GCC Compliance & AI Governance Platform

Governance assurance, built for the GCC.

Compliancy Engine scores organisations against GCC regulatory frameworks, international standards, and AI governance obligations using a 10-layer deterministic model. Not an AI chatbot. Not a consultant's spreadsheet. A scored compliance posture you can show a board, a buyer, or a regulator.

Covering ADNOC, Aramco, QatarEnergy prequalification, the UAE AI Charter and DIFC AI Regulation, the EU AI Act, UAE PDPL, GDPR, and ISO/IEC 42001 — in one scored assessment.

Enterprise platform — available by consultation
Request a Consultation →See what we cover
Who we serve

Built for the organisations that face GCC regulatory pressure first.

Energy & EPC

Oil & gas operators, EPC and EPCM contractors, engineering consultancies, and field-services vendors competing for tier-1 work across the GCC.

Government & State-Owned

UAE federal entities, Abu Dhabi and Dubai government bodies, state-owned enterprises, and contractors bidding into UAE Tejouri, ADBC, and emirate procurement portals.

Financial Services

Banks, insurers, DIFC and ADGM-licensed firms preparing for CBUAE AI guidance, AI Officer (ASO) appointments, PDPL compliance, and cross-border data obligations.

International Vendors

Multinationals and SaaS / cloud providers whose AI systems reach UAE residents, DIFC entities, or EU persons — and whose contracts now require demonstrable AI governance maturity.

Coverage

One platform. Every framework your sector actually faces.

Categorised by regulatory authority and scope. Drill-down by framework is part of the authenticated assessment, not the public site.

AI Governance
UAE AI Charter · DIFC AI Regulation 10 · EU AI Act · AI website audit · OECD AI Principles
Including DIFC ASO requirements and EU AI Act extraterritorial scope.
GCC Regulatory
ADNOC SSEMS · Aramco OIMS · QatarEnergy HSE · OSHAD-SF · UAE TDRA · CBUAE AI Guidance
The mandatory regulatory surface for energy and critical infrastructure.
ADNOC Prequalification
ADNOC CPS · ADNOC ICV · ADNOC AVL · ADNOC HCMS · ADNOC Marine · SSEMS
The full ADNOC contractor and vendor approval pathway.
Aramco & QatarEnergy
Aramco CSMS · Aramco HASP · Aramco IMQ · Aramco IKTVA · OIMS · QatarEnergy HSE-MS
Full Saudi Aramco prequalification plus QatarEnergy contractor compliance.
Data Protection & Privacy
UAE Federal PDPL · DIFC DP Law 2020 · ADGM DP Regulations · Dubai Data Law · Saudi NDMO · Qatar & Bahrain PDPL · GDPR mapping
Six GCC data protection regimes assessed in one scored assessment.
International Standards
ISO/IEC 42001 (AI Management) · ISO/IEC 27001 · ISO 31000 · ISO 9001 / 14001 / 45001 · ISO 19443 Nuclear · IEC 61511 Functional Safety · NIST AI RMF
Mapped to GCC sector requirements where they apply.
What this is for

If any of these sound like you, this is the right conversation.

01

Qualify for ADNOC, Aramco, or QatarEnergy contract awards by closing the specific prequalification gaps that block your tender.

02

Demonstrate AI governance maturity to a UAE regulator, DIFC supervisor, or enterprise customer before they audit you.

03

Show a board or finance committee a defensible, scored picture of your AI and compliance posture — not a consultant's opinion.

04

Map a single set of controls across multiple frameworks (PDPL + GDPR, ISO 45001 + ADNOC SSEMS, EU AI Act + UAE Charter) and stop paying for the same work twice.

05

Prepare for an ISO 42001 (AI Management) certification audit with controls evidenced and gaps quantified before the auditor arrives.

06

Move from a one-time consulting engagement to a continuously scored, auditable compliance posture that updates when regulations change.

Built by a practitioner

20 years of EPC delivery across three continents.

Compliancy Engine was built by Brahim Aabbou — an EPC and critical infrastructure practitioner who has spent 20 years delivering oil & gas, energy, and industrial projects across Europe, MENA, the GCC, Latin America, and Asia. Not a consultant who learned compliance from a slide deck. A senior auditor and project lead who lived the regulatory surface that the platform now scores.

Quality & IMS
ISO 9001 / 14001 / 45001 Lead Auditor
Nuclear
ISO 19443 Nuclear Lead Auditor
EU Standards
BENOR & EU Standards — Technical Auditor (EU Government)
Project Management
PMO Certified
Quality Engineering
Six Sigma Black Belt
Safety (HSSE)
NEBOSH IGC & NEBOSH Oil & Gas
Start a Conversation

Tell us what you are preparing for. We will tell you what is in scope, how long it takes, and what it costs.

Initial conversations are by direct email. Click below to open a structured enquiry — we'll respond within two working days with a scoped proposal.

Request a Consultation →

Direct enquiries: info@notjust4.ai