Legal / Compliance

Compliance & Governance.

OAT operates as a regulator-aligned sovereign AI infrastructure company. Our compliance and governance program is engineered for banking, government, and critical-infrastructure customers.

Regulators
SAMA / NCA / SDAIA
Standards
ISO 27001 / 42001
Audit
SOC 2 Type II
Jurisdiction
KSA
Frameworks

Regulator & standards alignment.

01

SAMA

Aligned with Saudi Central Bank cyber and IT governance frameworks for financial institutions.

Banking
02

NCA ECC

National Cybersecurity Authority Essential Cybersecurity Controls and Cloud Cybersecurity Controls.

NCACCC
03

SDAIA / PDPL

Saudi Data & AI Authority PDPL alignment and AI ethics framework conformance.

AI Ethics
04

ISO 27001

Information security management system controls mapped to OAT operations and sovereign cloud.

ISMS
05

ISO 42001

AI management system practices for responsible AI development, deployment, and oversight.

AI MS
06

SOC 2 Type II

Security, availability, and confidentiality controls audited annually for enterprise customers.

SOC 2
Governance

How OAT governs sovereign AI.

01

AI Governance Board

Cross-functional board overseeing model release, red-teaming outcomes, and high-risk deployments.

Board
02

Risk Management

Continuous risk register covering model, vendor, security, regulatory, and geopolitical exposure.

Risk
03

Model Lifecycle

Documented training data lineage, evaluation, alignment, and post-deployment monitoring.

Lifecycle
04

Responsible AI

Bias evaluation, Arabic cultural alignment, safety guardrails, and human-in-the-loop for sensitive use cases.

Responsible AI
Disclosure

Compliance & trust contact.

For audit requests, due diligence questionnaires, or regulator coordination, contact the OAT compliance office. Documentation is shared under NDA.

Email Compliance Office →+966 59 818 8005 · +966 53 038 8805