Data Hosting Information
Where RedERP data is hosted, how it is protected, backed up and kept available, which public endpoints the service uses, and how you keep control of your data.
This page summarises how and where RedERP hosts customer data. It brings together the commitments published in the Privacy Policy, the Data Protection Policy and the product FAQ so that IT teams, auditors and business owners can find them in one place.
Who operates the service
| Operator | Red Digital Factory LLC, Commercial Bank Plaza, Level 14, West Bay, Qatar |
| Contact | contact@rederp.org · +974 7122 5413 |
| Data Protection Officer | contact@rederp.org — include "GDPR" in the subject line |
Infrastructure
RedERP runs on Microsoft Azure cloud infrastructure. Data is stored in secure, GDPR-compliant data centres with redundancy and backup systems; where possible we prioritise data centres located in countries that benefit from a European Commission adequacy decision.
Because the operator is based in Qatar and the platform uses Azure, personal data may be transferred outside the EU/EEA. Such transfers are covered by the Standard Contractual Clauses approved by the European Commission, together with the additional safeguards listed in the Data Protection Policy.
Security
| Layer | What is in place |
|---|---|
| In transit | All traffic to the application, API, storefronts and this guide is served over HTTPS (TLS). |
| At rest | Databases and files are encrypted at rest. |
| Access | Role-based permissions inside each account, authentication controls, and pseudonymisation where appropriate. |
| Assurance | Regular security audits, security testing and vulnerability assessments; RedERP states SOC 2 Type II compliance and ISO 27001 certification. |
| Isolation | Every customer account is a separate tenant; users only see the data of accounts they have been granted access to. Access inside your account is controlled through roles and per-module permissions. |
Backups and disaster recovery
- Automated daily backups of all customer data.
- Backups are stored in geographically separate locations.
- Automated disaster recovery systems are part of the platform's technical measures.
- You can additionally export your own data at any time in standard formats (CSV, Excel, JSON) — there is no lock-in. See Data Management.
Availability
- RedERP maintains a 99.9% uptime SLA.
- The infrastructure is designed for high availability with redundant systems, automatic failover and 24/7 monitoring.
- Planned maintenance is scheduled during off-peak hours with advance notice.
- Current availability of every public endpoint is shown live on the Server Status page.
Public endpoints
Allow these hosts in corporate firewalls or proxy rules if you restrict outbound traffic.
| Service | Host | Purpose |
|---|---|---|
| Application | rederp.ai | Sign-in, dashboard and all modules (https://rederp.ai/signin) |
| API | rederp.ai/api | Backend used by the web app, mobile apps and integrations; health probe at /api/health |
| Website | cloud.rederp.pro | Product pages, pricing, legal documents |
| User Guide | docs.rederp.pro | This documentation |
| Online store | your store address | Each eCommerce storefront is published on its own address configured in the eCommerce module |
Data retention and deletion
- Personal information is retained for 90 days to 2 years after an account is terminated, or for as long as needed to fulfil the purposes for which it was collected, unless a longer period is required by law (record-keeping, enforcement of legal rights, fraud prevention).
- Anonymous and aggregate information that cannot identify you may be stored indefinitely.
- You can delete your account from the application, and request erasure of personal data through the Data Protection Officer.
Incident notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, RedERP notifies the relevant supervisory authority within 72 hours and informs affected data subjects without undue delay, with clear information about the breach, its likely consequences, the measures taken and the steps you can take.