Client name withheld (NDA)
Security and compliance layer for a SAMA-regulated investment platform
KYC verification, multi-factor authorisation, audit logging and AI-assisted checks added to a Saudi micro-investment platform so it met SAMA requirements without slowing users down.
- Industry:
- Fintech
- Region:
- Saudi Arabia
- Duration:
- 8 weeks
- 0Open compliance gaps at handover
- ~40%Less manual review time for compliance staff
- 8 weeksFrom gap analysis to production
// The challenge
- A growing micro-investment platform needed to strengthen identity, authentication and audit controls to satisfy SAMA requirements.
- Every extra step could mean fewer sign-ups and more abandoned transactions.
- Compliance staff checked risky activity by hand in exported spreadsheets.
// Our approach
- 01
Gap analysis
We compared the platform against SAMA controls and ranked the gaps by risk and effort, quick wins first.
- 02
KYC and MFA flows
Onboarding with verified identity, and multi-factor authorisation based on risk, so extra checks appear only when an action needs them.
- 03
Audit trail
Tamper-evident logs of logins, profile changes and transactions that the compliance team can search.
- 04
AI-assisted checks
An assistant flags unusual activity and drafts a summary for a compliance officer. A person makes every decision.
