Trust Center
Compliance roadmap
The official registrations we hold today and what we are working toward — with honest statuses and no claim to any certification we don't have.
Mahsumah Company is registered in the National Personal Data Protection Register and registered as a Technology Enterprise with the Communications, Space and Technology Commission (CST). Mahsumah Cloud is being developed as a Saudi Managed PaaS with a compliance roadmap toward CST Cloud Computing Registration and ISO/IEC 27001 readiness.
Verified today
Full status
| Standard / registration | Status |
|---|---|
| National Personal Data Protection Register | Active |
| CST Technology Enterprise Registration | Active |
| CST Cloud Computing Registration | In preparation |
| ISO/IEC 27001 (Information Security) | Readiness in progress |
| ISO 22301 (Business Continuity) | Planned |
| ISO/IEC 20000-1 (IT Service Management) | Planned |
| SOC 2 | Future roadmap |
"Active" means a real, current official registration. "In preparation", "readiness in progress", "planned", and "future roadmap" mean work under way or intended — not certifications.
Legal, privacy, SLA, and compliance materials on this site are operational drafts and should be reviewed by qualified Saudi legal counsel before being used as binding contractual terms.