How Schedira handles your data.
A plain account of deployment options, encryption, access control, and where our compliance work stands today.
Deployment options
Schedira can run in your private cloud, on-premises, or on regionally hosted infrastructure in KSA, UAE, or the UK. The deployment model is agreed during configuration, before any project data is processed.
Data encryption
Data is encrypted with AES-256 at rest and TLS in transit. Encryption keys are managed separately from application data.
Access control
Single sign-on via Microsoft Entra ID, role-based access control, and permission-aware retrieval, so an agent only surfaces documents and schedule data a given user is already entitled to see.
Guardrails
Each agent is scoped to a specific set of tools and sources. Inputs are filtered for prompt injection, and a separate checker verifies every output against its cited source before it reaches an approval gate.
Model choice and training
Models are selected per task and re-evaluated as they improve. Your data, schedules, contracts, and correspondence, is never used to train models, ours or any third party’s.
Data residency
Data can be hosted regionally in KSA, UAE, or the UK, or within your own infrastructure, depending on the deployment option you choose.
Audit logs
Every agent action, tool call, and approval decision is logged and exportable, so a run can be reconstructed for a claim, dispute, or internal review.
Compliance roadmap
The platform is designed around Saudi PDPL and NCA controls, UAE data protection law, and UK GDPR. SOC 2 and ISO 27001 are on our roadmap; we do not hold either certification today.
For security questionnaires or a deeper technical review, contact us at info@schedira.com