Skip to content
  • PDPL
  • AI Ethics Principles
  • GenAI Guidelines

Trust & Compliance

Built in line with SDAIA's frameworks

We design and operate our products in line with the Personal Data Protection Law, the AI Ethics Principles and the Generative AI Guidelines issued by the Saudi Data & AI Authority (SDAIA). This page explains what that means in practice — and where we stand today.

Compliance at a glance

Legal basis
PDPL and its implementing regulations
Ethics framework
SDAIA AI Ethics Principles — 7 principles
Generative AI
SDAIA guidelines for the public and on deepfakes
Hosting
Commitment to host platform data in the Kingdom

SDAIA does not grant any company automatic "approval". Registering as a controller and applying for accreditation are steps we are working through, and we show their status openly in the roadmap below — we do not claim what we have not yet done.

Frameworks we follow

Four national frameworks, one practice

What SDAIA has issued, and how each one shows up inside our products.

  • Personal Data Protection Law (PDPL)

    The binding law for personal data in the Kingdom, with its implementing regulation and the regulation on personal data transfers outside the Kingdom.

    A clear notice at collection, a lawful basis for every processing activity, data minimisation, data-subject rights and incident reporting.

    Official source

  • AI Ethics Principles

    Seven principles applied across the whole AI system lifecycle according to its risk level — for public and private entities alike.

    We assess every product against SDAIA's checklist before launch, document the risks and review them periodically.

    Official source

  • Generative AI Guidelines (Public)

    SDAIA's guide to using and building generative AI responsibly: transparency, human oversight and verification of outputs.

    Every AI output is clearly labelled, sources are shown wherever possible, and the final decision stays with a person.

    Official source

  • Deepfakes Guidelines

    SDAIA's guidance for developers and content creators on synthetic media, labelling and consent.

    We never generate content that imitates real people, and generated images and renders in the Architecture Platform are labelled.

    Official source

The seven principles

SDAIA's principles inside our products

Each principle maps to a specific practice in the Legal Platform, the Architecture Platform and Labs projects.

  1. 01

    Fairness

    We test models on diverse Arabic texts and terminology, and review outputs for bias before launch and after.

  2. 02

    Privacy & security

    Encryption in transit and at rest, role-based permissions, a full audit log — and customer data is never used to train general models.

  3. 03

    Humanity

    Our products assist, they do not replace: the lawyer and the architect decide; the system saves time and suggests.

  4. 04

    Social & environmental benefits

    We build for sectors that serve society, and prefer smaller, more efficient models when the result is the same.

  5. 05

    Reliability & safety

    Tests before every release, performance monitoring after deployment, and human escalation paths when in doubt.

  6. 06

    Transparency & explainability

    Users always know when they are dealing with AI, and every research result shows its source and article.

  7. 07

    Accountability & responsibility

    A named owner for AI ethics, a clear channel for feedback and complaints, and documentation of every significant design decision.

Personal data

What we commit to with your data

PDPL obligations as we apply them on the website and in the platforms.

privacy@binsaeedai.com
  • A clear notice at collection: who collects, why, and which fields are mandatory or optional
  • A lawful basis for every processing activity, collecting only the minimum needed for the purpose
  • Contact data kept for no longer than 24 months from the last contact
  • Rights of access, correction, deletion and withdrawal of consent, answered within 30 days
  • Notification of the Authority and of affected individuals within 72 hours of any breach
  • Disclosure of our service providers and of any transfer outside the Kingdom and its safeguards
  • A direct privacy channel: privacy@binsaeedai.com

Where your data lives

A clear commitment to hosting in the Kingdom

We draw an honest line between what is in place today and what we commit to at platform launch.

Commitment

Legal and Architecture platforms

Customer data and documents are hosted in data centres inside Saudi Arabia from launch, and do not leave the Kingdom.

Today

Website enquiries

Contact-form data is currently processed by hosting and e-mail providers outside the Kingdom under appropriate contractual safeguards, and moves to hosting inside the Kingdom with the platform launch.

The draft amendments to the PDPL implementing regulation (October 2026) make storage inside the Kingdom the default — we are building on that basis now.

Roadmap

Where we stand — openly

We show the status of each step as it is, and update this page with every milestone.

  • Done
  • In progress
  • Planned

  1. PDPL-compliant privacy policy and collection notices

    Done

    Notice at collection, lawful basis, clear rights and a defined retention period.

  2. Self-assessment against SDAIA's AI ethics checklist

    In progress

    For every product before launch, with documented risks and mitigations.

  3. Registration on the National Data Governance Platform

    Planned

    Registering the company as a controller before the platforms launch.

  4. Appointment of a Data Protection Officer

    Planned

    With their details entered on the national platform as required.

  5. Hosting the platforms in the Kingdom

    Planned

    Saudi infrastructure for customer data from day one of launch.

  6. AI Service Provider accreditation

    Planned

    Applying for SDAIA's accreditation certificate and AI ethics badges after launch.

FAQ

What people usually ask about compliance

Are you accredited by SDAIA?

Not yet. We build our products in line with SDAIA's frameworks from day one; registering as a controller and then applying for AI Service Provider accreditation are two steps on our roadmap, and we show their status on this page.

Does the AI make decisions on my behalf?

No. The platforms assist: they research, draft and suggest, and the professional decision stays with the lawyer or the architect. Every output is clearly labelled as AI-generated.

Is our data used to train models?

Customer data and documents are never used to train general models, and are shared with third parties only as far as needed to deliver the service and under processing agreements.

How do I exercise my rights or file a complaint?

Write to privacy@binsaeedai.com and we respond within 30 days. You may also lodge a complaint with the Saudi Data & AI Authority as the competent authority.

Official sources

The documents we work from, on the Saudi Data & AI Authority's website.

A question about compliance or data protection?

We answer legal, compliance and information-security teams with the detail they need before contracting.