ServicesScorecardResourcesAboutContact
AR

KSA AI Governance Advisory

AI Governance. Mapped to Saudi Law.

Saudi organizations deploying AI face active enforcement under PDPL, NCA ECC-2:2024, and SDAIA mandates. Profectus delivers a structured 21-day governance engagement with 12 bilingual artifacts — every finding sourced, every clause cited.

Take the Free ScorecardView the Service
0
PDPL Enforcement Decisions
SAR 0M
Maximum Fine Per Violation
0
Days to Delivery
0
Bilingual Artifacts

PDPL · NCA ECC-2:2024 · SDAIA AI Ethics v2.0 · ISO/IEC 42001:2023 · NIST AI RMF · EU AI Act

The Service

GenAI Policy Pack

حزمة سياسة الذكاء الاصطناعي التوليدي

A fixed-scope AI governance engagement for Saudi mid-market organizations. 21 days. 12 audit-ready artifacts covering PDPL, NCA ECC-2:2024, and SDAIA. Every finding maps to a specific clause.

21 Days

Structured delivery from intake to final report. No open-ended retainers.

12 Artifacts

Policy documents, gap assessment, board memo, remediation plan — all bilingual EN+AR.

Clause-Level

Every finding maps to a PDPL article, NCA control, or SDAIA principle. Audit-ready from day one.

See the Full Engagement

Regulatory Coverage

Every Framework, Every Clause

PDPL
NCA ECC-2:2024
SDAIA AI Ethics v2.0
ISO/IEC 42001:2023
NIST AI RMF
EU AI Act

In January 2026, SDAIA confirmed 48 PDPL enforcement decisions issued over the prior year and named four recurring violation types. Administrative fines under the PDPL reach SAR 5,000,000, and double for repeat violations.

Know Your Exposure in 10 Minutes

Answer 30 questions across 5 governance dimensions. Receive a scored report mapping your exposure across PDPL, NCA ECC-2:2024, and SDAIA — free.

Start the Free Scorecard

ابدأ التقييم المجاني

Built for Saudi Operations Leaders

Banking

SAMA-regulated institutions deploying AI in credit, fraud, and operations.

Healthcare

MOH-licensed providers using AI in clinical decision and patient data.

Retail

Consumer-facing organizations processing personal data at scale.

Government Contractors

Private entities handling government data under NCA requirements.

Family Business

Mid-market groups preparing for Vision 2030 digital mandates.