Averon  //  AI Deployment Security Riyadh  ·  Data resident in KSA  ·  NCA-aligned reporting أمن أنظمة الذكاء الاصطناعي
Averon/In-Kingdom

Inside the perimeter, under the jurisdiction.

Meaningful adversarial testing of an AI deployment requires the corpus, the tool registry, and production-equivalent identity. That access cannot be extended across a border. It is the reason this work has largely not been done in the region — and the reason Averon exists here.

Jurisdictional posture
Base
Riyadh, Saudi Arabia
Data residency
All engagement data in KSANo cross-border transfer at any stage.
Personnel
In-region, cleared to client standard
Reporting
Arabic and English
Alignment
NCA ECC · SAMA CSF · PDPL
01 Data residency

Nothing crosses the border. Including the findings.

Residency is usually discussed as a property of the system under test. In an assessment it is also a property of the assessment itself — the evidence, the payloads, the extracted records, and the report are all derived from regulated data.

  1. 01 Testing infrastructure in-Kingdom Tooling runs on infrastructure located in the Kingdom, or on client-provided infrastructure inside the client's own environment, at the client's election.
  2. 02 Evidence never leaves Captured responses, extracted records, prompts and completions are stored in-Kingdom for the retention period and destroyed to a documented standard afterwards.
  3. 03 No offshore analyst access No part of the engagement — testing, analysis, review, or drafting — is performed by personnel outside the region, and no remote access path to engagement data exists from outside it.
  4. 04 Reports produced and held locally Drafting, review and delivery occur on in-Kingdom systems. Distribution is to a named recipient list agreed at onboarding.
  5. 05 No client data in our tooling Our technique library contains no client-identifiable material. Nothing learned in one engagement is carried into another in a form that could identify its origin.
Fig. 02 — Delivery topologiesClient election
Jurisdictional boundary — Kingdom of Saudi Arabia Topology A Averon operates inside the client environment client-provided workstations · client identity · no external egress Topology B Averon sovereign-cloud tenancy, in-Kingdom region dedicated tenancy · client-held encryption keys · in-region only Topology C Air-gapped on-premise physical media transfer · no network path · escorted access
All three topologies keep engagement data within the jurisdiction. Topology is selected during scoping based on the classification of the corpus under test and the client's own control environment.
02 Regulatory alignment

Written for the people who sign the submission.

Findings are delivered already mapped to the frameworks your organisation is assessed against, in the language and structure your compliance function uses. The mapping is indicative and confirmed with your team during scoping — the frameworks below are the ones our reporting is structured around.

FrameworkAuthorityApplies toAveron reporting alignment
Essential Cybersecurity Controls (ECC) NCA — KSA Government entities and critical national organisations Findings mapped to ECC domains, principally identity and access management, data protection, penetration testing, logging and monitoring, and third-party and cloud.
Cloud Cybersecurity Controls (CCC) NCA — KSA Cloud-hosted deployments and their service providers Applied where inference, retrieval or orchestration runs on cloud infrastructure, including provider-side model services.
Critical Systems Cybersecurity Controls (CSCC) NCA — KSA Systems designated critical by their operating entity Applied where the AI deployment influences or acts upon a designated critical system.
Cyber Security Framework SAMA Banks, insurers and financial institutions under SAMA supervision Findings additionally expressed against the framework's identity and access, data protection, and third-party domains for supervisory reporting.
Personal Data Protection Law (PDPL) SDAIA — KSA Any deployment processing personal data Exposure findings assessed for personal-data content, lawful basis, minimisation and cross-border transfer implications.
AI Ethics Principles SDAIA — KSA AI systems deployed by Saudi entities Referenced where findings bear on transparency, accountability, or human oversight of the deployed system.
Regional equivalents UAE · Qatar · Bahrain GCC deployments outside the Kingdom Reporting structured against the applicable national authority's controls for engagements elsewhere in the Gulf.
What we do not claim

Averon is an independent assessor. We do not certify, accredit, or licence, and an Averon engagement is not a substitute for any mandated audit or authorisation. What we provide is technical evidence of control effectiveness, structured so the accountable party can rely on it in their own submission.

03 Arabic capability

Arabic is not a translation task. It is a test surface.

Safety training, content filtering and guardrail evaluation are overwhelmingly developed and benchmarked in English. The same control frequently behaves differently when the input is Arabic — and an attacker in this region has no reason to write in English.

Averon tests in both languages as a matter of standard scope, not as an add-on.

  • Modern Standard Arabic and major Gulf dialects, including transliterated and Arabizi forms.
  • Mixed-script and code-switched payloads, which routinely defeat single-language filtering.
  • Diacritic, homoglyph and bidirectional-control-character evasion against normalisation logic.
  • Retrieval quality and entitlement behaviour over Arabic corpora, where embedding performance often differs materially.
  • Guardrail differential: the same attack, both languages, with the delta reported as a finding.
Reporting

Deliverables in both languages

Executive-facing artefacts — the launch position, the entitlement differential and the control mapping — are issued in Arabic and English, both authored rather than machine-translated, and both reviewed by the engagement lead.

تُصدر التقارير التنفيذية باللغتين العربية والإنجليزية، وتُحفظ جميع بيانات الاختبار داخل المملكة.

الاختبار السيبراني الهجومي لأنظمة الذكاء الاصطناعي — قبل التشغيل وبعده.

Why we test both

Where a deployment applies input filtering, that filter's effectiveness is not necessarily equivalent across languages. The asymmetry is easy to miss, because the evaluation that produced confidence in the control was usually conducted in English.

04 Position

Why this cannot be delivered from outside the region.

This is not a commercial argument. It is a structural one about what the work requires.

Access

The engagement requires the real corpus and production-equivalent identity. A vendor that cannot be granted that access can only test the interface — which is the one part of the system that was already tested.

Residency

Evidence derived from regulated data is itself regulated data. An engagement whose artefacts leave the jurisdiction creates the exposure it was commissioned to find.

Register

A report that must be reworked before it can be submitted has not finished. Mapping to the applicable national controls, in Arabic, is part of the deliverable — not an exercise left to the client.

The independent, in-region security layer for organisations deploying AI where sovereignty, data residency and regulatory alignment are not negotiable terms.

Averon — positioning

Discuss delivery topology and scope.

Scoping sessions are held in Riyadh or on your premises, in Arabic or English.

Request an engagement
Riyadh, Saudi Arabia
admin@averon.systems