EHKAM
إحكامRoadmapBusiness+ Suite · Risk & compliance
Governance, risk and compliance — Saudi frameworks pre-loaded.
What EHKAM does
EHKAM ships with NCA ECC/CSCC, SAMA CSF, PDPL, ISO 27001 and NIST mapped on day one. A unified control library lets you map once and satisfy many frameworks; assessments collect evidence into Files, issues route through the Workflow Engine, and continuous monitoring is driven by Automation. Posture stays live and regulator-ready.
From start to connected outcome
Map
One control to many frameworks
Assess
Collect evidence into Files
Remediate
Issues via Workflow Engine
Monitor
Continuous, Automation-driven
Report
Live posture to BOSALAH
Inside EHKAM
Eight core modules, each consuming the platform — not rebuilding it.
Framework packs
NCA ECC/CSCC, SAMA CSF, PDPL, ISO 27001, NIST
Unified control library
Map a control once, satisfy many frameworks
Risk register
Scoring, appetite and treatment tracking
Assessments & evidence
Evidence collection wired to the File service
Issues & actions
Findings routed through the Workflow Engine
Policy lifecycle
Policy authoring, approval and attestations
Continuous monitoring
Automation-driven control monitoring
Immutable audit trail
Tamper-evident record of every action
The honest benchmark
Beaten ServiceNow GRC, MetricStream and Archer on day-one Saudi framework coverage and sovereign deployment.
The rest of the suite
Watheeq وثيق GA
Legal & contracts
Legal operations, Arabic-native — the architecture treats the Arabic document as the primary artifact, not a translation.
Learn moreMahamaTech مهامتك Roadmap
Projects & delivery
Delivery tied to strategy and risk — a task is never an island; it traces up to an OKR and sideways to a risk, automatically.
Learn moreBOSALAH بوصلة Roadmap
Strategy & board
The executive layer everything feeds — it writes almost nothing of its own; it is the read-model of the whole platform, which is its power.
Learn moreActa المجالس GA
Board & committee governance
Run boards and committees properly — committees, meetings, minutes and action items, tracked to closure.
Learn morePut EHKAM on your data
GRC with the frameworks pre-loaded — one control, many frameworks; evidence collected once satisfies every mapped regulation.