Security & privacy

Built to be trusted with the books.

Project Vision holds a contractor's most sensitive data — budgets, payments, payroll-grade attendance. Here's how that data is protected and governed.

Hosted in the Kingdom

Customer data is hosted inside Saudi Arabia, in line with PDPL and data-residency expectations for the Kingdom.

Tenant isolation & access control

Each company is an isolated tenant. Inside it, the three roles enforce least-privilege access — Accountants can't see attendance, PMs can't see other projects' financials.

Immutable audit trails

Approvals, payments, expense records, and contract versions are recorded immutably, so every riyal and every decision has a verifiable history.

PDPL roles

Under PDPL, your company is the Controller of its data and Project Vision acts as Processor. Responsibilities are defined accordingly in our agreements.

Data-subject rights

PDPL data-subject rights — access, correction, and deletion — are supported through defined processes. See the Privacy Policy for the details once finalised.

Breach notification

We commit to notifying affected tenants of a confirmed personal-data breach within 24 hours of confirmation, with the information needed to meet their own obligations.

Sub-processors

We keep a public list of the sub-processors that help us deliver the service — their purpose and region.

View the sub-processor list →

Get your projects in order.

Project Vision is in active development. Join the early-access list to be first in line when it launches.