Compliance
Know where you stand on every regulation.
Regulations split into clauses, mapped to your controls, scored with evidence, so you see the gaps before the regulator does.
Request a demo →
SAMA Cyber Security Framework
DomainsEvidenceMaturity
DOMAINMATURITYEVIDENCE
Governance3.518 / 20
Defence3.122 / 30
Resilience2.46 / 14
Third parties2.99 / 12
✦ AgentResilience has the gaps8 controls have no evidence yet. Owners were asked today.
What changes
Less chasing. More judgement.
01
Every clause, mapped
79 regulations split into clauses and mapped to your controls.
02
Evidence per control
Requested from owners, reviewed, versioned.
03
Maturity you can defend
Scored on a 0 to 5 scale against fixed criteria.
Features
Compliance that maps once and stays current
SAMA CSF 3.3.5
Identity and access management
DetailsMappingsEvidence
CONTROLCONFIDENCE
Access reviewsHIGHADD +
Privileged accessHIGHADD +
✦ Agent2 controls suggestedEach shows the clause wording it answers. Add or skip.
AcceptReview
Use cases
Everything compliance needs, in one place.
Regulation library79 regulations from 30 authorities, by clause.
Control universeClauses grouped into activities and owners.
Compliance matrixEach regulation against your controls.
Cyber maturitySAMA CSF and NCA ECC scored 0 to 5.
Evidence collectionRequests, uploads and reviews per control.
Gap trackingGaps become actions with owners and dates.
Vendor and auditor sharingShare evidence securely with assessors.
Questions
Asked by compliance teams.
Which regulations are included?
79 laws, regulations and frameworks from 30 authorities, including SAMA, NCA, SDAIA, CMA and ZATCA.
Can we add our internal policies?
Yes. Your policies and frameworks sit in the same universe as the regulations.
How is maturity scored?
Against fixed criteria per level, so two assessors reach the same score.
On the same record
Internal AuditRisk-based plans, work papers and reports. Drafted by agents, signed by your team.→GovernancePolicies, approvals and committee packs in one controlled library.→RiskEvery risk against appetite, with the controls and evidence behind it.→BCMCritical processes, vendors and continuity plans, tested and current.→
Request a demo
See it run on your scope.
Bring a real engagement or your annual plan. Thirty minutes on your material, and a reply within one working day.