QCB Regulatory Sandbox
Qatar Central Bank
Madad Financial Technologies LLC is a registered participant in Qatar Central Bank's Regulatory Sandbox.
How Madad protects your data and where we stand on regulation and compliance, shown with their true status.
REGULATORY AND COMPLIANCE
Where Madad stands today. Each framework is shown with its actual status.
Qatar Central Bank
Madad Financial Technologies LLC is a registered participant in Qatar Central Bank's Regulatory Sandbox.
AICPA Trust Services Criteria
Our controls have been internally assessed against the SOC 2 Trust Services Criteria. Independent certification will follow once Madad is licensed.
Information security management
Our information security management has been internally assessed against ISO/IEC 27001. Independent certification will follow once Madad is licensed.
National Cyber Security Agency, Qatar
Our security programme has been internally assessed against the requirements of Qatar's National Cyber Security Agency. Formal accreditation has not yet been obtained.
Statuses are updated as our programme progresses. Detailed documents are available to onboarded clients after review.
SECURITY ARCHITECTURE
How we test our code, protect data in transit and run our infrastructure.
Source code is scanned for insecure patterns and exposed secrets, and container images are scanned for known vulnerabilities.
Internet-facing services are scanned for known vulnerabilities, injection flaws and unexpected open ports.
Data is encrypted in transit over HTTPS with modern TLS, and at rest with AES-256 through our cloud provider's default encryption. Our TLS configuration is audited with automated tooling.
Our services run on managed Google Cloud infrastructure. Public hosts expose only web ports, and database ports are not reachable from the internet.
SUPPLY CHAIN TRANSPARENCY
Third parties that process data on our behalf, and where.
| Vendor | Category | Data region | Purpose |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure | Doha, Qatar (me-central1) | Cloud hosting, database storage |
| Wazuh | Security telemetry | Doha, Qatar (me-central1) | Security event monitoring and alerting |
