# Agentic AI and AI security for Riyadh organisations Saudi organisations are moving fast on AI, and most of them need data to stay in the Kingdom. We help Riyadh banks, government entities, energy companies and retailers plan, build and secure AI agents that run in-Kingdom or fully on-premises, with controls mapped to the Saudi PDPL, NCA and SAMA. ## Key facts - **Served from:** Our Middle East office in Bur Dubai, with on-site delivery in Riyadh - **Deployment options:** Google Cloud Dammam region; Oracle Cloud Jeddah region; sovereign on-premises stacks with Red Hat OpenShift, NVIDIA and HPE inside Saudi Arabia - **Regulations we design for:** Saudi Personal Data Protection Law (Royal Decree M/19), overseen by SDAIA; NCA Essential Cybersecurity Controls; SAMA Cyber Security Framework for financial institutions; SDAIA AI Ethics Principles; ISO/IEC 42001 ## What we deliver - [Agentic AI for banks](https://www.nitronedge.com/regions/middle-east/banking/): Onboarding, fraud and service agents for Saudi banks, with controls mapped to SAMA's cyber framework. - [Sovereign, in-country AI](https://www.nitronedge.com/solutions/agentic-ai-governance/sovereign-on-prem-ai/): In-Kingdom AI stacks for workloads that cannot leave Saudi Arabia under the PDPL. - [Government services agents](https://www.nitronedge.com/industries/public-sector/): Agents that help ministries and authorities handle cases faster, with an official signing off each decision. - [AI governance](https://www.nitronedge.com/services/ai-governance/): Policies, risk ratings and audit trails that line up with SDAIA's AI ethics principles. ## FAQ ### Do you have an office in Riyadh? Our Middle East office is in Bur Dubai. Riyadh clients get on-site workshops and delivery from that team, with remote support between visits. Every enquiry gets a reply within 6 hours. ### Can AI agents keep data inside Saudi Arabia? Yes. The Saudi PDPL restricts transfers of personal data outside the Kingdom, so we default to in-Kingdom hosting: a Saudi cloud region or a sovereign on-premises stack in your own data centre. ### Do you work with SAMA-regulated banks? Yes. We design agents for least-privilege access, human approval on material actions and full audit trails, and map those controls to the SAMA Cyber Security Framework and the NCA Essential Cybersecurity Controls. ### Can your agents work in Arabic? Yes. We build and test agents in Arabic and English using your own customer conversations and documents.