Compliance

Built for serious operators.

RIME is designed to support customers operating under Saudi data governance requirements. That includes practical controls around access, purpose, retention, accountability, and operational review.

Certified, registered, and based here.

01

Aramco CCC

RIME holds the Unified Aramco Cybersecurity Compliance Certificate (CCC), General classification, under Aramco's SACS-210 third-party cybersecurity standard.

02

Registered nationally

RAEM for Artificial Intelligence is registered with NDGP, SDAIA, ZATCA and the Saudi Business Center.

03

A fully Saudi-based team

Every RIME employee is based in Saudi Arabia. Your deployment is built, supported and maintained from inside the Kingdom.

04

Your data stays in the Kingdom

Footage stays in your branch by default. Optional cloud storage is hosted inside Saudi Arabia, or on your own servers.

The compliance baseline.

We do not treat compliance like a PDF someone downloads after the sale. Controls need to exist in the product and in the operating model.

Defined purpose

Each deployment should have a clear business reason for processing operational video and events.

Controlled access

Sensitive outputs should be limited to authorized users with a legitimate operational role.

Documented retention

Retention should be set intentionally and reviewed instead of left open-ended.

Traceable oversight

Teams need a record of access, configuration changes, and review actions.

How we support PDPL-aligned operations.

  • We structure deployments around a specific and documented operational purpose.
  • We support controlled access and role-based handling of sensitive operational data.
  • We help customers define retention periods that match internal governance and legal review.
  • We work with customers on operational documentation needed for their internal compliance process.

How we align with SDAIA expectations.

  • Governance is treated as part of deployment, not an afterthought.
  • Operational AI workflows are designed to be reviewable, scoped, and accountable.
  • Customers can evaluate data handling decisions before expanding to additional sites or use cases.

What this means in practice.

Scoping before rollout

We define what is being monitored, why it matters, and who should receive the resulting alerts.

Configuration with guardrails

Alert logic, retention settings, and access rules are configured to fit the customer's operating environment.

Review as the program grows

As customers add branches, cameras, or use cases, governance decisions should be revisited instead of copied blindly.

Plain-English note

Compliance is a joint effort. RIME provides the product controls and implementation structure. Customers remain responsible for their internal policies, notices, approvals, and legal review.