Built for the Gulf & Iraq

Governance, Risk & Compliance
Built for Gulf & Iraq

One integrated platform for risk, compliance, audit and policy — with Gulf and Iraqi regulatory frameworks built in, and full support for both Arabic and English.

Sign In Explore Features
Seven regulators The six GCC states plus Iraq
Arabic and English Fully bi-directional UI and Arabic PDF reporting
Row-level tenant isolation Enforced in the database, not just the app
Board-ready reporting With a complete audit trail you can hand an examiner
Supported Regulators Bahrain CBB Saudi Arabia SAMA · NCA UAE CBUAE · TDRA Kuwait CBK · CITRA Qatar QCB Oman CBO · TRA Iraq CBI
Platform Capabilities
Everything Your GRC Team Needs

One integrated platform replacing spreadsheets, disconnected tools, and manual records.

Risk Register & Heat Map
Sector-appropriate risk taxonomy. Assess, treat and monitor risks with automated scoring, treatment plans and KRI breach alerts to risk owners.
Compliance Frameworks
Gulf, Iraqi and international frameworks with official reference links. Track requirements, assign owners, attach evidence and see the compliance rate for every framework.
Audit Management
Plan, execute and report audits with configurable approval workflows. Track findings from discovery to closure, linked to remediation actions and a hash-protected activity trail.
Policy Management
Publish, version and distribute policies. Track acknowledgments of the current version, send automated reminders and see exactly who still owes one.
Vendor Risk (TPRM)
Assess and monitor third parties with risk scoring, contract tracking, evidence management and questionnaires completed in-house by your own team.
Executive Reporting
Board-ready reports in PDF and Excel with one click — risk heatmaps, compliance dashboards and scheduled email delivery.
Enterprise Access & Integration
OpenID Connect single sign-on (Microsoft Entra ID, Okta, Google), granular role-based permissions, two-factor authentication, outbound webhooks, Jira and ServiceNow ticketing, and an authenticated ingest endpoint for continuous control monitoring.
Built-In Regulatory Coverage
Gulf, Iraq & International Frameworks

Covering banking, fintech, insurance, telecom, government and healthcare across the six GCC states and Iraq — each with its official authority and reference link.

CBB RulebookCentral Bank of Bahrain Bahrain
SAMA FrameworkSaudi Central Bank Saudi Arabia
NCA ControlsNational Cybersecurity Authority Saudi Arabia
CBUAE StandardsCentral Bank of the UAE UAE
UAE Information Assurance RegulationTDRA — telecom & designated critical entities UAE
CBK GuidelinesCentral Bank of Kuwait Kuwait
CITRA RegulationsCommunication & Information Technology Regulatory Authority Kuwait
QCB GuidelinesQatar Central Bank Qatar
CBO DirectivesCentral Bank of Oman Oman
CBI InstructionsCentral Bank of Iraq Iraq
ISO 27001Information Security ManagementInternational
ISO 31000Risk ManagementInternational
NIST CSFCybersecurity FrameworkInternational
Getting Started
Up and Running in Minutes

No consultants, no lengthy implementation. TrustNex configures your workspace automatically based on your sector and country.

1
Create Your Workspace
Sign up, enter your organization name, and select your country and sector. Takes two minutes.
2
Automatic Framework Loading
TrustNex loads your applicable regulatory frameworks, indicator templates and risk categories automatically.
3
Invite Your Team
Add users with role-based access (Admin, Risk Manager, Compliance Officer, Auditor and more) and assign tasks.
4
Start Managing GRC
Register risks, map controls to compliance requirements, run audits and generate board-ready reports — all in one place.

Ready to Strengthen Your GRC Program?

Start with a workspace tailored to your sector and country, and manage risk and compliance with confidence.

Sign In