We map the work to the controls that apply to you, such as the NCA Essential Cybersecurity Controls and the Personal Data Protection Law, and prepare the evidence in a form your compliance team can file.
Jeddah Solutions
Best Low-code and no-code platforms company in Jeddah
Departmental apps built by business teams, inside guardrails that IT can support. Hosn Al Tomoh works with organisations in Jeddah on low-code platforms, agreeing scope, responsibilities and proof of completion for each phase from the start.
Low-code and no-code platforms let business teams build their own forms, approvals and departmental apps. The real work is governance: which environments exist, which connectors are allowed, and how an app built outside IT is reviewed, supported and retired.
Saudi programmes usually have to account for the Essential Cybersecurity Controls of the National Cybersecurity Authority (NCA), the Personal Data Protection Law overseen by SDAIA and, for government entities, the standards of the Digital Government Authority. Banks answer to SAMA, and insurers to the Insurance Authority. We plan hosting, data classification and evidence around these from the start, and quote in Saudi riyals.
Work runs in short phases you can review. We strengthen your team with specialist people where you need them, and each phase closes with a demonstration and a decision on what comes next.
The scope can run from a short diagnostic to a phased rollout, and each phase is fixed before it starts.
What has to go right
These are the factors that usually decide whether the programme meets its goals.
- Environments and data policies that separate personal, team and enterprise apps.
- An approved connector list, so apps cannot copy data to unmanaged services.
- A route for successful apps into IT support, with a named owner and a deputy.
Where programmes go wrong
Without guardrails, low-code becomes the next generation of shadow IT. We set up the governance model and a centre of excellence before opening the platform to more makers.
We record decisions, responsibilities and test results as we go, so internal audit and regulators can trace every decision and who approved it.
Common questions
What buyers usually ask before a first workshop.
The team that built it, until the app becomes critical. It then moves to IT support after an agreed review, with a named owner and a deputy.
Yes. We document the current integrations first and keep existing systems running alongside the new ones until the switch-over is proven.
Stages of the work
A phased approach, from assessment to knowledge transfer.
Assess
We review the current state, the risks and the quick wins.
Plan
We draw up a phased plan with scope, team, responsibilities and acceptance criteria for each phase.
Deliver and verify
We deliver in phases and show that each one meets its criteria.
Transfer knowledge
We document what we built and train your teams to run and change it.
Ready to mature your operations?
Book a technical consultation with our principal engineers to map out your architecture and transition plan.