Writing

The March 2026 drone strikes on Gulf AWS data centers exposed a gap no AI governance framework was designed to address. Here's what it means for compliance teams.

DIFC, ADGM, TDRA, and SAMA all moved in the same week. For compliance teams at GCC-licensed firms, the pattern matters more than any single item in the feed.

The EU Council pushed high-risk AI system deadlines to late 2027, but for MENA organizations with EU exposure, this is not a sigh of relief. Here's what the timeline change actually means.

The EU AI Act is the world's first comprehensive AI regulation, and its extraterritorial reach makes it directly relevant to organizations operating in MENA markets. Here is what cross-border exposure looks like and how to think about it.

Most organizations now have an AI policy. Fewer have AI governance. The distinction matters -- and the gap between them is where regulatory risk, reputational damage, and operational failures accumulate.

Saudi Arabia, the UAE, and Morocco are each developing distinct approaches to AI governance. Understanding how these frameworks are structured -- and where they converge and diverge -- is essential for organizations operating across the region.