Legal
Security
Last updated: 5 October 2026
Data Sovereignty & Site Flow
We keep this site’s attack surface small: it stores no data it does not need, and every system we build follows national cybersecurity controls.
-
01
Direct, limited input The enquiry and career forms only. No tracking cookies, no advertising networks.
-
02
Encrypted transit Hosting is managed via Vercel; form delivery via Resend. Both encrypt data in transit using TLS.
-
03
Restricted access There is no open database or intermediary storage behind this site, drastically reducing the attack surface.
-
04
Scheduled destruction Data is deleted on a strict schedule outlined in our privacy notice, not when someone remembers.
Security in what we build
Access is inherited from your approved core systems, so the application and AI layers never widen who can see what.
Sensitive data is encrypted in transit and at rest, personal data is masked where it is not needed, and audit logs are kept.
Incident responsibilities and service levels are defined in the contract, so there is no ambiguity in an emergency.
Alignment with national frameworks
We work to the NCA Essential Cybersecurity Controls (ECC), the requirements of the Personal Data Protection Law (PDPL) and, for financial-sector clients, the SAMA Cyber Security Framework.
Reporting a vulnerability
We welcome responsible reports from security researchers. If you find a vulnerability, email info@taqania.com with enough detail to reproduce it. We will acknowledge and verify it within two working days.