Privacy notice: Raed

Internal system for Dubai Government Excellence Programme preparation · Fourth version, 25 September 2026

What the server stores

• Your account: name, username, email, department, job title, role (to identify you and set your permissions).
• Your password, stored only as a one-way hash that nobody can read back.
• Your two-step verification key (encrypted) and recovery codes (stored hashed).
• Sign-in and activity records: time, IP address, success or failure, and changes made to accounts (security and accountability).
• The committee's excellence working data: capabilities, indicators, links, evidence records, and the nomination team's details (names, job titles, email addresses and mobile numbers), encrypted on Azure servers in the UAE (so the team works on one copy from any device).
• The files attached to evidence records, also encrypted.
• Earlier versions and the change history: every change is kept for 13 months after it was replaced, while evidence keeps every version, always, for proof. Each version records who changed it, when, and what changed.
• Conflict copies: when two people change the same item, the copy that was not taken is kept, never deleted.
• A store activity log: who wrote (or downloaded an attached file), when, IP address, which item and the version number. It never holds any of the content, except the reason an administrator gives when rewinding an entity to an earlier moment.
• Your last 5 sign-ins: time, network address shortened (its last part removed), browser and system (to warn you about an unfamiliar device).
• Passkeys (Touch ID, Windows Hello and similar), if you add one: only the public key, a device label, when it was added and last used. Your fingerprint, face or device PIN never leaves your device.

This is kept on Microsoft Azure in the UAE North region, backed up daily, with backups kept for 30 days.

Every user who signs in to Raed can read every entity stored on the server, the nomination teams' details included, and each entity's change history: who changed what, and when. Every signed-in user can also see the earlier and the new value of each change (up to 200 characters each), team members' details included. Rewinding a whole entity to an earlier moment is for administrators only and is recorded with its reason.

What never reaches the server

• AI features use a model on your own computer or local network only; no text is sent to an outside provider.
• No analytics, tracking or advertising. Two strictly necessary cookies only: your sign-in session, and a 5-minute one used only during a passkey sign-in.
• This browser remembers the last username and your name to greet you when you return. Tap "Not you?" on the sign-in page to clear it, especially on a shared computer.

How long

Account details: while the account exists. When no longer needed, an account is disabled rather than deleted, because the change history carries its holder's name for accountability. Failed sign-in records: size-capped, oldest replaced automatically. Excellence working data, attached files and conflict copies: kept until an explicit decision is made to delete them, except evidence, which is never deleted; archiving an entity deletes nothing. Earlier versions: every change is kept for 13 months after it was replaced; after that it is removed the next time that section is saved (a check made at most once an hour), except evidence, whose every version is kept. As a safety limit, each section keeps at most 5,000 earlier versions; beyond that the oldest are removed first (evidence has no limit). Store activity log: size-capped, oldest replaced automatically. Backups: 30 days.

Your rights

You may ask to see, correct or reduce your data, under the UAE Personal Data Protection Law. Only the committee's system administrators can see or change your account details. For requests or questions, contact the system administrator.

Videos and quotes

The Dubai videos on the sign-in and home pages are served by Raed itself, under Creative Commons or the Pexels / Pixabay licences, and credited on screen and in the source list. The quotes are published sayings of His Highness Sheikh Mohammed bin Rashid Al Maktoum.