Bring your hardest compliance question
Not a scripted product tour. Tell us the framework you are being assessed against and the part of your programme that is not working, and we will show you how it would be handled — or tell you honestly if we are not the right fit.
- 1Around 45 minutesLonger if you want detail, shorter if you do not. We will not run over without asking.
- 2With someone who does this workNot a scripted call. The people who run GRC programmes in the Kingdom take these.
- 3Your frameworks, not a sample tenantWe would rather walk through the ECC, the SAMA CSF or whatever you actually carry.
- 4Security questions answered on the callHosting, data residency, access. Bring your security team if it saves a round trip.
What we will ask you, so nothing is a surprise
A demo is more useful when both sides have thought about it. These are the questions we open with.
- Which frameworks you carry, and who assesses you against them
- When your next assessment or submission is
- Where the programme runs today — spreadsheets, another platform, both
- Who operates the controls, and whether they sit outside compliance
- What broke last time, if anything did
- Where the platform is hosted and whether data leaves the Kingdom
- What our AI features do, and what happens to your data
- Which of your systems can be integrated, and what kind of integration
- What implementation actually involves, and who does the work
- What we are not good at — we will answer this one
If the honest answer to your situation is that you do not need a platform yet, we would rather say so on the call than six months into an implementation nobody needed.
Not ready for a call?
Reasonable. Most of what a first demo covers is already written down.
How the platform works
The shared control library, evidence, findings and reporting — the model everything else rests on.
Platform overview →Hosting and security
Where it runs and how it is secured. Usually the first question from a security team, so it is answered in writing.
Security and hosting →Your framework
The NCA ECC, the SAMA CSF, the PDPL, ISO and the rest — what each requires and how it is run.
NCA ECC →AI and integrations
What our AI does and does not do, and the questions worth asking any vendor about both.
AI and automation →If you would rather email than fill in a form, [email protected] reaches the same people.