Saudi regulatory catalog
Obligations arrive pre-mapped for NCA ECC-2, PDPL, CMA Corporate Governance and the Companies Law, alongside ISO 27001 and NIST CSF — applied per legal entity by a scope gate.
Governance · Available now
Compliance you can prove.
Assure maps Saudi regulatory obligations to the controls that satisfy them, then drives the evidence end to end — generated on schedule, reviewed by a second pair of eyes, and locked so it holds up to an audit. Governance, risk and compliance, built for Saudi regulation.
01 · Pricing
Pricing — talk to sales.
Assure is self-hosted and priced to your estate — the legal entities you run, the frameworks in scope and the people who use it. Tell us your scope and we'll put a figure to it.
02 · Capabilities
Governance, risk and compliance in one system.
Every obligation mapped to a control, every control backed by evidence — the whole GRC cycle, tracked and enforced.
Recurring obligation engine
Compliance tasks are generated automatically on both the Hijri and Gregorian calendars, so nothing lapses between reviews.
Maker-checker workflow
Submit, review, approve: every piece of evidence moves through a segregation of duties the database enforces, not just the screen.
Immutable evidence vault
Every uploaded file is content-hashed on arrival, so it can't be altered or deleted after the fact.
Controls & crosswalk
Rate each control's implementation and maturity, and map one control to several frameworks so the same evidence is reused, not re-collected.
Risk register
Score risks inherent and residual, attach treatment plans, and time-box risk acceptance so it auto-reopens when it expires.
Cyber posture
Outside-in vulnerability scans and inside-out cloud posture across AWS, Azure and GCP, with findings auto-assigned remediation SLAs by severity.
PDPL privacy toolkit
Handle data-subject requests (DSAR) and keep Records of Processing Activities (RoPA), with DPIA flags where processing needs a closer look.
Vendor risk (TPRM)
A third-party register with risk tiers, data-shared flags and a reassessment cadence, so vendor risk stays current.
Incident management
Track severity and timeline, with a regulatory-notification deadline clock running from the moment an incident is logged.
Attestations
Run sign-off campaigns that collect signatures and issue certificates when each attestation completes.
Audit-ready & secure
An append-only audit trail, CSV and PDF reports, OIDC single sign-on, API tokens and per-tenant isolation with row-level security — in Arabic and English.
03 · Built for
For the people who answer to the regulator.
Compliance & GRC leads
Own the obligation calendar and the control library, and see at a glance what's covered, what's due and what's overdue.
Risk owners
Score and treat risk in one register, with residual ratings and acceptances that don't quietly expire.
Security & IT teams
Turn posture findings and incidents into tracked work with deadlines, mapped straight to the controls they affect.
Internal audit
Pull the evidence, the crosswalk and the append-only trail you need to test controls and sign off with confidence.
04 · Your region
Built for Saudi regulation.
Assure's obligation catalog is mapped to the Kingdom's regulators and law, so the controls, the calendar and the evidence all speak to KSA compliance out of the box.
Saudi regulators, pre-mapped
Obligations for NCA ECC-2, PDPL, CMA Corporate Governance and the Companies Law arrive already mapped to controls, ready to apply per legal entity.
Hijri & Gregorian calendars
The obligation engine runs on both calendars, so recurring duties fall due on the dates your regulators actually use.
Arabic & English
The platform works in Arabic and English throughout, so compliance teams and auditors read the same record in their own language.
Self-hosted in the Kingdom
Assure is self-hosted, so regulated data can stay inside KSA and inside the infrastructure you already trust.
05 · The FulcrumGrid family
Explore the rest of the grid.
Assure is one of several FulcrumGrid apps, each built to the same standard. Explore the others built for your operations.
HR Suite →
People operations
Command Center →
Operations dashboard
Collection →
Receivables & payments
TMS →
Logistics & finance
Close →
IFRS period-end
More apps →
Inventory, CRM & more
Get started
Prove it,
don't just claim it.
See how Assure turns Saudi regulatory obligations into controls, evidence and an audit trail that holds up.