Performance & Security

Platform & Operations

What it does

This module covers the qualities that aren't a single button but make the whole system trustworthy: how fast it responds, how it stays up, how it protects member data, and how every change is recorded. For a multi-brand operator with many clubs, that means 24/7 availability, strict privacy for female members, full Arabic/English support, and an audit trail that satisfies PDPL, ZATCA, and CMA. Most of this runs automatically — what staff see day to day is the change history, audit logs, and bulk import/export tools.

Key concepts

• Uptime & performance — a 99.9% availability target, sub-200ms response on critical actions, and capacity to grow with the club estate.
• Offline edge cache — if the cloud connection drops, gates keep opening from a locally cached list of valid memberships, so clubs never lock out.
• Female biometric privacy — a member's photo is instantly converted to a mathematical hash for the scanner and the original image is permanently deleted (zero-storage).
• Change log & version history — every create/update/delete is recorded with who, when, old value, and new value; entities keep version snapshots you can compare or restore.
• Immutable audit trail — a tamper-proof record of sensitive actions (refunds, discounts, wallet adjustments, role changes, approvals) that even administrators can't delete, queryable and exportable for auditors.
• Session & password security — MFA for admins, 12-character passwords, automatic timeout, single active session, and lockout after repeated failures; staff SSO via Microsoft Entra ID.

Main tasks

Review who changed what

1. Open the change log on any record to see each edit: user, timestamp, action, and the before/after values.
2. For an entity with version history, compare two versions side by side, or restore an earlier one.
3. The log is read-only — no one, including administrators, can alter past entries.

Investigate a finance-sensitive action

1. Go to the audit trail and filter by actor, action type, date range, member, club, or financial impact.
2. Open an entry to see the source surface (POS, portal, API, mobile), the reason code, and the financial impact.
3. Export the results to CSV/JSON for a PDPL, ZATCA, CMA, or internal-finance review.

Bulk import or export data

1. Open the relevant list (prospects, member adjustments, corporate rosters) and choose the bulk action.
2. Upload a CSV/Excel file to import, or export the current data set — you own 100% of your data with no extraction fees.
3. Apply a bulk action across many records at once where supported.

Tips

INFO

Audit logs are immutable by design — they cannot be edited or deleted even by a system administrator, and they can be streamed to a SIEM (Splunk, Sentinel) for security monitoring. This is what makes regulatory compliance demonstrable on request.

TIP

The system is fully bilingual with native right-to-left support, and new languages can be added later through configuration without re-engineering the core.

Related modules

Integrations · Data Migration · Commercial & Support · Finance & Payments