BATAT العربية

Three integrated practices. One team that knows your file.

From the first contract to the courtroom, and from the boardroom to the compliance register.

Preventive frameworks for lasting business

Governance & compliance

We don't treat governance and compliance as a box-ticking requirement, but as a strategic tool that improves performance, reduces cost, builds stakeholder trust and attracts investment. We help organisations build a culture that protects them from legal and operational risk before it happens.

Our governance method

  1. 01

    Diagnose

    Assess the current state, analyse governance gaps, measure maturity, and benchmark against local and international best practice.

  2. 02

    Design

    Build the governance framework: manuals, policies, structures and authority matrices aligned to regulation and international standards.

  3. 03

    Implement

    Support rollout inside your organisation and train the people involved to apply it correctly.

  4. 04

    Monitor

    Periodic maturity measurement, continuous alignment reviews and follow-up on corrective actions.

Governance services

Board governance
Forming the board and its committees (audit, nominations and remuneration) and their charters, independence assessment, board secretariat procedures, board and committee evaluation, and disclosure reports, aligned with the CMA Corporate Governance Regulations and international standards.OECD · KING IV
Target operating model
Translating strategy into an operating system across structure, processes, roles and authorities, data and technology, and capabilities, with a transition gap analysis and transformation roadmap.
Organisational governance
Organisational structure, a comprehensive authority matrix with delegation controls, operating procedures, policies and bylaws, management committees, internal control under COSO, conflict-of-interest policy and whistleblowing under ISO 37002.ISO 37000 · COSO · ISO 37002
Oversight governance
Establishing second and third lines of defence: internal audit to IIA standards, risk management to COSO ERM and ISO 31000, and information-security governance to the NCA Essential Cybersecurity Controls and ISO 27001, with frameworks, structures, manuals, job descriptions, authority matrices and risk-based audit plans.IIA · ISO 31000 · ISO 27001

Compliance services

Compliance framework & governance
Building the institutional compliance framework and policy, its governance structure and roles (separating board, executive and compliance functions), mapping applicable laws (the compliance universe), a risk-rated compliance register, and control self-assessment (CSA) with remediation plans, under ISO 37301.ISO 37301
Setting up the compliance function
Organisational structure, work manual and annual risk-based compliance plan, continuous monitoring, whistleblowing channels, regulatory change management, incidents and root causes, employee declarations (conflicts, gifts, disclosures), inspection readiness, and compliance KPIs.
AML / CFT
Policies and controls, KYC and enhanced due diligence (EDD), customer risk rating (including PEPs), international sanctions screening, related-party due diligence, and controls on material transactions.KYC · EDD · PEP
Sector regulatory compliance
Requirements of financial regulators (SAMA and the CMA), the Personal Data Protection Law (PDPL) issued by SDAIA, zakat and tax compliance (ZATCA), and the requirements of the National Center for Non-Profit Sector Development.SAMA · CMA · PDPL · ZATCA
Compliance gap assessment
Measuring the current state against regulatory requirements in clear steps: current state, requirement, gap, root cause, risk impact, corrective action and remediation date, prioritised by risk.
Culture & training
Ongoing training and awareness programmes on compliance and AML, and periodic regulatory update bulletins.

Strategic organisation, sustained impact

Non-profit sector services

Keeping pace with the Kingdom's legislative transformation, we bring advanced advisory and regulatory thinking to every part of the third sector: associations, civil foundations, family funds and endowments. We build and develop their regulatory frameworks and internal bylaws and ensure full compliance, improving operational efficiency, protecting assets and securing financial sustainability and development impact.

Representation before the National Center (Nawa platform)
Establishing non-profit entities, updating bylaws, registering and updating bank account signatories, approving and re-forming boards and their nominees, applications to receive funds and donations from non-founders, dissolution, merger and liquidation requests, approval of executive and financial leaders, and branch openings.
Institutional governance (13 policies)
Preparing and updating the package of mandatory and guidance policies required by the basic regulation (around 13 policies), including conflict of interest, grants and aid, donation collection, document retention, AML/CFT, intellectual property, internal audit, data privacy and disclosure, and whistleblowing, plus resolutions, board secretariat support and annual reports.
Governance self-assessment & Makeen standards
Helping entities meet the three governance standards approved by the National Center (compliance, financial integrity, and disclosure and transparency) through the governance data disclosure service, raising the entity's published governance rating.
Charitable support organisations
Preparing the policy for direct financial support to individuals, meeting the regulatory requirements specific to this type of entity.

Every decision you make today has legal consequences tomorrow.

Book a consultation with the Batat team, in person or by video. Our fees are agreed before we start, and everything you share with us is covered by professional confidentiality.