Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Take this survey on AI-driven code security, vulnerability management, and autonomous remediation to help shape industry research →

STAR Registry Listing for

RQM Books

RQM Books

RQM Books is a multi-tenant cloud accounting and ERP service (SaaS) for small and medium-sized businesses in the United Arab Emirates and the GCC.

Modules: general ledger, sales and purchase invoicing, UAE VAT returns and Corporate Tax, e-invoicing through an FTA-accredited provider, inventory and manufacturing, payroll and HR, fixed assets, budgets and approvals, document management, bank reconciliation, reporting with an AI assistant, and an auditor portal. RQM Books is FTA-registered Tax Accounting Software (TAS No. 40019192).

Architecture: web application and API on Amazon Web Services (us-east-1) with the production database on MongoDB Atlas; encrypted backups to versioned S3 storage; TLS 1.2+ for all traffic; data separated per company on every query; two-factor authentication for administrators and company users. A Windows desktop edition and an Android app connect to the same service.

This CAIQ v4.1 self-assessment covers the cloud service. Security policies: RQM Books Information Security Policy Set (approved November 2026). Trust page: https://rqmbooks.com/security

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about RQM Books
Listed Since: 11/04/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 5 hours ago, on November 04, 2026.