DataSitr — Saudi AI Privacy Gateway

DataSitr is a Saudi AI privacy gateway for regulated organizations adopting LLMs under PDPL. It sits between business applications and AI providers, detects Saudi personal data, tokenizes or blocks risky content, routes requests through policy-controlled lanes, and keeps audit evidence that procurement, security, and compliance teams can review.

Legal entityData Sitr Establishment / مؤسسة داتا ستر

Commercial Registration4030483372

Unified National Number7030618388

Tax Identification3146697241

Registered addressJeddah, Kingdom of Saudi Arabia · Makkah Province · postal code 23334 · street JCZA2264

Founder / DPOSulaiman Husam Abonami

NPDR DPO Registration#3260005651 — Active

NDGP Data Services Provider RegistrationLR-25-000018 — Registered / Complete

SDAIA AI Service Provider AccreditationAE-26-000237 — In Progress

Three things we do

PDPL gateway

policy enforcement, audit records, subject-rights support, and reviewer-ready evidence for AI processing flows.

Saudi PII detection

Arabic-aware detector stack with Saudi recognizers, Arabic NER, and dated precision/recall benchmark artifacts.

In-Kingdom-by-default AI routing

Alibaba Cloud Riyadh production route with Google Cloud Dammam drill-standby proof; external model routing remains tenant-policy controlled.

Signed evidence reference

2026-05-04 customer-route cutover bundle

evidence/ha/alibaba-live-2026-05-04T01:17:03Z/

Boundary

DataSitr does not yet claim regulator-issued approval, external legal sign-off, SOC 2 / ISO 27001 certification, independent penetration-test attestation, automatic failover, full-region tolerance, cross-cloud database replication, authentication failover, HSM custody, or full-vault verification.