This is a staging copy with demo data. The statements below describe production, which runs in a Saudi region.
Built in the Kingdom, for the Kingdom.
Plain statements for the security officer. Anything that is not true on launch day is labelled planned.
Where your data lives
Tiremesù is hosted in Saudi Arabia on a government-approved cloud and operates under the NCA cloud controls. Your data does not leave the Kingdom.
Who owns what
Your organization owns everything it creates on the platform and can export it in standard formats at any time. Each person keeps a portable summary of their own record. Tiremesù owns the method and de-identified, aggregated insights.
Privacy
We follow the Personal Data Protection Law. Consent for profile and recognition data is asked once, at first sign-in, and can be reviewed in settings. Ratings are never shown with the rater’s name, to anyone.
The member card
The card describes a person’s practice in six dimensions and one overall figure. Nothing is sorted or ranked by them, they are never shown side by side for comparison, and no change in a person’s numbers is ever announced or displayed as an event. Raters are never named. The word score is not used for anything about a person. Public cards show no figures unless the person chooses.
Security
Single sign-on with your identity system, encryption in transit and at rest, session controls, and an audit log of every administrative action and every stage close.
Standards
The method is aligned to ISO 56002 and produces evidence for ISO 56001 and for the DGA maturity indicators. Tiremesù supports your path to certification; it does not certify.
Sub-processors and contacts
The services that process data on our behalf, and who to write to. The list is confirmed by engineering before launch.