Is there a free option?

Yes. The Scan plan is free and includes a public website risk score and findings, with 3 scans per month for one site.

Where is data stored?

Waqi states that it is 100% hosted inside Saudi Arabia and uses AES-256 encryption.

Which plans include the consent banner and DSAR portal?

Shield.js consent control, the DSAR portal and PDPL readiness certificates are included from the Shield plan upward.

Does it support frameworks beyond PDPL?

The Enterprise plan includes governance frameworks such as NCA ECC, SAMA, PDPL and ISO 27001, plus the wider GRC modules.

Waqi AI

Saudi PDPL compliance & privacy GRC platform — website scans, cookie consent, DSAR, and data governance for Saudi businesses.

Category:

Design Assets

Maker:

Muhammad Uzair

Use Cases

SaaS

⚡️ Tags detected by AI

About Waqi AI

Waqi AI is a privacy and governance, risk and compliance (GRC) platform built for organisations in Saudi Arabia that need to align with the Personal Data Protection Law (PDPL). It scans a website and returns a risk breakdown in about 30 seconds, provides a consent banner script (Shield.js) that blocks trackers until visitors consent, generates Arabic and English privacy policies, and runs an inbox for data subject access requests (DSARs).

Much of the work is done through a chat assistant that accepts requests in Arabic or English and waits for approval before saving changes. Higher tiers add internal governance modules such as RoPA data mapping, DPIA workflows, a risk register, vendor risk, access reviews, evidence requests, breach management and assessments against frameworks including NCA ECC, SAMA, ISO 27001 and GDPR.

Data is hosted inside Saudi Arabia and encrypted with AES-256. The product is aimed at Saudi businesses of varying size, from e-commerce founders and agencies managing client sites to compliance, DPO and security teams in regulated sectors such as finance, health and education.

Best for

Saudi businesses needing PDPL website compliance
Agencies managing multiple Saudi client websites
Compliance and DPO teams running GRC programmes
Organisations requiring in-Kingdom data residency

Pros

Free scan returns a website risk score in about 30 seconds
Consent banner blocks trackers before consent, not just displays notice
Bilingual Arabic and English policy generation
Data hosted in Saudi Arabia with AES-256 encryption

Cons

Focused on Saudi PDPL; built for organisations operating in KSA
Full GRC modules and frameworks only available on custom-quoted Enterprise plan
Each managed-site plan covers one legal entity; unrelated clients need separate workspaces

Pricing

Plans range from a free Scan tier and Scan Pro at $4/month to Shield at $264/month ($2,534/year) and Shield Pro at $529/month ($5,070/year), with free trials on Shield tiers and custom-quoted Enterprise.

Waqi AI FAQ

Is there a free option?: Yes. The Scan plan is free and includes a public website risk score and findings, with 3 scans per month for one site.
Where is data stored?: Waqi states that it is 100% hosted inside Saudi Arabia and uses AES-256 encryption.
Which plans include the consent banner and DSAR portal?: Shield.js consent control, the DSAR portal and PDPL readiness certificates are included from the Shield plan upward.
Does it support frameworks beyond PDPL?: The Enterprise plan includes governance frameworks such as NCA ECC, SAMA, PDPL and ISO 27001, plus the wider GRC modules.