✦ 3 of the Big 10 GCC audit firms live on firm360.ai
SOCPA peer review inspections active
PDPL fully enforceable — SAR 5M exposure
NCA ECC controls now mandatory
ISQM 1 · AML · PDPL · NCA ECC · Independence · CPD · Performance
Arabic & English · Live in 8 weeks · Powered by Falconry Solutions
✦ 3 of the Big 10 GCC audit firms live on firm360.ai
SOCPA peer review inspections active
PDPL fully enforceable — SAR 5M exposure
NCA ECC controls now mandatory
ISQM 1 · AML · PDPL · NCA ECC · Independence · CPD · Performance
Arabic & English · Live in 8 weeks · Powered by Falconry Solutions
Essentials
Core governance for SOCPA-registered firms. Acceptance & Continuance, CPD, and Timesheets out of the box.
per month · billed monthly
Up to 25 users · 3 modules included
Most chosen by Big 10 GCC firms
Professional
Full three-pillar governance. ISQM 1, AML, Independence, PDPL, NCA ECC, Performance — the complete platform.
per month · billed monthly
Up to 75 users · All modules included
Enterprise
Custom configuration for large firms with multiple offices, GCC jurisdiction coverage, and bespoke integration requirements.
tailored to your firm's structure
Unlimited users · All modules + custom
Essentials
Core governance for SOCPA-registered firms. Acceptance & Continuance, CPD, and Timesheets out of the box.
per month · billed monthly
Up to 25 users · 3 modules included
Most chosen by Big 10 GCC firms
Professional
Full three-pillar governance. ISQM 1, AML, Independence, PDPL, NCA ECC, Performance — the complete platform.
per month · billed monthly
Up to 75 users · All modules included
Enterprise
Custom configuration for large firms with multiple offices, GCC jurisdiction coverage, and bespoke integration requirements.
tailored to your firm's structure
Unlimited users · All modules + custom
3 of the Big 10 GCC audit firms are on the Professional tier · All implementations delivered in 8 weeks · No long-term lock-in on monthly billing
| Feature | Essentials | Professional | Enterprise |
|---|---|---|---|
| Pillar 1 — Governance & Quality | |||
| Client Acceptance & Continuance | ✓ | ✓ | ✓ |
| AML & KYC Screening | Add-on | ✓ | ✓ |
| ISQM 1 Quality Management | — | ✓ | ✓ |
| Independence Monitoring | — | ✓ | ✓ |
| CPD & Learning Compliance | ✓ | ✓ | ✓ |
| Regulatory Change Monitoring | — | ✓ | ✓ |
| Pillar 2 — Risk, Cyber & Data | |||
| Enterprise Risk Management | — | ✓ | ✓ |
| NCA ECC Cybersecurity Governance | — | ✓ | ✓ |
| PDPL Data Privacy Compliance | — | ✓ | ✓ |
| Incident Response Management | — | ✓ | ✓ |
| Pillar 3 — Performance & Efficiency | |||
| Time & Timesheet Management | ✓ | ✓ | ✓ |
| Performance Management & Reviews | — | ✓ | ✓ |
| Engagement Monitoring & WIP | — | ✓ | ✓ |
| Leadership Dashboards & KPIs | ✓ | ✓ | ✓ |
| Saudization (Nitaqat) Tracking | — | ✓ | ✓ |
| Platform & Support | |||
| Arabic & English interface | ✓ | ✓ | ✓ |
| FalconryX AI layer | — | ✓ | ✓ |
| API access & integrations | — | — | ✓ |
| Dedicated GCC data residency | — | Optional | ✓ |
| Implementation timeline | 4 weeks | 8 weeks | Custom |
| Support | Email & chat | Priority + CSM | 24/7 SLA |
Add individual modules to any tier if your firm needs specific capabilities without upgrading to a full plan.
Real-time sanctions screening, PEP identification, and UBO verification. Integrates with Acceptance & Continuance workflow.
All 65 NCA ECC 2025 controls mapped, evidenced, and monitored. SAMA Cybersecurity Framework aligned.
Full PDPL compliance — data mapping, RoPA, breach notification, DPIAs, and data subject rights management.
Dedicated GRC advisory hours from the Falconry Solutions team for regulatory interpretation, policy development, and SOCPA preparation.
ISQM 1, AML, data privacy, and NCA ECC training for your staff — delivered by Falconry Solutions specialists, CPD-verified.
Falconry runs your governance function — monitoring, reporting, remediation management, and regulatory liaison on your behalf.
Monthly billing is available with no minimum commitment. Annual billing gives a 20% discount. Enterprise contracts are typically 2 years with custom termination provisions.
A one-time implementation fee covers the full 4-phase onboarding: discovery, configuration, pilot training, and go-live — including data migration support, staff training, and 30 days of hypercare. The fee depends on firm size and complexity and is discussed during the proposal stage.
Yes — and this is exactly how most firms start. Many begin with Acceptance & Continuance (the highest urgency for SOCPA compliance) and expand to AML, ISQM 1, and Performance in subsequent sprints. There is no penalty for phased adoption.
Billing is in Saudi Riyals (SAR) for GCC entities. UAE Dirham (AED) and USD billing is available for firms domiciled in the UAE or internationally. All prices exclude applicable VAT.
GCC data residency is available as an option on Professional tier and is standard on Enterprise. We can provide a Data Processing Agreement (DPA) and data residency confirmation letter for your PDPL compliance documentation.
Additional users are added at the per-user rate listed on each plan. There is no need to move to a new tier unless you want additional modules. We proactively monitor usage and notify you before you approach your limit.
Book a 30-minute call. We will map your firm's obligations, recommend the right starting point, and give you a clear commercial proposal within 5 working days.
We map your firm size, regulatory priorities, and which modules matter most right now.
Commercial proposal with exact pricing, module selection, and implementation timeline for your firm.
Every enquiry includes a complimentary ISQM 1 maturity assessment — whether or not you proceed.
