PDPL Saudi ArabiaUAE Federal LawGDPRDPDP India

Security Policy

Noble Solutions is committed to protecting the security of our systems, client data, and the information entrusted to us. This policy outlines our security practices and commitments.

Last Updated: 1 June 2026

Effective Date: 1 June 2026

Noble Solutions Trading Establishment — Al Oraifi Industrial Area 35526, Jubail Industrial City, Kingdom of Saudi Arabia. Commercial Registration: Jubail Industrial City, KSA. Contact: info@noblesolutionsa.com | +966 50 290 2829

01Security Framework

Our security programme is aligned with the Saudi National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC), ISO/IEC 27001 principles, SAMA Cybersecurity Framework (for financial sector clients), and OWASP Top 10 for web application security. We apply security by design across all our services and internal systems.

02Technical Security Measures

TLS 1.3 encryption for all data in transit
AES-256 encryption for sensitive data at rest
Multi-factor authentication (MFA) for all internal systems
Role-based access control (RBAC) and principle of least privilege
Regular penetration testing and vulnerability assessments
24/7 security monitoring and intrusion detection
Web Application Firewall (WAF) protection
Secure Software Development Lifecycle (SSDLC)
Regular security patching and update management

03Incident Response

We maintain a documented incident response plan with defined response times. In the event of a security incident affecting client data, we will notify affected clients within 72 hours of discovery (or as required by applicable law). We will provide regular updates throughout the incident and a full post-incident report upon resolution. Reportable breaches will be disclosed to relevant authorities as required by Saudi PDPL, UAE Federal Law, and GDPR.

04Responsible Disclosure

If you discover a security vulnerability in our systems or website, we ask that you report it responsibly. Please contact us at:

Email: info@noblesolutionsa.com with subject "Security Vulnerability Report"

We commit to: acknowledging receipt within 48 hours, investigating all reports seriously, keeping you informed of our progress, and not pursuing legal action against good-faith security researchers.

05Client Data Security

Client data is processed in secure, access-controlled environments. We use reputable cloud providers (AWS, Azure, GCP) with SOC 2 Type II and ISO 27001 certifications. Client data is segregated and never used for purposes beyond the agreed service scope. We perform regular backups and maintain disaster recovery capabilities with defined RTO and RPO targets.

This document was prepared in compliance with applicable data protection and privacy laws including the Saudi PDPL (Personal Data Protection Law), UAE Federal Decree-Law No. 45 of 2021, EU General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act 2023 (DPDP Act). For questions regarding this document, contact info@noblesolutionsa.com.