SSO / SAML
Sign in with your identity provider over SAML 2.0, enforce SSO for everyone and remove access in one place.
Continue with company SSO
SAML 2.0Enforced
Governance and security
Controls your security team will ask for
Everything is on by default for Enterprise workspaces — no add-ons, no side deals.
Roles and permissions
Owner, Admin, Builder and Viewer roles, scoped per project and environment.
DeployEditView
Owner
Admin
Builder
Viewer
Audit logs
Every deploy, permission change and secret rotation is recorded with who, what and when.
10:42deploy.production
10:45secret.rotated
10:51member.removed
Data residency
Pin each project to a Middle East region and lock data inside it.
me-jeddah-1Region lock
Private networking
Reach internal systems over private connectivity, with IP allowlists and fixed outbound IPs.
allow 10.20.0.0/16private-link → erp.internal
Encryption and backups
TLS in transit, encryption at rest, automatic backups and one-click restore.
TLS in transitEncrypted at restRestore points
Swipe for more
In-region hosting
Pick where your apps and data live
Five regions across the Gulf and Egypt. Select one to see what stays inside it.
Riyadh, Saudi ArabiaSelected hosting region
me-riyadh-1
- App, database, files and backups stay in Saudi Arabia
- Region lock blocks moving project data outside the region
- Relevant framework: Saudi PDPL — regulator: SDAIA
Architecture
Everything runs inside your region boundary
Data, backups and logs stay in the region you picked above.
Who connects
CustomersWeb and mobile
Your teamSSO
Region boundaryme-riyadh-1
Edge
TLS and routingDomains and certificates
Runtime
App runtimeAutoscaling containers
Jobs and webhooksSchedules and events
Data
Managed databaseEncrypted, restorable
File storageUploads and media
Secrets vaultAudit logsBackupsMonitoring
Your systems
NetworkPrivate link
ToolsGitHub, ERP
Procurement
Built to pass procurement, not just demos
5 currencies
Invoices in local currency
Tax invoices in SAR, AED, KWD, BHD or EGP, with purchase orders and annual agreements.
Ready to sign
Data processing agreement
A DPA that sets out how we process your data, where, and with which sub-processors.
On request
Security package
Architecture overview, controls summary and shared-responsibility matrix for your review.
[Timeline]
Vendor onboarding
We complete your vendor forms and security questionnaires with your procurement team.
Swipe for more
- 1Discovery callYour use case, users and compliance needs.
- 2Security reviewDPA, security package, questionnaire.
- 3Pilot in your regionA real app, built with your team.
- 4Agreement and POInvoiced in your local currency.
Request a demo
See Fanann running in your region
Tell us a little about your team and we will tailor a 30-minute session.
Where are you based?Team sizeWhat should we cover?
By sending this form you agree to our privacy policy. We never share your details.
FAQ
Enterprise questions
The things people ask us most about Fanann. Can't find your answer? Our team replies in Arabic or English.
Can our data stay inside Saudi Arabia?
Yes. Choose me-riyadh-1 or me-jeddah-1 and turn on the region lock: your app, database, files and backups stay in the region you picked.
Which identity providers do you support for SSO?
Any identity provider that supports SAML 2.0. You can enforce SSO for every member and remove access centrally when someone leaves.
Do you sign a data processing agreement?
Yes. Enterprise customers get our DPA and security package during the review, before any contract is signed.
Can we pay by invoice in our local currency?
Yes. We invoice in SAR, AED, KWD, BHD or EGP and can work with your purchase-order process.
Can we connect Fanann to our private network?
Enterprise workspaces support private networking and IP allowlists, so apps can reach internal systems without exposing them to the internet.
Governance and security
Controls your security team will ask for
Everything is on by default for Enterprise workspaces — no add-ons, no side deals.
SSO / SAML
Sign in with your identity provider over SAML 2.0, enforce SSO for everyone and remove access in one place.
Continue with company SSO
SAML 2.0Enforced
Roles and permissions
Owner, Admin, Builder and Viewer roles, scoped per project and environment.
DeployEditView
Owner
Admin
Builder
Viewer
Audit logs
Every deploy, permission change and secret rotation is recorded with who, what and when.
10:42deploy.production
10:45secret.rotated
10:51member.removed
Data residency
Pin each project to a Middle East region and lock data inside it.
me-jeddah-1Region lock
Private networking
Reach internal systems over private connectivity, with IP allowlists and fixed outbound IPs.
allow 10.20.0.0/16private-link → erp.internal
Encryption and backups
TLS in transit, encryption at rest, automatic backups and one-click restore.
TLS in transitEncrypted at restRestore points
In-region hosting
Pick where your apps and data live
Five regions across the Gulf and Egypt. Select one to see what stays inside it.
Riyadh, Saudi ArabiaSelected hosting region
me-riyadh-1
- App, database, files and backups stay in Saudi Arabia
- Region lock blocks moving project data outside the region
- Relevant framework: Saudi PDPL — regulator: SDAIA
Architecture
Everything runs inside your region boundary
Your users and systems connect in; your data, backups and logs never leave the region you selected above.
Who connects
Your customersWeb, iOS, Android
Your teamSSO via your IdP
Region boundaryme-riyadh-1
Edge
TLS and routingDomains and certificates
Runtime
App runtimeAutoscaling containers
Jobs and webhooksSchedules and events
Data
Managed databaseEncrypted, restorable
File storageUploads and media
Secrets vaultAudit logsBackupsMonitoring
Your systems
Your networkPrivate link, allowlist
Your toolsGitHub, webhooks, ERP
Procurement
Built to pass procurement, not just demos
5 currencies
Invoices in local currency
Tax invoices in SAR, AED, KWD, BHD or EGP, with purchase orders and annual agreements.
Ready to sign
Data processing agreement
A DPA that sets out how we process your data, where, and with which sub-processors.
On request
Security package
Architecture overview, controls summary and shared-responsibility matrix for your review.
[Timeline]
Vendor onboarding
We complete your vendor forms and security questionnaires with your procurement team.
- 1Discovery callYour use case, users and compliance needs.
- 2Security reviewDPA, security package, questionnaire.
- 3Pilot in your regionA real app, built with your team.
- 4Agreement and POInvoiced in your local currency.
Request a demo
See Fanann running in your region
Tell us a little about your team and we will tailor a 30-minute session.
What happens in the demo
- 10 minYour use case, users and data
- 15 minA live build in your chosen region
- 5 minSecurity review and procurement steps
- In Arabic or English
- With a security specialist if you need one
- No commitment
Where are you based?Team sizeWhat should we cover?
By sending this form you agree to our privacy policy. We never share your details.
FAQ
Enterprise questions
The things people ask us most about Fanann. Can't find your answer? Our team replies in Arabic or English.
Talk to our teamCan our data stay inside Saudi Arabia?
Yes. Choose me-riyadh-1 or me-jeddah-1 and turn on the region lock: your app, database, files and backups stay in the region you picked.
Which identity providers do you support for SSO?
Any identity provider that supports SAML 2.0. You can enforce SSO for every member and remove access centrally when someone leaves.
Do you sign a data processing agreement?
Yes. Enterprise customers get our DPA and security package during the review, before any contract is signed.
Can we pay by invoice in our local currency?
Yes. We invoice in SAR, AED, KWD, BHD or EGP and can work with your purchase-order process.
Can we connect Fanann to our private network?
Enterprise workspaces support private networking and IP allowlists, so apps can reach internal systems without exposing them to the internet.