Product Briefing · 2026
OSIT · Enterprise Governance Suite
Raqeeb
Enterprise Whistleblowing & Case Management Platform
Anonymous reporting
Sovereign KSA data
On-premises & SaaS
osit.com.sa · Riyadh, Kingdom of Saudi Arabia
رقيب — Speak Up Safely
The Context
Why Organisations Are Moving Now
Regulation has arrived
PDPL enforcement, NCA ECC controls, NAZAHA's anti-corruption drive and ISO 37002 have turned formal speak-up channels from best practice into baseline expectation.
Boards are accountable
Audit committees now expect defensible intake, investigation and record-keeping. Shared inboxes and spreadsheets do not survive an audit — or a regulator's visit.
Trust decides usage
Employees and vendors only report when anonymity is credible. A purpose-built, independent platform is what makes it credible.
43%
of occupational fraud is uncovered by tips — more than any other detection method
2×
higher median fraud losses at organisations without a reporting hotline
6 mo
faster detection when a formal reporting channel is in place
Raqeeb — Speak Up SafelySource: ACFE, Report to the Nations · 02
The Platform
Raqeeb — Speak Up Safely
Raqeeb (رقيب — "the watchful") is OSIT's enterprise whistleblowing and case-management platform. It gives every employee, vendor and stakeholder a safe, anonymous way to raise concerns — and gives compliance teams one governed, auditable workspace to triage, investigate and resolve them.
Trust by design
Anonymity, end-to-end encryption and segregation of duties engineered into every layer.
Sovereign by default
Runs on-premises or on KSA-resident cloud. Case data never leaves the Kingdom.
Bilingual & RTL
A complete Arabic and English experience for reporters, investigators and committees.
Product, not project
Already live in regulated KSA enterprises — configure and launch in weeks.
Raqeeb — Speak Up Safely03
How It Works
From Concern to Closure — One Governed Flow
01
Report
Any channel, anonymous or named. Reporter receives a secure case key.
02
Triage
Intake officers classify, de-duplicate and route — SLA clock starts.
03
Investigate
Evidence vault, witness register and timeline build the case file.
04
Decide
Committee reviews the dossier and records outcome and actions.
05
Close
Outcome communicated, record frozen, retention clock begins.
Two-way anonymous messaging keeps the reporter engaged at every step — investigators can ask questions and request evidence without the reporter's identity ever being revealed.
Raqeeb — Speak Up Safely04
Process Flow
End-to-End Case Flow by Role
Reporter-facing
Case team
Submit
Acknowledge
Triage
Investigate
Decide
Close
Reporter
Submits concern via any channel
Receives case key + acknowledgement
Answers sealed follow-up questions
Notified of outcome via case key
Intake officer
Classifies, de-duplicates, scores severity
Admissible?No → close with recorded reason
Investigator
Collects evidence, interviews, builds timeline
Submits dossier & recommendation
Committee
Decides outcome, sanctions & actions
Approves closure & corrective actions
Raqeeb platform
Strips IP, encrypts payload, issues case key
Starts SLA clock, notifies intake queue
Enforces RBAC & conflict-of-interest recusal
Hashes evidence, keeps chain of custody
Assembles decision pack, logs approvals
Freezes record, starts retention clock
Every transition on every lane is written to an immutable, time-stamped audit log — the reporter's identity never enters it.
Raqeeb — Speak Up Safely05
Reporter Trust
Anonymity That Holds Up
Your secure case key
RQB-2609-7F3K
Return any time to check status, reply to investigators and add evidence — no name, no email, no account.
ANONYMOUS MODE · ON
Three reporting modes
Anonymous, confidential or identified — the reporter chooses, per case, on every channel.
Case-key follow-up
Track status and continue the conversation with the key alone — no login, no phone number, no trace back to a person.
Two-way sealed messaging
Investigators ask questions through the platform; replies flow back with identity cryptographically sealed away from the case team.
Zero-trace intake
No IP capture on anonymous reports. AES-256 at rest, TLS in transit, drafts auto-saved so a report is never lost mid-way.
Raqeeb — Speak Up Safely06
Intake Channels
Meet Reporters Where They Are
Web portal
Branded, bilingual, mobile-responsive — available 24/7 to staff and the public.
Mobile & QR
QR codes on posters, ID badges and shop-floor signage open the form instantly.
Email intake
Monitored addresses convert messages into structured cases automatically.
Hotline
Operator or IVR scripts log calls straight into the same case queue.
Messaging
WhatsApp and SMS gateway options for frontline and field workforces.
In person / proxy
Compliance officers file on a reporter's behalf with the same protections.
Every channel lands in one queue. One taxonomy, one SLA clock, one audit trail — no matter how the concern arrived.
Raqeeb — Speak Up Safely07
Case Management
Built for Serious Investigations
Smart triage
Classification, severity scoring, duplicate detection and SLA timers on every case.
Evidence vault
Hash-verified files with full chain of custody from upload to closure.
Witness & interview register
Structured interview records linked to a living case timeline.
Escalation & transfer
Gated hand-offs between teams and entities with history intact.
Conflict-of-interest guard
Declared interests auto-recuse investigators before assignment.
Committee & closure
Decision capture, sanctions and a closure freeze that locks the record.
Governed lifecycle
NEW
›
IN PROGRESS
›
UNDER REVIEW
›
RESOLVED
›
CLOSED
Role-based permissions and segregation of duties enforced at every stage.
Raqeeb — Speak Up Safely08
System Architecture
Layered, Isolated, Sovereign
Anonymous zone — no authentication
Authenticated case-team zone
Channel layer
Web portal
Mobile / QR
Email intake
Hotline / IVR
WhatsApp / SMS
REST API
Edge & security
WAF + reverse proxy
TLS 1.2+ termination
Rate limiting & anti-abuse
IP-stripping intake proxy
SSO — SAML 2.0 / OIDC
Application services
Intake & case-key service
Case & workflow engine
Sealed messaging service
Evidence vault service
Notification service
Analytics & reporting
Admin & configuration
Identity & RBAC service
Data layer
Encrypted case database (AES-256)
Object storage with hash manifest
Append-only audit store
KMS / HSM — customer-held keys
Integration layer
HRMS
ESS / Vendor portal
GRC / ITSM
SIEM
Email / SMS gateway
Webhooks
Infrastructure
Your data centre (VMs or Kubernetes / OpenShift) — or a single-tenant KSA-resident cloud region · backup, DR and monitoring included
Cross-cutting controls
RBAC & segregation of duties
Encryption at rest & in transit
Immutable, time-stamped audit
Conflict-of-interest recusal
Retention, legal hold & archive
Observability & health checks
All layers deploy inside the Kingdom — no component calls out.
Raqeeb — Speak Up Safely09
Visibility
From Case Queue to Boardroom
Cases by category
Last 12 months
Financial misconduct
41
Harassment
29
Procurement / conflict
22
Safety & environment
15
Data & IT misuse
9
116
cases this period
94%
within SLA
11d
median time to close
Filter by category, department, severity, entity and period — live.
Role-based dashboards
Operational, compliance and Board / Audit Committee views out of the box.
Drill-down analytics
Trends by category, department, severity and entity — spot hotspots early.
One-click reporting
Regulator-ready exports and periodic packs in Arabic or English.
Immutable audit log
Every action, every actor, time-stamped — exportable to your SIEM.
Raqeeb — Speak Up Safely10
Compliance by Design
Aligned With the Frameworks That Matter
Standard
ISO 37002:2021
Whistleblowing management system practices embedded directly in the workflow.
Standard
ISO 37001:2016
Anti-bribery case handling, records and management-review support.
Regulation — KSA
PDPL & SDAIA
Privacy by design — consent, minimisation, retention and data-subject rights.
Regulation — KSA
NCA ECC
Security controls mapped for government and critical-infrastructure sectors.
Regulation — KSA
NAZAHA-ready
Supports national anti-corruption reporting and cooperation obligations.
Governance
Records & retention
Configurable schedules, legal hold and audit-grade record-keeping.
Standard, not add-on. Segregation of duties, immutable audit trails and configurable retention ship with every deployment.
Raqeeb — Speak Up Safely11
Add-on Modules
One Platform. Every Disclosure.
Add-on · Disclosure Management
Conflict of Interest
—Annual & event-driven declaration campaigns — employees, vendors, board
—Risk-scored reviews with mitigation plans, owners and deadlines
—Declared interests auto-recuse investigators in the core case flow
—Living register, attestations and committee-ready reports
ISO 37301 · Governance
Add-on · Anti-bribery Controls
Gifts, Hospitality & Entertainment
—Declare gifts given or received in under a minute — web or mobile
—Policy engine: thresholds by role, counterparty and cumulative value
—Pre-approval workflows with escalation to Compliance
—Government-official flags and a central, exportable register
ISO 37001 · Anti-bribery
From reactive to proactive. Both modules share Raqeeb's platform, audit trail and Arabic-first experience — switch them on when you're ready.
Raqeeb — Speak Up Safely12
Connected
Plugs Into Your Digital Workplace
HRMS
Employee & org-unit sync
Employee Self-Service
"Raise a concern" in your ESS portal
RAQEEB
REST APIs & webhooks throughout
Single Sign-On
SAML 2.0 / OIDC for case teams
Email & SMS
Notifications via your gateways
Vendor Portal
Suppliers report from their own login
GRC & ITSM
Hand off cases to ServiceNow or your GRC suite
Corporate Website
Public Speak-Up page or embeddable widget
SIEM
Stream audit events for continuous monitoring
Anonymous reporting always stays outside SSO — reporters never authenticate.
Raqeeb — Speak Up Safely13
Deployment
Your Infrastructure or Ours — Always Inside KSA
On-Premises / Private Cloud
Maximum control for government & regulated sectors
—Runs in your data centre — VMs or Kubernetes / OpenShift
—Your keys, your HSM, your security stack
—Air-gap friendly; works with internal IdP and SIEM
—Full white-labelling, source-escrow and ownership options
—Operated by your team — or managed by OSIT on-site
Raqeeb Cloud — SaaS
Fastest path to a live speak-up channel
—Dedicated single-tenant instance — isolated database, storage & keys
—Hosted exclusively on KSA-resident cloud regions
—OSIT-managed patching, backup, monitoring — 99.9% SLA target
—Annual subscription — unlimited reporters, named case users
—Live in about two weeks with standard configuration
Change your mind later. Migrate between SaaS and on-premises with cases, evidence, configuration and audit history fully preserved.
Raqeeb — Speak Up Safely14
Data Sovereignty
Your Data Never Leaves the Kingdom
Whistleblowing data is among the most sensitive information an organisation holds — identities, allegations, evidence. Raqeeb keeps all of it inside Saudi Arabia: on Saudi soil, under Saudi law, governed by your policies.
KSA-resident hosting only
Deploy in your own data centre, or on in-Kingdom cloud regions — no other option exists in the product.
No cross-border transfer
Sub-processors disclosed and KSA-resident by default. Nothing replicates outside the Kingdom.
Isolation & encryption
Single-tenant instances with dedicated keys — AES-256 at rest, TLS 1.2+ in transit, customer-held key options.
Classified & aligned
PDPL / SDAIA privacy controls, NDMO data classification and NCA ECC security mapping maintained at platform level.
Approved hosting options
STC Cloud
Oracle Cloud Riyadh
Huawei Cloud KSA
Alibaba Cloud Riyadh
Your Data Centre
Raqeeb — Speak Up Safely15
Time to Value
Live in Weeks, Governed Like a Programme
Raqeeb Cloud — SaaS fast-track
Standard configuration, training included
≈ 10 working days
01
Provision & brand
02
Configure taxonomy, roles & channels
03
Train & UAT
04
Go live + hypercare
Enterprise — on-premises / private cloud
SSO, integrations and security testing included
≈ 10 weeks
01
Deploy in UAT
02
SSO & integrations
03
Configure data model
04
UAT sign-off
05
VAPT & remediation
06
Production cutover
PMP-led delivery on every engagement: baselined plan, weekly reporting, RAID management, structured UAT and formal handover.
Raqeeb — Speak Up Safely16
The Partner
Why Teams Choose OSIT
Proven in production
Raqeeb already runs at regulated KSA enterprises, including the financial sector — hardened by real UAT, VAPT and audits.
Built in Riyadh
Local product and delivery team — your time zone, your language, Arabic-first engineering.
One accountable partner
Product, implementation, training and support under one roof. No finger-pointing between vendors.
PMP-led governance
14+ years of enterprise delivery discipline behind every rollout — government, banking and beyond.
No lock-in
Open standards, full data export at any time, and source-escrow options for enterprise licences.
Part of a wider suite
Sits alongside OSIT's Taaleemo LMS, Masaar open-banking and Nateeq AI platforms.
Raqeeb — Speak Up Safely17
Next Step
See Raqeeb in Action
A live walkthrough takes 45 minutes — from anonymous intake to the board dashboard.
OSIT — Open Software Information Technology
Riyadh, Kingdom of Saudi Arabia
Riyadh, Kingdom of Saudi Arabia