Trust Center
Security document register
The document register lists what a vendor security review asks for, each with its real status. No document carries a version or a date before it is issued.
- Available
- 9
- In preparation
- 6
- Planned or in progress
- 3
In short
The Remote Pro Ai document register lists the security and compliance documents a vendor review asks for, each with its real status. 9 are public and available today, 6 are in preparation and 3 depend on audits or tests still ahead, with their targets shown. No document carries a version or a date before it is issued.
Document register
Security practices overview
HTTP security headers, security.txt, signed credentials and the access model in place today
Certification status
Every certificate and framework with its real status and target date
Sub-processor list
Planned providers with purpose, data, region and status, with a CSV export
Vendor risk profile
Pre-answered vendor-risk questions, exportable as CSV or JSON
Policy summaries
A plain-language summary of each security and conduct policy
Data Processing Agreement
Our standard DPA, published in full; version 2026.10 as PDF and DOCX in English and Arabic (counsel review pending)
Master Services Agreement
Our standard MSA; version 2026.10 as PDF and DOCX in English and Arabic (counsel review pending)
SLA schedule (Schedule 3)
Service levels, credits and exclusions; version 2026.10 as PDF and DOCX (counsel review pending)
security.txt (RFC 9116)
Where and how to report a vulnerability
Full security policy set
The complete policies behind the summaries, with version history
NCA ECC-2:2024 control mapping
Each NCA control and how we meet it
SAMA CSF control mapping
The SAMA Cyber Security Framework domains mapped to our controls
Completed SIG Lite questionnaire
The Shared Assessments questionnaire, answered in full
Completed CAIQ
The Cloud Security Alliance questionnaire, answered in full
Insurance certificates
Professional indemnity and cyber insurance cover
Penetration-test summary
Findings and fixes from an independent test of the platform
Not issued yetISO/IEC 27001:2022 certificate
Information security management, issued by an accredited certification body
Not issued yetSOC 2 Type II report
An independent auditor's report on our controls over a period
Not issued yet
How access works
- Public
Opens straight away, with no sign-in and no NDA.
- NDA
Shared after you accept our NDA. The click-through NDA opens with the live platform; until then we email our NDA with the reply to your request.
- On request
Our team reviews each request and replies within 2 working days.
Available means you can open it today. In preparation means we are writing it and it is not issued yet. Planned and in progress mean it depends on an audit or a test that has not happened yet; the target is shown.
Request documents
What this register never does
- It never shows a certificate before the certification body issues it.
- It never gives a document a version or a date before the document is published.
- It never offers a bundle of files that do not exist yet.
When a document is issued, its row changes to Available with its version, date and SHA-256 fingerprint, and you can check any copy you hold on the verify page.
Frequently asked questions
Nine: the security practices overview, the certification status, the sub-processor list, the vendor risk profile, the policy summaries, the Data Processing Agreement, the Master Services Agreement, the SLA schedule and our security.txt. Each opens directly from the register on this page, with no sign-in, no NDA and no request form, so your review can start the same day.
ISO/IEC 27001:2022 certification is in progress, with a target of Q2 2027. A SOC 2 Type II report is planned for 2027. Neither exists yet, so neither appears as a file here. When a certificate is issued, its row shows the certification body, number and validity, and the status changes to Available.
Not yet. An independent penetration test of the platform is planned before the platform launch, and its summary will be shared under NDA once the test is complete and the findings are fixed. Its row in the register changes to Available when the summary is ready; until then we will not send an older or partial report.
Yes. Send a request on this page and mention your NDA under what the review is for, or email info@remote-pro.ai. We reply within 2 working days. Until the click-through NDA opens with the live platform, every NDA-gated document is shared after an NDA signed by both sides.
Use the verify page. Your browser calculates the file's SHA-256 fingerprint on your device and compares it with our register, so the file never leaves your computer. Every document we issue is recorded in that register with its fingerprint, version and date before we share it.