Compliance, connected.
Every obligation, audit and corrective action in one place in English and Arabic.
Trusted by government entities and regulators in the UAE
Scroll to explore
Interactive preview
Compliance AssistantExplore the Compliance+ platform
One platform. Complete compliance visibility.
01
Centralize your compliance
Maintain your compliance obligations, requirements, evidence, audits and actions within one controlled environment.
02
Never miss an action
Automated notifications, deadlines and escalation workflows help ensure that responsible employees know what needs to be completed and when.
03
Make better decisions
Give management live dashboards, trends, KPIs and reports instead of manually preparing compliance reports every month.
Spreadsheets. Repeated evidence requests. Email follow‑ups. Compliance+ replaces them with one governed environment, where every requirement, proof and fix stays connected.
What changes.
Eight familiar problems, each with a governed home in the platform.
Requirements scattered across spreadsheets with inconsistent ownership.
Compliance RegisterOwners, applicability and status in one place.
Evidence requested again and again because it isn't linked for reuse.
Evidence RegistryStore once, link to every record it supports.
Audit programs, plans, working papers and findings in separate files.
Internal AuditProgram to results in one governed workflow.
Corrective actions that stall without approval, evidence or effectiveness review.
Corrective ActionsEvidence and effectiveness gates before closure.
Management review decisions lost between cycles.
Management ReviewDecisions and open actions carried forward.
Documents and certificates without review, approval or expiry visibility.
Documents & CertificatesReview, approval and expiry tracking.
Issues followed through email without owners, deadlines or SLA tracking.
Compliance TicketingOwners, SLA targets and full history.
Leaders without a consolidated view of overdue work and performance.
Executive OverviewOverdue work and performance at a glance.
Connected platform
One requirement. Obligation to closure.
01/ 09
Step 1ISMS-5.15
Obligation
Owner, applicability, version and status.
Step 2ISMS-5.15.1
Requirement
The exact authoritative requirement to satisfy.
Step 3CHK-2026-002 · Q-2
Checkpoint
A reusable, weighted checklist item.
Step 4IA-2026-011
Audit response
Tested in an assessment or internal audit.
Step 5Sample set 2
Evidence
Linked once, reused wherever it applies.
Step 6FND-2026-002 · Major NC
Finding
Classification, severity and criterion.
Step 7CA-2026-019
Corrective action
Planned, assigned, progressed and evidenced.
Step 8Verified
Effectiveness
Confirm the fix worked before anything closes.
Step 9Closed
Closure
Full lifecycle history, intact.
Core capabilities
Six disciplines. One data model.
Built from real Compliance+ records, shown with Horizon Holdings demo data.
Compliance Register
Authoritative obligations and requirements: source, obligation type, version and status in one register.
REFERENCETITLETYPESTATUS
QMS-7.5Documented Information ControlISO 9001:2015 Quality Management SystemsLawActive
ISMS-5.24Information Security Incident ManagementISO/IEC 27001:2022ContractActive
PDPL-06Personal Data Processing and ConsentUAE PDPL (Decree-Law 45/2021)StandardActive
BCM-8.4Business Continuity PlansISO 22301:2019StandardDraft
Checklist Library
Bilingual checklist templates linked to requirements, versioned and ready for audit planning.
CHECKLISTITEMSSTATUS
Access Control Management Checklistقائمة تحقق إدارة التحكم في الوصول5 itemsActive
Personal Data Processing and Consentقائمة تحقق معالجة البيانات الشخصية4 itemsActive
Business Continuity Plans Checklistقائمة تحقق خطط استمرارية الأعمال3 itemsClosed
Audit Programs
A consolidated audit calendar: planned, plan created, in progress and completed.
YEAR2026
April
SMTWTFS
123456789101112131415161718192021222324252627282930
October
SMTWTFS
12345678910111213141516171819202122232425262728293031
PlannedPlan createdIn progressCompleted
Evidence Registry
Govern evidence ownership, files, dates, confidentiality, status, links and freshness.
EVIDENCE IDEVIDENCE TITLEFRESHNESSSTATUS
Sample set 1Q-1 · Is there an approved access control policy?CurrentActive
Sample set 2Q-2 · Are user access rights reviewed at least quarterly?CurrentActive
Sample set 4Q-4 · Is access revoked promptly for leavers?CurrentActive
Sample set 5Q-5 · Is multi-factor authentication enforced for remote access?CurrentActive
Corrective Actions
CAPA records created from approved findings, with owners, status and progress.
AUDIT FINDINGCAPA STATUS
FND-2026-005 · IA-2026-013Requirement not fully met: Is vendor due diligence performed before onboarding?SubmittedCA-2026-022
FND-2026-004 · IA-2026-012Requirement not fully met: Is the induction programme completed within 30 days?ApprovedCA-2026-021
FND-2026-003 · IA-2026-011Requirement not fully met: Is access revoked promptly for leavers?Under ProgressCA-2026-020
FND-2026-002 · IA-2026-011Requirement not fully met: Are user access rights reviewed at least quarterly?OverdueCA-2026-019
Audit Analysis
Execution throughput, findings by department and category, and smart trend analysis.
1Programs
2Planned
5Completed
5Findings
Findings by department
Information Technology2
Finance1
Human Resources1
Quality & Excellence1
5Total
Agentic Assistant
Knows what's next. Explains why.
Recommendations are read-only calculations. Every score shows its inputs, and controlled changes still require the authorized workflow.
Recommended next actions
Scoped to your permissionsClose overdue corrective action CA-2026-019HIGH
Why: Linked to Major NC FND-2026-002 and contributes 25% of the compliance score.
Open corrective action ›Plan renewal of ISO/IEC 27001:2022MEDIUM
Why: HH-27001-2023 expires in 28 days; one external audit is due.
Review 2 documents past their review dateNORMAL
Why: PRO-2026-007 and PRO-2026-009 are overdue and contribute 15% of the score.
Agentic AssistantPrioritizes existing work (overdue actions, expiring certificates, audit tasks), then opens the record.
Compliance AgentThe agent prepares the path; you remain in control. It opens the correct workspace with safe defaults. Approvals, signatures and permission checks stay enforced.
Audit & evidence
Plan it. Run it. Prove it.
1
Program
Schedule the annual program in list, calendar or coverage view.
2
Plan
Issue the plan with attendees and requested documents. Issued plans lock.
3
Execute
Test the checklist, capture notes, evidence and attendance.
4
Review
Raise findings, submit for review, approve and complete.
5
Results
Generate bilingual PDF or Excel results.
▦
Program registryPlan the annual internal audit program, then generate controlled audit plans.
+ New programConsolidated audit calendarProgram registry
YEAR 2026
PlannedCompleted
April
SMTWTFS
123456789101112131415161718192021222324252627282930
October
SMTWTFS
12345678910111213141516171819202122232425262728293031
▦
Plan registryDraft, issued, and recalled plans generated from audit program items.
PLAN NUMBERAUDIT TITLESTATUS
PLAN-2026-012Quality Management System AuditAP-2026-015Issued
PLAN-2026-016Procurement Process AuditAP-2026-019Issued
PLAN-2026-013Customer Experience Process AuditAP-2026-016Issued
PLAN-2026-014Information Security AuditAP-2026-017Issued
PLAN-2026-015Human Resources Process AuditAP-2026-018Issued
▦
Active auditsStart issued plans, conduct fieldwork, capture evidence, and submit controlled results.
Audit execution registry05
AUDIT CODEAUDIT TITLESTATUS
IA-2026-011Information Security AuditCompletedOpen
IA-2026-013Procurement Process AuditCompletedOpen
IA-2026-009Quality Management System AuditCompletedOpen
IA-2026-012Human Resources Process AuditCompletedOpen
IA-2026-010Customer Experience Process AuditCompletedOpen
▦
Finding registryAll audit-linked and standalone findings visible to your role.
+ Add finding8Total findings
0Recurring
7Non-conformity
1Observation
FINDING CODEDESCRIPTIONCLASS
FND-2026-005Requirement not fully met: Is vendor due diligence performed before onboarding?FinanceMinor NC
FND-2026-004Requirement not fully met: Is the induction programme completed within 30 days?Human ResourcesMinor NC
FND-2026-003Requirement not fully met: Is access revoked promptly for leavers?Information TechnologyMinor NC
FND-2026-002Requirement not fully met: Are user access rights reviewed at least quarterly?Information TechnologyMajor NC
▦
Audit analysisAnalyze execution throughput, finding severity, and recurring finding groups.
1Programs
2Planned
0In progress
5Completed
5Findings
Recent audits · started within the selected reporting period
AUDIT CODEAUDIT TITLESTARTEDSTATUS
IA-2026-011Information Security Audit2026-09-30Completed
IA-2026-013Procurement Process Audit2026-09-30Completed
IA-2026-009Quality Management System Audit2026-09-30Completed
IA-2026-012Human Resources Process Audit2026-09-30Completed
Findings & remediation
Nothing closes until it's proven.
Completion requires 100% progress and evidence. Closure requires effectiveness verification.
0%Planned
CA-2026-019 · from FND-2026-002 (Major NC)
✓Finding approved
✓Action planned
✓Progress to 100%
✓Evidence registered
✓Effectiveness verified
✓Closed, history kept
Compliance ticketing
Every follow-up has an owner.
Governed compliance requests, not a help desk. Create them manually or through approved rules, link them to the record they concern, and track SLA targets to resolution.
Rule-based creationWatchersSLA pause & resumeEscalationsInternal commentsCSV export
Explore ticketing ›TicketsGoverned requests, assignments and resolution SLAs.
Ticket SLA policies+ New ticket
8Open
0SLA breached
8Unassigned
0Waiting
TICKET NUMBERTYPEPRIORITYSTATUS
TKT-2026-0008FND-2026-005: Is vendor due diligence performed before onboarding?ReviewHighNew
TKT-2026-0005FND-2026-002: Are user access rights reviewed at least quarterly?ReviewHighNew
TKT-2026-0006FND-2026-003: Is access revoked promptly for leavers?ReviewHighNew
TKT-2026-0002ASM-2026-002: Access Control Review 2026RequestHighNew
TKT-2026-0003ASM-2026-004: PDPL Readiness AssessmentRequestHighNew
1–8 of 8 rowsPrevious1Next
Support Assistant
Ask a question. Get the steps.
The Support Assistant inside Compliance+ answers in English or Arabic with step-by-step guides for every module, opens the right page, and hands anything it can't answer to our team.
Guides for every module31 step-by-step guides, from creating an obligation to closing a corrective action.
English and ArabicUnderstands questions in either language, including Arabic spelling variants.
Straight to the pageEvery answer opens the exact screen in Compliance+ where the work is done.
Our team, when you need itNot answered? One tap sends the question to our team, who reply by email.
Support AssistantHi, how can we help?
EN · عHow do I issue an audit plan?
Prepare and issue an audit plan
Each audit item gets a plan that must be issued before the audit starts.
- 1Open Audit Plans and select the draft plan.
- 2Complete the objective, scope, location, criteria, agenda and checklists.
- 3Select Issue plan. The plan is locked.
Tip: To change an issued plan, recall it first.
Open in Compliance+ ›Did this answer your question?YesNo
Ask a question…
→Management visibility
The whole picture. Before it's urgent.
Each person gets a focused queue. Leaders see overdue actions, trends and certificate health, all from permission-scoped records.
My ComplianceA focused action queue.
OVERDUE1!
DUE WITHIN 7 DAYS0◷
AWAITING ACTION0☰
COMPLETED IN 30 DAYS0✓
Action queue
Management review decisionRoll out the PDPL awareness programme to all staff · Sep 23, 2026Overdue
Executive Overview57% compliance score.
57%
Management attentionNeeds AttentionClose 1 overdue corrective action(s)Contributes 25% of the compliance scoreFix ↗
Review 2 document(s) past their review dateContributes 15% of the compliance scoreFix ↗
Close 1 overdue management review decision(s)Contributes 10% of the compliance scoreFix ↗
CertificatesExpiry, tracked.
4Total
3Active
1Expiring
0Expired
HH-27001-2023ISO/IEC 27001:2022 · 2026-10-28Expiring28 days left
HH-9001-2024ISO 9001:2015 · 2027-08-26Active330 days left
HH-45001-2024ISO 45001:2018 · 2027-12-04Active430 days left
HH-22301-2025ISO 22301:2019 · 2029-03-13Active895 days left
Management ReviewDecisions that carry forward.
Meeting registryQuarterly reviews, status, schedule and location.New meeting
MR-2026-003 · Q2 Management ReviewHead Office - Boardroom · 16 Aug 2026Completed
Decisions carried forward
Roll out the PDPL awareness programme to all staffDue Sep 23, 2026 · Progress 0%Overdue
Bilingual by design
Full English and Arabic interfaces with right-to-left behavior and bilingual audit results. Tap a language.
My ComplianceAssigned to you · 3
Management review decisionOverdue
Close CA-2026-019Due today
Review PRO-2026-007In 2 days
Multi-framework
Many standards. One platform.
Reuse controls, evidence and checkpoints across the frameworks your organization loads and governs.
ISO
Management system standards
ISO 9001:2015 · ISO/IEC 27001:2022 · ISO 22301:2019 · ISO 45001:2018
REG
Regulatory requirements
UAE PDPL (Decree-Law 45/2021) and sector regulations.
POL
Internal policies
Corporate policy frameworks, governed like any standard.
CFG
Configurable frameworks
Obligation types: Standard, Law, Regulation, Contract.
See it with your workflows.
Tell us the frameworks and workflows you'd like to discuss. We'll walk through them in a live demo using fictional data.
✓Built for compliance, audit and process owners
✓Role-based visibility and isolated organization data
✓English and Arabic from day one