Security: Your company’s data, in a database of its own
An Umrah company holds pilgrims’ passports, agents’ money and its own licences. So Umrah Link is built on separating companies, on every access having a reason, and on every change having a name.
Companies kept apart
Each company has its own database and login roles, with row-level rules inside it. The company’s address selects its database; a person’s membership decides what they can reach.
Permissions and sign-offs
Roles and permissions for every department, two-step verification with an authenticator app, and consequential actions — an exceptional discount, a payment release, a travel clearance — wait for the person who signs them off.
An audit trail for every change
Who did what, when, and whether they were allowed to. Nobody can edit the trail or delete from it; entries leave only when their retention period ends.
Personal data
Personal data has a purpose and a retention period, access and erasure requests have a process, identity documents are masked and revealed only for a stated purpose, and a breach has a 72-hour reporting clock.
Documents and keys
Files are private and scanned before anyone opens them, and ZATCA signing keys and provider credentials are kept in one protected vault.
AI under review
The copilot works with the asking person’s permissions, takes no action without confirmation, and anything it writes arrives as a draft for a person to review.
Service status
The public status page shows the service’s components, incidents and planned maintenance.
Book a demo
See your season run on one platform.
We walk your team through a whole season, from an agent’s booking to the ZATCA invoice, on packages and hotels like yours. Start with your work email.
What happens next
- We call you to pick a time that suits your team
- A demo on packages and hotels like yours
- The plan that fits — or a scoped Odoo proposal