TrustPoint
العربيةRequest a demo

Governance, risk and compliance for Oman and the GCC.

Bring governance, risk assessments, controls, evidence and reporting into one bilingual platform. Track responsibilities, manage treatment plans and prepare clear reports for management.

Request a demoExplore the platform
  • A complete Arabic and English experience
  • Controls linked to evidence
  • Risks and treatment plans tracked
  • Flexible hosting and operations

The platform in Arabic

The board dashboard as it appears in Arabic: framework coverage, top risks and treatment status on one screen. The interface below is illustrative, with demonstration data rather than customer data.

Illustrative interface, demonstration data

Illustrative interface: the Arabic board dashboard showing framework coverage and top risks

What changes for your GRC team

One register instead of scattered spreadsheets.

Risks, controls and evidence in one current register everyone works from, not in files on individual laptops.

Reuse evidence across frameworks.

Attach an evidence item once and link it to the requirements it supports in each framework you assess, with partial coverage kept visible.

One answer for the board.

Management and board reports read from the same register, so the numbers agree across teams before the meeting.

Frameworks and their availability

Included in the platform
Planned

Designed to support regulatory requirements in Oman and the GCC. Each framework is listed under its availability.

Assess once, and reuse the evidence across mapped frameworks.

Assess a requirement once within one assessment scope. Where a mapping set exists, the engine suggests the related controls in the other framework.

Each suggestion shows its recorded relationship: equal, subset, superset, intersecting or related. A partial match stays partial, and what it does not cover stays visible.

Suggestions are surfaced for review rather than applied automatically, and each acceptance records who accepted it and when.

Framework library

Assessed once

NCA-ECC-2-2-6

Session management and single sign-on

  • ISO/IEC 27001:2022 A.5.15Access controlintersecting
  • ISO/IEC 27001:2022 A.8.5Secure authenticationrelated
Example rules from the NCA ECC to ISO/IEC 27001:2022 mapping set included in the platform.

NCA ECC control 2-2-6, on session management and single sign-on, is assessed once. The mapping set included in the platform suggests two ISO/IEC 27001:2022 controls: A.5.15 Access control, recorded as intersecting, and A.8.5 Secure authentication, recorded as related. A person accepts or rejects each suggestion.

Key capabilities

  • A complete Arabic and English experience

    Full Arabic and English across every module, report and email, with correct right-to-left layout.
    The platform

  • Cross-framework mapping

    Mapping sets suggest related controls in other frameworks and record each relationship for a person to accept. Included today: NCA ECC to ISO/IEC 27001:2022.
    How mapping works

  • Continuous control monitoring

    Connectors to the security tools you already use collect evidence on a schedule, with its source recorded.
    Connector catalogue

  • AI Copilot

    Configured per tenant with the AI provider you choose, including a model inside your network. Drafts policies and suggests mappings for review.
    AI Copilot

All fifteen modules

The platform in Arabic and English

Every module, report, email and screen works in Arabic and English, fully mirrored. The two tables below are the same screen in two languages. Numerals and framework codes stay Latin and unmirrored, exactly as they do in the product.

EN · LTR
AR · RTL

Choose the hosting and operating model that suits your organization

SaaS

The fastest way to start. We operate the platform, with daily backups.

Compare the options

Private cloud

An environment dedicated to your organization, in its own cloud subscription and the region you choose.

Compare the options

On-premises or air-gapped

An environment dedicated to your organization, inside its network. It can run air-gapped, with no outbound connection for licensing, content or telemetry.

Compare the options

Security and trust

About the company

TrustPoint is developed and operated by Advanced Smart Technologies, from its office in Muscat, Sultanate of Oman.

About TrustPoint

See how the platform supports your compliance requirements.

A 45-minute working session focused on the frameworks and requirements that matter to your organization.

Request a demoor request the brochure