Pyxos
    Expert-Trained AI for Saudi DPOs 🇸🇦

    PDPL is being actively enforced. Are you ready?

    Implementing a new compliance program is hard. Maintaining it is even harder.

    Enforcing now.

    SDAIA is actively enforcing the PDPL.

    Teams are maxed out.

    Privacy teams are resource constrained.

    Hard to hire.

    Too few people in Saudi Arabia have experience in data privacy.

    It lands on the DPO.

    So you do your best with the team you have.

    "I am averaging 10 to 14 hours a day. It is a 24-hour job, not a nine-to-five."

    In-house DPO, KSA

    pyxos AI

    We'll make sure you're ready.

    Not just project management. Not just templates and tracking. Pyxos agents execute your workflows.

    Pyxos does the work, you review and sign-off on everything.

    • RoPA & data mapping
    • Co-Pilot advisor
    • Vendor & contract review
    • DPIA / PIA
    • Communications assistant
    • Awareness training
    • Data subject requests
    • Cross-border transfers
    • Breach response

    • AI enabled by experts

      We embed the human expertise of leading DPOs, lawyers, consultants and ex-regulators into our agents.

    • Grounded in your context

      Agents execute every action in the context of your policies and the laws that apply to you.

    • Fully cited

      Every action is cited to the law and your policies.

    • Always current

      Agents monitor and update laws, regulations and guidance from regulatory agencies.

    Every action is logged. When the regulator asks, the records are immediately available.

    How we developed it

    Built for the Kingdom,
    with the privacy community.

    Over the past year, we engaged with data privacy professionals and are building the first AI platform for DPOs.

    100sof DPOs engaged
    16masterclasses completed
    10expert advisors
    2in-person workshops

    What we learned from DPOs.

    You carry it alone - a small team, accountable for everything.

    Your work is highly manual.
    • The RoPA
      Built and updated department by department.
    • DPIAs
      Assembled one by one, against a deadline.
    • Contracts
      Reviewed clause by clause.
    • DSRs
      Every record found and deleted, with a trail.
    And the conditions make it harder.
    • Scattered data
      Across systems no one has mapped.
    • Staff unaware
      They miss the basics, and when to flag you.
    • Fragmented law
      Overlapping rules, reconciled by hand.
    • Tools that fall short
      They track and template. They never do the work.
    And when the regulator asks for proof, you rebuild the record from spreadsheets and emails.

    Learning Center

    Expert-led masterclasses, in-person events and practical guidance on PDPL compliance.

    Masterclasses

    View all →
    Next Up

    #19 — Regulatory Enforcement Roundtable II: From Understanding Enforcement to Demonstrating Compliance

    September 9, 2026
    11:00 AM (KSA)
    Basmah Alsubaie
    Basmah Alsubaie
    CEO, Privacy Professionals
    Richard Chudzynsky
    Richard Chudzynsky
    Partner, KONEXO/Eversheds Sutherland
    Tahir Latif
    Tahir Latif
    IAPP Country Leader, UAE, KSA & Qatar
    RegisterReview Upcoming & Past Masterclasses →

    Blog

    View all →
    Audit, Assurance and Regulatory Engagement under Saudi PDPL

    Audit, Assurance and Regulatory Engagement under Saudi PDPL

    Knowing the text of the law has never been what separates a comfortable audit from a difficult one. That was the premise Basmah Alsubaie, CEO of Privacy Professionals and former CEO of National Data Governance at SDAIA, set at the top of this masterclass on audit, assurance, and regulatory engagement.

    Pyxos • 12 August 2026

    Events

    In-Person Event

    The Saudi PDPL Privacy Leadership Workshop- 2

    Operationalizing Data Protection in the Kingdom

    Location to be announced
    October 2026 - Date and time to be announced

    Reach out to us to access the only agentic system built for PDPL compliance.