Waqi AI
Saudi PDPL compliance & privacy GRC platform — website scans, cookie consent, DSAR, and data governance for Saudi businesses.
About
Waqi.ai (واقي) is a Saudi-hosted privacy, security, and governance (GRC) platform that helps organizations achieve and maintain compliance with Saudi Arabia’s Personal Data Protection Law (PDPL). Built for hospitals, banks, universities, retailers, and enterprises across the Kingdom, Waqi replaces slow, costly manual consulting with automated website scanning, consent management, legal document generation, and full privacy governance—available in bilingual English and Arabic.
At its core, Waqi combines AI-powered compliance scanning with Shield.js, a lightweight on-site script that deploys PDPL-aligned cookie consent banners, blocks trackers before user consent, and keeps privacy policies up to date as regulations change. Organizations connect their domains, run automated audits that detect cookies, trackers, and violations, and receive clear remediation guidance. The free Scan tier provides basic compliance scoring, while paid plans unlock detailed reports, Shield.js deployment, legal templates, and advanced GRC modules.
Beyond website compliance, Waqi’s GRC workspace covers the full privacy lifecycle: Records of Processing Activities (RoPA), asset inventory, data flow mapping, gap analysis, DPIA and risk registers, vendor risk management (TPRM), access reviews, audit calendars, breach notification workflows, and DSAR (Data Subject Access Request) portals with complete audit trails. Waqi AI guides teams step by step—from DNS verification and Shield.js installation to policy publishing and personalized compliance roadmaps—turning work that traditionally takes months and thousands of riyals into minutes.
Waqi is aligned with SDAIA guidance and references frameworks including NCA-ECC, SAMA CSF, and ISO 27001 where applicable. All customer data is hosted 100% inside Saudi Arabia (Oracle Cloud KSA, WafaTech) with AES-256 encryption at rest and in transit, ensuring full data sovereignty. Organizations can earn PDPL Readiness Certificates and security awareness certificates as they deploy Shield.js and complete training modules.
The platform also includes a Legal Center for template-driven privacy policies and notices, a Human Firewall security awareness program, and organizational dashboards for monitoring compliance health across departments. CSV import/export supports inventory, RoPA, vendors, and access reviews for teams that manage data in spreadsheets today.
Pricing follows a freemium model: Scan (free — 3 scans/month), Scan Pro (299 SAR/month)
Ready to launch?
Submit your product and get discovered by builders and creators worldwide.
Launch Now
FounderPlaybooks.
What other founders did to grow.
2722 dispatches from hundreds of founders, pulled from the week's best podcasts.
Week one is an incredibly important kind of fork in the road for us you know we're solving for three workouts per week per member... if you're hitting that metric in the first week the odds of doing it again the second week are exponentially higher the odds of retaining at the end into one month if you're a monthly member are very high.
Week-One Workout Completions Are a Highly Accurate Fork-in-the-Road Predictor
Ladder has quantified week-one behavior as a near-binary predictor of long-term retention. Three workouts in week one creates a compounding effect: high probability of week-two completion, high probability of month-one retention. This means Ladder concentrates most of its product iteration on that first seven days — getting users to their first and second workout as fast as possible is where the retention ROI is highest.
There's a like a really clear zeitgeist right now the anti-slop zeitgeist and people wanting to use things whether it's in the physical world or digital world that are high quality and thoughtful and doubling down on product and design.
The Anti-Slop Zeitgeist: Design Quality Will Rise As AI Lowers The Floor
Jeff's contrarian take on AI-driven app creation: the bar for design won't fall, it will rise. As AI-generated slop floods the market, users will gravitate toward products with intentional design and distinctive point of view. This creates an opportunity for founders who double down on craft — the same dynamic that made Flighty worth $40/year despite free alternatives.
There's a play for whatever you're stuck on.
Read all 2722 playbooks
Comments
1Saudi PDPL compliance & privacy GRC platform — website scans, cookie consent, DSAR, and data governance for Saudi businesses.