Security & compliance · Qatar
Edrak and the Ministry of Communications and Information Technology
The MCIT sets Qatar's national AI strategy and the guidance for using AI responsibly. Edrak is designed so that guidance can be enforced: human approval points, a full record of every decision, and your choice of model for every task.
- MCIT
- Government ministry. Sets national AI strategy and responsible AI guidance.
- Applies to
- Government entities directly; the responsible AI guidance is published for all organisations deploying AI in Qatar.
- Where Edrak stands
- Edrak's controls are mapped to the MCIT's responsible AI guidance and we share that mapping. The MCIT publishes strategy and guidance and does not certify vendors.
MCIT strategy and guidance
The MCIT publishes strategy and guidelines. These four are the ones an AI deployment is measured against.
Strategy
National AI Strategy
Priorities for AI adoption across government and the economy.
Guidance
Responsible AI Guidelines
Principles for fairness, transparency, accountability and human oversight in AI systems.
Data
Data and Digital Government Policies
How government data is governed and shared to enable digital services.
Procure
AI Procurement Guidance
What government buyers should ask of AI suppliers.
How Edrak supports your MCIT obligations
The obligations are yours. Edrak is built to make meeting them straightforward, and to be clear about what stays on your side.
AI ethics and fairness
Edrak: Human approval points, full records and model choice let you apply your own AI principles to every workflow.
You: Adopting the principles, assessing impact and monitoring outcomes.
Explainability
Edrak: Each output carries its sources, the model used and the reasoning steps recorded, so decisions can be reviewed after the fact.
You: Deciding which decisions need human review before they take effect.
Human oversight
Edrak: Approval steps sit where you set them. Nothing completes without the sign-off you require.
You: Defining the approval points and who holds them.
Models and third parties
Edrak: Routing rules keep restricted data on open-weight models inside your boundary; hosted frontier models handle the rest.
You: Approving which models may be used, and for what.
Procurement and disclosure
Edrak: Model provenance, deployment location and sub-processors are documented for your procurement and AI registers.
You: Registering AI use cases and completing impact assessments.
Records
Edrak: Every action, decision and outcome is logged: who asked, which model ran, what it touched, what came back.
You: Retention periods and forwarding to your monitoring tools.
For your security and compliance teams
We share a requirement-by-requirement mapping to the MCIT frameworks, a data-flow diagram for your deployment option, and our security overview, under NDA. We also answer questionnaire items directly.
Talk to our teamThe MCIT issues requirements and guidance; it does not certify vendors. This page describes how Edrak's controls support your obligations. Edrak does not claim compliance or certification on your behalf. Confirm applicability with your compliance team.

