EHKAM
إحكامRoadmapBusiness+ Suite · Risk & compliance
Governance, risk and compliance — Saudi frameworks pre-loaded.
What EHKAM does for you
EHKAM ships with NCA ECC/CSCC, SAMA CSF, PDPL, ISO 27001 and NIST mapped on day one. A unified control library lets you map once and satisfy many frameworks; assessments collect evidence into Files, issues route through the Workflow Engine, and continuous monitoring is driven by Automation. Posture stays live and regulator-ready.
SaaS, on-premise, or fully air-gapped
The same product with no feature trade-offs — run it in our sovereign cloud, inside your own data centre, or in a disconnected classified environment.
Your data stays in the Kingdom
Built KSA-first with Arabic as a first-class language and one audit trail, aligned to the frameworks your regulators already expect.
From start to connected outcome
Map
One control to many frameworks
Assess
Collect evidence into Files
Remediate
Issues via Workflow Engine
Monitor
Continuous, Automation-driven
Report
Live posture to BOSALAH
Inside EHKAM
Everything your teams work in every day, in one place — configured to your process and ready from day one.
Framework packs
NCA ECC/CSCC, SAMA CSF, PDPL, ISO 27001, NIST
Unified control library
Map a control once, satisfy many frameworks
Risk register
Scoring, appetite and treatment tracking
Assessments & evidence
Evidence collection wired to the File service
Issues & actions
Findings routed through the Workflow Engine
Policy lifecycle
Policy authoring, approval and attestations
Continuous monitoring
Automation-driven control monitoring
Immutable audit trail
Tamper-evident record of every action
The honest benchmark
Beaten ServiceNow GRC, MetricStream and Archer on day-one Saudi framework coverage and sovereign deployment.
The rest of the suite
WatheeqTech وثيقتك GA
Legal & contracts
Legal operations, Arabic-native — the architecture treats the Arabic document as the primary artifact, not a translation.
Learn moreMahamaTech مهامتك Roadmap
Projects & delivery
Delivery tied to strategy and risk — a task is never an island; it traces up to an OKR and sideways to a risk, automatically.
Learn moreBOSALAH بوصلة Roadmap
Strategy & board
The executive layer everything feeds — it writes almost nothing of its own; it is the read-model of the whole platform, which is its power.
Learn moreActa المجالس GA
Board & committee governance
Run boards and committees properly — committees, meetings, minutes and action items, tracked to closure.
Learn moreSee EHKAM on your own data
GRC with the frameworks pre-loaded — one control, many frameworks; evidence collected once satisfies every mapped regulation.