
Can another company see my data?
No. Each company’s data is isolated, and deal details are visible to the deal parties only.
How do I get a copy of my company’s data?
From “My data copy” in company settings: the owner or a manager confirms with a verification code, the copy is created with a secure download link, and the file can be password-protected and scheduled.
Is the platform backed up?
Yes — encrypted backups are taken regularly, and daily off-site backups are being rolled out.
How does Ataam handle personal data?
We collect only what the service needs and use it for the stated purpose, following the principles of the Saudi Personal Data Protection Law; details are in the privacy policy.
Get started on Ataam
Register your company for free, or talk to our team about any question.