We use privacy-friendly, cookieless analytics to understand how this site is used and improve it - handled in line with Qatar's PDPPL and the GDPR. No personal profiles, no ad tracking. If you arrived through an Arcus partner's link, we remember their referral code for 90 days so they can be credited - Decline clears it. Privacy Policy
Standard tells you where the problem is. Advanced gives you the documented proof that you solved it - every policy, register and plan ready to implement.
Standard maps your exposure and gives you the tools to act. Advanced builds the complete governance framework and proves you solved it.
Standard
Know where you stand. Act today.
Delivered in 3 business days.
Risk Report · 5 Priority Actions · Approved Tool List.
You will know exactly where your team is exposed, what to fix first, and how to talk about your AI practices to any client or regulator.
→ Not subject to VAT, no hidden fees, follow-up included.
Advanced
From exposure to defensible governance.
Delivered in 5 business days.
Risk Report · 16 Operational Documents · 6-month checkpoint · full compliance toolkit.
A documented, auditable governance framework you can show to any client, regulator, or auditor - with confidence.
Everything in Standard, plus:
→ Not subject to VAT, no hidden fees, follow-up included.
QAR 5,000,000
Maximum PDPPL fine
0.00%
The Standard Audit, as a share of your maximum exposure
< 1 hour
with a QFC law firm - for less than that, you get the full audit
Already audited? Annual Refresh - QAR 4,000 keeps your governance current as the law evolves.
Most teams start with Standard to see their exposure, then move to Advanced for the full remediation toolkit.
| What you get | Standard | Advanced |
|---|---|---|
| AI Risk Score & executive summary | ||
| Risk Report | Concise | Comprehensive |
| Priority actions, ranked by urgency | 5 actions | Full register |
| Approved Tool List (what's safe, under what conditions) | ||
| All applicable Qatar laws assessed | ||
| Operational documents (policies, registers, plans) | 5 annexes | 16 documents |
| AI Usage Policy + Employee Responsibility Agreement | ||
| DPA / vendor risk checklist for every AI tool | ||
| Incident Response Plan | ||
| Client-facing AI Data Statement | ||
| 6-month checkpoint call | ||
| Delivery time | 3 business days | 5 business days |
| Price | QAR 8,000 | QAR 15,000 |
A structured, repeatable methodology - not ad-hoc consulting. You always know exactly what happens next.
Step 1 of 4
10 minutes
No technical knowledge required. You describe the AI tools your team uses, how data is handled, and your main priorities. Everything we need to map your exposure accurately.
Step 2 of 4
Behind the scenes · 48 hours
Your questionnaire is mapped against every regulation that applies to your business - PDPPL, Cybercrime Law, QFC DPR, NCSA Framework, QCB AI Directives, Consumer Protection Law, and any cross-border frameworks including GDPR where relevant.
Every AI tool identified. Every data flow examined. Every gap documented with the specific article, the specific penalty, and the specific action required.
Your free Risk Report includes:
Delivered within 48 hours.
Step 3 of 4
Free · Your strategy session
Your Risk Report is not a document we send and disappear. It is the starting point of a conversation.
In a 30-minute call, we walk through your findings together - what the exposure means for your specific business, your clients, and your team. We answer your questions, challenge your assumptions, and give you a clear picture of what happens next.
No pressure. No sales script - a frank conversation between two people who now understand your situation.
Step 4 of 4
Your call
Act on the report yourself using the findings as your roadmap. Or move to the Standard or Advanced audit - a complete governance framework, operational documents, and structured checkpoints over 3 or 6 months.
The decision is yours. The exposure is not.
Every Arcus engagement plots your risks by likelihood and impact - so leadership sees what to fix first, not just what’s wrong. This is a live sample.
Click any highlighted point to explore.
Likelihood
88%
Impact
86%
Recommended action
Deploy an AI usage policy and an approved-tool list; block or wrap high-risk inputs.
Illustrative data shown for demonstration. Your real map is built from your environment, then re-scored after mitigation to show progress.
How we handle your data
Everything you share is strictly confidential and used to deliver your audit and run our engagement with you, aligned with Qatar's PDPPL and the GDPR. If an Arcus partner introduced you, they only see that an enquiry arrived, how far it got and, if you engage us, which audit you chose - never your name or details. Read our Privacy Policy.
QAR 4,000 / year
Available to existing Arcus clients only
An Arcus audit gives you a documented, defensible governance position on the day you receive it. But AI governance is not a one-time exercise.
Laws get updated. New enforcement actions change what regulators expect. Your team adopts new AI tools. Vendors change their terms. Employees come and go. Every one of these events can quietly invalidate a document you thought was current.
The Annual Governance Refresh ensures your framework stays accurate, current, and defensible - without starting from scratch.
In 12 months, the following typically changes for any business using AI:
One structured review session with your Arcus adviser, followed by updated deliverables:
Not a full re-audit
The Refresh is not a full re-audit. If your business has changed significantly - new jurisdiction, major new data flows, sector change - a new Standard or Advanced audit may be more appropriate. Your adviser will tell you honestly which applies.
Why QAR 4,000
Your initial audit cost QAR 8,000 or QAR 15,000. The Refresh costs QAR 4,000 - half the Standard price - because the foundation is already built. We are updating, not starting over.
To put it in perspective: one NDPO enforcement action starts at QAR 1,000,000. The Refresh costs 0.4% of that minimum fine. It is the cheapest defensibility available to an existing client.
When to book it
Book your Annual Refresh 11-12 months after your audit delivery date. Your Arcus adviser will remind you at your final checkpoint.
If a significant regulatory update occurs before the 12-month mark - a new law, a major enforcement action in your jurisdiction - your adviser will contact you directly. Some updates require immediate attention. You will not find out from a press release.
Available to existing Arcus clients only. Not subject to VAT. No hidden fees.
Free - receive your personalised risk feedback in under 48 hours. The cost of finding out later: everything.
Not sure which you need?