Arduredu automates evidence collection, risk management, audit preparation, and incident tracking across SAMA, NCA-ECC, ISO 27001, and 14 other frameworks — deployed on your own server in 30 minutes.
See how Arduredu automates compliance evidence, manages risk, and prepares your organisation for SAMA and NCA audits — live on your own server.
Connect your systems. Evidence collected automatically. Score updates instantly.
app.arduredu.com — not a mockup. Every number below comes from a live scan of your connected systems.
Compliance teams spend weeks collecting screenshots, logs, and documents from 15–20 different systems before every SAMA or NCA assessment.
Risk, compliance, audit, policy, and incidents live in separate tools. No CISO can answer "Are we SAMA-compliant right now?" with confidence.
Organisations discover gaps during SAMA or NCA assessments — not before. By then it's too late to fix, and findings lead to sanctions.
Global GRC tools (ServiceNow, Archer, MetricStream) cost millions, take 6–12 months to deploy, and still don't cover SAMA or NCA natively.
Real-time compliance score per framework, updated continuously as your environment changes. See exactly which controls pass, fail, or need evidence — across all 19 frameworks simultaneously.
Real-timeUpload any policy document, audit report, or certificate — Arduredu's AI engine automatically maps it to the right controls with confidence scoring. Supports PDF, Word, images. No manual mapping needed.
AI-poweredOne-click gap analysis showing every failing control, regulatory reference, AI-generated step-by-step remediation guidance, and what evidence is needed. Board and auditor ready with one-click export.
Board-readyVisual 5×5 risk heat map, risk-to-control mapping with residual risk calculation, automated risk generation from compliance gaps, treatment workflow (Mitigate/Accept/Transfer/Avoid), and one-click board risk reports.
Heat MapFull DPIA workflow, Record of Processing Activities (RoPA), Data Subject Request management with 30-day SLA countdown, breach register with 72-hour GDPR/PDPL notification timer, and privacy AI assistant.
GDPR & PDPLAuto-score vendors based on data access, criticality and certifications. AI-powered vendor assessments covering governance, security, data protection and BC. Contract expiry alerts. DPA tracking. SAMA third-party clause compliance.
SAMA-13Full incident register with NCA 72-hour notification countdown timer. Automatic sync from ServiceNow and Jira. Log breach notifications to NCA, SAMA, and SDAIA with reference number tracking and audit trail.
NCA-ECC-5-1Generate a complete audit evidence package in seconds. Board-ready PDF reports, gap analysis, compliance scores, evidence register with chain of custody — ready to hand to any auditor or regulator instantly.
Audit-readyAll 244 SAMA Data Collection Questionnaire questions pre-loaded. Answers auto-populated from connected systems and evidence. Export to Excel in the exact SAMA submission format — weeks of work done in hours.
244 QuestionsFull policy lifecycle — Draft, Review, Approve, Publish, Retire. Version control saves every change. Staff acknowledgement tracking with completion rates. GRC Officer and CEO sign-off workflow built in.
Approval WorkflowManage internal and external audit programmes, findings, and corrective action plans (CAPs). Annual audit planning calendar, external auditor portal with read-only secure access, and full CAP tracking.
CAPs & CalendarOne-click board risk reports, CISO dashboards, weekly compliance summary emails, and executive PDF exports. Show your Board the risk posture and compliance score in one page — automatically generated.
C-Suite ReadyMandatory for all financial institutions supervised by SAMA. Full control mapping with automated evidence from 27+ connectors and SAMA DCQ auto-fill.
Saudi Arabia's national cybersecurity framework — mandatory for government entities, banks, and critical sectors. Includes NCA 72-hour incident notification tracking.
NCA framework for cloud service adoption in Saudi Arabia. Covers cloud governance, data classification, and shared responsibility model compliance.
NCA framework for data classification, data lifecycle management, and data protection requirements for Saudi organisations.
Saudi Arabia's Personal Data Protection Law. Covers consent, cross-border transfers, breach notification, and data subject rights.
EU data privacy law — fines up to €20M or 4% of global turnover. Essential for any organisation handling EU personal data or with EU operations.
UAE's national information assurance framework for government and critical infrastructure. Aligned with UAE Cybersecurity Council requirements.
Global standard for information security management. Opens enterprise procurement internationally. 57 controls mapped to Annex A requirements.
NIS2 (EU cybersecurity), DORA (EU financial resilience), SOC 2 (US enterprise), PCI-DSS v4, NIST CSF, HIPAA, CMMC, MAS-TRM, LGPD, APRA CPS234, Cyber Essentials.
Submit your download request. Arduredu reviews and provides a secure, time-limited download link within 24 hours.
Two packages: Application Server and AI Server. Extract and configure your environment file with your organisation details.
One command: ./install.sh — deploys all services, configures SSL, and starts the platform automatically.
Connect your existing security systems. Compliance scores appear immediately. Evidence collected automatically from day one.
To make regulatory compliance effortless for every organisation in the GCC and beyond — through automation, intelligence, and deep local regulatory knowledge.
To become the most trusted GRC platform in the GCC market — the platform that every CISO, Compliance Officer, and Board member relies on before every regulatory audit.
Transparency in everything we build. Accuracy in every compliance score. Respect for the complexity of regulatory work — and relentless innovation to make it simpler.
Global tools cost millions and don't cover SAMA or NCA natively. Arduredu does both — at a fraction of the cost.
| Feature | 🛡 Arduredu | OneTrust | ServiceNow GRC | RSA Archer |
|---|---|---|---|---|
| SAMA CSF Coverage | ✅ Native · 131 controls | ❌ Not available | ⚠️ Custom build needed | ❌ Not available |
| NCA-ECC Coverage | ✅ Native · 110 controls | ❌ Not available | ⚠️ Custom build needed | ❌ Not available |
| SDAIA PDPL Coverage | ✅ Native · 58 controls | ⚠️ Partial | ❌ Not available | ❌ Not available |
| Total Frameworks | ✅ 19 frameworks | ~15 frameworks | ~12 frameworks | ~10 frameworks |
| AI Evidence Extraction | ✅ Built-in AI engine | ⚠️ Limited | ❌ Manual only | ❌ Manual only |
| On-Premise Deployment | ✅ 30 minutes | ❌ Cloud only | ⚠️ Complex · months | ⚠️ Complex · months |
| Arabic RTL Interface | ✅ Full Arabic UI | ❌ English only | ❌ English only | ❌ English only |
| SAMA DCQ Auto-Fill | ✅ 244 questions automated | ❌ Not available | ❌ Not available | ❌ Not available |
| Privacy Centre | ✅ DPIA · RoPA · DSR · Breach | ✅ Strong | ⚠️ Basic | ⚠️ Basic |
| Time to First Score | ✅ 30 minutes | ⚠️ Weeks | ⚠️ 3-6 months | ⚠️ 6-12 months |
| Annual Price | ✅ From SAR 45,000 | $50K–$200K USD | $150K+ USD | $100K+ USD |
| GCC Market Focus | ✅ Built for GCC | ❌ US/EU focused | ❌ US/EU focused | ❌ US/EU focused |
Arduredu is the only platform with native SAMA, NCA-ECC, and SDAIA PDPL coverage — at 10× lower cost than global alternatives.
Book a Demo →Ready to see Arduredu in action? Book a live demo, request a pilot deployment, or ask us anything about SAMA, NCA-ECC, or GCC compliance. We respond within 24 hours.
Arduredu is an enterprise on-premise platform. All pricing is customised per organisation. Contact us for a tailored proposal.
Request Download Access →Most organisations can't answer that question honestly. Arduredu makes sure you always can — across SAMA, NCA-ECC, and every framework that matters in the GCC.
Book a Demo →