ServicesScorecardResourcesAboutContact
AR

Our Approach

Governance Before Guidance

Profectus is a KSA AI governance advisory built for the enforcement era. Not transformation consulting. Not generic compliance templates. Every engagement sourced to the clause.

Our Principles

How We Work

Data-Governance-First

AI compliance begins with knowing what data you hold, where it goes, who can access it, and under what legal basis. The model is downstream of the data.

Clause-Level Precision

Every finding in every engagement cites a specific article, control, or principle. PDPL Art. 29. NCA ECC-2 Control 2-13-2. No unsourced claims.

Arabic-First Delivery

Formal deliverables are produced in Modern Standard Arabic. Board-ready, court-ready, regulator-ready from day one.

Coverage

Regulatory Scope

Framework
Jurisdiction
Key Articles Covered
PDPL
Saudi Arabia
Arts. 1–43 including Implementing Regulations
NCA ECC-2:2024
Saudi Arabia
108 controls across 5 domains
SDAIA AI Ethics v2.0
Saudi Arabia
7 principles
ISO/IEC 42001:2023
International
Clauses 4–10 + Annex A
NIST AI RMF
International
GOVERN · MAP · MEASURE · MANAGE
EU AI Act
EU (reference)
Risk classification + Art. 9, 10, 13