Qatar compliance

PDPPL Compliance for Your ERP and CRM in Qatar

The Personal Data Privacy Protection Law applies to every Qatari company holding customer, employee and supplier data, and the ERP and CRM are where most of it lives. Compliance is a set of configuration decisions: what you hold, why, for how long, who can see it, where it sits, and how you answer a person who asks.

Inventory of personal data fields across CRM, HR, sales and support
Consent and purpose recorded on the contact, with marketing preferences enforced
Retention rules, anonymisation and deletion workflows
Role-based access, audit logs, in-country hosting and subject-request handling

Doha-based teamArabic and EnglishSupport after go-live

Book a free consultation

A 30-minute call, no obligation. We will tell you if we are not the right fit.

Full name *

Company *

Phone / WhatsApp *

Work email *

What are you trying to fix?

I agree to be contacted about my enquiry.

We use your details only to answer this enquiry. No lists, no resale.

Partner on four platformsZoho, Odoo, ERPNext and ManageEngine

Qatari practiceVAT, e-invoicing, GRSIA and WPS workflows

Arabic + EnglishInterface, documents and reports

Doha HQAl West Bay, working nationwide

Where the data is, the controls have to be

Most PDPPL programmes start with policies and stop before the systems. The systems are where obligations are met or missed: a CRM that emails anyone ever entered, an HR system that keeps leaver files forever, a support desk where every agent sees every record, an export to a spreadsheet nobody tracks. We take the obligations your legal advisers define and turn them into configuration: field inventory, consent capture, retention and deletion, access roles, audit trails, encryption and hosting location, and a workflow to answer access, correction and deletion requests within the expected time.

Configured on Zoho CRM and People, Odoo and ERPNext, with ManageEngine for identity, endpoint and log controls where the programme extends to IT. Hosting options are on ERP data residency in Qatar. This is configuration, not legal advice.

What compliance and IT teams tell us

“We do not know which fields hold personal data”

No inventory.

“Marketing emails everyone”

No consent flag.

“Leavers' files are kept forever”

No retention.

“Anyone can export the CRM”

No role limits.

What we configure

Inventory

Personal data fields mapped per module.

Consent

Purpose and preference on the record.

Retention

Rules, anonymisation, deletion.

Access

Roles, field-level security, export limits.

Audit

Logs of access and change.

Requests

Access, correction, deletion workflow.

Around the setup

Hosting

In-Qatar options per platform.

Identity

SSO and MFA. ADManager Plus

Endpoints

Encryption and control.

Documents

Privacy notices in both languages.

Training

Admins and data owners.

Support

We update consent, retention and access settings as PDPPL regulations and guidance evolve.

Qatar specifics

Residency

Hosting inside Qatar.

Arabic notices

Consent in both languages.

Employee data

Qatar ID and GRSIA fields.

Consent for messaging.

How the engagement runs

Each stage has a real duration against it, so you can plan around it.

Review

Current process, data and the parties involved.

1 week

Configure

Fields, rules, documents and interfaces.

1 - 3 weeks

Test

Against real transactions from last month.

1 week

Run

Monthly routine, monitoring and support.

Ongoing

What you get

Concrete deliverables, so you can hold the proposal to something.

Design

Data map
Rules
Document formats
Fixed price

Build

Configured system
Test evidence
Documentation
Training

Run

Routine checklist
Alerts
Support plan
Named consultant

Why businesses pick us

Partner on four platforms, not one

We are a Zoho, Odoo, ERPNext and ManageEngine partner and also implement Salesforce. If Zoho, Odoo and ERPNext is the wrong fit for the problem you described, we will say so before you buy licences rather than after.

Arabic and English in one system

Interface, documents and reports in both, which matters when the team works in Arabic and management reads reports in English.

Configured for Qatari practice

Invoicing workflows configurable around GTA e-invoicing, VAT treatment set at entry, and payroll outputs shaped for WPS and GRSIA.

We stay after go-live

The first month-end close surfaces everything the scoping missed. Most of the real value of an implementation is delivered in those weeks.

A team in Doha, not a ticket queue

Consultants you can meet, in your timezone and your working week, who scoped the project and then configured it.

We will tell you not to buy

If the problem is your data or your process rather than your software, a new licence will not fix it. We say that early.

Organisations we have worked with

A selection of the organisations we have delivered ERP and business software work for, across finance, healthcare, trading, logistics and professional services.