Security and data protection

Your support system holds employee and customer data and details of your infrastructure, so protecting it protects the organization. Controls across five layers, with the option to run on your own servers.

Five layers of controls

Identity & sign-in
MFAMulti-factor authentication
SSOWith AD and Entra ID
Password policiesLength, complexity, rotation
Secure sessionsTimeouts and remote sign-out
Access control
RBACRole-based permissions
Data scopeTeam, branch, company
IP restrictionsWhen required
Field permissionsHide or lock sensitive fields
Data protection
EncryptionIn transit, and at rest per environment
Data isolationBetween companies and clients
AttachmentsAllowed types and sizes
RetentionRetention and deletion policies
Monitoring & audit
Audit logLogins, changes, deletions, permissions
Security alertsRepeated failed logins
Access reviewsWho holds which permission
Log exportTo SIEM via integration
Continuity
BackupsScheduled, with restore tests
Hosting optionsCloud, private or on-premise
Security updatesOn an agreed schedule
Recovery planPer your requirements

For your security team

Enterprise purchases go through security review. We provide what your team needs to complete it.

Security documentation

Architecture, controls and data flows.

Vendor questionnaires

We answer your vendor assessment.

Penetration testing

Coordinated with your team or an accredited party.

National requirements

Controls that support local requirements, per environment.

Have specific security requirements?Send them and we will answer item by item before the demo.

Security questions

Where is the data stored?

It depends on the hosting option: on your servers, in a dedicated private environment, or in the shared cloud. Saudi data centers can be selected depending on the option.

Does it support national cybersecurity requirements?

TixDesk provides controls that help organizations support Saudi cybersecurity and personal data protection requirements; final compliance depends on the operating environment and your procedures. We provide documentation to your security team.

Can we run a penetration test?

Yes, by your team or an accredited party, in coordination with us.

How are backups handled?

Scheduled backups with restore testing; retention follows your policy and hosting option.