KSA compliance, native — not bolted on

From day one, we refused to treat PDPL and Phase-1 QR ZATCA invoicing as later add-ons. On the Enterprise plan, every model in Kafu carries data residency, retention, and processing-scope context.

The result: when a KSA buyer asks for a security review, the answers are already in the product, not in a follow-up document.