Skip to main content
A
Docs

Frameworks

Compliance framework coverage — UAE AI Ethics, SDAIA, Qatar AI Charter, Oman AI & Digital, and EU AI Act.

Framework Registry

Comply ships with five regulatory frameworks covering the major GCC jurisdictions and the EU. Each framework is defined as a structured JSON file containing requirements, categories, weights, and scoring criteria.

curl http://localhost:8004/api/v1/comply/frameworks

UAE AI Ethics Guidelines v2.0

The UAE's national AI ethics framework, published by the UAE AI Office, establishes principles for responsible AI deployment across government and private sector. It covers 12 requirements across transparency, accountability, fairness, and privacy.

Key requirements:

RequirementCategoryWeight
Transparent AI decision-makingTransparencyHigh
Algorithmic bias detection and mitigationFairnessHigh
Human oversight mechanismsAccountabilityHigh
Data privacy and consentPrivacyCritical
Audit trail for AI decisionsAccountabilityHigh
Explainability of AI outputsTransparencyMedium
Data encryption at rest and in transitSecurityHigh
Incident response proceduresGovernanceMedium
Regular performance monitoringOperationsMedium
Stakeholder impact assessmentEthicsMedium
Accessibility considerationsInclusionLow
Documentation and record keepingComplianceMedium

UAE Deployment

For AI systems deployed within UAE government entities, the UAE AI Ethics framework is typically the primary compliance target. Assess against this framework first, then layer additional frameworks as needed.

SDAIA AI Ethics Principles v1.0

Saudi Arabia's Data and AI Authority (SDAIA) published AI ethics principles that govern AI deployment within the Kingdom. The framework emphasizes data sovereignty, Islamic values alignment, and national security considerations across 12 requirements.

Key focus areas:

  • Data localization and sovereignty
  • Human dignity and Islamic values alignment
  • National security safeguards
  • Algorithmic fairness across demographic groups
  • Transparency in AI-assisted government decisions
  • Accountability chains for automated decisions

Qatar National AI Ethics Framework v1.0

Qatar's National AI Strategy includes an ethics framework with 10 requirements focused on AI governance in public services, research, and industry. The framework aligns with Qatar's National Vision 2030 and emphasizes education and innovation.

Key focus areas:

  • AI governance committees and oversight
  • Public sector AI deployment standards
  • Data protection aligned with Qatar's data privacy law
  • AI literacy and public awareness
  • Research ethics in AI development

Oman AI & Digital Future Program

Oman's AI governance framework, part of the broader Oman Vision 2040 digital transformation strategy, covers 10 requirements with emphasis on workforce development, economic diversification, and responsible AI adoption.

Key focus areas:

  • AI workforce development and Omanization
  • Economic impact assessment of AI deployments
  • Cross-border data governance
  • AI integration with e-government services
  • Digital infrastructure readiness

EU AI Act 2024

The European Union's AI Act is the world's first comprehensive AI regulation. It classifies AI systems by risk level and imposes corresponding requirements. Comply supports 12 requirements from the Act, particularly relevant for GCC organizations doing business with or operating in the EU.

Risk categories:

Risk LevelDescriptionRequirements
UnacceptableSocial scoring, real-time biometric surveillanceBanned
HighAI in critical infrastructure, education, law enforcementFull compliance
LimitedChatbots, deepfakesTransparency obligations
MinimalSpam filters, AI in gamesNo obligations

Key requirements for high-risk systems:

  • Risk management system
  • Data governance and quality
  • Technical documentation
  • Record-keeping and logging
  • Transparency and user information
  • Human oversight
  • Accuracy, robustness, and cybersecurity

Framework Definitions

Frameworks are stored as JSON files in the frameworks/ directory:

comply/frameworks/
├── uae-ai-ethics.json
├── sdaia-ai-ethics.json
├── qatar-ai-ethics.json
└── eu-ai-act.json

Each file follows a standard schema:

{
  "id": "uae-ai-ethics",
  "name": "UAE AI Ethics Guidelines",
  "version": "2.0",
  "region": "uae",
  "requirements": [
    {
      "id": "req-001",
      "name": "Transparent AI decision-making",
      "category": "transparency",
      "weight": "high",
      "description": "AI systems must provide clear explanations...",
      "check_field": "has_explainability"
    }
  ]
}

To add a new framework, create a JSON file following this schema and place it in the frameworks/ directory. The registry loads all framework files at startup.

Comparing Frameworks

Different frameworks emphasize different aspects of AI governance. Run a multi-framework assessment to see how a system scores across all frameworks:

curl -X POST "http://localhost:8004/api/v1/comply/assess?framework_ids=uae-ai-ethics&framework_ids=sdaia-ai-ethics&framework_ids=eu-ai-act" \
  -H "Content-Type: application/json" \
  -d '{ ... }'

The response includes per-framework scores, enabling side-by-side comparison and identification of framework-specific gaps.

ComplyAssessments