Security & compliance · Qatar

Edrak and the Ministry of Communications and Information Technology

The MCIT sets Qatar's national AI strategy and the guidance for using AI responsibly. Edrak is designed so that guidance can be enforced: human approval points, a full record of every decision, and your choice of model for every task.

MCIT
Government ministry. Sets national AI strategy and responsible AI guidance.
Applies to
Government entities directly; the responsible AI guidance is published for all organisations deploying AI in Qatar.
Where Edrak stands
Edrak's controls are mapped to the MCIT's responsible AI guidance and we share that mapping. The MCIT publishes strategy and guidance and does not certify vendors.

MCIT strategy and guidance

The MCIT publishes strategy and guidelines. These four are the ones an AI deployment is measured against.

  • Strategy

    National AI Strategy

    Priorities for AI adoption across government and the economy.

  • Guidance

    Responsible AI Guidelines

    Principles for fairness, transparency, accountability and human oversight in AI systems.

  • Data

    Data and Digital Government Policies

    How government data is governed and shared to enable digital services.

  • Procure

    AI Procurement Guidance

    What government buyers should ask of AI suppliers.

How Edrak supports your MCIT obligations

The obligations are yours. Edrak is built to make meeting them straightforward, and to be clear about what stays on your side.

  • AI ethics and fairness

    Edrak: Human approval points, full records and model choice let you apply your own AI principles to every workflow.

    You: Adopting the principles, assessing impact and monitoring outcomes.

  • Explainability

    Edrak: Each output carries its sources, the model used and the reasoning steps recorded, so decisions can be reviewed after the fact.

    You: Deciding which decisions need human review before they take effect.

  • Human oversight

    Edrak: Approval steps sit where you set them. Nothing completes without the sign-off you require.

    You: Defining the approval points and who holds them.

  • Models and third parties

    Edrak: Routing rules keep restricted data on open-weight models inside your boundary; hosted frontier models handle the rest.

    You: Approving which models may be used, and for what.

  • Procurement and disclosure

    Edrak: Model provenance, deployment location and sub-processors are documented for your procurement and AI registers.

    You: Registering AI use cases and completing impact assessments.

  • Records

    Edrak: Every action, decision and outcome is logged: who asked, which model ran, what it touched, what came back.

    You: Retention periods and forwarding to your monitoring tools.

For your security and compliance teams

We share a requirement-by-requirement mapping to the MCIT frameworks, a data-flow diagram for your deployment option, and our security overview, under NDA. We also answer questionnaire items directly.

Talk to our team

The MCIT issues requirements and guidance; it does not certify vendors. This page describes how Edrak's controls support your obligations. Edrak does not claim compliance or certification on your behalf. Confirm applicability with your compliance team.