Services & Pricing

    Two audits. One outcome: you know exactly where you stand.

    Standard tells you where the problem is. Advanced gives you the documented proof that you solved it - every policy, register and plan ready to implement.

    Services & Pricing

    Two audits. Both priced at a fraction of a single fine.

    Standard tells you where the problem is. Advanced gives you the documented proof that you solved it.

    Standard

    Standard Audit

    Know where you stand. Act today.

    QAR 8,500≈ EUR 2,150

    Risk Report · 5 Priority Actions · Approved Tool List · delivered in 3 business days.

    You will know exactly where your team is exposed, what to fix first, and how to talk about your AI practices to any client or regulator.

    • A concise, decision-focused executive risk report, written for business leaders
    • Visual AI risk heat map
    • Key risk identification across legal, financial, and reputational dimensions
    • Immediate action checklist with justification for each item
    • Escalation recommendations
    • Monthly progress checkpoints for 3 months

    → Not subject to VAT, no hidden fees, follow-up included.

    Recommended

    Advanced

    Advanced Audit

    From exposure to defensible governance.

    QAR 15,000≈ EUR 3,800

    Risk Report · 16 Operational Documents · 6-month checkpoint · full compliance toolkit.

    A documented, auditable governance framework you can show to any client, regulator, or auditor - with confidence.

    Everything in Standard, plus:

    • Arcus Risk Mapping Framework - full architecture of your AI risk landscape
    • Structured risk register with severity, impact, and assigned ownership
    • Control gap analysis - exactly what is missing and why it matters
    • Three AI misuse scenarios with financial, legal, and reputational impact analysis
    • Employee AI Responsibility Agreement - signed by every team member
    • Data Handling Guidelines distributed to your full team
    • 6-month implementation roadmap
    • Monthly progress checkpoints for 6 months
    • Client-Facing AI Data Statement - ready to send to your clients
    • Vendor Risk Assessment (DPA gap check) for every AI tool your team uses
    • 10 additional operational documents covering every governance dimension

    → Not subject to VAT, no hidden fees, follow-up included.

    QAR 5,000,000

    Maximum PDPL fine

    0.00%

    The Standard Audit, as a share of your maximum exposure

    < 1 hour

    with a QFC law firm - for less than that, you get the full audit

    You are here
    QAR 8,500-15,000 · your auditQAR 5,000,000 · maximum regulatory fine

    Already audited? Annual Refresh - QAR 4,000 keeps your governance current as the law evolves.

    Compare

    Standard vs Advanced, line by line.

    Most teams start with Standard to see their exposure, then move to Advanced for the full remediation toolkit.

    What you getStandardAdvanced
    AI Risk Score & executive summary
    Risk ReportConciseComprehensive
    Priority actions, ranked by urgency5 actionsFull register
    Approved Tool List (what's safe, under what conditions)
    All applicable Qatar laws assessed
    Operational documents (policies, registers, plans)5 annexes16 documents
    AI Usage Policy + Employee Responsibility Agreement
    DPA / vendor risk checklist for every AI tool
    Incident Response Plan
    Client-facing AI Data Statement
    6-month checkpoint call
    Delivery time3 business days5 business days
    PriceQAR 8,500QAR 15,000
    The Audit, Simplified

    From questionnaire to Risk Report - in four steps.

    A structured, repeatable methodology - not ad-hoc consulting. You always know exactly what happens next.

    Step 1 of 4

    15 minutes

    Fill the online questionnaire

    No technical knowledge required. You describe the AI tools your team uses, how data is handled, and your main priorities.

    Step 2 of 4

    Behind the scenes

    Arcus analyses your tools against Qatar's applicable laws

    PDPL, Cybercrime Law, QFC DPR, NCSA Framework, QCB AI Directives and more - every exposure identified and prioritised.

    Step 3 of 4

    Free

    You receive your Risk Report

    Your Risk Report is free. It includes:

    • Your company's current compliance status
    • A personal recommendation on whether you need our services
    • Your identified risk exposure

    Delivered in under 48 hours.

    Step 4 of 4

    Your call

    You implement - or we support you further

    Act on the report yourself, or move to the Advanced toolkit with the full set of operational documents and a 6-month checkpoint.

    The Deliverable

    Review your Risk Roadmap.

    Every Arcus engagement plots your risks by likelihood and impact - so leadership sees what to fix first, not just what's wrong. This is a live sample.

    Click any highlighted point to explore.

    Business impact ↑
    LowHigh
    Likelihood →
    High priority

    Confidential data in public AI tools

    Likelihood

    88%

    Impact

    86%

    Recommended action

    Deploy an AI usage policy and an approved-tool list; block or wrap high-risk inputs.

    Illustrative data shown for demonstration. Your real map is built from your environment, then re-scored after mitigation to show progress.

    How we handle your data

    Everything you share is strictly confidential and used solely to deliver your audit, aligned with Qatar's PDPL and the GDPR. Read our Privacy Policy.

    The next move is yours

    Most businesses using AI are not compliant. Most never know until it's too late.

    Free - receive your personalised risk feedback in under 48 hours. The cost of finding out later: everything.

    Not sure which you need?