Question 1

How is Yaqza:Align different from other GRC platforms?

Accepted Answer

Most GRC tools are built for Western frameworks and large compliance teams, then partially localized for MENA. Yaqza:Align is built the other way around — engineered natively for MENA regulations from day one, operated without a large compliance department, and deployable on your own infrastructure.

Question 2

How does Yaqza:Align handle regulatory frameworks?

Accepted Answer

Yaqza:Align's control engine is framework-agnostic. We map each control once to its regulatory sources, then the same evidence satisfies every framework it applies to — across regional regulations like Egypt PDPL and Saudi NCA, and global standards like ISO 27001 and SOC 2.

Question 3

Is on-premise or air-gapped deployment available?

Accepted Answer

Yes. Sovereign deployment is a core design principle, not an add-on. Yaqza:Align supports Cloud-Isolated (managed private instance) and Air-Gapped On-Premise (full sovereignty, for banks, government, and critical infrastructure). Your data, your deployment, your control.

Question 4

How quickly do we see compliance visibility after deployment?

Accepted Answer

Immediately. The moment our endpoint agent is installed and the first data pull completes, compliance coverage populates in your dashboard — you see your actual posture from day one, not after weeks of manual evidence collection.

Question 5

How does Yaqza:Align integrate with our existing stack?

Accepted Answer

Yaqza:Align is designed to fit the infrastructure you already run. We will provide integrations across the enterprise stack — identity providers, SIEMs, ticketing platforms, and major cloud providers. Integration priorities are shaped by our early partners — tell us your stack and we'll align the roadmap.

Question 6

How do we get started?

Accepted Answer

Two paths, depending on timing. Ready to evaluate? Book a demo. Earlier in the process? Request early access and we'll reach out as onboarding slots open. You can also try our Free Security Assessment, linked in the main nav.

Question 7

Is Arabic support fully native, or is it UI-only?

Accepted Answer

Yaqza:Align is Arabic-first, not Arabic-translated. Every module — from policy documentation to RAQIB, our AI companion — operates natively in Arabic alongside English. We continuously refine fluency across specialized GRC terminology, with particular attention to regional frameworks.

Question 8

Which frameworks are on the roadmap?

Accepted Answer

Our immediate roadmap includes ISO 27001:2022, SOC 2 Type II, SAMA Cybersecurity Framework, and PCI DSS. UAE's NESA and Kuwait's frameworks follow as we expand across the GCC. We release coverage once it's genuinely audit-ready, not before.

Question 9

Can Yaqza:Align handle multiple frameworks at the same time?

Accepted Answer

Yes — this is one of the core reasons Yaqza:Align exists. We map shared controls across frameworks automatically, so evidence collected once satisfies requirements everywhere it applies. One control, multiple frameworks, zero duplicate work.

Question 10

Where is our data stored, and who has access to it?

Accepted Answer

Your choice. In Air-Gapped On-Premise deployments, your data never leaves your infrastructure and Yaqza has no access. In Cloud-Isolated deployments, data resides in a dedicated private instance in a region you select, with strict access controls and full audit logging.

Question 11

What happens to our data if we end the contract?

Accepted Answer

Full data export on request in standard formats, with a clearly defined retention and deletion process. All data-handling terms are specified in the contract, and the process is auditable from start to finish.

Question 12

Do you offer deployment and audit support?

Accepted Answer

Yes. Yaqza:Align includes onboarding, framework mapping review, and guidance through your first internal audit cycle. For external certification, our GRC Advisory team works alongside your auditors to ensure outputs meet their evidence standards.

Question 13

How do you handle framework updates when regulations change?

Accepted Answer

Regulatory tracking is core to the platform, not a periodic update. When NCA publishes a revision or PDPL issues new executive regulations, our GRC team maps the changes and pushes updated controls to your deployment — no manual policy rewrites, no consultant re-mapping.

Question 14

What's the difference between Standard and Premium?

Accepted Answer

Standard (Cloud-Isolated) is a managed private instance deployed in a region you select — faster onboarding, ideal for mid-market and regulated SMEs. Premium (Air-Gapped On-Premise) is a full deployment inside your infrastructure with zero external connectivity, built for banks, government, and critical infrastructure. Same platform capabilities; the difference is where the engine runs.

Question 15

Who is Yaqza, and how do we know you'll be here long-term?

Accepted Answer

Yaqza is a MENA-native cybersecurity company building the region's sovereign GRC and SecOps ecosystem. We're backed by the WE Innovate Star accelerator (supported by WE Telecom Egypt, NTRA, EG-CERT, and AGX Consultant), presented at BlackHat MENA, placed 3rd in Digitopia 2025, and are building alongside early design partners. Our commitment to MENA is structural — it's what the company is built for.

How can we help?

Frequently Asked Questions

Still need help?