Overview
Dal is a modern RegTech platform built to help financial institutions in Saudi Arabia simplify compliance with Capital Market Authority (CMA) regulations. It replaces manual processes with intelligent automation, covering AML and sanctions screening, PEP monitoring, audits, and inspections within a single, unified system, effectively working as a full governance risk compliance platform for the region's financial sector.
Built in partnership with Blink22, Dal turns complex regulatory tasks into seamless workflows. Compliance teams get real-time visibility into risk, governance, and reporting, while institutions operate confidently within Saudi Arabia's fast-evolving regulatory landscape. With Dal, financial compliance becomes not just manageable but efficient, transparent, and future-ready.
Technologies Used
Technologies Used- React.js
App Links
Category
- Compliance & Risk Management Platforms
- AML & KYC Automation Solutions
- Multi-Tenant SaaS for Financial Institutions
- Third-Party Integration & API Platforms
- Cloud-Native Infrastructure & Security Systems
Platforms
- Web (Admin Dashboard)
Timeline
February 2025
Ongoing Partnership
Initial Requirements
Dal was founded by Hassan Sheikh, a fintech and compliance expert with over a decade of experience in Saudi Arabia’s financial sector. After years of seeing institutions struggle with fragmented compliance tools and manual audits, he envisioned a single platform that could bring automation, transparency, and intelligence to compliance operations.
Having previously partnered with Blink22 on the digital transformation of Sidra Capital, Hassan turned to our team once again, this time to build Dal from the ground up. The goal: to create a secure, scalable, regulation-ready RegTech ecosystem tailored to Saudi Arabia’s financial environment and data sovereignty standards.
Challenge
Designing Dal meant tackling some of the most demanding challenges in enterprise-grade RegTech. The platform needed to deliver security, scalability, and real-time intelligence while aligning with strict CMA and Saudi data residency laws.
Key challenges included:
High-performance processing: Building a system capable of managing massive asynchronous workflows with BullMQ and Redis, without compromising reliability.
External integrations: Enabling real-time screening through third-party systems like Sigma360 while maintaining platform stability.
Dynamic multi-tenancy: Developing a flexible architecture that isolates client data and supports MFA and enterprise-grade cybersecurity.
AI-driven decision support: Creating Dal’s Gemini-powered AI agent, trained on both local (Nafith, Makken) and public (Sigma360) watchlists to enhance compliance accuracy.
Data sovereignty & governance: Ensuring full alignment with Saudi data residency and protection mandates.
Complex infrastructure: Architecting a Terraform CDK-based cloud environment on GCP, compliant with Saudi CRFR standards, while maintaining scalability and ease of management.
Advanced Audit Capabilities: implementing granular audit trails so high-level users can view every action taken across the platform, supporting accountability and regulatory transparency.
Third-party integration: Designing Dal not just as a platform but as a compliance service provider, exposing secure APIs for seamless integration with other fintech systems.
Approach
Blink22's approach centered on security, scalability, and collaboration, turning a promising prototype into an enterprise-grade RegTech platform.
Re-architecting for scale: We replaced the original Supabase-based setup with a cloud-native GCP infrastructure, ensuring performance, compliance, and data sovereignty.
Backend-first Strategy: Developed with NestJS and Prisma, using a clean onion architecture for modularity, maintainability, and long-term flexibility.
Containerized deployment: Streamlined operations using Docker, enabling consistent deployments and DevOps scalability.
Collaborative Workflow: Daily stand-ups, weekly strategy sessions, and continuous demos with the Dal team maintained alignment between product, compliance, and technical priorities.
AI & intelligence integration: Implemented a Gemini-based AI agent to assist compliance officers by analyzing public and private watchlists for smarter decision-making.
Security by Design: Embedded multi-tenancy, MFA, and penetration testing from the start. The final round of external security testing achieved zero vulnerabilities, a testament to the system’s robustness.
Continuous QA & observability: Used Spurtest, Snyk, Grafana, and PostHog for automated testing, vulnerability monitoring, and behavioral insights.
Through this process, Blink22 turned Dal from an idea into a trusted RegTech platform that meets the highest global and local compliance standards.
Solution
Dal was delivered as a fully integrated compliance ecosystem, built with enterprise-grade infrastructure and user-centric design.
Backend Services
Built with NestJS + Prisma for scalability and clean modularity.
Supported multi-tenancy, MFA, and audit logging to ensure security and visibility.
Managed large-scale background tasks using BullMQ and Redis.
Embedded a Gemini-based AI agent to assist compliance decisions using both local and public data sources.
Exposed a secure API layer for integration with fintech partners and enterprise systems.
Admin Dashboard (Web)
We built a powerful, web-based admin dashboard that gives compliance and risk teams deep operational visibility and control. Admins can:
Manage tenant onboarding and automated domain management
Manage tenant features flags, generating api integration tokens and rate limits
Configure tenant settings and platform policies.
Client-Facing Web Application
Multi-tenant React + TypeScript app offering a secure, intuitive experience for compliance workflows.
Built for both technical and non-technical users, with advanced filtering, monitoring, and reporting tools.
Optimized for responsiveness, security, and real-time performance.
Infrastructure & DevOps
Fully Google Cloud Platform (GCP) setup compliant with Saudi data residency laws.
Provisioned via Terraform CDK for scalable, repeatable deployments.
Included Compute Engine, Cloud SQL (PostgreSQL), MemoryStore (Redis), Secret Manager, and load balancing.
Underwent two rounds of third-party penetration testing, achieving a clean security score on final review.
Outcome
Dal has evolved into a trusted, enterprise-grade RegTech platform now live across Saudi Arabia, actively used by 8+ financial institutions to manage compliance operations securely and efficiently.
AI-powered accuracy: The Gemini AI agent has reduced manual review time and improved the precision of AML and sanctions screening.
Scalable adoption: Dal’s multi-tenant structure allows institutions of varying sizes to onboard and customize compliance workflows easily.
Industry recognition: Dal’s presence at Money20/20 garnered strong attention, opening regional partnership opportunities.
With an expanding client base and ongoing development roadmap, Dal continues to evolve as the benchmark for regulatory compliance automation in Saudi Arabia and the wider MENA region.