Security & hosting

Your data,
where you want it.

Safa reads your invoices and your ERP data, so where that data lives matters. Let Safa host it in the country you operate in, or run Safa on your own infrastructure.

Two ways to run Safa

Hosted by Safa, or by you.

Available

Safa-hosted

Safa runs everything for you. Your invoices and financial data stay in the country you operate in, which is the UAE today.

  • Encrypted in transit and at rest
  • Every request scoped to one company
  • Invoices, ERP exports and results stored together
Enterprise · on request

Your infrastructure

For companies with strict data rules. Safa runs with your own AI models and databases, so invoice data never leaves your servers.

  • Your models, your database, your parsing
  • Safa provides the VAT rules and the checks
  • Talk to us about your requirements
Safa-hosted

Everything with an invoice in it stays inside the line.

Everything you upload, and everything Safa derives from it, is stored and checked in one place in the country you operate in. Today that is the UAE. Three things sit outside the line, and none of them holds an invoice.

Your teamAuthenticator sign-in. One company per request.
Hosted in the UAE

Where your data is stored

  • Invoices & certificatesStored encrypted, one folder per company.
  • ERP exports & resultsLines, extracted fields and verdicts, stored encrypted.
  • Verification engineEvery check runs in the same place the data lives.
  • Confidential. Seen by your team and the pipeline that verifies them, nobody else.
  • Secure. Encrypted in transit and at rest; every request scoped to one company.
  • Visible. Every verdict links to its invoice and ERP line; export the evidence any time.
Outside the line · no invoice data
  • extraction, in and outAnthropic · AI extractionReads each invoice and returns the fields. Processing only.Agreement · no training, 30-day retention
  • sign-in & planAccounts & billingYour name, email and plan. Never an invoice.
  • checkoutStripe · paymentsCard details are entered on Stripe and never reach Safa.
How your data is protected

Four things that never change.

  • EncryptedInvoices, ERP exports and results are encrypted in transit and at rest.
  • One company per requestEvery request is scoped to one company, and each company's files are kept in their own folder.
  • Authenticator sign-inYour team signs in with an authenticator code.
  • Not used to train modelsUnder Anthropic's commercial terms with Safa, invoice data sent for extraction is not used to train models, and Anthropic keeps it for up to 30 days.

Questions about security or hosting?

Tell us your data rules and where your company files. We will tell you how Safa fits.

Write to hello@safa-ai.com
Chat on WhatsApp