Book a Demo
Regulatory Intelligence

Every obligation your firm faces — covered.

Pre-configured for GCC and GCC regulatory requirements. Automatically updated as rules change. Covering every framework your clients, regulators, and international bodies require.

✦ ISQM 1 & 2

SOCPA

PDPL

NCA ECC 2025

SAMA CSF

AML / FATF / MENAFATF

CMA

ZATCA

SDAIA

ICAEW

ACCA

GCCAAO

✦ ISQM 1 & 2

SOCPA

PDPL

NCA ECC 2025

SAMA CSF

AML / FATF / MENAFATF

CMA

ZATCA

SDAIA

ICAEW

ACCA

GCCAAO

GCC Audit Quality

SOCPA & ISQM 1 — The Core Obligation

Every SOCPA-registered firm must demonstrate a documented System of Quality Management aligned to ISQM 1. firm360.ai makes this continuous and inspection-ready.

ISQM 1

System of Quality Management

All six ISQM 1 components pre-configured: Leadership, Ethics, Acceptance, Engagement Performance, Resources, and Monitoring & Remediation. Annual evaluation automated.

  • ISQM 1.1 Leadership
  • ISQM 1.2 Ethics
  • ISQM 1.3 A&C
  • ISQM 1.4 Eng.
  • ISQM 1.5 Resources
  • ISQM 1.6 Monitoring

ISQM 2

Engagement Quality Reviews

EQR scheduling, reviewer assignment, documentation, and completion tracking. Integrates directly with the engagement management module to trigger EQR at the right point.

SOCPA

Peer Review Readiness

One-click SOCPA peer review evidence pack. All ISQM 1 evidence, policies, procedures, and monitoring results packaged and ready for inspection at any time.

Data Protection & Cybersecurity

PDPL & NCA ECC — Both Fully Enforceable

PDPL · Saudi Arabia

Personal Data Protection Law

Fully enforceable since September 2024. Fines up to SAR 5 million. firm360.ai covers all PDPL obligations for audit firms handling client personal data.

  • Data inventory & processing records (RoPA)
  • 72-hour breach notification workflow
  • Data Protection Impact Assessments
  • Data subject rights management
  • Cross-border transfer controls

NCA ECC · 2025

Essential Cybersecurity Controls

New mandatory NCA ECC controls for all private sector entities in 2025. All 65 controls pre-mapped. SAMA Cybersecurity Framework and ISO 27001 aligned.

  • All 65 NCA ECC controls pre-mapped
  • Maturity scoring: Initial → Optimising
  • Evidence upload per control
  • SAMA CSF alignment dashboard
  • Incident response workflow
Full Regulatory Coverage

Every framework, mapped and maintained automatically

AML & FINANCIAL CRIME

SAMA AML Framework

  • FATF 40 Recommendations
  • MENAFATF Standards
  • UN Sanctions Lists
  • OFAC / HMT / EU Lists
  • IESBA Independence Code

CAPITAL MARKETS

CMA Listed Entity Requirements

  • CMA Governance Rules
  • ZATCA Tax Compliance
  • SAMA Banking Rules
  • IOSCO Audit Standards
  • PCAOB (international firms)

PROFESSIONAL STANDARDS

SOCPA Standards

  • ICAEW CPD & Ethics
  • ACCA Global Standards
  • GCCAAO Standards
  • IAASB ISA Suite
  • IESBA Code of Ethics

EMERGING & AI

SDAIA AI Governance

  • HRSD Saudization (Nitaqat)
  • Vision 2030 Compliance
  • ESG Reporting Standards
  • CSRD (EU, international)
  • IFRS Sustainability

See regulatory coverage applied to your firm

We map your firm's specific regulatory obligations against the firm360.ai coverage in a free 30-minute assessment — at no cost.

Book a demo →
Explore the platform

Regulatory mapping session

We identify every regulatory obligation applying to your firm across GCC and GCC markets.

Coverage gap analysis

We map your current compliance posture against firm360.ai's regulatory coverage.

Priority roadmap

A clear implementation priority order based on regulatory urgency and business impact.

  • contact@falconry360.com
  • www.firm360.ai · Powered by Falconry Solutions