AI usage policy that fee earners will actually follow
Short, specific and written for practitioners rather than for a compliance file: what may be used, on what matters, with what data, and what must never leave the firm.
Professional services · Doha
Law, accounting and advisory firms in Doha face a specific version of the AI question: their people are already using these tools on client work, and the exposure is confidentiality. Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016) governs personal data; health providers work to Ministry of Public Health requirements.
The local picture
Doha is a compact, high-value market with a large expatriate professional base and a hospitality and retail sector geared to events and premium service. Expectations are high and the tolerance for a missed call or a slow reply is low.
Beyond the federal Qatar data law, entities in the Qatar Financial Centre (QFC) fall under the QFC's own Data Protection Regulations — so, as in the UAE, which regime binds you in Doha depends on where you are registered. Msheireb Downtown and the post-2022 events economy have lifted the baseline expectation to instant, premium, bilingual service.
Regulation. Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016) governs personal data; health providers work to Ministry of Public Health requirements.
Language. A bilingual English/Arabic operation is standard in Doha's customer-facing sectors.
What we would build
Short, specific and written for practitioners rather than for a compliance file: what may be used, on what matters, with what data, and what must never leave the firm.
A reviewed shortlist of tools with acceptable data handling, configured with the right retention and training settings, and least-privilege access to matter data.
A defined review step for AI-assisted work product, proportionate to matter risk, so the firm can evidence human oversight rather than assert it.
Language for engagement letters, DDQ responses and insurer questionnaires that describes your controls accurately — which is only possible once the controls exist.
Where the money goes
Client-privileged material pasted into a consumer AI tool is a disclosure. The firm's difficulty is not usually the exposure itself — it is being unable to say what has been exposed, which makes every question unanswerable.
Without a review standard, AI-assisted work varies enormously by who produced it. The failure mode is not obviously wrong output; it is plausible output that nobody checked.
Client due diligence questionnaires and PI insurers now ask about AI governance directly. "We are looking into it" is an increasingly expensive answer.
Individuals get faster; the firm does not. Without changing how work is scoped, reviewed and billed, personal productivity gains stay personal.
How we would engage
Start here
A short, evidence-led engagement that maps where AI will actually reduce cost or recover time in your business, ranks the options by return and risk, and gives you a sequenced plan you can budget against.
Read moreControl the risk
Your team is already pasting client data into public AI tools. We put the policy, access controls and vendor review in place that let you say yes to AI safely — sized for your business, not for an enterprise compliance department.
Read moreFAQ
Yes. Altus is based in Dubai and delivers across the GCC, including Doha. We build and run voice and chat agents, put AI governance in place, and automate the repetitive work — scoped to your systems and to how business is done in Doha.
Beyond the federal Qatar data law, entities in the Qatar Financial Centre (QFC) fall under the QFC's own Data Protection Regulations — so, as in the UAE, which regime binds you in Doha depends on where you are registered. Msheireb Downtown and the post-2022 events economy have lifted the baseline expectation to instant, premium, bilingual service. We design around Doha's regulation and language reality from the first call rather than retrofitting it later.
No. Bans do not work; they produce undocumented usage on personal devices. The objective is a sanctioned route that is good enough that nobody needs the unsanctioned one.
Honestly. We help you establish scope, assess materiality, and decide what needs disclosing. Most firms find the exposure is narrower than feared but broader than assumed.
We work to your regulator's requirements and your professional obligations as the constraints on the design. We are technologists, not your legal advisers — where a question is legal rather than technical, we will say so and work alongside whoever advises you.
A firm with nothing in place today can have a written policy, a reviewed tool list and configured access inside four weeks. The harder part — changing habits — takes a quarter.
Bring a month of call logs or enquiry data and we will show you, specifically, where it is leaking and what it is worth fixing — for your operation in Doha.
Altus AI concierge
Answers about our work — and books your call
Hello — I'm the Altus concierge. Ask me anything about AI adoption, governance, or the agents we build. If it's a fit, I'll set up a call with the team.
AI-generated. We store what you send so we can follow up. Privacy