Trust Centre

Current service status

SolaBill is a beta software service. Regulated exchange is not live and no production SLA is offered.

• Not independently accredited as a UAE ASP.
• No OpenPeppol Access Point status claimed.
• No ISO 27001 or ISO 22301 certification claimed.

Security controls

Controls implemented in the application still require recurring production evidence.

• HTTPS, security headers, role and tenant boundaries, privileged MFA and auditable changes.
• Encrypted provider credentials and selected sensitive evidence fields.
• Rate limiting, scoped API tokens, signed webhooks and fail-closed production gates.

Hosting and subprocessors

The current application server is hosted in the Netherlands. Orchida and any future mail, monitoring or backup provider may process data in other locations. Customer production onboarding will require an approved data-location and subprocessor schedule.

• No claim of UAE-only hosting is made.
• Cross-border processing must be disclosed and contractually addressed.
• Regulated production data will not be enabled before the assessment is approved.

Continuity and incident handling

Encrypted backups, restoration exercises, monitoring, escalation and recovery objectives must be tested and evidenced before a production commitment.