Home / SAMA

SAMA Cyber Security Framework

Security practices behind fee collection and school finance.

Aligned with SAMA framework

What this means for your school

The Saudi Central Bank (SAMA) Cyber Security Framework guides how financial data and payments are protected. Spark-Ed follows its principles for fees, billing and payment features.

Payments and billing

Fee and billing data is protected with the same controls as all school data.

Encryption

SSL/TLS encryption for data in transit.

Access control

Finance data is limited by role, so only authorised staff can see it.

Daily backups

Regular backups protect financial records.

Monitoring

Continuous monitoring of the platform.

Hosted in KSA

Data for Saudi schools stays in the Kingdom.

Where your data lives

Each school is assigned a hosting region on AWS. All regions use the same security practices.

Saudi Arabia

Schools in the Kingdom are hosted on AWS in KSA.

United Arab Emirates

UAE schools are hosted on AWS in the UAE.

USA, Canada and Mexico

Hosted on AWS in California.

India and other regions

Hosted on AWS in Singapore.

Questions about security or compliance?

Talk to our team. We can share our data processing agreement and answer your IT and legal questions.