Essentials
£249/mo
or £199/mo billed annually
compliance, plus automation
Start free →GCC PDPL · six regimes, one programme
One privacy programme, every Gulf regime
If you operate across the Gulf, you don't have one data-protection law to meet — you have six, each with its own regulator, its own wording, and a lot of quiet overlap. Handled separately, that's six programmes and six sets of evidence. Handled properly, it's one. 786 Cyber maps the overlap so you prove your privacy posture once and see exactly where each regime is satisfied.
What it does
All six GCC PDPLs, cross-mapped
Saudi Arabia, the United Arab Emirates, Qatar, Bahrain, Oman and Kuwait, mapped to a common privacy control set.
One control, traced across regimes
Implement a privacy control once and see everywhere it applies across the six laws, so you're not re-answering the same question six times.
Evidence reuse
Attach evidence once and reuse it across regimes, rather than gathering it again for each. Cross-mapped equivalents are surfaced for your review, never silently marked as met.
GDPR alignment
The Gulf PDPLs map to a GDPR-aligned canonical set, so organisations already working to GDPR start with a head-start.
The six Gulf regimes
Each links through to its framework detail on the platform.
Saudi Arabia PDPL · SDAIA View framework → United Arab Emirates PDPL · Federal Decree-Law 45/2021 View framework → Qatar PDPPL · Law 13/2016 View framework → Bahrain PDPL · Law 30/2018 View framework → Oman PDPL · Royal Decree 6/2022 View framework → Kuwait CITRA data-protection rules View framework →
How it works
786 Cyber's control catalogue links each Gulf PDPL's requirements to a shared, GDPR-aligned privacy canonical. In your Security Universe you can see, control by control, how satisfying one requirement advances the others — with equivalents flagged for review rather than auto-accepted. Your data stays in the region you choose, with dedicated Saudi Arabia / Middle East residency available for Enterprise.
Why 786 Cyber
Regional depth, in the open. The Gulf's privacy regimes are covered natively — and priced transparently, which the region rarely sees.
Prove once, everywhere. Map and evidence a privacy control once; see it credited for review across all six regimes.
Built for GDPR-aligned organisations already carrying international obligations.
Data residency you control UK/EU by default, KSA/Middle East for Enterprise.
Frequently asked questions
Which Gulf data-protection laws does 786 Cyber cover?
The PDPLs of Saudi Arabia, the UAE, Qatar, Bahrain, Oman and Kuwait — cross-mapped to a common, GDPR-aligned privacy control set.
Do I have to build a separate programme for each country?
No. That's the point of the cross-map: you implement and evidence a control once and see where it applies across all six regimes, with equivalents surfaced for your review.
How does this relate to GDPR?
The Gulf PDPLs draw heavily on GDPR principles. 786 Cyber maps them to a GDPR-aligned canonical, so if you already work to GDPR you start well ahead.
Where is my data stored?
UK and EU by default. Dedicated Saudi Arabia / Middle East residency is available for Enterprise.
Prove your privacy posture once, everywhere in the Gulf
Start a 14-day free trial — no card required.