Platform Security Overview

Certifada uses HTTPS for service connections and access controls to protect stored information. Encryption and key-management arrangements depend on the deployed infrastructure. Public verification checks the credential record and status; this page does not promise a particular signature algorithm, HSM, or legally qualified electronic signature. Request security details relevant to your deployment before relying on a specific standard.

Primary application hosting uses Microsoft Azure in the UAE. Website and edge delivery use Cloudflare, and additional providers support payments and optional delivery features. See service providers for processing roles. The company’s address is Sharjah Media City, Sharjah, United Arab Emirates; it is not a datacenter address.

Backup coverage, retention, and recovery arrangements depend on the deployment and applicable agreement. Customers with specific continuity requirements should request documented recovery objectives before ordering.

The platform provides account authentication, workspace roles, and available multi-factor authentication features. Customers should enable available security controls, assign the minimum necessary access, and revoke access when no longer needed. SSO availability depends on the plan and supported configuration; no specific protocol is promised by this overview.

Workspace authorization and tenant-scoped data access provide logical separation of customer operations. Access to each workspace is governed by the authenticated user’s permissions.

We assess reported vulnerabilities and prioritize remediation according to impact and risk. Maintenance and security changes may be applied as needed. Report suspected vulnerabilities through the Responsible Disclosure Policy. This page does not promise a fixed assessment or patch schedule.