Terms & Conditions

1. Acceptance of Terms

By accessing or using any part of the Thabit AI platform — including VisionReady and SovereignShield — you confirm that you have read, understood, and agree to be bound by these Terms & Conditions (“Terms”) and our Privacy Policy. If you are accepting on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms, and “you” refers to that entity.

If you do not agree to these Terms, you must not access or use the platform. Your continued use of the platform after any modification to these Terms constitutes acceptance of those changes.

2. Description of Services

Thabit AI is a software-as-a-service (SaaS) platform providing AI governance and regulatory compliance tools designed for enterprises operating in the Gulf Cooperation Council (GCC) region. The platform currently comprises two products:

• VisionReady — An AI readiness assessment tool that evaluates organisational maturity across strategy, data, infrastructure, talent, and governance dimensions. Outputs include a scored readiness report, executive roadmap, and prioritised initiatives aligned to Saudi Vision 2030 and SDAIA’s National AI Strategy.
• SovereignShield — A continuous compliance monitoring service that identifies personal data processing risks, cross-border data transfer exposures, and cloud configuration gaps under the Saudi Personal Data Protection Law (PDPL) and applicable UAE data regulations.

Thabit AI reserves the right to modify, suspend, or discontinue any feature or product at any time, with or without notice, and shall not be liable for any consequences of such changes.

3. Use of Services

3.1 Eligibility

The platform is intended exclusively for business use by legal entities and their authorised employees or contractors. You must register using a valid corporate or institutional email address. Personal email addresses (including but not limited to Gmail, Yahoo, Hotmail, iCloud, and ProtonMail) are not accepted. By registering, you represent that you are acting on behalf of a legitimate business organisation.

3.2 Acceptable Use

You agree not to:

• Use the platform for any unlawful purpose or in violation of applicable law;
• Attempt to reverse-engineer, decompile, or extract proprietary models, scoring algorithms, or AI logic from the platform;
• Upload content that contains malicious code, personal data of individuals without lawful basis, or information that infringes third-party intellectual property rights;
• Resell, sublicense, or otherwise commercially exploit platform outputs without Thabit AI’s prior written consent;
• Use automated bots, scrapers, or data-extraction tools against the platform’s APIs or interfaces without authorisation.

3.3 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must notify Thabit AI immediately at security@thabit.ai if you suspect any unauthorised access.

4. Data & Privacy

Your use of the platform is also governed by our Privacy Policy, which is incorporated into these Terms by reference. The following principles summarise our approach:

• Data residency. All customer data processed through the platform is stored in cloud infrastructure located within the Kingdom of Saudi Arabia or the UAE, in accordance with the requirements of the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19, 1443H) and SDAIA guidance on cross-border data transfer restrictions.
• PDPL compliance. Thabit AI acts as a data processor in relation to personal data you provide when using SovereignShield compliance scanning. You, as the data controller, are responsible for ensuring you have a lawful basis for processing that data and for fulfilling your own obligations under PDPL.
• Assessment data. Responses submitted through VisionReady assessments are used solely to generate your organisation’s readiness report and to improve platform models in aggregate, anonymised form. Assessment content is not shared with third parties or used to train publicly available AI models.
• Retention. We retain account and assessment data for as long as your subscription remains active, plus a standard 90-day grace period after termination. You may request earlier deletion by contacting privacy@thabit.ai.

5. Intellectual Property

The platform, including its software, design, content, scoring algorithms, AI models, and branding, is owned by Thabit AI and its licensors and is protected by applicable copyright, trademark, and other intellectual property laws. Nothing in these Terms transfers any ownership interest to you.

Subject to these Terms, Thabit AI grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the platform solely for your organisation’s internal business purposes during your active subscription term.

Reports, roadmaps, and other outputs generated for your organisation through the platform are licensed to you for internal use. You may not publish, redistribute, or resell such outputs without attribution to Thabit AI and prior written approval.

6. Limitation of Liability

To the maximum extent permitted by applicable law, Thabit AI and its officers, directors, employees, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the platform, even if Thabit AI has been advised of the possibility of such damages.

Platform outputs — including AI readiness scores, compliance findings, and remediation recommendations — are provided for informational purposes only and do not constitute legal, regulatory, or professional advice. You are solely responsible for any decisions made in reliance on such outputs. Thabit AI recommends that you seek independent legal and regulatory counsel where appropriate.

In any event, Thabit AI’s total aggregate liability to you for all claims arising under or in connection with these Terms shall not exceed the total fees paid by you to Thabit AI in the twelve (12) months immediately preceding the event giving rise to the claim.

7. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia. Any dispute arising out of or in connection with these Terms — including any question regarding their existence, validity, or termination — shall be subject to the exclusive jurisdiction of the competent courts in Riyadh, Kingdom of Saudi Arabia.

Nothing in this clause shall limit Thabit AI’s right to seek injunctive or other equitable relief in any court of competent jurisdiction to prevent actual or threatened infringement of its intellectual property rights.

8. Changes to Terms

Thabit AI may update these Terms from time to time. When we make material changes, we will notify registered users by email and/or by displaying a prominent notice within the platform at least fourteen (14) days before the changes take effect. The effective date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the platform after the effective date of any revised Terms constitutes your acceptance of the updated Terms. If you do not agree to the revised Terms, you must stop using the platform and may request account deletion in accordance with Section 4.

9. Contact

If you have any questions about these Terms, please contact us: