Process engineering
for the age of AI.
Aliph is sovereign AI infrastructure for regulated industries. On it, we re-engineer documented enterprise processes as governed agentic workflows: assurance at every step, no data leaving your walls.
The core platform is built, self-funded and operating in production.
Most enterprise AI pilots return no measurable impact. Governance is the binding constraint, not model capability.
Documented processes re-engineered as agentic workflows on sovereign infrastructure, with a control objective and an evidence requirement at every step.
The founders designed these controls for ministries and PIF portfolio companies. The same designs now govern agents.
Six workflows delivered or in deployment since June.
Alfard Group
Three ERP systems consolidated. Management reporting automated in the group environment.
Utopian
Venture development workflow. Stage progression gated on verifiable evidence.
MCIT Innovation Pipeline
Concept to validated proposal inside the Ministry environment, delivered with ProcessBay.
MEETINGS HELD
Active pipeline behind the pilot, converting on the same delivery core.
GRC Advisor
Governance documentation generated from client context, jurisdiction and template.
Pursuit Intelligence
Bid qualification and response drafting across Arabic and English tenders.
Policy Vault
Approved policy issued as governed responses against the current authorised version.
Delivered instances. Any documented workflow configures on the same core.
Annexure A3 · Module arsenalGovernance practitioners from KPMG, Protiviti, Aramco and McKinsey.
Incorporated in Riyadh, 2025. Advisory and product leadership in-Kingdom, engineering across KSA and India.
The workflows being engineered are the workflows this team designed.
Enterprise AI stalls in pilot. The market keeps growing.
The spend is committed regardless of the failure rate. Saudi first: the same architecture serves the GCC and every regulated market beyond it.
This is what a client opens on day one.
Live applications on the sovereign platform, not concept art. Executive risk positions, agent-run pursuits, decision gates and cited evidence, in Arabic and English.
DECISIONS STAY WITH PEOPLE
EVIDENCE ONE CLICK AWAY
AGENTS RUN ON COMMAND
ARABIC AND ENGLISH, NATIVELY
Each workflow on slide three ships as an application like these, configured on the same core.
Any documented process becomes a governed application.
Every delivered workflow on slide three runs on this core. A new workflow, or a new vertical, is onboarded through configuration on the same foundation.
Any process in the organisation’s value chain with augmentation potential is identified and re-engineered as an agentic workflow, with measured efficiency gains.
Each a working application from the same core, in a different domain.
A standardised, research-backed methodology and a single platform core underpin every delivered application.
Scale through configuration; defensibility through accumulated memory.
Global AI capability, engaged by exception, without data exposure.
Where a workflow benefits from a global model such as Claude, GPT or Gemini, the exchange runs under Aliph’s proprietary masking and context-retention methodology: identifying values are substituted before anything leaves the environment and reinstated on return, with confidentiality and regulatory standing maintained end to end.
SHIELD
reinstated on return
Redaction degrades model output; format-preserving substitution retains full analytical value with no exposure of source data. The standard execution path never leaves your environment.
Institutional memory outlasts every model.
Models are replaced on a cycle measured in months. The memory built beneath them is retained inside your walls, every replacement inherits it intact, and it compounds with every interaction.
An enterprise that starts the corpus now converts each future model release into immediate capability. One that starts later begins at zero.
Every workflow carries its controls.
Agents perform the work. People keep decision and action. Five stages enforce it, evidenced as each passes.
Trigger
Initiated by an identified user or a scheduled event.
Retrieve
Only material the caller may see is returned.
Reason
Routed across local and external models by cost and confidence.
Act
Tool execution and write-back into systems of record.
Evidence
Inputs, decisions, outputs and approver retained.
Each process is placed on an augmentation level, from assisted through to governed autonomy, by consequence and reversibility.
Annexure A2 · Augmentation levelsOne position, reconciled from three systems.
An industrial conglomerate ran three separate ERP systems, reconciled by hand each reporting cycle, until the memory layer was deployed inside the group’s own environment.
Management reporting precedes board reporting. The same memory now supports both.
Fees released against measured outcomes.
Efficiency is baselined before work begins and reported against that baseline thereafter.
Each additional workflow adds recurring revenue on infrastructure already deployed.
Fees are released against gate evidence produced by the workflow itself. Proven at each gate, or not paid.
From production proof to a repeatable Saudi enterprise business.
Benchmark private inference on in-Kingdom infrastructure. Package the platform for enterprise evaluation without bespoke engineering.
Convert current engagements into referenceable accounts, with measured efficiency reported to each client’s governing body.
Access partner and investor networks. Recurring engagements across the portfolio and first Saudi appointments.
Annexure.
The case closes at slide 13. Four annexes follow, each referenced from the slide it supports. Read on request, not in sequence.
Nine frameworks implemented as platform controls.
Each framework already prescribes how a process should be governed. The platform implements those prescriptions where the work is performed.
Eight established frameworks inherited. The ninth authored, because none yet governs organisational memory.
Four augmentation levels, placed by consequence.
Each process is placed on an augmentation level. Placement is an expert judgment, informed by consequence, reversibility and regulatory exposure.
Assisted
The agent retrieves, summarises and drafts. The professional composes and decides.
Augmented
The agent produces the work product. Each output is reviewed before release.
Delegated
Routine and high-volume work runs to completion. Review is by exception and sampling.
Governed autonomy
Execution within defined limits, with escalation on breach or low confidence.
Expertise retained
Senior judgment, once captured as workflow, precedent and control design, remains with the enterprise when the individual moves on.
Capacity multiplied
Retrieval and analysis scale without headcount. Professional time redirects to interpretation, client relationships and decisions.
Ten governance modules, build-ready.
Specified for Saudi family-controlled groups: fifteen to sixty legal entities, thin group functions, an IPO-track flagship. Each module is a governed workflow on the same core.
Entity Master & CoSec
One source of entity truth. No missed statutory event.
Board & Committee Intelligence
Packs in days. Arabic-authoritative minutes, actions to closure.
Obligations & Change Radar
Every obligation mapped, owned and evidenced across regulators.
Enterprise Risk & KRI Cockpit
Living registers and indicators. Board-grade risk packs in hours.
Internal Audit & Controls
Coverage doubled without headcount. Findings to verified closure.
Policy Lifecycle & Attestation
Charter to policy stack current, cascaded and attested.
Related Party Transactions
Identified, benchmarked, approved, disclosure and transfer-pricing ready.
Delegation of Authority
Authority matrices live inside every approval.
Subsidiary Oversight Cockpit
Governance health, reserved matters and exceptions per entity.
ESG & Sustainability Reporting
Exchange guideline, lender and supplier reporting, assurance-ready.
In the Kingdom, non-compliance stops the business before it fines it. A lapsed certificate holds receivables and a status flag freezes visas, so regulatory statuses are treated as monitored obligations.
Compliance achieved through architecture.
SDAIA AI Adoption Framework
Five pillars addressed as platform controls: data governance, model accountability, transparency, human oversight, risk management.
Data protection and sectoral regimes
PDPL, SAMA and CMA obligations met by perimeter deployment, with residency, retention, erasure and immutable audit enforced in configuration.
National contribution
Saudi-incorporated, intellectual property filing underway in-Kingdom, client knowledge retained in-Kingdom, Saudi recruitment as the commercial base grows.
Sovereignty is achieved through governance. Control over data, models and access carries weight where accountability is assigned, exercised and evidenced.