Investor presentationCybersecurity & compliance · United Arab Emirates

Cybersecurity compliance, made clear.

Qubey is an AI-powered platform that helps UAE organisations understand, assess and prepare for cybersecurity and data protection requirements, without technical complexity or expensive consultants.

UAE PDPLISO 27001UAE IA (NESA)

View the presentation How it works

Readiness dashboardSample data

Sample CompanyLast assessment 4 days ago

3 frameworks

0%Readiness

UAE PDPL58%

ISO 2700171%

UAE IA (NESA)62%

No documented data retention policyUAE PDPL

High

Incident response plan not testedUAE IA (NESA)

Medium

Access rights reviewed irregularlyISO 27001

Medium

Illustrative readiness dashboard with sample data.

01Founding team

The team behind Qubey.

Founder & CEO

Faisal Qutbee

CEO, Qutbee Technologies

Digital Dubai · ADIA · AI & digital transformation

10+years of experience in technology

Entrepreneur and technology leader building future-ready products across AI, cybersecurity and digital transformation. Contributed to the Digital Dubai initiative and to large-scale government projects in Abu Dhabi.

Co-founder

Team member name

Cybersecurity & Compliance Lead

Relevant certifications (e.g. CISSP, ISO 27001 Lead Implementer)

XX+years of experience in cybersecurity

Short bio: background in information security, data protection and regulatory compliance in the UAE.

Placeholder · to be updated

02The problem

Compliance has become harder than it should be.

Cybersecurity and data protection requirements in the UAE keep expanding. They are essential, but the way they are communicated and implemented creates confusion, especially for growing businesses.

01

Rules keep changing

UAE PDPL, ISO 27001 and UAE cybersecurity requirements evolve, and keeping up is a job in itself.

02

Too technical

Regulatory language confuses the business leaders who are accountable for it.

03

Costly consultants

Expensive advisers and auditors create long-term dependency that SMEs can't afford.

04

No clear roadmap

There's no simple path from "what the law says" to "what we do next".

200,000+Cyberattacks a day on UAE strategic sectors (UAE Cyber Security Council, 2025)

+58%Rise in ransomware activity reported in the State of the UAE Cybersecurity Report 2025

~95%Of UAE companies are SMEs, most without an in-house security team

03The solution

One platform. Complete cyber readiness.

Qubey turns regulatory requirements into structured assessments, clear actions and intelligent guidance that businesses can apply in the real world.

01

Assess readiness

Guided assessments across UAE PDPL, ISO 27001 and UAE cybersecurity requirements.

02

Identify gaps

Clear, prioritised insight into where the organisation falls short.

03

Generate documents

AI-drafted policies grounded in real practices, with verified regulatory citations.

04

Track progress

A structured dashboard of tasks, scores and milestones.

AI-powered guidance throughout. Context-aware recommendations that understand UAE regulations and each organisation's specific situation.

Trust, not surveillance: Qubey is a readiness and guidance platform. No monitoring, no SOC services, no certification.

04What Qubey covers

Four readiness areas, one consistent way to act on them.

Data privacy

UAE PDPL readiness

Prepare for personal data protection obligations.

Assess PDPL readiness
Understand obligations
Generate privacy policies
Track remediation

Greater confidence in data protection readiness.

Information security

ISO 27001 readiness

Build an information security foundation.

Measure readiness
Understand required controls
Generate supporting policies
Follow improvement plans

A clear roadmap to stronger security practice.

Cyber resilience

UAE cybersecurity readiness

Strengthen posture in line with UAE IA (NESA) expectations.

Evaluate cyber maturity
Identify risks and weaknesses
Prioritise remediation
Track progress over time

Increased resilience and reduced risk.

AI insights

AI-powered risk insights

Turn assessments into business guidance.

Risk identification
Readiness scoring
Priority recommendations
Executive summaries

Clear visibility of cyber and compliance risk.

05Product · AI guidance & documents

Plain-language answers, and the paperwork to match.

AI guidanceIllustrative

Do we need a Data Protection Officer under the UAE PDPL?

QQubey guidance

Based on your assessment answers, you may need one. The UAE PDPL generally calls for a DPO where processing involves:

a high risk to privacy, for example new technologies or large data volumes,
systematic evaluation of sensitive personal data, or
large-scale processing of sensitive personal data.

Source: Federal Decree-Law No. 45 of 2021, Article 10. Suggested next step: confirm your processing activities in the PDPL assessment. Not legal advice.

Fig. 1 Context-aware guidance in plain language. Illustrative example.

Policy generatorSample data

Privacy policyUAE PDPL

Ready

Data retention policyUAE PDPL

Draft

Incident response planUAE IA (NESA)

Draft

Access control policyISO 27001

Ready

Acceptable use policyISO 27001

Not started

Fig. 2 Policies drafted from assessment answers, with source-checked regulatory citations.

06The difference

The traditional way vs Qubey.

The traditional way

Manual interpretation of complex regulations
Static documents that quickly go out of date
Heavy reliance on external consultants
Little visibility of compliance progress

With Qubey

AI-powered guidance that stays current
Plain-language explanations anyone can follow
Self-serve platform with independence and control
Clear actions and measurable progress

01UAE-focused

02AI-powered

03No consultants needed

04Security by design

05Trust, not surveillance

07Who it's for

Built for UAE businesses that need compliance without complexity.

SMEs

Compliance without large budgets or in-house security teams.

Healthcare providers

Handling sensitive patient data securely.

Academia

Protecting student and staff information.

Startups

Building security in from the ground up.

Lower costA subscription instead of open-ended consulting fees.

IndependenceTeams manage compliance themselves, with guidance on hand.

ConfidenceA clear, measurable view of readiness at any time.

08Why now

The rules are in place, and the threat is growing.

Jan 2022

UAE PDPL in force

Federal Decree-Law No. 45 of 2021 sets data protection duties for businesses, overseen by the UAE Data Office.

UAE IA

National security standards

The UAE Information Assurance standards (NESA) are mandatory for government, semi-government and critical infrastructure organisations.

2025

Rising exposure

223,800+ UAE-hosted assets potentially exposed, and ransomware activity up 58%.

2024 → 2030

Market doubling

UAE cybersecurity spending forecast to grow from $0.62B to $1.29B, about 12.8% a year.

09Market size

A fast-growing market, with SMEs largely underserved.

$0.62BUAE cybersecurity market, 2024

12.8%Expected yearly growth to 2030

1.2M+Companies in the UAE, about 95% SMEs

200K+Daily cyberattacks on strategic sectors

TAMTotal market

UAE cybersecurity spending

Products and services, 2024 estimate, forecast to reach $1.29B by 2030.

AED 2.3B≈ $0.62B

SAMReachable market

UAE SMEs on Qubey's core plan

~1.1M SMEs (95% of 1.2M+ companies) × AED 804/yr (Professional plan, billed yearly).

AED 0.9B≈ $240M

SOMYear-5 target

What Qubey aims to capture

~18,000 paying organisations by year 5, about 1.6% of UAE SMEs (see revenue projection).

AED 14M≈ $3.8M ARR

Sources: TechSci Research, UAE cybersecurity market 2024–2030 (via GlobeNewswire) · UAE Ministry of Economy (via WAM and Gulf News) · UAE Cyber Security Council (via WAM). SAM and SOM are Qubey estimates using current pricing. $1 = AED 3.67.

10Business model

Simple, transparent SaaS pricing.

Free trial

For new users exploring compliance essentials

AED 0

No credit card required

Compliance assessment
Readiness score
Document templates
External policy documents
Dashboard access

Starter

For individuals and small businesses

AED 29 / month

Everything in Free
Internal & external policy documents
AI recommendations
Email support

A path to AED 14M in annual recurring revenue by year 5.

Annual recurring revenue (ARR), AED, end of year

ProfessionalEnterpriseStarter

Fig. 3 Illustrative projection built from the assumptions on the right. Not a forecast of actual results.

Paying customers	Y1	Y2	Y3	Y4	Y5
StarterAED 29 / month	300	1,200	3,000	6,000	10,000
Professional≈ AED 67 / month, yearly	150	700	2,000	4,500	8,000
Enterprise (planned)AED 60,000 / year avg.	2	8	20	40	70
ARR (AED)	0.35M	1.46M	3.85M	8.11M	14.11M

How to read this: ARR (annual recurring revenue) is what all paying customers would pay over a year at that point. Each year is customers × price for every plan. Starter and Professional use current website prices; customer numbers and the Enterprise average are assumptions.

12Roadmap

From UAE readiness to a regional compliance platform.

Phase 1 · UAE

Core readiness

UAE PDPL, ISO 27001 and UAE IA assessments
AI guidance and policy generator
Readiness scores and progress tracking
English and Arabic experience

Phase 2 · Depth

More frameworks

DIFC and ADGM data protection regimes
Sector-specific frameworks
Third-party risk campaigns at scale
Partner channel with IT providers and auditors

Phase 3 · Region

GCC expansion

Wider GCC data protection laws
Multi-entity enterprise accounts
Integrations with security tools
Benchmarking across sectors

13The opportunity

Help us make compliance achievable for every organisation.

Investors

Scale across the UAE

Fund product depth, new frameworks and SME acquisition.

Partners

Distribute Qubey

IT providers, auditors and business associations.

Organisations

Become an early customer

Shape the product with direct input.

Use of funds: product and AI engineering · regulatory content · sales and partnerships · regional expansion.

Let's talk.Faisal Qutbee, Founder & CEO · faisal@qutbee.com

Back to start

Product screens show illustrative sample data. Qubey provides readiness assessments and guidance; it is not a monitoring or certification tool and does not provide legal advice. Revenue figures are illustrative projections based on stated assumptions.