AIRATAVARA HOLDINGS

Select your primary regulatory jurisdiction

Compliance overview: framework coverage, controls implemented, open findings, recent audit activity

Regulatory Intel

Latest regulatory changes and advisories that affect you

Pricing & Plans

View subscription plans and upgrade your account

Implementation and retainer packages for AI governance

Governance templates: HITL Protocol, AI Inventory, DPIA

Fiduciary Network

Connect with vetted AI governance professionals

Audit & Compliance

Active

Everything assigned to you — findings, risks, policies to attest, regulator deadlines, AI systems owned.

Regulatory updates across 26 frameworks, auto-mapped to the exact canonical controls they affect. Critical items surface instantly with the delta you need to act on.

Monthly snapshot of your control posture. Shows every control that drifted since last month and the coverage delta over time.

Inbound security questionnaires (SIG Lite / Core, CAIQ, NIST 800-171, custom) auto-answered against your Control Library. What used to take 8 hours is now 30 minutes of review.

Autonomous advisors: Control Assessor, Audit Readiness, Policy Guardian, Evidence Analyzer, Risk Mapper, Chat.

Connect Okta, GitHub, AWS Config, Jira, Slack, Datadog, HRIS, EDR — auto-pull evidence into the right canonical controls.

AI System Inventory

Every AI/ML system classified by EU AI Act tier, Annex III category, GPAI flag. Auto-scopes mandatory canonical controls.

Control Library

60 canonical controls mapped to 26 frameworks and 294 requirements. Update status, assign owners, attach evidence.

Framework Coverage

Real-time coverage heatmap across SOC 2, ISO 27001, NIST CSF, EU AI Act, GDPR, and 21 more frameworks.

Upload evidence with SHA-256 chain of custody. Immutable, tenant-scoped, auditor-grade.

Proactive risk inventory with inherent and residual scoring (1-5 × 1-5), treatment decisions, control mapping.

Exceptions and deficiencies with severity, root cause, management response, due date.

Immutable log of every material change. SOC 2 CC7.2 / CC7.3, HIPAA §164.312(b), SOX ITGC.

Tier-1/2/3 vendor inventory with PII flag, certifications, and assessment cadence. SOC 2 CC9.2, ISO 27001 A.5.19-22, GDPR Art. 28.

Incidents with auto-computed regulator deadlines: GDPR 72h, NPC 72h, PDP Law ID 3x24h, PDPA SG 3-day, APPI, PIPA, BSP 2h, MAS 1h, APRA 72h.

Business Continuity

BCP/DR plans with RTO/RPO targets, test tracking, overdue-test alerts. SOC 2 CC9.1, ISO 27001 A.5.29-30, HIPAA 164.308(a)(7).

Policy library with version, category, review cadence, and per-user attestations. SOC 2 CC5.3, ISO 27001 A.5.1.

Readiness Report

Print-ready SOC 2 / ISO 27001 / any-framework readiness report with per-requirement status and evidence linkage.

Invite teammates, assign roles (admin / member / viewer). RLS enforces tenant isolation on all member data.

Security Settings

Organization MFA requirement, session timeout, password policy, data retention, trust-portal toggle.

Federate Okta, Azure AD, Google Workspace, or any SAML 2.0 IdP. Enforce SSO org-wide.

Author your public /trust/<orgId> page: sections, certifications (SOC 2 / ISO / HIPAA), subprocessors with DPA status. Procurement teams score you off this.

Stream every audit event in real time to Splunk HEC, Datadog, Sumo Logic, or any HTTPS sink. Enterprise SOC requirement.

The regulator-at-the-door runbook. One-click legal-hold, forensic logging, and tenant-wide write freeze. Owner-only.

Billing & Plans

Plan comparison, current entitlement snapshot, and upgrade request flow.

Mint, revoke, and monitor API keys for AIRA REST v1 (SHA-256 hashed, rate-limited, audit-logged).

Request full or scoped tenant-data exports for GDPR portability, NPC data-subject requests, or vendor offboarding.

Data Privacy

Active

NPC Advisory · DICT

Compliance Check

Run an AI compliance assessment for your jurisdiction

View your compliance score with category breakdown

Track remediation tasks, owners, and deadlines

EU AI Act

Optional

For PH BPOs serving EU

Classify your AI systems by EU AI Act risk tier

Conformity assessment against Articles 9–15

Article 50 transparency obligations for your AI systems

Financial AI Governance

Active

BSP Draft Model Risk Mgt

Model Inventory

Register and track all AI/ML models in production

Fairness Testing

Run bias and fairness tests on your AI models

Log and monitor model risks with severity ratings

AIRATAVARA HOLDINGS

Select your primary regulatory jurisdiction

Compliance overview: framework coverage, controls implemented, open findings, recent audit activity

Regulatory Intel

Latest regulatory changes and advisories that affect you

Pricing & Plans

View subscription plans and upgrade your account

Implementation and retainer packages for AI governance

Governance templates: HITL Protocol, AI Inventory, DPIA

Fiduciary Network

Connect with vetted AI governance professionals

Audit & Compliance

Active

Everything assigned to you — findings, risks, policies to attest, regulator deadlines, AI systems owned.

Regulatory updates across 26 frameworks, auto-mapped to the exact canonical controls they affect. Critical items surface instantly with the delta you need to act on.

Monthly snapshot of your control posture. Shows every control that drifted since last month and the coverage delta over time.

Inbound security questionnaires (SIG Lite / Core, CAIQ, NIST 800-171, custom) auto-answered against your Control Library. What used to take 8 hours is now 30 minutes of review.

Autonomous advisors: Control Assessor, Audit Readiness, Policy Guardian, Evidence Analyzer, Risk Mapper, Chat.

Connect Okta, GitHub, AWS Config, Jira, Slack, Datadog, HRIS, EDR — auto-pull evidence into the right canonical controls.

AI System Inventory

Every AI/ML system classified by EU AI Act tier, Annex III category, GPAI flag. Auto-scopes mandatory canonical controls.

Control Library

60 canonical controls mapped to 26 frameworks and 294 requirements. Update status, assign owners, attach evidence.

Framework Coverage

Real-time coverage heatmap across SOC 2, ISO 27001, NIST CSF, EU AI Act, GDPR, and 21 more frameworks.

Upload evidence with SHA-256 chain of custody. Immutable, tenant-scoped, auditor-grade.

Proactive risk inventory with inherent and residual scoring (1-5 × 1-5), treatment decisions, control mapping.

Exceptions and deficiencies with severity, root cause, management response, due date.

Immutable log of every material change. SOC 2 CC7.2 / CC7.3, HIPAA §164.312(b), SOX ITGC.

Tier-1/2/3 vendor inventory with PII flag, certifications, and assessment cadence. SOC 2 CC9.2, ISO 27001 A.5.19-22, GDPR Art. 28.

Incidents with auto-computed regulator deadlines: GDPR 72h, NPC 72h, PDP Law ID 3x24h, PDPA SG 3-day, APPI, PIPA, BSP 2h, MAS 1h, APRA 72h.

Business Continuity

BCP/DR plans with RTO/RPO targets, test tracking, overdue-test alerts. SOC 2 CC9.1, ISO 27001 A.5.29-30, HIPAA 164.308(a)(7).

Policy library with version, category, review cadence, and per-user attestations. SOC 2 CC5.3, ISO 27001 A.5.1.

Readiness Report

Print-ready SOC 2 / ISO 27001 / any-framework readiness report with per-requirement status and evidence linkage.

Invite teammates, assign roles (admin / member / viewer). RLS enforces tenant isolation on all member data.

Security Settings

Organization MFA requirement, session timeout, password policy, data retention, trust-portal toggle.

Federate Okta, Azure AD, Google Workspace, or any SAML 2.0 IdP. Enforce SSO org-wide.

Author your public /trust/<orgId> page: sections, certifications (SOC 2 / ISO / HIPAA), subprocessors with DPA status. Procurement teams score you off this.

Stream every audit event in real time to Splunk HEC, Datadog, Sumo Logic, or any HTTPS sink. Enterprise SOC requirement.

The regulator-at-the-door runbook. One-click legal-hold, forensic logging, and tenant-wide write freeze. Owner-only.

Billing & Plans

Plan comparison, current entitlement snapshot, and upgrade request flow.

Mint, revoke, and monitor API keys for AIRA REST v1 (SHA-256 hashed, rate-limited, audit-logged).

Request full or scoped tenant-data exports for GDPR portability, NPC data-subject requests, or vendor offboarding.

Data Privacy

Active

NPC Advisory · DICT

Compliance Check

Run an AI compliance assessment for your jurisdiction

View your compliance score with category breakdown

Track remediation tasks, owners, and deadlines

EU AI Act

Optional

For PH BPOs serving EU

Classify your AI systems by EU AI Act risk tier

Conformity assessment against Articles 9–15

Article 50 transparency obligations for your AI systems

Financial AI Governance

Active

BSP Draft Model Risk Mgt

Model Inventory

Register and track all AI/ML models in production

Fairness Testing

Run bias and fairness tests on your AI models

Log and monitor model risks with severity ratings

A

UAE \u2014 Personal Data Protection Assessment

PDPL 2021 (Fed. Decree-Law 45) · Dubai AI Regulation · CBUAE (FIs)

EU AI Act: 102d

What you’re being assessed on

12questions · ~10 min

UAE AI governance readiness against the active regulatory stack. Your answers are scored across 6 categories and mapped to specific regulatory clauses.

Categories

Data Governance & PrivacyTransparency & DisclosureHuman OversightRisk & ImpactSecurity & InfrastructureGovernance & Accountability

Regulatory frameworks

UAE PDPL 2021 (Fed. Decree-Law 45)Dubai AI Ethics Principles (DIGI, 2019)UAE National AI Strategy 2031CBUAE AI Guidelines (FIs)EU AI Act

A

Hi — I’m AIRA, your governance advisor at TAVARA Holdings. This assessment covers UAE AI governance — PDPL 2021, Dubai AI Ethics Principles, UAE National AI Strategy 2031, and CBUAE guidelines for financial institutions. I’ll walk you through the regulatory landscape one question at a time. This isn’t a test — think of it as a conversation. I’ll share context along the way so you understand why each area matters. Ready to get started?