The PDPL has been fully enforceable since 5 February 2026, and its top fines cover transfers out of Oman. SentraGuard stops Civil IDs, IBANs and customer files before they leave, and proves it to MTCIT and the CBO.
Find your shadow AI on the day you deploy. Reach full shadow AI governance in one week.
ISO 27001 CERTIFIED
Sensitive data does not leave through files any more. It leaves in a prompt, a paste and an agent's tool call, usually on a personal account. Usage control decides what happens at that moment.
67% of employees reach AI from non-corporate accounts on corporate devices. No log, no attribution, no answer for the auditor. Verizon DBIR 2026
Shadow AI is now the third most common non-malicious insider action in DLP data, with detections up 4x in a year. Source code is the top data type uploaded. Verizon DBIR 2026
Coding agents and MCP servers call tools and write to data. A tool list cannot govern a tool call.
The PDPL's highest fine band, OMR 100,000 to 500,000, covers breaches of the cross-border transfer article. A public AI tool hosted abroad is a destination outside Oman. The law has been fully enforceable since 5 February 2026. Royal Decree 6/2022 · CMS
The session blind spot
MTCIT, the Central Bank of Oman and Oman CERT each set rules that reach AI use at work. Here is what applies, and the evidence SentraGuard produces for each.
MTCIT regulates the law. The Executive Regulations, Ministerial Decision 34/2024, apply in full since 5 February 2026. A DPO is mandatory. Health, genetic and biometric data need an MTCIT permit before processing. Transfers need consent and adequate protection. Breaches go to the regulator within 72 hours.
The Cloud and Hosting Services Standard says government data must be hosted and processed only within Oman, including backup and disaster recovery. The Cloud Computing First Circular 10/2026 requires data to be classified before it moves to the cloud. MTCIT's National Data Governance framework includes a data classification policy.
The CBO Cyber Security and Resilience Framework (2023) applies to banks, finance and leasing companies, payment service providers and exchange houses, including third-party and supply chain risk. In May 2026 the CBO Governor called for trust, ethics and human judgment as banks adopt AI.
MTCIT's Public Policy for the Safe and Ethical Use of AI Systems has applied since April 2025. It is non-binding guidance for the public and private sectors. The National Programme for AI and Advanced Digital Technologies drives adoption under Oman Vision 2040.
Checked 24 September 2026. Regulations change; confirm current text with your counsel.
The browser plugin sees web apps and extensions. The IDE extension sees Cursor, VS Code and Copilot. The SDK and API gateway see your own apps. The endpoint agent runs on Windows, macOS and Linux and sees desktop AI apps, CLI agents, local models and MCP servers. Everything lands in one console.
Every surface reports to the same API-first backend, so one policy applies everywhere and every event lands in the same log.
A bank can run the whole pilot on the first rung and see every session, account and data class with no user impact. Each rung above adds control for one app, one group or one data class at a time.
Mark each app sanctioned, tolerated or unsanctioned. New apps inherit their category's decision until you change it. Then set the action by user group and by the data class detected in the prompt.
| Application | Retail ops | Engineering | Contractors |
|---|---|---|---|
| ChatGPT Enterprisesanctioned · SSO | Allow | Allow | Redact |
| ChatGPT personalunsanctioned | Coach | Coach | Block |
| Claude Codetolerated · engineering | Block | Redact | Block |
| DeepSeek webunsanctioned · trains by default | Block | Block | Block |
| M365 Copilotsanctioned | Allow | Allow | Coach |
A banner in the session, not a ticket the next day. The user sees why, what to do instead, and what is logged. Most usage moves to the approved tool without a block.
Illustrative rules. Your policy sets the real ones, per app, per group and per data class.
Every decision is logged with user, app, data class and action, and streamed to your SIEM.
Unsanctioned app on a personal account. The user sees the approved assistant and can continue; the session is logged.
Detection runs on the session, on every surface, with the same data classes. Redact keeps the workflow moving. Block stops the ones that must not leave.
Inventory, attribution, policy log, exceptions, a regulator clause map and a signed export. Produced from the same events the SIEM receives, so the auditor and the SOC read one truth.
Select a jurisdiction. Each dot is an artifact SentraGuard produces for that framework.
| Framework | Inventory | Attribution | Policy log | Redaction proof | Clause map | Signed export |
|---|---|---|---|---|---|---|
| PDPL, Royal Decree 6/2022, and Executive Regulations 34/2024 | ||||||
| MTCIT Cloud and Hosting Services Standard | ||||||
| Cloud Computing First Circular 10/2026 | ||||||
| National Data Governance framework and Data Classification Policy | ||||||
| CBO Cyber Security and Resilience Framework (2023) | ||||||
| Oman CERT Basic Security Controls | ||||||
| MTCIT Public Policy for the Safe and Ethical Use of AI Systems (2025) |
| Framework | Inventory | Attribution | Policy log | Redaction proof | Clause map | Signed export |
|---|---|---|---|---|---|---|
| ISO/IEC 42001 | ||||||
| NIST AI RMF |
| Framework | What it expects |
|---|---|
| PDPL, Royal Decree 6/2022, and Executive Regulations 34/2024 | Transfer rules, sensitive data permits, DPO, 72-hour breach notice; fines up to OMR 500,000 |
| MTCIT Cloud and Hosting Services Standard | Government data hosted and processed only within Oman, including backup |
| Cloud Computing First Circular 10/2026 | Classify data before it moves to the cloud |
| National Data Governance framework and Data Classification Policy | Data classification and governance across government |
| CBO Cyber Security and Resilience Framework (2023) | Cyber resilience and third-party risk for banks and payment firms |
| Oman CERT Basic Security Controls | Baseline security controls for government bodies |
| MTCIT Public Policy for the Safe and Ethical Use of AI Systems (2025) | Safe and ethical AI use in the public and private sectors |
| ISO/IEC 42001 | AI management system: inventory, roles, controls and monitoring for AI in use |
| NIST AI RMF | Govern, Map, Measure, Manage |
Answers for Gulf banks, insurers and government entities.
Observe records the app, the account type, the data class and the decision. Prompt text is captured only where a policy requires it, and it stays inside your deployment.
Yes. The endpoint agent finds MCP servers, clients and CLI agents at runtime on Windows, macOS and Linux. The SDK and API gateway cover in-house agents. Tool calls get the same four actions as prompts.
Yes. Kubernetes or VMs with no outbound connection. The app dictionary and detection updates arrive as signed bundles.
Inspection is asynchronous and near real time. The measured p95 will be published after the first pilots, not before.
Not in the on-premise or air-gapped deployment. The backend runs in your data centre in Oman on CPU only. Policy, logs and the Evidence Pack stay inside your perimeter, in line with the MTCIT rule that government data is hosted and processed only within Oman, and with the PDPL transfer rules.
Per protected user per year, by tier: Browser, Workforce, Enterprise. Quotes are issued at the pilot readout. There is no public price list.
Find your shadow AI on the day you deploy. Reach full shadow AI governance in one week, for one business unit. Delivered by the SOAISEC GCC team with Forcespot, our value-added distributor in the region, and NitronEdge, our value-added solution seller.
The category, the four decisions, what UAE and Saudi regulators expect, and a 12-question vendor checklist.
Read the guideFilter by browser extension, endpoint agent, on premise and price. Compiled from public vendor sites.
Compare the platformsInventory, decisions, agents, exceptions, UAE and Saudi clause maps and a signed export. Printable.
Open the sampleBans push usage to personal accounts. A one-week path from ban to governed use.
Read the articleEight questions the auditor will ask, and the evidence that answers each one.
Read the articleShadow AI found on day 0, an unsanctioned tool moved to sanctioned use, Microsoft 365 Copilot governed, and all four actions live by day 7. Voiceover, captions and transcript.
Watch the video
