Question 1

What is Arcus?

Accepted Answer

Arcus LLC is an international AI management advisory, registered at the Qatar Financial Centre (QFC No. 04428) and specialising in AI governance and IT compliance. We audit how your business uses AI tools and identify the specific regulatory risks that apply to you - then show you exactly what to do about it.

Question 2

Is this legal advice?

Accepted Answer

No. Arcus provides strategic AI management advisory - not legal advice. For binding legal opinions or regulatory representation, we refer you to QFC-admitted law firms. Our service gives you the operational framework and risk map; your lawyer gives you the legal opinion where needed.

Question 3

Which Qatar laws does Arcus cover?

Accepted Answer

Every audit covers all applicable Qatar laws: PDPL (Law 13/2016), Cybercrime Law (Law 14/2014), QFC DPR 2021 (for QFC entities), NCSA Framework (Decree 20/2021), Telecom Law (34/2006), Labour Law (14/2004), E-Commerce Law (16/2010), IP Law (7/2021), Penal Code provisions, QCB AI Directives 2023 (financial sector), and the Consumer Protection Law (8/2008).

Question 4

What exactly do I receive?

Accepted Answer

Standard Audit (QAR 8,500): a PDF Risk Report + executive summary + 5 priority actions ranked by urgency + an Approved Tool List (which tools are safe to use and under what conditions). Advanced Audit (QAR 15,000): everything above + 16 operational documents (AI Usage Policy, DPA Checklist, Tool Register, Incident Response Plan and more) + a 6-month checkpoint call.

Question 5

How long does it take?

Accepted Answer

Your free AI Risk Score - a quick compliance check - comes back within 48 hours. The Standard Audit is delivered in 3 business days and the Advanced Audit in 5 business days. We do not keep you waiting weeks: you have urgent exposure, and you deserve a fast answer.

Question 6

Is my information confidential?

Accepted Answer

Completely. Arcus signs a mutual confidentiality agreement before every engagement. No audit finding is ever disclosed to any third party, including regulators. Arcus is an advisory firm - we have no obligation to report to authorities and we never do.

Question 7

What happens if a regulator reviews our AI governance?

Accepted Answer

The point of the audit is to let you show - not just say - that your AI use is governed. You receive a documented risk map, an approved-tool list and AI usage policies (and, on Advanced, the full set of controls and records), so if a regulator reviews your AI governance you can demonstrate a structured, good-faith approach instead of scrambling to assemble evidence. If you are already under active investigation, that goes beyond advisory work and we will refer you to a QFC-admitted law firm immediately.

Question 8

Do I need to change all my AI tools?

Accepted Answer

Not necessarily. The audit identifies tools that can continue with governance measures in place, tools that require contract changes (DPAs with vendors), and tools that create unacceptable risk. The goal is practical protection - not total operational disruption.

Question 9

What is the difference between Standard and Advanced?

Accepted Answer

Standard gives you the diagnosis - your risks identified, prioritised, and your top 5 actions. Advanced gives you the diagnosis plus the complete remediation toolkit: every document you need, ready to implement, with a 6-month check to ensure nothing has slipped.

Question 10

Is Arcus certified by a government authority?

Accepted Answer

Arcus is registered with the Qatar Financial Centre (QFC No. 04428). Arcus is not a Notified Body under the EU AI Act and does not certify regulatory compliance. Our service is framework-aligned management advisory - not certification.

Question 11

What is the price?

Accepted Answer

Standard Audit: QAR 8,500. Advanced Audit: QAR 15,000. Annual Refresh: QAR 4,000. To put this in perspective: the maximum fine under PDPL alone is QAR 5,000,000 - the Standard Audit costs 0.17% of that maximum exposure.

Question 12

Do you only serve companies in Qatar or the EU?

Accepted Answer

No - Arcus serves businesses worldwide. Alongside Qatar's regulatory requirements, we cover the EU's GDPR, EU AI Act and NIS2 obligations and align to comparable AI-governance frameworks in other jurisdictions. Wherever you operate, our methodology maps your AI use against the laws that apply to you - which is especially valuable for organisations with cross-border operations.

Every question we get, answered honestly.

Most businesses using AI are not compliant. Most never know until it's too late.