Now in early access: UAE, Saudi Arabia, and Canada

Every project.
Every team.
Your data.

The project management platform that respects your data like a password manager. AES-256 encrypted. Stored in your own cloud, not ours. The vendor literally cannot read your data. By design, by code.

Start free See how it works No credit card · 5 min setup
AES-256-GCM encryption
Cross-device sync
UAE PDPL-ready
zidaan.app / Q4 Product Launch
Google Drive · Synced
Q4

Q4 Product Launch

3 of 12 done
S
M
+3
Backlog 3
UAE market entry research
research
Arabic localisation review
i18n
To do 4
PDPL compliance documentation
high
Aug 1
LemonSqueezy payment integration
urgent
In progress 2
🔐 Multi-user sync testing
eng
J
Gulf enterprise pilot outreach
sales
Done 3
CRDT sync engine
AES-256 encryption
Role-based access control
Designed for teams that take data seriously
Zero vendor data · UAE PDPL-ready · Saudi PDPL-aware · PIPEDA-ready · AES-256 encryption · BYO storage · Vision 2030-aligned · CRDT sync · Your jurisdiction · Zero vendor data · UAE PDPL-ready · Saudi PDPL-aware · PIPEDA-ready · AES-256 encryption · BYO storage · Vision 2030-aligned · CRDT sync · Your jurisdiction
Why Zidaan is different

The PMO that doesn't see your data.

Not "we promise not to look." Not "we anonymize it." The math makes it impossible for us to read your data, even if we wanted to, even if compelled.

Zero vendor data

End-to-end encrypted on your device.

Every byte of your project data is encrypted in your browser before it leaves, using AES-256-GCM with keys derived from your login password via PBKDF2 (310,000 iterations). We hold no keys. We hold no plaintext.

Your device
Decrypted in memory
PBKDF2 key derived
AES-256 at write
Zidaan server
No vault data
No keys
No plaintext
Your cloud
Your credentials
Your jurisdiction
Content: opaque ciphertext

Your storage. Your choice.

Connect any of these. IT admins configure once. Team members connect automatically. Your data, your jurisdiction.

Google Drive Dropbox OneDrive Amazon S3 WebDAV Local folder

Sync across every device.

Make a change on one device. Open on another. It's already there. The CRDT operation log merges changes automatically. No conflicts to resolve, no manual intervention needed.

CRDT-based sync · confirmed cross-device

Every view your team needs.

Kanban, List, Calendar, Gantt, Workload, Budget, WBS, and Table, built from what real teams said was missing in the tools they already use.

Real governance.

7 roles: Admin, Project Director, Department Head, Project Manager, Team Lead, Member, Guest. No plugin required.

AI that respects privacy.

Powered by Cerebras, Groq, Gemini, and Anthropic, cascading by plan tier. Your prompts are relayed, never logged by us. Per-plan daily limits.

Move projects between workspaces.

Full history, original timestamps, and audit trail intact. Two-party approval. No other PM tool does this. Business and Enterprise.

30-day recycle bin.

Deleted tasks, projects, and expenses sit in the bin for 30 days. Restore with one click. Syncs across devices via the CRDT log.

How it works

Three steps. Five minutes. No migration.

Import from a spreadsheet or CSV export in minutes. Direct integrations with Jira, Asana, and ClickUp are on the roadmap.

01

Create your account

Set your password. Your encryption key is derived from it via PBKDF2, client-side only. It never leaves your device. Never reaches our servers.

Key derivation
PBKDF2(password, salt,
310000 iterations) → AES key
02

Connect your storage

Admins connect one shared workspace backend. Google Drive, Dropbox, OneDrive, S3, WebDAV, or a local folder. Team members connect automatically.

Google Drive: workspace storage
Team members auto-connect
03

Invite your team

Add members by email. They accept, set their password, and they're in. No IT setup. No VPN. No per-user storage configuration.

A
Alex admin
S
Sarah project manager
M
Marcus team member
The math is the marketing

Verified by crypto, not by policy.

Every other PMO says "we take security seriously" and means "we have a SOC 2 checkbox." Zidaan is different: the architecture makes it technically impossible for us to read your data, even if our servers are seized.

1
PBKDF2 key derivation
Your password derives the encryption key with 310,000 iterations of SHA-256. OWASP 2024 compliant. Keys live in memory only. Never touch our servers.
2
AES-256-GCM encryption
Every byte of your workspace data is authenticated-encrypted with a 12-byte random IV from the Web Crypto CSPRNG. Same standard used by banks, governments, and password managers.
3
CRDT conflict-free sync
Per-device operation logs with vector clocks. Sync merges changes from any device without conflicts, and requires no central server to coordinate. Your storage IS the sync layer.
OWASP 2024 crypto UAE PDPL-aware Saudi PDPL-aware PIPEDA-ready Rate-limited auth
encryption.js
// derive key from login password
const key = await crypto.subtle.deriveKey(
{ name: 'PBKDF2', salt, iterations: 310000,
hash: 'SHA-256' },
passwordKey, { name: 'AES-GCM', length: 256 }
);
// encrypt before leaving device
const iv = crypto.getRandomValues(new Uint8Array(12));
const ciphertext = await crypto.subtle.encrypt(
{ name: 'AES-GCM', iv }, key, plaintext
);
// write to your cloud: opaque blob
await drive.writeFile('zidaan-ops.bin', ciphertext);
// what we (the vendor) see: nothing.
Built for the teams who need it most

Privacy is a feature, not a footnote.

Healthcare & clinical

Patient project data never leaves your infrastructure. Full audit trail. Data residency by design. Store in your own hospital cloud, under your own compliance team's control.

Built by a founder who implemented EHR systems across 18 hospitals. We know what healthcare teams actually need.

Government & public sector

Data residency by design. Your projects are stored in your own cloud. We genuinely do not have access to them. Sovereignty is architectural, not a policy promise.

Aligned with UAE PDPL and Saudi PDPL data minimisation requirements. No project data ever reaches our servers.

Agencies & consultancies

Client data stays in client clouds. Project isolation by design. Each workspace connects to its own storage backend. Your client's data never mixes with another's.

The vendor literally cannot read your client's project data. That's not a promise. It's how the encryption works.
Pricing

Free for small teams. Fair for everyone else.

No per-seat penalties on lower tiers. No AI locked behind endless upsells. No surprise bills.

Free
$0 /forever

Always free. No card needed.

3 users · 2 projects
Kanban + List views
Local storage
3 AI requests/day
Start free
Starter
$9.99 /mo

or $99.99/yr · save 17%

5 users · 5 projects
+ Calendar · Budget
Google Drive storage
10 AI requests/day
Get started
Most popular
Pro
$24.99 /mo

or $249/yr · save 17%

10 users · unlimited projects
Most views incl. Gantt
+ Dropbox storage
20 AI requests/day
Cerebras + Gemini AI
Get started
Business
$59.99 /mo

or $599/yr · save 17%

25 users · unlimited
All storage backends
50 AI requests/day
All AI models
Audit logs + DPA
Get started
Enterprise: $249.99/mo or $2,499/yr
Unlimited users · Unlimited AI* · All storage backends incl. S3, WebDAV, SFTP · Available in USD, CAD, AED, SAR
Talk to us

* Unlimited AI subject to fair use policy. Details confirmed at Enterprise onboarding.

Prices shown in USD. Equivalent pricing available in CAD, AED, and SAR.

زيدان · كل مشروع. كل فريق. بياناتك.

Take back control
of your data.

Free for small teams. Fair for everyone else. Your data stays in your cloud. The vendor literally cannot read it.

No credit card · 5 min setup · UAE PDPL-aware · Saudi PDPL-aware · PIPEDA-ready