العربية Switch languageRequest a demo
Sovereign GRC platform

Governance, Risk & Compliance, in the clear.

The AI-first GRC platform for the Kingdom's most regulated organizations: every risk, control and obligation in one clear view, with intelligence that runs inside your own walls.

  • NCA · SAMA · PDPL pre-loaded
  • 100% on-premise AI
  • Arabic and English, RTL-first
Request a demo
From spreadsheets to one record

The work already exists.
It is just scattered across eight places.

Nobody fails an audit because they did not care. They fail because the evidence existed and could not be found in time.

  • Regulation
  • Requirement
  • Risk
  • Control
  • Evidence
  • Finding
  • Remediation
  • Assurance

3,161 controls ready32 frameworks pre-loaded1 record, every connection

One record. Governance, risk, compliance.

Six modules woven into that thread: a control maps to a framework, carries its evidence, drives a risk, raises a finding and rolls up to the board.

01Governance

Policies mapped to the controls they satisfy.

Versioning, committees, workflows and approvals; awareness and phishing simulation post live evidence.

Governance & PolicyHuman Risk02Risk

A living register your board can read.

3×3 to 5×5 methodologies, FAIR-style quantification, KRIs and scenarios; vendors auto-tiered with questionnaires.

Risk ManagementThird-Party Risk03Compliance

Evidence ready before the audit.

NCA, SAMA, PDPL, ISO and NIST libraries with AI cross-mapping, maturity assessments and the PDPL 72-hour breach clock.

Compliance & AuditIncident Command

Govern with
confidence.

AI-powered governance, risk & compliance platform.

Sovereign AI

Intelligence that never
leaves your walls.

Wathiq runs its AI on a model hosted inside your own infrastructure, CPU or GPU, on-premise or your private cloud. No prompt, no document, no regulated record is ever sent to an external API.

  • NLP control mapping across 500+ regulatory controls.
  • Explainable risk scoring: every score carries SHAP reasoning.
  • Evidence classification, auto-matched to the controls it proves.
  • Bilingual report generation: board-ready Arabic and English.
  • Cross-framework mapping: assess a control once, carry it to the others, with human confirmation.

AI runtime · local · 0 external calls

Model location
On-premise
External API calls
0
Data egress
None
Languages
AR · EN
Explainability
SHAP
Deployment
CPU / GPU

Explore the platform

The Wathiq executive dashboardThe Wathiq executive dashboard
Dashboards Executive, risk and compliance dashboards, with KPI and KRI widgets.
The Wathiq frameworks screen: 32 frameworks and 3,161 controlsThe Wathiq frameworks screen: 32 frameworks and 3,161 controls
Governance 32 frameworks and 3,161 controls, active for every workspace.
The Wathiq security incident command centreThe Wathiq security incident command centre
Risk Incidents, breaches and the PDPL 72-hour clock in one command centre.
The Wathiq compliance self-assessment screenThe Wathiq compliance self-assessment screen
Compliance Self-assessments against each framework, with maturity and evidence.
The Wathiq reports and analytics screenThe Wathiq reports and analytics screen
Reports & analytics Board-ready framework reports in Arabic or English, built from your live GRC data.
Clients

Organisations that trust Wathiq.

  • Tygo
  • SeaPaySeaPay
  • SiFi
  • National Travellers Security Center
  • The Lending HubThe Lending Hub
  • Embark
Private demonstration

See it in the clear.

Request a private demonstration and we will walk your team through Wathiq on your frameworks, in your language, on your infrastructure.

Request a demo