--- title: Arkan Solutions Security & Compliance guidelines description: Arkan Solutions security and compliance guidelines --- [![Arkan](https://www.arkan.solutions/hubfs/Arkan_april_2024/images/Arkan-Logo.png)](https://www.arkan.solutions/en/?hsLang=en) - [Managed Services](https://www.arkan.solutions/en/managed-services) - Products Show submenu for Products - [Arkan Cloud Connect](https://www.arkan.solutions/en/arkan_cloud_connect) Show submenu for Arkan Cloud Connect - [Webex Cloud Connect](https://arkan.solutions/en/webex-cloud-connect) - [Arkan API Connect](https://www.arkan.solutions/en/api-voice-cloud-connect) - [Arkan Voice Products](https://www.arkan.solutions/en/arkan-voice-products) - [Security & Compliance](https://www.arkan.solutions/en/security_and_compliance) - Support & Resources Show submenu for Support & Resources - Support Show submenu for Support - [Knowledge Base](https://help.arkan.international/) - [Submit a Ticket](https://help.arkan.international/kb-tickets/new) - [Service Status](https://www.arkan.solutions/en/service-status) - Resources Show submenu for Resources - [Blog](https://blog.arkan.international/en) - [News](https://www.arkan.solutions/en/news) - About Show submenu for About - [About Us](https://www.arkan.solutions/en/about-arkan) - [Why Arkan](https://www.arkan.solutions/en/why-arkan) - [Our Clients](https://www.arkan.solutions/en/clients) - [Managed Services](https://www.arkan.solutions/en/managed-services) - Products Show submenu for Products - [Arkan Cloud Connect](https://www.arkan.solutions/en/arkan_cloud_connect) Show submenu for Arkan Cloud Connect - [Webex Cloud Connect](https://arkan.solutions/en/webex-cloud-connect) - [Arkan API Connect](https://www.arkan.solutions/en/api-voice-cloud-connect) - [Arkan Voice Products](https://www.arkan.solutions/en/arkan-voice-products) - [Security & Compliance](https://www.arkan.solutions/en/security_and_compliance) - Support & Resources Show submenu for Support & Resources - Support Show submenu for Support - [Knowledge Base](https://help.arkan.international/) - [Submit a Ticket](https://help.arkan.international/kb-tickets/new) - [Service Status](https://www.arkan.solutions/en/service-status) - Resources Show submenu for Resources - [Blog](https://blog.arkan.international/en) - [News](https://www.arkan.solutions/en/news) - About Show submenu for About - [About Us](https://www.arkan.solutions/en/about-arkan) - [Why Arkan](https://www.arkan.solutions/en/why-arkan) - [Our Clients](https://www.arkan.solutions/en/clients) ![menu](https://f.hubspotusercontent40.net/hubfs/7479797/menu.png) ![close\_24px](https://7479797.fs1.hubspotusercontent-na1.net/hubfs/7479797/close_24px.svg) [tel:+966115078099](tel:+966115078099) [Talk to an Expert](https://www.arkan.solutions/en/contact-us?hsLang=en) Security & Compliance # Infrastructure Security You Can Verify Arkan Solutions engineers security into the architecture of its voice connectivity platform — not as an add-on. Every signalling path, media stream, and management interface is designed to meet the security and compliance requirements of enterprise and government deployments across MENA and global markets. [Download Security Whitepaper](https://hubs.ly/Q04d1xsp0) [Request a Compliance Briefing](https://www.arkan.solutions/en/contact-us?hsLang=en) # **99.99%** SLA uptime commitment across all production environments # **  \<15 min ** Response time for critical severity incidents # ** 5 ** Regulatory frameworks addressed across mena and global deployments   # **24/7** Noc monitoring and fraud detection coverage ##  ARCHITECTURE ## Security Design Principles Arkan Cloud Connect is engineered around a set of foundational security principles that apply across every layer of the platform — from carrier interconnects to enterprise endpoints.   **Zero-Trust Architecture** No implicit trust is granted between network zones. All control plane access requires explicit authentication. Signalling domains, routing policies, and management interfaces are strictly segmented. **Dedicated Per-Customer SBC** Each enterprise client receives a dedicated logical SBC instance with isolated signalling domains and independent routing policies. Cross-tenant traffic exposure is structurally prevented. **Defense-in-Depth** Protection is layered across edge DDoS mitigation, carrier-grade firewalls, SBC topology hiding, SIP normalization, and rate limiting. No single layer constitutes the complete security boundary. **Encryption by Default** TLS is enforced on all SIP signalling paths. SRTP is available for media encryption. Certificate-based authentication and strong cipher suites are applied across all platform interfaces. **Continuous Monitoring** The platform operates under 24/7 NOC coverage with real-time fraud detection engines, call pattern anomaly analysis, and threshold-based alerting across  all active voice sessions.  **Geo-Redundant Resilience** Infrastructure is distributed across multiple data centres with carrier-diverse interconnects and automatic failover. No single point of failure exists within the production architecture. ## ENCRYPTION ## Protocol & Encryption Standards All communication across the Arkan Cloud Connect platform is governed by defined encryption standards applied at the signalling and media layers independently.   SIP Signaling Layer TLS protocol version1.2 minimum, 1.3 preferred Authentication methodCertificate-based Mutual TLSAvailable where required Cipher suitesStrong suites enforced Topology hidingSBC-level enforcement Media Plane (RTP/SRTP) Media encryptionSRTP with AES encryption Key exchangeSecured via signaling channel Primary codecG.711 Optional codecsOPUS, G.722 Number formatE.164 Interception protectionMITM attack prevention ## OPERATIONS ## Operational Security & SLA Commitments Security governance at Arkan Solutions is backed by an ITIL-based service framework covering incident management, problem management, change management, and escalation management — with defined response commitments at each severity level.   99.99% Platform availability SLA across all production voice environments \<15 min Maximum response time for Urgent and High severity incident classification 24/7 Network Operations Center coverage for monitoring, fraud detection, and alerting 3–5 days Standard deployment window including configuration, testing, and change control Incidents are classified across four levels — **Low, Medium, High, and Urgent** — each with defined response and resolution SLA commitments. Full classification criteria and escalation procedures are documented in Arkan's Service Terms & Conditions. [View Terms & Conditions →](https://www.arkan.solutions/en/terms-conditions?hsLang=en) ## FRAUD & ACCESS CONTROL ## Fraud Prevention & Security Responsibilities Active fraud controls operate within the Arkan Cloud Connect platform at the session and signalling level, supported by role-based access management and a clearly defined security responsibility model.   ### Real-Time Anomaly Detection Statistical models identify abnormal call patterns and session behaviors as they occur, with automated alerting to the 24/7 fraud prevention team.   ### International Destination Monitoring Outbound call destinations are continuously monitored against defined thresholds. Abuse of high-risk international routes triggers an automated response.   ### CLI Policy Enforcement FROM and TO header validation is enforced at the SBC level. Unauthorized CLI presentation and number spoofing are blocked before session establishment.   ### Role-Based Access Control (RBAC) Management interface access is controlled by tier level, operational responsibility, and change approval authority — aligned with the defined escalation framework. SECURITY RESPONSIBILITY MODEL AREA RESPONSIBLE SBC security & hardening Arkan Signaling encryption enforcement Arkan Media encryption (SRTP) Arkan Fraud detection & monitoring Arkan Incident response & escalation Arkan Internal endpoint security Client End-user access controls Client ## REGULATORY ## Regulatory Compliance Framework Arkan Solutions maintains compliance with the telecom regulatory frameworks applicable across its deployment regions. Compliance obligations are managed per jurisdiction and applied to each service accordingly. SA CITC / CST Kingdom of Saudi Arabia Arkan Solutions holds a licensed operator status under the Communications, Space & Technology Commission (CST), formerly CITC. All PSTN services delivered within Saudi Arabia operate under a valid CST operator license. CST Licensed Operator SIP Trucking PSTN Connectivity AE TDRA United Arab Emirates Services deployed within the UAE operate in alignment with the Telecommunications and Digital Government Regulatory Authority (TDRA) framework, including applicable interconnection and voice service regulations. Voice Services Interconnection UAE Regulatory 🌐 GDPR European Union / Global Arkan applies GDPR-aligned data handling practices for enterprise clients with European operations or data subjects. This includes defined data residency considerations and processing boundaries. Data Protection EU Regulation Processing Controls SA NDMO Saudi Arabia — Data Governance The National Data Management Office (NDMO) framework governs data classification and management within Saudi Arabia. Arkan's operational model is aligned with NDMO principles for enterprise voice data handling. Data Classification Saudi Data Law Data Governance SA SAMA Saudi Arabia — Financial Sector For enterprise clients operating under the Saudi Central Bank (SAMA) regulatory environment, Arkan Cloud Connect supports the security, encryption, and availability requirements applicable to financial sector voice infrastructure. Financial Sector Regulated Industries SAMA Alignment 🌍 Regional Operators 80+ Countries — Global PSTN Arkan's PSTN coverage spans 80+ countries through compliant interconnection arrangements with licensed regional operators. Local number portability and emergency calling requirements are addressed per jurisdiction. Global Coverage Local Number Portability Emergency Calling ## DATA HANDLING ## Data Handling Principles Arkan Solutions applies a defined set of data handling principles across all platform deployments. These principles apply by default and are not dependent on client configuration. 01 ### No Call Recording by Default Arkan Cloud Connect does not record, store, or retain voice media content by default. Recording functionality, where required, is implemented and controlled exclusively at the enterprise client layer. 02 ### Complete Traffic Isolation Each enterprise client's voice traffic operates within a dedicated logical environment. Signaling paths, routing tables, and media streams are fully isolated from other tenants on the platform. 03 ### Number Sovereignty E.164-formatted telephone numbers associated with an enterprise client are managed exclusively within that client's logical domain. Numbers are not shared, reassigned, or exposed beyond the defined service boundary. 04 ### No Third-Party Data Sharing Arkan Solutions does not share enterprise client traffic data, session metadata, or call records with third parties unless explicitly required by applicable law or client agreement. ## **Standards & Frameworks** ####  ISO/IEC 27001:2022  ## Information Security Management #### TLS 1.2 / 1.3 ## Signaling Encryption #### SRTP / AES ## Media Encryption #### Zero-Trust ## Network Architecture #### ITIL ## Service Governance #### CST Licensed ## Saudi Arabia Licensed Operator ##  **Information Security Management** ### ISO/IEC 27001:2022 Certified Arkan Solutions is ISO/IEC 27001:2022 certified by Intertek under UKAS accreditation. This certification reflects the governance, information security management, and operational control frameworks through which Arkan designs, integrates, and operates enterprise communication environments. Certified by Intertek   Under UKAS accreditation   Valid 2026–2029 Annual surveillance audits   ## **Certification Scope ** ### What the certification covers The management system is applicable to: The Information Security Management System (ISMS) covers the information security management, provision, operation, support, and sales and marketing of Infrastructure as a Service (IaaS) and cloud-based telecommunications connectivity services, enabling secure integration between the PSTN network and cloud communication platforms. ### Information security management Structured ISMS covering risk identification, access control, and asset protection ### Governance frameworks Defined policies, documented processes, and operational oversight ### Operational control Consistent, repeatable standards across design, integration, and management ### Risk management Systematic identification and treatment of information security risks ### Continuous improvement Ongoing surveillance audits and framework review as standard requirements ## **Operational Scope** ### Applied across Arkan's enterprise communication services UCaaS CCaaS SBCaaS Managed Services Enterprise Voice Infrastructure PSTN ### View & Download the Certificate Available for vendor assessments, procurement reviews, compliance documentation, and tender submissions. [Download certificate](https://www.arkan.solutions/hubfs/Arkan%20Solutions%20ISO%20IEC%2027001%202022%20Certificate.pdf/Arkan%20Solutions%20ISO%20IEC%2027001%20Certificate.pdf?hsLang=en) ## DOCUMENTATION & CONTACT ## Review the Full Documentation The Arkan Cloud Connect Security & Compliance Whitepaper provides detailed technical documentation of the platform's security architecture, encryption standards, and operational governance model.   ### Security & Compliance Whitepaper A detailed technical document covering Arkan Cloud Connect's security architecture, Zero-Trust design, encryption specifications, incident response model, and MENA regulatory compliance framework. [Download Whitepaper](https://hubs.ly/Q04d1xsp0)   ### Request a Compliance Briefing For procurement teams, information security leads, or legal reviewers requiring additional documentation, Arkan Solutions is available to conduct a structured compliance review session. [Request a Briefing](https://www.arkan.solutions/en/contact-us?hsLang=en) [![logo-1](https://www.arkan.solutions/hubfs/Arkan_april_2024/images/logo-1.png)](https://www.arkan.solutions/en/?hsLang=en) #### Arkan Solutions for Telecom & IT 7953 Prince Sultan Street Jeddah Makkah 23433-2095 Saudi Arabia ![payment](https://www.arkan.solutions/hs-fs/hubfs/Arkan_april_2024/images/payment.jpeg?width=200&height=32&name=payment.jpeg "payment") ###### Other Links - [Home](https://www.arkan.solutions/en/) - [About](https://www.arkan.solutions/en/about) - [Contact](https://www.arkan.solutions/en/contact-us) ###### Resources - [Blog](https://blog.arkan.international/en) - [Refund Policy](https://www.arkan.solutions/en/refund-policy) Copyright © 2024, Copyright [Privacy Policy |](https://www.arkan.solutions/en/privacy-policy?hsLang=en) [Services Terms & Conditions](https://www.arkan.solutions/en/terms-conditions?hsLang=en) 1 AS Arkan Solutions Cloud Voice Expert · Online EN ✕ Ticket Human ☼ 📞 Welcome to Arkan Solutions Help us serve you better — takes 20 seconds. Full name Company Current or target voice platform -- Select -- MS Teams Zoom Phone Zoom Contact Center Genesys Cloud CX 3CX AI / LLM Voice Agent Custom API / CPaaS Not sure yet How can we help? 📈Sales inquiry 🔧Technical support 🚀Onboarding help 💬General question Start Chat By chatting you agree to our [privacy policy](https://arkan.solutions/privacy?hsLang=en) ● CRM: Powered by [Arkan Solutions](https://arkan.solutions?hsLang=en)