OSSUS
OSSUS provides an AI-native compliance intelligence platform for startups and SMBs in Saudi Arabia and the GCC, built on Haris, a purpose-built compliance LLM that reasons about regulatory intent and scores evidence against frameworks like SAMA, NCA, PDPL, and ISO. The platform generates audit-ready artifacts, including policies, risk registers, and disaster recovery plans, in minutes. Haris is available for sovereign on-premise deployment in KSA datacenters, ensuring data never leaves the organization.
- Regulatory & Compliance Technology
- Artificial Intelligence
- Software Only
Funding
Founders
Founder details are not available yet.
Product
Problem
Startups and SMBs in regulated sectors across Saudi Arabia and the GCC spend weeks manually reviewing evidence, performing gap analyses, mapping controls, and creating audit artifacts to meet compliance requirements. Existing GRC tools rely on manual workflows with AI only as an add-on, limiting their ability to reason about regulatory intent or produce auditor-ready outputs efficiently.
Solution
OSSUS delivers an AI-native compliance intelligence platform built on Haris, a purpose-built compliance LLM that reasons about regulatory intent, scores evidence, and generates audit-ready artifacts. Unlike traditional GRC tools, Haris evaluates whether evidence actually satisfies a control in the way an experienced auditor would, providing pass/fail decisions with cited reasoning and remediation guidance. The platform connects compliance, risk, governance, and AI security into one unified system where every module is powered by Haris. It performs one-click framework scans, generates KPIs, KRIs, BIA, DR plans, policies, and risk registers per client context in minutes, and provides executive dashboards for real-time compliance posture views.
Target Audience
Primary customers are startups and SMBs in financial services, technology, and other regulated sectors operating in Saudi Arabia and the GCC that need to achieve and maintain compliance with SAMA, NCA, PDPL, ISO, and other regional frameworks.
Features
- Haris LLM: Purpose-built compliance language model that reasons about evidence and control intent rather than performing keyword matching or summarization
- AI Evidence Scoring Engine: Scans PDF, Excel, Word, and image evidence and scores it against specific regulatory controls with pass/fail reasoning
- One-Click Framework Scan: Instant coverage detection and weak-control identification across preloaded frameworks (SAMA, NCA, PDPL, ISO)
- AI-Generated Artifacts: Produces KPIs, KRIs, business impact analyses, disaster recovery plans, policies, and risk registers tailored to client context
- Sovereign and On-Premise Deployment: Runs in KSA datacenters or on-premise inside client environments, ensuring data never leaves the organization
- Explainable Decisions: Every decision includes cited reasoning, evidence references, and audit trails
- Continuous Controls Validation: Automated ongoing verification of control effectiveness beyond periodic audits
- Regulatory Change Radar: Continuous monitoring of regulatory updates with impact analysis
- Intelligent 3rd Party Vendor Risk Assessment: Automated vendor risk assessments powered by AI analysis of vendor posture and compliance alignment
- Disaster Recovery Strategy Generation: AI-generated disaster recovery strategies based on business impact analysis and regulatory obligations