What This Is
No more back-and-forth with agencies.
One code. One lookup. The complete execution record — approved content, licensed creators, disclosed posts, processed payments — all in one place, all independently held.
Agencies and creators keep working the way they always have — WhatsApp, Slack, their own tools. CognitivaAV reads quietly in the background, captures every approval, disclosure, and payment, and locks it into an immutable record.
When you enter a tracking code, you are not looking at a report someone prepared for you. You are looking at the raw execution record — timestamped, signed, and impossible to edit after the fact.
No PDF attachments.
No 'we'll send the documents tomorrow.'
The record is already there, waiting.
Authority Benefits
Six things you see. Instantly.
No training required. No new software to install. Enter the code, see the facts.
Creator Licence Status
Confirm UAECA licensing for every creator on the campaign — name, licence number, expiry date — in one view. No manual cross-referencing.
Disclosure Compliance
See whether sponsored content was tagged correctly — #ad, #sponsored, GCAM-compliant language — post by post, creator by creator.
Approval Chain
Every content approval captured: who reviewed it, who signed off, when it happened, and what was approved. Timestamped and actor-attributed.
Payment Verification
AED payment records linked directly to execution events via Stripe — no disconnected bank transfers, no unverified freelance payments.
Cross-Border Clarity
For campaigns spanning UAE, KSA, and Egypt — see every creator, every market, every regulatory requirement met, in a single lookup.
Immutable Record
CognitivaAV holds the record under independent custody. The agency cannot edit it. The creator cannot edit it. What you see is what happened.
How It Works
From campaign to verified record — automatically.
No one in the agency changes how they work. The record builds itself.
Agency runs the campaign
WhatsApp, Slack, email — their usual tools. No workflow change required.
CognitivaOS reads silently
AI captures approvals, disclosures, and payment events in real time as they happen.
Record is locked
Every event is timestamped, signed, and held in independent custody — nobody can alter it.
Authority looks up the code
Enter the tracking code. The full record appears in seconds. No requests, no waiting.
The Authority View
Everything on one screen. Nothing to interpret.
The lookup interface is designed for speed. You enter a code, the record loads, and the key compliance signals are immediately visible — green for clear, amber for flagged.
للجهات الرقابية في دول مجلس التعاون الخليجي
مبني للخليج. بالعربية، من الأساس.
تعامل CognitivaAV اللغة العربية كلغة أصلية — لا ترجمة. يتم التقاط قواعد الإفصاح وأسماء المؤثرين وسجلات الحملات وعرضها بالعربية أصلياً.
سجل الحملة كاملاً
كل موافقة، كل إفصاح، كل دفعة — مسجّلة تلقائياً، مختومة بالوقت، ومحفوظة بشكل مستقل. لا يمكن لأحد تعديلها بعد الحدوث.
امتثال كامل للوائح الإماراتية والسعودية
نتتبع متطلبات هيئة الاتصالات والإعلام الرقمي والهيئة العامة للإعلام المرئي والمسموع تلقائياً — لكل منشئ محتوى، في كل حملة.
Legal Review
28 UAE rules. 34 KSA rules. Every one mapped.
Every rule from the Cognitiva UAE and KSA compliance corpora — grouped by rule set, with severity and the governing instrument for each. Click any rule set to expand.
Status: DRAFT — these rule sets have been authored by Cognitiva as a first draft for Counsel review. No admitted Counsel has yet attested to these rules. Citation specifics are marked for Counsel confirmation. The four-eyes activation ceremony under §6.2 of the Counsel Brief has not yet taken place. Attestation letters available on request once activated.
🇦🇪 UAE — 28 Rules across 9 rule sets
🇸🇦 KSA — 34 Rules across 10 rule sets
Honest scope statement: CognitivaAV is a system of record — not a legal advisor, not a compliance officer, and not a regulatory guarantee. The agency retains full legal responsibility for its compliance obligations. CognitivaAV produces the records that regulators require. It does not replace legal counsel. Contract law, employment law, and intellectual property rights are outside the system's scope.
GCC Data Residency
Every GCC country's data stays
in that country.
No exceptions. No asterisks.
This is not a preference setting or a contractual promise that depends on configuration. It is a hard architectural constraint built into the CognitivaOS federation model. Each GCC country has its own independent deployment. Cross-border data movement between deployments is blocked at the infrastructure layer — not just the policy layer.
UAE PDPL · FDL 45/2021 · TDRA attestation pathway · In-region HSM · CBUAE-licensed AED rail
Saudi PDPL · SDAIA/NDMO attestation pathway · KSA-resident server farm · KSA-bounded key custody
Qatar PDPPL · NDA oversight · In-region deployment · No cross-GCC replication
Kuwait data-privacy framework · In-region deployment · No cross-GCC replication
Bahrain PDPL (Law 30/2018) · PDPA oversight · In-region deployment
Oman PDPL · TRA oversight · In-region deployment · No cross-GCC replication
data classes that cross any GCC country border
independent country deployments — UAE, KSA, Qatar, Kuwait, Bahrain, Oman
maximum lifetime of any cross-border token — public identity only, zero business data
data classes that cross UAE borders
deployment where UAE data lives — Dubai, in-region HSM, CBUAE-licensed rail
maximum lifetime of any cross-border token — public identity only, zero business data
WHAT NEVER LEAVES COUNTRY INFRASTRUCTURE
THE ONLY THING THAT EVER CROSSES A BORDER
Public identity layer only — no business data, no campaign content, no payment records.
IN-REGION HSM · PER COUNTRY
Every ledger event is signed by that country's deployment Hardware Security Module. UAE events: signed in Dubai. KSA events: signed in Riyadh. The HSM private key for each country never leaves that country's deployment region.
WHATSAPP IMMEDIATE-PURGE RULE · MODULE CN v1.1
WhatsApp messages are processed in memory only. The AI reads the message, extracts the execution event, writes it to the UAE ledger, then immediately purges the message body. No WhatsApp message content persists in CognitivaOS storage.
Our Commitment
Not a report. A record.
Independent Custody
Records are held by Cognitiva, not the agency. No one in the campaign chain can modify, delete, or reorder what's captured.
Real-Time, Not Retrospective
Events are captured as they happen — not compiled the night before an audit request. The timestamp is the moment it occurred.
GCC Data Residency
UAE data stays in the UAE. KSA data stays in KSA. Qatar data stays in Qatar. Kuwait, Bahrain, Oman — each country's data stays in that country. Six deployments. Six independent custody boundaries.
Start Here
Start a lookup.
See it for yourself.
Access is granted to authorised GCC regulatory bodies. Contact our GCC team to establish verified credentials and set up authority-level access to campaign compliance records.