AI usage policy that fee earners will actually follow
Short, specific and written for practitioners rather than for a compliance file: what may be used, on what matters, with what data, and what must never leave the firm.
Professional services · Riyadh
Law, accounting and advisory firms in Riyadh face a specific version of the AI question: their people are already using these tools on client work, and the exposure is confidentiality. Saudi Arabia's PDPL, overseen by SDAIA, introduces data-residency and cross-border transfer restrictions that limit how international AI providers can serve Saudi customers — a real reason to work with a firm that architects for it.
The local picture
Riyadh is the fastest-moving market in the Gulf, with Vision 2030 pouring investment into retail, hospitality, healthcare and automotive. Demand is huge and the pressure is on operations to keep up — exactly where AI on the repetitive work pays back quickest.
Riyadh concentrates the Kingdom's decision-making and capital: SDAIA and the ministries sit here, the King Abdullah Financial District (KAFD) anchors the financial sector, and the Regional HQ programme is pulling multinational headquarters into the city under Vision 2030. The pace means operations are under constant pressure to keep up.
Regulation. Saudi Arabia's PDPL, overseen by SDAIA, introduces data-residency and cross-border transfer restrictions that limit how international AI providers can serve Saudi customers — a real reason to work with a firm that architects for it.
Language. Arabic is the primary language of business and customer service in Riyadh; Modern Standard and Gulf Arabic handling is essential, with English as a secondary.
What we would build
Short, specific and written for practitioners rather than for a compliance file: what may be used, on what matters, with what data, and what must never leave the firm.
A reviewed shortlist of tools with acceptable data handling, configured with the right retention and training settings, and least-privilege access to matter data.
A defined review step for AI-assisted work product, proportionate to matter risk, so the firm can evidence human oversight rather than assert it.
Language for engagement letters, DDQ responses and insurer questionnaires that describes your controls accurately — which is only possible once the controls exist.
Where the money goes
Client-privileged material pasted into a consumer AI tool is a disclosure. The firm's difficulty is not usually the exposure itself — it is being unable to say what has been exposed, which makes every question unanswerable.
Without a review standard, AI-assisted work varies enormously by who produced it. The failure mode is not obviously wrong output; it is plausible output that nobody checked.
Client due diligence questionnaires and PI insurers now ask about AI governance directly. "We are looking into it" is an increasingly expensive answer.
Individuals get faster; the firm does not. Without changing how work is scoped, reviewed and billed, personal productivity gains stay personal.
How we would engage
Start here
A short, evidence-led engagement that maps where AI will actually reduce cost or recover time in your business, ranks the options by return and risk, and gives you a sequenced plan you can budget against.
Read moreControl the risk
Your team is already pasting client data into public AI tools. We put the policy, access controls and vendor review in place that let you say yes to AI safely — sized for your business, not for an enterprise compliance department.
Read moreFAQ
Yes. Altus is based in Dubai and delivers across the GCC, including Riyadh. We build and run voice and chat agents, put AI governance in place, and automate the repetitive work — scoped to your systems and to how business is done in Riyadh Province.
Riyadh concentrates the Kingdom's decision-making and capital: SDAIA and the ministries sit here, the King Abdullah Financial District (KAFD) anchors the financial sector, and the Regional HQ programme is pulling multinational headquarters into the city under Vision 2030. The pace means operations are under constant pressure to keep up. We design around Riyadh's regulation and language reality from the first call rather than retrofitting it later.
No. Bans do not work; they produce undocumented usage on personal devices. The objective is a sanctioned route that is good enough that nobody needs the unsanctioned one.
Honestly. We help you establish scope, assess materiality, and decide what needs disclosing. Most firms find the exposure is narrower than feared but broader than assumed.
We work to your regulator's requirements and your professional obligations as the constraints on the design. We are technologists, not your legal advisers — where a question is legal rather than technical, we will say so and work alongside whoever advises you.
A firm with nothing in place today can have a written policy, a reviewed tool list and configured access inside four weeks. The harder part — changing habits — takes a quarter.
Bring a month of call logs or enquiry data and we will show you, specifically, where it is leaking and what it is worth fixing — for your operation in Riyadh.
Altus AI concierge
Answers about our work — and books your call
Hello — I'm the Altus concierge. Ask me anything about AI adoption, governance, or the agents we build. If it's a fit, I'll set up a call with the team.
AI-generated. We store what you send so we can follow up. Privacy