Operating a health records platform across multiple GCC countries means navigating different and evolving data governance frameworks. We've invested significantly in the past year to ensure Looms meets the specific requirements published by health ministries in both the UAE and Saudi Arabia — and to build the infrastructure to adapt quickly as those requirements evolve.
UAE compliance
Looms complies with the UAE Federal Decree-Law on Personal Data Protection, the Dubai Health Authority data standards and the Abu Dhabi Department of Health health information exchange guidelines. UAE patient data is stored on servers physically located within the UAE.
Saudi Arabia compliance
In Saudi Arabia, Looms aligns with the Personal Data Protection Law, the National Data Management Office standards and the Saudi Health Informatics Center interoperability framework. KSA patient data is stored within the Kingdom in dedicated, isolated infrastructure.
What this means for patients
Your data stays in your country. It is stored in compliance with the laws of the country where you registered, and it is not transferred internationally without your explicit consent. Our privacy policy documents these commitments in full.