Around the assessments
Seven services that extend an assessment. All on quotation, with the scope agreed in writing before any work begins.
Regulatory and tender files.
The documentation behind a formal process. In the Kingdom: SFDA files for medical software, SAMA sandbox requirements, SDAIA alignment, answers to government tenders on hosting and data classification. In the European Union: the technical documentation of Annex IV, the risk management file, and the records a notified body, a public buyer or an investor asks to see.
Governance design.
A governance model and accountability map, policies, a pre-deployment validation process, reporting for the board.
Technical design support.
Guidance for engineers on building the missing controls into the system. Reviewed on paper: no implementation, no testing.
Contracts and procurement.
AI-specific clauses on data use, retention, recording, consent and liability for outputs; answers to buyer and investor questionnaires with the evidence behind them; review of supplier and deployment agreements. For matters of Saudi law we work alongside locally licensed counsel.
Data rights and provenance.
Where the data behind your AI came from, and what you may do with it. We trace each source back to the licence, consent or contract it rests on, and show what it allows and what it does not for the way you build, sell and share your AI. Where something has to be checked on your data, we define the check and it runs in your environment, either by your team with us watching or by us in a session you attend. Sensitive evidence never leaves your environment. For an opinion under Saudi law, we work alongside locally licensed counsel.
SDAIA ethics preparation.
Getting ready for SDAIA's AI ethics self-assessment, which is voluntary and is filed on the National Data Governance Platform. We read each question of the self-assessment against your system, show where the answer is thin or missing, and build with you the file of evidence that would support each answer. You file it yourself, from your own account: SDAIA alone decides whether to award a badge, and we make no promise about the outcome. This is a separate engagement from an assessment. Where we have assessed a system, or are asked to, we tell you in writing before taking on its preparation.
Ongoing support (monthly).
A watch limited to the texts that bind you, review before release, re-assessment when AI changes inside a system you already run, a named contact.
Start with a conversation.
Tell us about your AI. We reply with a scope and next steps within two business days.
Request an assessment