Built in the UAE, for UAE companies
Know where you stand on compliance — before someone else tells you.
A tender asks for ISO 27001. A client sends a security questionnaire. A regulator gets in touch. Amana71 tells you honestly how ready you are, what is missing, and what to fix first — from one questionnaire, in plain language.
One questionnaire, every framework
Answer once. Frameworks map onto the same answers, so adding a second standard does not mean starting again.
The same answers, the same score
Scoring is a fixed calculation, not a judgement call. Run it twice and you get an identical report.
Written for people who are not auditors
Questions ask what you actually do. No control references to look up, no standard to buy first.
How it works
- 01
Describe your company
Sector, size, infrastructure, and what data you handle. Around five minutes.
- 02
Answer one questionnaire
Plain-language questions about how you actually work. No control numbers, no jargon. Assign sections to colleagues and resume anytime.
- 03
Read your report
Your readiness across every selected framework, the gaps ranked, and what to do in the next 90 days.
What you get
A report you can hand to your board, your client, or the consultant you are about to hire — so you are paying them to fix things, not to tell you what is wrong.
- Readiness score
- An overall percentage and a plain-English verdict — not ready, early, developing, or audit-ready.
- Framework comparison
- One row per framework: how many controls apply, how many you meet, how many you partly meet.
- Ranked gaps
- Every gap ordered by risk against effort, so the first thing on the list is the first thing worth doing.
- 90-day roadmap
- Gaps phased across 0–30, 31–60, and 61–90 days.
- Evidence checklist
- What a reviewer will ask you to produce, and which of it you already have.
Frameworks
ISO/IEC 27001:2022
The information security standard most UAE tenders and enterprise clients ask for by name.
UAE Information Assurance Standard
The national standard applied to entities in the UAE, including critical sectors.
Both are assessed from the same set of answers, so you see where they overlap and where they do not.
What Amana71 is not
Worth being direct about, because the difference matters when you are the one accountable.
- It is not certification. Only an accredited body can certify you, and Amana71 is not one.
- It is not an audit. Your answers are self-reported and are not independently verified.
- It does not connect to your systems or read your data. It asks you questions and scores your answers.
What it does is tell you where you stand, in a form you can act on — which is usually the step people skip before spending on consultants or an audit.
Request a demo
Amana71 is in limited release. Send us your email and we will show you a full worked report for a company like yours.
Email us for accessWe use your email only to respond to your request. Ask us to delete it at any time.