Our Commitment
Al Hayir LLC maintains an Information Security Management System designed to protect the confidentiality, integrity, and availability of all information entrusted to us in the course of advisory engagements.
Top management takes direct accountability for ISMS governance and the protection of all information assets.
Our commitment to information security is a foundational obligation to the institutions we serve. It is not a commercial posture.
Al Hayir LLC is committed to the continual improvement of its ISMS through regular management reviews, risk assessments, and corrective action processes.
Regulatory Framework
As a QFC-registered entity (License No. 03401), our information security and data protection practices are governed by:
- —QFC Data Protection Regulations 2021 — primary data protection framework.
- —Qatar Personal Data Protection Law (Law No. 13 of 2016) — supplementary where QFC law is silent.
- —Qatar Cybercrime Prevention Law (Law No. 14 of 2014).
- —NCSA National Information Assurance (NIA) Framework — operational alignment.
Certification and Registration Status
Information security objectives are established, measured, and reviewed in accordance with ISO/IEC 27001:2022 Clause 6.2.
How We Protect Information
Client engagement information is classified, access-controlled, and handled under confidentiality obligations established in every advisory engagement agreement.
Our security practices include:
- —Access control based on least privilege and need-to-know.
- —Encryption of data in transit and at rest for all systems containing client information.
- —Multi-factor authentication for access to systems holding client data.
- —Formal supplier assessment before any third party accesses engagement information.
- —Structured incident response with defined assessment and notification timelines.
The ISMS covers all information processed in connection with Al Hayir LLC's advisory operations.
Reporting a Security Concern
If you become aware of a security concern relating to Al Hayir LLC systems or information, contact:
For data protection and privacy matters: complianceofficer@alhayir.com.qa
Al Hayir LLC | Qatar Financial Centre License No. 03401
Version 1.0 | Last reviewed: June 2026. Reviewed at minimum annually.