Qatar

Kubernetes and enterprise architecture in Qatar.

We work with organisations in Qatar at their own sites and remotely from Dubai, and we have done so in banking. For a financial institution in Qatar, where its data is processed is set by regulation, and our platforms are designed around that.

The market

A banking regulator that decides where the data lives.

Qatar's national framework is the National Information Assurance Standard, issued by the National Cyber Security Agency and applied together with a national data classification policy. It is a framework of controls; it does not by itself require data to be held in the country.

Financial institutions are subject to a stricter rule. The cloud computing regulation and the data handling regulation issued by Qatar Central Bank in 2024 require the primary environment in which licensed institutions process and store personal and sensitive financial information to be in Qatar, and require the Bank's approval for material cloud arrangements.

For a bank, a platform on its own hardware in Qatar satisfies the location requirement without an approval process for a third-party provider. That is how BKE is deployed, and how our managed service operates it.

What we do in Qatar

Five services and one distribution, delivered on site and remotely.

Our engineers work at customer sites in Qatar and remotely from Dubai. Every engagement is contracted with Mamluk LLC-FZ, and the same engineers deliver every service below.

Sectors we have worked in, in Qatar: Banking.

Regulatory context

The frameworks that shape where workloads run.

These are the national and banking frameworks most relevant to where a workload runs in Qatar.

National Information Assurance Standard (NIA) National Cyber Security Agency
The national framework of information assurance controls, applied with the national data classification policy. It sets controls by classification level and does not by itself require data to be stored in Qatar.
Law No. 13 of 2016 on Personal Data Privacy Protection (PDPPL) National Cyber Security Agency
Governs the processing of personal data in Qatar, outside the Qatar Financial Centre. It does not require personal data to be stored in Qatar, and permits transfer abroad subject to safeguards.
Cloud Computing Regulation and Data Handling and Protection Regulation Qatar Central Bank
Issued in April 2024 for institutions licensed by Qatar Central Bank. The primary environment for processing and storing personal, sensitive personal and sensitive financial information must be in Qatar, and material cloud arrangements require the Bank's prior approval.

This summary is provided as context and is not legal advice. Which frameworks apply to an organisation depends on its sector, its licences and the data it holds, and should be confirmed with its regulator and its own counsel. Mamluk does not claim certification against any framework listed here.

Questions

Common questions from organisations in Qatar.

Do you work on site in Qatar?
Yes. Our engineers work at customer sites in Qatar and remotely from Dubai, and most engagements combine the two. Every engagement is contracted with Mamluk LLC-FZ, which is registered in Meydan Free Zone, Dubai.
Can the Bahriya Kubernetes Engine run inside Qatar?
Yes. BKE is installed on the customer's own servers, in the customer's own data centre, so the cluster and the data it holds stay wherever that hardware is. The requirements for each node are published in full.
How is BKE priced?
BKE is licensed at a flat annual fee per cluster, whatever the number of nodes, cores or memory. The figure and a worked example are on the BKE pricing page, and a 14-day trial can be started from the Mamluk console without a sales call.
Have you worked with banks in Qatar?
Yes. We have worked in the Qatari banking sector, where Qatar Central Bank's regulations require sensitive financial and personal data to be processed and stored in Qatar.

Across the GCC

The same practice in every GCC market.

Small teams. Plain contracts. Real architects.