70
Saudi PDPL requirements in the library
Seeded and linked to the controls they share with NCA and SAMA.
Frameworks
PrivacyOS One Global · Saudi Arabia
Saudi PDPL, beside NCA and SAMA
In Saudi Arabia a privacy programme rarely stands alone: the same organisation often answers to the PDPL, NCA's controls and SAMA. Purplecop GRC carries all three in one library, so a control proved once counts for each.
The difference
From three regulators to one programme
What changes for a Saudi organisation on Purplecop.
Why Purplecop
What only Purplecop brings to the Saudi PDPL
Deep Gulf coverage in the library, not a single checklist.
NCA and SAMA in the same library
NCA ECC-2 and other NCA frameworks, and SAMA's Cyber Security Framework, are seeded beside the PDPL.
Frameworks
One control, many frameworks
A control shared across frameworks is created once in the library, not rebuilt for each one. The work you do for the PDPL counts toward everything else you hold.
Map once, satisfy many
Privacy policies from the AI Policy Builder
Privacy notices, retention, rights handling and more, tagged to the laws they serve.
AI Policy Builder
Findings that cannot quietly age
Corrective actions run through a tracked workflow with 5-Whys and fishbone analysis, ageing buckets and three escalation tiers.
Corrective actions
What you get
Built on one platform, with people who use it
Platform
PrivacyOS One Global
Privacy laws across jurisdictions on one records-and-rights engine, on the same control library as Purplecop GRC.
FrameworksControlsPoliciesCorrective actions
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about the Saudi PDPL
Which Saudi frameworks are covered?
The PDPL, NCA ECC-2 and related NCA frameworks, and SAMA's Cyber Security Framework.
Do we work with you from Dubai?
Purplecop works from the United States, India and Dubai.
Does Purplecop report to SDAIA?
No. Purplecop holds the records; dealings with the regulator stay with you.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each audit.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.