AI policy
What staff and systems may and may not do.
AI GOVERNANCE & COMPLIANCE
Use AI with confidence, and prove it.
Clear rules, owners and checks around every AI system you use or build.
WHY IT MATTERS
AI is already inside your company, in staff chats, vendor tools and new projects. Boards, regulators and customers will ask who controls it. AZHA puts clear rules, owners and checks around every AI system you use or build, so you can show that your AI is safe, controlled and compliant.
Sound familiar?
- Staff use AI without rules, and company data goes into public tools.
- Nobody can say which AI systems are in use or who owns them.
- Boards and customers ask how AI is controlled, and there is no clear answer.
- New AI projects start without a risk check.
WHAT'S INCLUDED
What's included
Inventory and risk
Every AI system listed with its owner, data and risk.
Compliance mapping
Aligned with Saudi PDPL and SDAIA AI ethics principles.
ISO/IEC 42001 readiness
Gap assessment for the AI management system standard.
Human approval and audit trails
Approval steps and records on sensitive AI decisions.
What we measure: systems registered, risks assessed and staff briefed.
ONE SERVICE, TWO SIZES
Two ways to govern
For growing businesses
- Package
- AI Policy Pack
- Included
- Usage policy, staff guidelines and a vendor checklist
- Price
- Fixed scope and price
For enterprises
- Package
- Full governance programme
- Included
- AI inventory, risk assessment, compliance mapping and an AI committee
- Standard
- ISO/IEC 42001 readiness
- Price
- Scoped per organisation
HOW IT WORKS
From first call to results
- 1
Assess
How AI is used today: tools, projects, data and owners.
- 2
Set the rules
Policy, owners and approval steps that fit how you work.
- 3
Register and assess
Every AI system listed and rated for risk.
- 4
Brief and embed
Staff briefings, an AI committee and regular checks.
WHAT YOU WALK AWAY WITH
The result
- A clear AI policy your staff understand.
- Every AI system listed with an owner and a risk rating.
- Compliance mapped to PDPL and SDAIA guidance.
- Evidence you can show boards, regulators and customers.
FAQS
Questions we hear
Do we need this if staff only use ChatGPT?
Yes. Staff use of public AI tools is a common way company data leaves the business; a usage policy and staff guidelines cover it.
Which rules do you align with?
Saudi PDPL and SDAIA AI ethics principles, and the ISO/IEC 42001 standard; local rules in other markets on request.
Can you certify us for ISO/IEC 42001?
We prepare you with a gap assessment and help close the gaps; certification itself is issued by an accredited body.
Will governance slow AI down?
No. Clear rules and approval steps let teams use AI sooner, because they know what is allowed.
Know who controls your AI.
Start with a governance assessment and see where you stand.