Pyxos
    Expert-Trained AI for Saudi DPOs 🇸🇦

    PDPL is being actively enforced. Are you ready?

    Implementing a new compliance program is hard. Maintaining it is even harder.

    Enforcing now.

    SDAIA is actively enforcing the PDPL.

    Teams are maxed out.

    Privacy teams are resource constrained.

    Hard to hire.

    Too few people in Saudi Arabia have experience in data privacy.

    It lands on the DPO.

    So you do your best with the team you have.

    "I am averaging 10 to 14 hours a day. It is a 24-hour job, not a nine-to-five."

    In-house DPO, KSA

    pyxos AI

    We'll make sure you're ready.

    Not just project management. Not just templates and tracking. Pyxos agents execute your workflows.

    Pyxos does the work, you review and sign-off on everything.

    • RoPA & data mapping
    • Co-Pilot advisor
    • Vendor & contract review
    • DPIA / PIA
    • Communications assistant
    • Awareness training
    • Data subject requests
    • Cross-border transfers
    • Breach response

    • AI enabled by experts

      We embed the human expertise of leading DPOs, lawyers, consultants and ex-regulators into our agents.

    • Grounded in your context

      Agents execute every action in the context of your policies and the laws that apply to you.

    • Fully cited

      Every action is cited to the law and your policies.

    • Always current

      Agents monitor and update laws, regulations and guidance from regulatory agencies.

    Every action is logged. When the regulator asks, the records are immediately available.

    How we developed it

    Built for the Kingdom,
    with the privacy community.

    Over the past year, we engaged with data privacy professionals and are building the first AI platform for DPOs.

    100sof DPOs engaged
    18+masterclasses completed
    10expert advisors
    2in-person workshops

    What we learned from DPOs.

    You carry it alone - a small team, accountable for everything.

    Your work is highly manual.
    • The RoPA
      Built and updated department by department.
    • DPIAs
      Assembled one by one, against a deadline.
    • Contracts
      Reviewed clause by clause.
    • DSRs
      Every record found and deleted, with a trail.
    And the conditions make it harder.
    • Scattered data
      Across systems no one has mapped.
    • Staff unaware
      They miss the basics, and when to flag you.
    • Fragmented law
      Overlapping rules, reconciled by hand.
    • Tools that fall short
      They track and template. They never do the work.
    And when the regulator asks for proof, you rebuild the record from spreadsheets and emails.

    Learning Center

    Expert-led masterclasses, in-person events and practical guidance on PDPL compliance.

    Masterclasses

    View all →

    Blog

    View all →
    Regulatory Enforcement Roundtable II: From Understanding Enforcement to Demonstrating Compliance

    Regulatory Enforcement Roundtable II: From Understanding Enforcement to Demonstrating Compliance

    A clinic with thirty patients has been told to appoint a Data Protection Officer within a fixed deadline or face a legal case. That detail, offered by Basmah Alsubaie, former CEO of National Data Governance at SDAIA, said more about where Saudi PDPL enforcement stands than any published statistic could, and it set the tone for this second roundtable with Alsubaie, Richard Chudzynsky of Konexo (Eversheds Sutherland), and Tahir Latif of the IAPP.

    Pyxos • 9 September 2026

    Events

    In-Person Event

    Trust in the Digital Kingdom: Data, AI and Accountability

    Operationalizing Data Protection in the Kingdom

    Riyadh Chamber of Commerce
    Monday, October 19th, 8:30a - 1:30p
    FREE
    Lunch Served
    More Information →

    Ready to experience the power of the first AI platform built for data privacy professionals in KSA?