Hosted in Azure UAE North
Run your governance on one record, inside the UAE
Pritect runs data protection, cybersecurity, AI governance, risk, compliance and board reporting on one shared record, mapped to UAE PDPL, DIFC, ADGM and ADHICS. Agents draft the work, and a named person signs it off.
- Residency
- Azure UAE North, backups in UAE Central
- Platform
- Every governance domain on one shared record
- Sign-off
- Every draft waits for a named owner
CV screening assistant
Human resources · supplier hosted
Ready
AI governance
DraftAdded to the AI inventory and classified
Use case, risk class and accountable owner drafted for review
Data protection
DraftProcessing activity added to the register
Purpose, lawful basis and retention drafted against UAE PDPL
Cybersecurity
DraftSupplier security review opened
Control questions drawn from the controls you already run
Risk management
DraftRisk raised and scored
Bias and supplier dependency scored on your own risk matrix
Four suites updated from one record. Every draft now waits for Layla Haddad, Head of Governance, to review it.
01 · One platform
Every domain, one source of truth.
Each suite reads and writes the same record: the same suppliers, systems, processing activities and risks. A change in one place updates everything that depends on it, so there is nothing to reconcile.
Data protection
Records of processing, impact assessments, data subject requests and breach handling
Cybersecurity
Assets, controls, assessments and evidence, mapped to ADHICS and ISO/IEC 27001
AI governance
An inventory of AI systems with classification, impact assessment and an accountable owner
Enterprise risk
One risk register, scored on your own matrix, treated and escalated to the board
Incident Centre
Breaches, cyber incidents and whistleblower cases in one workspace with defined stages
Third-party governance
Supplier onboarding, due diligence, contracts and ongoing monitoring
Executive governance
Board packs and dashboards assembled from every domain, then approved
Governance
Policies drafted, reviewed by committee, published and attested
General compliance
Obligations, regulatory change and evidence across every framework you follow
Legal operations
Contracts, matters and obligations, with dawn-raid readiness
ESG
Sustainability disclosures and metrics on the same record as risk and suppliers
Training
Awareness courses, assignments and completion evidence for every team
02 · Agents at work
Agents draft the work. People decide.
Two moments from the platform, played back on demo data. The assessment companion drafts a DPIA answer from the records linked to it. The data protection advisor answers a question from the organisation's own register. In both, a person applies or escalates the result.
- Data protection
- DPIA
- Loyalty app analytics
Answer applied to the field
- Description
- Necessity
- Risks
- Measures
- Sign-off
Step 2 of 5 · Question 1 of 3
Why is this processing necessary and proportionate to its purpose?
Explain why a less intrusive approach would not achieve the purpose.
Linked records
- Processing activityPA-014
- SupplierSUP-031
- EntityENT-002
Companion
- Expert
- Business
- Explain
- Draft
- Review
- Context
- Smart Fill
- Support
- Read the processing activity
- Read the supplier's data processing terms
- Read your answers to step 1
Suggested answer
The purpose is to learn which loyalty offers members use, so that offers can be improved or retired. Collection is limited to pseudonymised member IDs and offer events, with no location or payment data.PA-014 Aggregate counts alone cannot show which offer variant led to a redemption, so event-level data is kept for 90 days and then aggregated. Northwind Analytics processes the events under its data processing terms. Where it processes them is not yet confirmed, so this is flagged for the risk step.SUP-031
Always review AI output before applying
- DPO Office
- AI Advisor
Answer ready
Can we start sending loyalty app events to our analytics supplier next month?
Not yet. Three things in your records stand in the way.
- The activity is still a draft and records no lawful basis for event-level analytics.PA-014
- Its DPIA is open at step 2 of 5 and has not been signed off.UAE PDPL Art. 21
- Your prior advice asks analytics suppliers to confirm where they process data before go-live, and Northwind Analytics has not confirmed it.ADV-022UAE PDPL Art. 22
Next step: finish the DPIA, ask Northwind Analytics where it processes the events, and ask Layla Haddad to complete the activity record.
Automated guidance, not formal advice. A DPO can escalate this answer to the advice register as a draft.
Sources read for this answer
- Processing activityLoyalty app analyticsDraft · owner Layla HaddadPA-014
- AssessmentDPIA, loyalty app analyticsStep 2 of 5 · not signed offDPIA-007
- RegulationUAE Personal Data Protection LawGeneral reference until the clauses are expert-verifiedUAE PDPL Art. 21UAE PDPL Art. 22
- Prior DPO adviceAnalytics suppliers outside the UAEProvided by Omar Saleh, DPOADV-022
03 · UAE coverage
Mapped to the rules you answer to.
The frameworks your regulators apply, each mapped to the Pritect suites that carry it, so evidence is collected once and reused. Open one to see how.
UAE PDPL
Federal Decree-Law No. 45 of 2021 on the protection of personal data
DIFC Data Protection Law
DIFC Law No. 5 of 2020, for organisations in the Dubai International Financial Centre
DIFC Regulation 10
Processing personal data through autonomous and semi-autonomous systems, including AI
ADGM Data Protection Regulations
ADGM Data Protection Regulations 2021, for Abu Dhabi Global Market entities
ADHICS
Abu Dhabi Healthcare Information and Cyber Security Standard
UAE health ICT law
Federal Law No. (2) of 2019 on information and communications technology in health
ISO/IEC 27001
Cross-mapped to the same controls, so one piece of evidence serves both
04 · Pricing
Every tier, priced in public.
Choose a platform tier, then add the domain suites you need. Enterprise included.
Free
AED 0/ month
1 user
Try the platform with one user and your own data.
Book a demoBasic
AED 799/ month
Up to 5 users
For small teams starting a programme, with inventories, reports and the Incident Centre.
Book a demoPro
Most chosenAED 2,399/ month
Up to 25 users
For growing programmes, adding training, organisation hierarchy, custom branding and enforced MFA.
Book a demoEnterprise
AED 5,199/ month
Up to 1,000 users
Single sign-on, API access and enterprise controls for large organisations.
Book a demoEnterprise Custom
FromAED 13,999/ month
Tailored to you
For requirements that change our cost to serve, such as dedicated infrastructure or bespoke terms.
Talk to us
Domain suites
Complete domain packages, the way most customers buy Pritect. List prices are struck through where a suite is discounted.
- Data Protection SuiteList price AED 1,849AED 1,199/ month
- Cybersecurity SuiteList price AED 2,999AED 1,949/ month
- AI Governance SuiteList price AED 1,849AED 1,199/ month
- Enterprise Risk SuiteList price AED 1,849AED 1,199/ month
- Governance SuiteList price AED 899AED 649/ month
- Compliance SuiteList price AED 899AED 649/ month
- C-Suite SuiteList price AED 1,199AED 849/ month
- Enterprise CompleteList price AED 7,999AED 5,199/ month
- Legal Operations SuiteList price AED 1,849AED 1,199/ month
- Training SuiteAED 899/ month
- ESG SuiteAED 399/ month
Published prices in UAE dirham (AED).
05 · Residency
Your data stays in the UAE.
The UAE edition is a separate deployment, not a region of a shared cluster.
- Hosting
- Microsoft Azure UAE North, Dubai
- Backups
- Encrypted every 30 minutes, replicated to UAE Central, Abu Dhabi
- Replication
- None outside the UAE, and none to the EU platform
- Sub-processors
- Published in full, with every planned service marked as planned
See your own programme on one record.
Book a demoDemo requests sent from this page are handled by Pritect's EU platform. Customer data on the UAE edition is hosted in the UAE: sign in and sign up at pritect.ae.