Methodology

Nuhaa AI is a firm of named methods. Every engagement we conduct is grounded in documented, versioned methodology — not in ad-hoc frameworks assembled for the occasion, and not in proprietary language that obscures what we are actually doing. Our methods are designed to be peer-reviewable, auditable, and improvable over time.

The methodology described on this page is not a sales instrument. It is the intellectual architecture that governs how we work. This page is where that thinking is made visible.

Core framework

The Nuhaa AI Readiness Framework

The Nuhaa AI Readiness Framework is a five-dimensional diagnostic for enterprise AI readiness, built for the regulatory and sovereignty context of the Kingdom of Saudi Arabia and the GCC.

It exists because the question "how ready are we for AI?" is asked constantly in boardrooms across the region — and answered badly. Single-score assessments produce false precision. Generic global frameworks miss the PDPL, SAMA, and NCA dimensions that are not optional considerations in the Kingdom; they are structural ones.

The Framework measures readiness across five dimensions that are necessary and non-substitutable. An organisation can be advanced on four and nascent on one — and that single weak dimension will determine what is possible.

The Nuhaa AI Readiness Framework · Version 1.0 · April 2026 · Authored by Bassam AlKharashi, Founder and CEO
The Five Dimensions
01Strategic Vision and02Value Logic and03Architecture and Scaling04Governance, Risk, and05Capability, Culture, and
01

Strategic Vision and Sponsorship

Whether leadership sees AI as efficiency or as business-model transformation, and whether that view is backed by the authority required to act on it.

Owner
Board / CEO
02

Value Logic and Investment Discipline

Whether the organisation evaluates and governs AI investments with methods fit for AI's non-linear return profile.

Owner
CFO / Chief Strategy Officer
03

Architecture and Scaling Capacity

Whether the infrastructure can take a successful pilot to production, and replicate that success across business units.

Owner
CTO / Chief Data Officer
04

Governance, Risk, and Sovereignty

Whether AI risk — regulatory compliance, data residency, auditability, bias — is managed with named frameworks and accountable ownership.

Owner
CRO / Chief Compliance Officer
05

Capability, Culture, and Talent

Whether the organisation has the skills, fluency, and cultural orientation to operate AI-native systems over years.

Owner
CHRO / Chief AI Officer

The Five Maturity Levels

L1 Nascent
The capacity does not meaningfully exist. No coherent AI posture on this dimension.
L2 Emerging
Scattered, siloed efforts. No enterprise-wide coherence. Lessons are repeatedly relearned.
L3 Operational
A coherent enterprise-wide posture exists, owned and documented. Basic disciplines function.
L4 Integrated
The dimension is tightly coupled with adjacent dimensions. AI is woven into the operating model.
L5 Native
A source of competitive advantage. Architecture and culture assume AI as medium, not add-on.
Deployment modes

The Framework is deployed in three commercial modes.

Mode 01

Meeting · Complimentary

A 45-minute structured conversation introducing the Framework and offering a preliminary posture assessment. No fee.

Mode 02

Express Diagnostic · Fixed fee

Three-week engagement. Five to eight leadership interviews, targeted document review. Produces a 20-to-30-page Express Readiness Report with dimensional scoring and recommended actions.

Mode 03

Full Readiness Diagnostic · Fixed fee

Six to eight weeks. Full leadership interview programme, evidence review, technical inspection. Delivers a signed 60-to-90-page Readiness Report covering all five dimensions, full regulatory posture analysis, and an eighteen-month prioritised roadmap. Available bilingually.

The full Nuhaa AI Readiness Framework documentation is available as a PDF.

The document is made available for professional review. It is proprietary to Nuhaa AI.

In development
  • Nuhaa Sovereign Deployment Pattern — a reference architecture for AI workloads within Saudi Arabia's data-residency and NCA ECC requirements.
  • Nuhaa MAOps Operating Model — the governance and incident-response framework underpinning our Managed AI Operations service.
  • Nuhaa AI Governance Charter Template — a structured starting point for organisations designing their first formal AI governance framework.
Versioning and governance

Version 1.0 was published in April 2026. Subsequent versions are released when material changes in the regulatory environment (PDPL, SAMA guidelines, NCA ECC), the underlying technology landscape, or accumulated engagement evidence warrant a revision. Version history is documented and published.

Request a complimentary meeting on the Framework

A 45-minute structured conversation, tailored to your sector and regulatory context.