Press Release
Mamluk releases the Compliance App: regulatory evidence for auditors and risk teams, read inside the organisation's own Kubernetes cluster
DUBAI, UNITED ARAB EMIRATES — 11 November 2026 — Mamluk today released the Compliance App, an add-on to the Compliance and Assurance Convoy for Bahriya Tersane. With it, the auditors, risk and compliance teams and application owners of an organisation read the convoy’s daily regulatory reports themselves, in the Kubernetes cluster that produced them, signed in through the organisation’s own identity provider. The evidence never leaves the cluster.
The app gives a result for every requirement of the Saudi NCA Essential Cybersecurity Controls (ECC-2:2024) and of the Qatar Central Bank’s technology risk regulation, under each regulator’s own numbering, from inside the customer’s own cluster, with no evidence leaving it.
The Compliance and Assurance Convoy maps a regulator’s technical controls onto an organisation’s Kubernetes cluster, enforces the controls the cluster can enforce, checks those it can only observe, and writes dated evidence for each regime every day in the regulator’s own numbering. The Compliance App puts that evidence in front of the people who must answer for it.
“Regulated organisations should not have to export their evidence so that their own auditors can read it,” said Meezaan-ud-Din, Founder of Mamluk. “The Compliance App lets the people who answer for compliance read the cluster’s evidence where it is produced, in the regulator’s own numbering.”
Product facts
- Runs in the organisation’s own cluster, beside the convoy. It sends nothing out of the cluster.
- Sign-in through the organisation’s identity provider by OpenID Connect, or, where no provider is connected yet, with local accounts defined in a Kubernetes Secret.
- Four roles: auditor, compliance lead, namespace owner and administrator. A namespace owner sees only their own namespaces.
- Each regime is shown requirement by requirement, under the regulator’s own identifiers, with one result per requirement and the checks and failing objects behind each verdict. Organisational requirements are listed as the organisation’s to evidence, not counted as passed.
- Results over time for compliance leads, and what to fix first for namespace owners.
- Downloads of the report in HTML and PDF, the OSCAL assessment results and the signed manifest, each checked against the manifest before it is served.
- A signed access log of every request to a report, a run or a file, allowed or refused. A read that cannot be recorded is refused.
- The app reads evidence. It does not certify compliance; compliance is determined by the organisation’s assessor.
Regimes
Available today: the Saudi National Cybersecurity Authority’s Essential Cybersecurity Controls, ECC-2:2024, and the Qatar Central Bank’s Technology Risks circular. Expected in the first quarter of 2027: the SAMA Cyber Security Framework and the UAE Information Assurance Standard v2.1. Every regime and its expected quarter is listed at tersane.bahriya.cloud.
Availability and price
The Compliance App is available today. It is installed with the convoy’s chart, and requires the Compliance and Assurance Convoy and Kubernetes 1.36 or later, on the Bahriya Kubernetes Engine or any conformant distribution. The convoy is licensed at USD 24,000 per regulatory regime, per organisation, per year, with the Bahriya Tersane core licence and no base fee. The Compliance App is licensed as an add-on to the convoy at USD 12,000 per organisation, per year, whatever the number of regimes. The convoy’s own web view and email reports remain included with the convoy. Organisations can enquire through mamluk.net.
About Mamluk
Mamluk LLC-FZ is an engineering firm in the Meydan Free Zone, Dubai, specialising in enterprise architecture, Kubernetes and cloud infrastructure. It develops the Bahriya Kubernetes Engine, the only enterprise Kubernetes distribution developed and supported from within the GCC, Bahriya Tersane and Kipchak, and operates the public cloud bahriya.cloud.
For media enquiries, contact uae@mamluk.net.