AI compliance requirements vary by jurisdiction, industry, and the way AI systems are used. We help map applicable obligations to practical controls, accountable owners, and evidence your teams can maintain.
DIFC Regulation 10 addresses personal data processing through autonomous and semi-autonomous systems within its scope.
UAE Federal PDPL may apply to personal data processing, subject to its scope and applicable exceptions.
ISO/IEC 42001 provides a framework for establishing and continually improving an AI management system.
SDAIA Responsible AI Policy supports responsible AI practices and risk-based governance
NCA ECC applies to AI systems and MLOps in regulated entities.
Saudi PDPL governs personal data processing where its requirements apply
EU AI Act Article 50 establishes transparency requirements for certain AI systems and AI-generated content.
High-risk AI system requirements follow a phased implementation timeline.
Providers and deployers should assess applicable obligations, documentation, and oversight requirements.
Identify the AI systems your organisation uses, determine which requirements may apply, and map regulatory obligations to existing controls. Our approach helps teams identify gaps, assign responsibilities, and maintain relevant compliance evidence as requirements evolve.
It may apply depending on how your AI systems are supplied, used, or produce outputs within the European Union. Applicability depends on the specific circumstances, including your role, AI system, and market activity. A regulatory assessment can help clarify potential obligations.
ISO/IEC 42001 is not a universal legal requirement for every organisation. It provides a structured framework for an AI management system and may support governance, risk management, procurement, and assurance objectives. Specific contractual or sector requirements may also influence whether certification is needed.
LARETH.AI helps organisations map relevant requirements across UAE, Saudi Arabian, and EU frameworks, including DIFC Regulation 10, applicable data protection requirements, SDAIA's Responsible AI Policy, NCA ECC, ISO/IEC 42001, and the EU AI Act.
Review frequency should reflect regulatory changes, AI system updates, risk levels, and changes in how systems are used. Ongoing monitoring can help organisations maintain current control mappings, responsibilities, and supporting evidence.
Office 207, 2nd Floor, Park Avenue, DSO, Dubai, UAE
Copyright 2026, LARETH.AI — The AI Division of Cyberwaze Global. All Rights Reserved.