ISQM 1 · AML · PDPL · NCA ECC · Independence · CPD · Performance
Arabic & English · Live in 8 weeks · Powered by Falconry Solutions
SOCPA peer review inspections active
PDPL fully enforceable — SAR 5M exposure
✦ 3 of the Big 10 KSA audit firms live on firm360.ai
NCA ECC controls now mandatory
The ISQM 1 engine. Every quality management obligation — documented, automated, and inspection-ready at any time.
The regulatory resilience layer. NCA ECC, PDPL, and enterprise risk — all in one control environment.
The profitability layer. Real-time visibility into every engagement, every team member, every billable hour.
FalconryX is firm360.ai's embedded AI layer. It doesn't replace professional judgment — it amplifies it. Every partner remains in control. Every AI output is explainable. Every decision has an audit trail.
Aligned to SDAIA's AI governance guidelines and emerging IAASB standards on AI use in audit.
Automatically scores client risk across AML, independence, and continuance — flagging anomalies before they become problems.
Drafts SoQM documentation and annual evaluation reports from structured data — reviewed and approved by partners.
Monitors SOCPA, NCA, SAMA, SDAIA, and IAASB — automatically assessing the impact on your firm's obligations.
Early warning on engagement profitability, deadline risk, and resource gaps — surfaced before they become write-offs.
Select any module to see exactly what it does, how it works, and what it delivers.
Automated client risk scoring, onboarding workflows, and annual continuance review. Replaces manual checklists with a structured, documented, ISQM 1-aligned process.
Active clients
Pending review
High risk flagged
Continuance complete
Real-time sanctions screening, beneficial ownership verification, and PEP identification — integrated into acceptance and monitored continuously.
Sanctions hits
PEP matches
EDD required
Screened today
The complete ISQM 1 engine. SoQM documentation, annual evaluation, cold file review, and SOCPA peer review preparation — all automated and inspection-ready.
Evaluation complete
Deficiencies identified
Cold files reviewed
Inspection status
Continuous independence tracking across your entire firm — financial interests, personal relationships, and long association threats flagged automatically.
Staff monitored
Potential threat
Confirmed breaches
Declarations current
Firm-wide CPD tracking against SOCPA, ICAEW, ACCA, and CPA requirements. Automated alerts ensure no staff member falls below threshold.
Firm CPD compliance
At-risk staff
Hours logged
Next deadline
Annual objectives, per-engagement feedback, mid-year check-ins, and year-end calibrated reviews. The ISQM 1 HR quality component, automated.
Active reviews
Mid-year complete
Feedback items
Year-end deadline
Firm-wide risk register with owner assignment, impact/likelihood scoring, mitigation tracking, and partner dashboards.
Active risks
High / critical
Mitigations open
Due this month
All 65 NCA Essential Cybersecurity Controls mapped, evidenced, and monitored. SAMA CSF and ISO 27001 aligned. Continuously maintained.
Total controls
Compliant
Partial
Gaps
Full Saudi PDPL compliance — data mapping, RoPA, 72-hour breach notification, DPIAs, and cross-border transfer controls. Enforceable since September 2024.
Processing activities
RoPA complete
Active breaches
DPIAs required
Audit firms hold some of the most sensitive financial data in the GCC. Our security posture is designed to match that responsibility.
Information security practices aligned to ISO 27001 — covering access controls, encryption, vulnerability management, and incident response.
Data residency options aligned to KSA requirements. Your data stays where your regulatory obligations require.
All data encrypted in transit (TLS 1.3) and at rest (AES-256). Encryption keys managed with strict access controls and regular rotation.
Every action, decision, and document change — logged with user, timestamp, and context. Complete accountability at every level.
Granular RBAC — Partners, Managers, Staff, and Compliance Officers each have precisely scoped permissions. No over-privileged access.
The platform is built PDPL-compliant — data minimisation, purpose limitation, and retention controls built into every module.
We demonstrate firm360.ai using scenarios drawn from your firm's actual ISQM 1 obligations — not a generic product tour.
We show the modules most relevant to your firm's immediate obligations — ISQM 1, PDPL, or NCA ECC — in a working environment.
Structured maturity assessment of your current quality management posture — at no cost and no obligation.
Bespoke plan and commercial proposal specific to your firm's size, jurisdiction, and priorities.
