Trust Center

Data Privacy

Xfatora's privacy posture is built for enterprise governance and practical operations. We focus on transparent ownership, purpose-limited processing, controlled access, and lifecycle management so legal, procurement, security, and IT stakeholders can complete due diligence without ambiguity.

Data ownership and processing boundaries

  • Customers remain data owners and control business decisions about their information.
  • Xfatora acts as a service provider for platform delivery and support needs.
  • Processing scope is tied to documented service purposes and contractual obligations.
  • Shared responsibility boundaries are defined early to reduce implementation risk.

Purpose limitation and internal access control

  • Data handling aligns with product functionality and support requirements.
  • Internal access is limited to authorized personnel and governed workflows.
  • Customer teams can implement role-based permissions for sensitive operations.
  • Access governance helps reduce unauthorized exposure risk.

Retention, deletion, and lifecycle governance

  • Retention periods are aligned with operational and legal requirements.
  • Deletion workflows follow verified requests and policy-driven execution.
  • Lifecycle controls are designed to reduce unmanaged data persistence.
  • Privacy requirements can be revisited as customer obligations evolve.

Subprocessor and third-party transparency

  • Third-party service dependencies are reviewed as part of governance practices.
  • Enterprise buyers can request subprocessor details during due diligence.
  • Vendor responsibilities are assessed against security and privacy expectations.
  • Material changes can be managed through established communication channels.

Data subject and customer request handling

  • Request workflows support authenticated intake and traceable execution.
  • Cross-functional teams coordinate legal, operational, and technical responses.
  • Sensitive requests can be escalated through enterprise support channels.
  • Response practices are designed to meet contract and policy obligations.

Contracting and procurement readiness

  • Legal and procurement teams can review privacy commitments before signature.
  • Contract language can address processing scope, retention, and support obligations.
  • Additional privacy controls can be discussed for regulated environments.
  • Documentation support helps accelerate enterprise procurement cycles.

Continuous privacy improvement

  • Privacy controls are reviewed as regulations and product capabilities change.
  • Operational feedback informs updates to policies and workflows.
  • Governance cadences can be established for enterprise accounts.
  • Ongoing collaboration helps customers maintain durable privacy programs.

Talk to Sales

Tell us about your ERP requirements and we will contact you with a tailored rollout plan.

Fields marked with are required.

We use your email only to respond to this request.

FAQ

Who owns data stored in Xfatora?

Customers retain ownership of their data. Xfatora processes data to deliver and support the contracted service.

What legal and contractual privacy terms are available?

Enterprise teams can review privacy terms and data processing obligations during legal and procurement review.

Can personal data access be restricted internally?

Yes. Role-based access controls help customers enforce least-privilege access for sensitive workflows.

Can we export our data at any time?

Data export options are available through authenticated operational processes.

How are deletion requests handled?

Deletion requests are processed through verified workflows and executed according to agreed timelines and legal obligations.

Do you disclose subprocessors?

Yes. Subprocessor information can be shared for due diligence and procurement workflows.

Can retention be aligned with our internal policy?

Retention expectations can be configured and contractually aligned based on operational and regulatory requirements.

How are cross-functional privacy reviews supported?

We can coordinate privacy sessions with legal, security, procurement, and IT teams during evaluation and onboarding.

Is shared responsibility clearly defined?

Yes. Controller-processor boundaries and customer responsibilities are clarified during contracting and implementation.

Related Modules

Included in: Enterprise

Accounting

Learn how Accounting fits into your Xfatora rollout.

Assets

Learn how Assets fits into your Xfatora rollout.

Assets

Centralize asset records, assignments, lifecycle status, maintenance history, and depreciation visibility.

Included in: Enterprise

Attendance & Leave

Shift, attendance, and leave approvals with clear policy controls.

Related Industries

ERP for Manufacturing

Manufacturing ERP guidance for production scheduling, material planning, quality control, and real-time shop floor visibility.

manufacturing production inventory

ERP for Distribution

Distribution ERP guidance for inventory turns, fulfillment performance, supplier coordination, and multi-warehouse control.

distribution warehousing fulfillment

ERP for Professional Services

Professional services ERP guidance for project staffing, utilization tracking, milestone billing, and profitability management.

professional-services projects billing

ERP for Healthcare

Healthcare ERP guidance for procurement governance, department budgeting, workforce planning, and regulatory readiness.

healthcare compliance operations

Related Use Cases

Strengthen Financial Governance

Increase auditability and control over accounting workflows, approvals, and policy compliance.

accounting financial-reporting governance

Accelerate Order to Cash

Connect sales, fulfillment, invoicing, and collections to reduce revenue leakage and improve cash conversion.

order-to-cash revenue-operations cash-flow

Control Production Costs

Tie material usage, labor capture, and overhead allocation to each production order for reliable margins.

manufacturing-management costing inventory-warehousing

Improve Fleet Uptime

Schedule preventative maintenance and coordinate work orders to minimize vehicle downtime.

fleet-management asset-management maintenance

Related Guides

ERP Implementation Playbook

A practical, phased guide to planning, launching, and scaling ERP adoption across teams with measurable outcomes.

implementation operations change-management

Xfatora User Guide

Module-by-module setup checklists, workflows, reporting, and troubleshooting to help teams roll out Xfatora in phases.

ZATCA & E-Invoicing Compliance

Practical guidance for enabling Saudi ZATCA QR and electronic invoicing compliance workflows, plus global e-invoicing processing and operational controls.

ZATCA Phase 2 Integration Guide

Step-by-step guidance to align ERP workflows with ZATCA Phase 2 integration controls.

zatca phase 2 integration

Related Trust Resources

Security Overview

Understand how Xfatora approaches enterprise security across governance, encryption, identity, monitoring, vulnerability management, and procurement readiness.

security enterprise risk

Compliance Approach

Learn how Xfatora supports enterprise compliance with governance controls, evidence readiness, control mapping, and procurement collaboration.

compliance audit enterprise

Service Level Agreement (SLA)

Understand enterprise SLA options for availability objectives, incident response targets, escalation pathways, and service governance.

sla support enterprise

Trust Center

Security, privacy, compliance, and reliability information for enterprise buyers evaluating Xfatora.

trust enterprise