Read
Free signal, reports, Ask Noura — you share nothing.
Talk
A first brief starts with a call, not an upload.
Profile
Five business facts personalize your watch — nothing sensitive.
Share
Documents enter only inside a signed, scoped engagement.
Engagement-scoped documents
You never upload to a general cloud. Documents attach to one commissioned work package, visible only to the named analyst on it, under NDA — the way you hand files to a law firm.
PDPL compliance & DPA
Client data is processed under Saudi PDPL with a data-processing agreement on every engagement that touches personal or operational data.
Saudi data residency
Client data is hosted in-Kingdom. The regulatory corpus is public-record material; your material never mixes with it.
Organization isolation
Access is walled per client organization at the database layer — one client can never see another's requests, documents, or profile. Every access is audit-logged.
No AI training on your data
Your documents and profile are never used to train models or improve answers for anyone else. AI drafts from approved sources; analysts verify; your data stays yours.
You see what Noura knows
Your account carries a 'What Noura knows about you' panel — profile, watchlists, assumptions, history — viewable and editable, with the right to delete.
We come to your data.
Family-office and deal work can run entirely in your environment — our analyst works inside your data room under your controls, and nothing leaves it. The deliverable carries the same gates and signature either way.