Your data is stored within the UAE
Stored in UAE North
AI compliance for firms within the DIFC ecosystem
Your first step to becoming licensed to use semi-autonomous and autonomous AI agents within the DIFC. Use Regulation10.ae to seamlessly transfer reports to a DIFC Reg 10 accredited certification body.
Deploy AI safely to accelerate income and profitability
Customer chatbot
Approved
Transparent pricing. You only pay for what you use
Track every AI system running in your firm
Your firm
- Credit scoring
- Fraud screening
- Customer chatbot
- CV screening
- Document summariser
AI-first platform
We orchestrate your compliance with Reg 10
BANKING
Hand an Accredited Certification Body the evidence for every model in minutes
Credit scoring and fraud screening models both sit on your Regulation 10 register. Assembling the evidence for one of them takes an ASO hours or days. regulation10.ae builds it in minutes and updates it when the model changes.
Nothing is filed under Regulation 10.2.2(g). You produce it when the Commissioner asks.
See a sample pack
PROFESSIONAL SERVICES
Cut the time taken to prepare evidence packs for an Accredited Certification Body
Use AI to log every AI running on your systems. Regulation10.ae produces evidence packs in minutes. Free up your team to do what they do best for their clients and cut administration.
Price it per agent
INSURANCE
Evidence for every pricing model and bias detection system, ready when asked
Pricing, underwriting and claims triage models shape what a policyholder pays and what a claim receives. Where they use personal data, each one needs its own evidence, including how it was checked for unfair bias. regulation10.ae builds that pack in minutes and rebuilds it when a model changes.
Book a walkthrough
LEGAL SERVICE PROVIDERS
Regulation10.ae removes PII from evidence packs at no extra cost to you
Cut down on partner administration time to focus on billable hours and business development.
Map your AI tools
The DIFC aims to become the world's first AI-native financial centre. Regulation10.ae provides AI infrastructure offering confidence to DIFC firms and their clients.
The handover
Your Accredited Certification Body reads it without an account
Mint a share link and send it. They open the register, open each file, and see the hash that proves it. No account and no onboarding.
Every open is recorded in the audit trail, so the handover is itself part of the evidence.
The handoverShare link, zero onboarding
The record, exactly as a regulator reads it. Dense, plain and printable. Every row names its system, superseded versions are struck so they can never read as current, and each sealed row carries its sha256. The audit room is shown live in a guided demo. The record, and how it reads, stays with the firms that use it.
The audit roomBy request
Evidence packs export as a signed ZIP with a manifest listing the sha256 of every file.
Evidence exportSigned ZIP, sha256 manifest
- 1 to 5 agents364per agent, per calendar month
- 6 to 15 agents327per agent, per calendar month
- 16 to 30 agents290per agent, per calendar month
- 31 to 50 agents253per agent, per calendar month
- 51 or more agents217per agent, per calendar month
Prices are charged natively in United Arab Emirates Dirhams. Billed monthly, excluding VAT.
FAQ
Common questions
At rest in Azure UAE North. One step runs elsewhere: the classify and redact check runs on an Azure OpenAI deployment in Sweden Central, an EU data zone, and never stores anything there.
No. Certification may only be issued by an Accredited Certification Body or by the Commissioner, if the Commissioner establishes a certification scheme. This produces the evidence they read. The seal records the hash, it does not certify.
No. Regulation 10.2.2(g) asks for a register of your systems to be produced on request by any relevant party. There is no filing date to work back from.
They are not used to train third-party models. Personal data is redacted before retrieval. The gateway keeps a decision record for each call, which is the point of it.
Yes. Evidence packs export as a signed ZIP with a manifest listing the sha256 of every file. The formats target ISO/IEC 42001 as well as Reg 10.
One system, one controller and an hour gets you a first DPIA. A full estate depends on how many systems you have and how much you already know about them. Ask us for a scoped estimate.
Sentinel, which is designed to monitor models inside your own cloud. Drift monitoring, which is not yet switched on for every workspace. SSO and SAML, which are not yet enabled.
Entities licensed in the DIFC. Entities outside the DIFC that run AI on DIFC personal data. Firms under the EU AI Act. That is regulation10.com.
Reg 10 readiness
Start with your own systems
Ten questions, no login. You get a score and a gap list, each gap pinned to a clause.
Check your readiness