CAFMPRO agrees the deployment architecture, including hosting location, with each client; on-premises deployment is available on request. CAFMPRO is a Saudi company, so spend with CAFMPRO can count toward your local content, and CAFMPRO's own invoices to clients are ZATCA-compliant e-invoices. The contract module's draft invoice is the contractor's payable amount for review, not a tax invoice. Access is governed by role-based permissions, tenant isolation and activity logging, and Facility AI cannot silently edit, approve or overwrite accountable records. CAFMPRO publishes only verified credentials and supports clients through audits, tender responses and project-specific customization.
Where the data lives
Deployment architecture, including hosting location, is agreed with each client and written into the project scope during the Discover and Prepare steps. For owners whose policy requires the platform inside their own environment, on-premises deployment is available on request, subject to agreed architecture.
Saudi Arabia's Personal Data Protection Law has made data location a standard procurement question for any system that holds employee, visitor or contractor records — which a facility platform does through manpower, security and event modules. That is why the hosting location is agreed in writing per client rather than assumed; each client's own data-protection obligations remain the client's, and CAFMPRO's role is to keep the records controlled, logged and where the client agreed they should be.
Invoicing and commercial control
Operational records → finalized KPI period → draft invoice. Performance bands, caps, applied percentages and the invoice basis depend on the agreed configuration of the contract. Commercial outputs remain drafts until the agreed review and approval workflow is completed. The draft invoice is the contractor's payable amount for the period — a review document, not a tax invoice. CAFMPRO's own invoices to its clients are ZATCA-compliant e-invoices.
Illustrative case used across CAFMPRO material: SAR 200,000 monthly contract, 2.9% applied deduction, SAR 194,200 net payable, reference period FY26-P07. The operational records behind the 2.9% stay attached to the invoice.
Access controls
- Role-based permissions — each role sees and acts on the modules, locations and records configured for it.
- Tenant isolation — each client's data is isolated from every other client's.
- Activity logging — actions on records are logged for review.
- Dashboards configured around the client's roles, locations, contract rules and reporting priorities.
AI governance
Facility AI retrieves permitted records, explains the relevant context and suggests actions for human review. It does not silently edit, approve or overwrite accountable operational or commercial records. The governance line is fixed: AI assists. Source records remain controlled.
CAFMPRO does not claim predictive maintenance, autonomous decisions or image matching.
Local content
CAFMPRO Limited Liability Company is a Saudi company registered in Riyadh (CR 7053330622, Ministry of Investment licence 24925246582). For buyers who report local content, spend with CAFMPRO can count toward it — software subscription, delivery and field services alike. Ask your local-content team how supplier registration is scored in your organisation; registration documents are provided on request.
CAFMPRO's own invoices to clients are ZATCA-compliant e-invoices.
Audits, tenders and project-specific customization
CAFMPRO supports clients beyond the software: during an audit, the platform's activity logs and retained evidence are used to answer the auditor's questions on work, approvals and payments; during a tender or project bid, CAFMPRO helps prepare the CAFM and CMMS sections of the response; and when a project needs specific workflows, forms, KPI rules or reports, project-specific customization is scoped and delivered under the agreed project scope.
- Audit support — evidence, logs and reports from the platform, prepared for the reviewer.
- Tender and project support — the CAFM/CMMS content of a bid, with the module scope and delivery path described accurately.
- Project-specific customization — workflows, forms, KPI rules, dashboards and reports configured to the project, within the agreed scope.
What CAFMPRO does not claim
No ISO 41001, ISO 27001, Saudi cybersecurity-framework, WCAG or fire and environmental certification is claimed on this website. When a credential is verified it will be published with its certificate number. Company registration (CR 7053330622) and Ministry of Investment licence (24925246582) documents are provided during qualified procurement and due diligence.
A vendor page that lists what it does not claim is easier to trust than one that lists everything. That is deliberate.
Questions procurement teams ask
Where is CAFMPRO data hosted?
The deployment architecture, including hosting location, is agreed with each client and written into the project scope. On-premises deployment is available on request, subject to agreed architecture.
Are CAFMPRO invoices ZATCA-compliant?
CAFMPRO's invoices to its clients are ZATCA-compliant e-invoices. The contract module's draft invoice is a different document — the contractor's payable amount for the period, for review and approval — and is not a tax invoice.
Is CAFMPRO ISO 27001 or ISO 41001 certified?
No certification is claimed on this website. Verified credentials will be published with certificate numbers when available.
Can the AI change our records?
No. Facility AI retrieves, explains and suggests. It does not silently edit, approve or overwrite accountable records.
How is access controlled?
Role-based permissions, tenant isolation and activity logging, with dashboards configured around the client's roles, locations and contract rules.
Can we get registration and licence documents?
Yes, during qualified procurement and due diligence: CR 7053330622 and Ministry of Investment entrepreneurship licence 24925246582.
Bring your procurement checklist to the scope workshop.
We answer each line in writing, and mark the ones we do not claim.