Oman

Kubernetes and enterprise architecture in Oman.

We work with organisations in Oman at their own sites and remotely from Dubai. Since 2024, Omani regulation has set out which classes of data may leave the country, and our platforms are designed around that classification.

The market

Data classified by level, and a level that decides where it can go.

Oman's personal data protection law has been in force since February 2023, with its executive regulation following in 2024. It regulates transfers abroad, and requires a permit to process sensitive categories of personal data such as health and biometric data.

The Telecommunications Regulatory Authority's regulation on cloud computing services and data centres, issued in 2024, goes further for the most sensitive classes of data. Data held by state entities, financial institutions and the health sector may not leave Oman without the Authority's prior approval. Banks are subject in addition to the Central Bank of Oman's cyber security and resilience framework.

For those organisations, a platform on their own hardware in Oman removes the need for transfer approvals. That is how BKE is deployed.

What we do in Oman

Five services and one distribution, delivered on site and remotely.

Our engineers work at customer sites in Oman and remotely from Dubai. Every engagement is contracted with Mamluk LLC-FZ, and the same engineers deliver every service below.

Regulatory context

The frameworks that shape where workloads run.

These are the frameworks most relevant to where a workload runs in Oman.

Personal Data Protection Law, Royal Decree 6/2022 (PDPL) Ministry of Transport, Communications and Information Technology
In force since February 2023, with its executive regulation issued in 2024. It does not impose a general requirement to store personal data in Oman, but regulates its transfer abroad and requires a permit to process sensitive personal data.
Regulation on Cloud Computing Services and Data Centres Telecommunications Regulatory Authority
Issued in 2024 for cloud service providers and data-centre operators in Oman. It classifies data by level, and the most sensitive levels, which include data held by state entities, financial institutions and the health sector, may not be transferred out of Oman without the Authority's prior approval.
Cyber Security and Resilience Framework (CSRF) Central Bank of Oman
Issued in 2023 for banks, finance and leasing companies, payment service providers and exchange houses. It sets cybersecurity and resilience controls, including controls on third parties and the supply chain.

This summary is provided as context and is not legal advice. Which frameworks apply to an organisation depends on its sector, its licences and the data it holds, and should be confirmed with its regulator and its own counsel. Mamluk does not claim certification against any framework listed here.

Questions

Common questions from organisations in Oman.

Do you work on site in Oman?
Yes. Our engineers work at customer sites in Oman and remotely from Dubai, and most engagements combine the two. Every engagement is contracted with Mamluk LLC-FZ, which is registered in Meydan Free Zone, Dubai.
Can the Bahriya Kubernetes Engine run inside Oman?
Yes. BKE is installed on the customer's own servers, in the customer's own data centre, so the cluster and the data it holds stay wherever that hardware is. The requirements for each node are published in full.
How is BKE priced?
BKE is licensed at a flat annual fee per cluster, whatever the number of nodes, cores or memory. The figure and a worked example are on the BKE pricing page, and a 14-day trial can be started from the Mamluk console without a sales call.

Across the GCC

The same practice in every GCC market.

Small teams. Plain contracts. Real architects.