Plain answers to the questions operators actually ask

A Master is the top of your tree — typically the licensed operator. It owns a sealed tenant: its own catalogues, packages, finance ledgers, branding and user hierarchy. Nothing inside one Master's tenant is ever visible to another Master.

Resellers sit under a Master and Agents sit under Resellers (or directly under the Master). Each level operates within permission ceilings granted from above — nobody can hand out more access than they hold — and siblings at the same level are completely walled off from one another.

Pilgrim identity data (passport, personal details) is shared through a stable pilgrim ID so a returning pilgrim is never duplicated — while commercial data such as prices, payments and notes remains private to the business that owns the booking.

Yes. Each Master operates in its own currency, and every booking component snapshots its amounts in that denomination, so ledgers never drift with exchange rates.

Not unless you want them to. White-label branding is included on Maqam and Haram Enterprise, so your logo, colours and business identity replace the UmrahCore name across the workspace your agents and clients see. Ihram and Tawaf run on shared UmrahCore branding.

Yes. Branding is per-tenant-tier, so every Reseller can present the platform as its own independent business while inheriting the Master's operational backbone.

Documents live in a vault served only through an authenticated proxy — no public URLs exist. Access is governed by hard tenant isolation and cascading permission ceilings, and every consequential action lands in an append-only audit trail.

Username-based identity routing, two-factor authentication via email one-time codes or authenticator-app TOTP, Argon2id/bcrypt password hashing with 90-day rotation, brute-force lockout after five failed attempts in ten minutes, and a contested-login handshake when a session is already active.

On provider-independent object storage — S3-compatible or Cloudflare R2 — so your documents are never locked to a single vendor. Enterprise agreements can bring your own storage.

Yes. Your tenant is yours, up to and including a per-Master factory reset. Data ownership and exit are part of every commercial conversation, not an afterthought.

When a compliance gap appears — a missing mahram link, an expiring passport, an incomplete document — the platform surfaces a clear warning and ranks it on the needs-attention worklist, but leaves the decision with your team. Software should inform judgement, not replace it.

Every visa moves through a thirteen-state processing ladder, and visa copies are enforced server-side before a booking can close. Mahram NOC linkage is built into the same flow.

Yes — hotel-anchored itineraries, a 22-city Saudi hotel directory, structured transport routes with vehicle capacity, meal boards with dietary and health tracking (including meningitis ACWY), all native to the data model.

Ihram, Tawaf and Maqam are a one-time setup fee plus a flat monthly rate — no per-booking fees. Haram Enterprise replaces the subscription with a single lifetime licence sized to your organisation. See the Pricing page for the full breakdown, then talk to sales for specifics.

Most operators are live within their setup window: tenant branding, catalogues, the Reseller/Agent tree, and bulk import of existing travelers via passport OCR. Maqam and Haram Enterprise include a named success manager for onboarding.

That is the most common starting point. Bulk import plus passport OCR converts existing records into proper traveler profiles, and stable pilgrim IDs prevent duplicates from ever creeping back in.