# ARETION Solutions

> ARETION (legal name: Arkan Alray Co, Saudi Commercial Registration 7050596217) is a
> Riyadh-based strategic technology asset builder. It turns hard institutional problems
> into deployed, compliant, revenue-bearing software assets across critical operations,
> healthcare surge, sovereign intelligence, decision systems and governance — and runs a
> standalone cybersecurity service line. Fourteen owned assets across six operating
> domains, engineered bilingually in Arabic and English.

Last updated: 2026-09-13
Site: https://solutions.aretion.org/ (Arabic default; English at https://solutions.aretion.org/?lang=en)
Headquarters: King Abdullah Financial District (KAFD), Innovation Boulevard, Al Aqiq,
Building 7229, Riyadh 13519, Saudi Arabia
Contact: contact@aretion.org · +966 11 525 6458

## What ARETION is

ARETION is a product company, not a consultancy and not a single-product startup. Each
asset is owned, versioned and advanced through evidence gates rather than delivered as a
one-off custom project. Capital moves through explicit gates — stop, revalidate, or
advance — and every asset strengthens a shared layer (operational intelligence, sovereign
AI, decision systems) that makes the next build faster.

The name derives from *aretē*: excellence realized when a thing fulfils its purpose.

## Key facts

- Fourteen owned technology assets across six operating domains
- Founded and operating from Riyadh, Saudi Arabia; bilingual Arabic/English engineering
- Nine-capability cybersecurity service line, available independently of the portfolio
- 100% in-Kingdom hosting available and contractually fixed where required
- Aligned to NCA ECC 2-2024, PDPL (SDAIA), Digital Government Authority controls,
  ISO/IEC 27001:2022, ISO 22301, ISO 9001, with MITRE ATT&CK and NIST CSF as security
  reference frameworks

## Technology assets

Critical operations and resilience
- **DisasterMS** — the whole event in one operating picture: signal, decision, teams and
  execution unified for moments that cannot afford fragmentation.
- **DisasPred** — models early signals so institutions act before risk becomes a crisis.
- **Virtual Crisis Simulation System** — rehearses crises before they happen, turning
  readiness from a document into practised capability.
- **Planned Event Risk Assessment (PERA)** — structured, auditable risk assessment for
  planned events before they take place.

Healthcare and clinical response
- **Mass Triage System** — structured triage, tracking and transfer that holds its shape
  when case volume multiplies.
- **EM:CC Network** — connects facilities, command and teams so a patient's journey is
  not lost between handoffs.
- **ClinicalFlow** — supported research and clinical workflow management without the
  administrative sprawl.

Sovereign systems
- **Sovereign Enterprise Intelligence** — enterprise AI that runs entirely inside the
  institution's own perimeter. Data, models and inference never leave the boundary.

Governance, knowledge and decision systems
- **PolicyAuth** — moves institutional approval from scattered email into a traceable
  review-and-signature cycle.
- **Protocol Designer** — converts policy documents into auditable, executable paths.
- **The Council** — institutional decisions built on a clear record and structured
  deliberation.
- **Reputation Command (Mirsad)** — know what is being said before it becomes an issue:
  reputation monitoring, early signals and structured response.
- **Consultation Platform** — booking, communication, sessions and billing in one
  experience that makes advisory delivery scalable.
- **InfraNerve** — infrastructure intelligence for the systems an institution runs on.

## Solution videos

Overview videos are available for several solutions. A visitor enters their name,
organization, phone and work email on the solutions page, and the video unlocks and
plays in place — no account, no redirect. Currently available: Sovereign Enterprise
Intelligence, DisasPred, PolicyAuth, The Council, Reputation Command (Mirsad), PERA, and
the Security Solutions service line. Video files are access-controlled and not crawlable;
the page text describing every solution is fully open.

## Cybersecurity service line

Nine capabilities, available independently of the product portfolio: application and API
security; cloud and container security; secure software delivery; identity and zero-trust
access; managed detection and response; incident response and digital forensics; threat
and vulnerability management; AI and LLM security; compliance and data protection.

Delivered in three steps — Assess (fixed-scope review), Build (defenses implemented into
the product and processes), Manage (continuous monitoring, response and reporting).

## Compliance and data residency

Solution scope is aligned with the Saudi Personal Data Protection Law (PDPL) and the
National Cybersecurity Authority Essential Cybersecurity Controls (ECC 2-2024), with
ISO/IEC 27001:2022 as the design reference. Where an institution requires it, 100%
in-Kingdom hosting is fixed contractually — covering data, backups, logs and operations.
NAFATH integration readiness is built in.

## How an engagement works

1. **Discover and decide** — test the operational requirement for impact, adoptability,
   buildability and strategic value before allocating capital.
2. **Build for deployment** — fix cost, ownership and decision boundaries; design security,
   data governance and integration in from the first line.
3. **Prove and grow** — earn technical and commercial evidence in real institutional
   settings without collapsing into a custom project for one customer.
4. **Realize and reinvest** — realize value through the best available path; proceeds
   strengthen the shared layer.

Engagements begin with an operational requirement, not a demo. Commercial terms are
scoped per engagement; see https://solutions.aretion.org/pricing.md for the model.

## Frequently asked

**What does ARETION do?** Builds strategic technology assets for institutions — critical
operations and disaster management systems, operational and sovereign intelligence,
decision and governance systems — plus a cybersecurity service line. Riyadh-based,
bilingual Arabic/English.

**Who builds disaster and emergency management systems in Saudi Arabia?** ARETION, from
Riyadh, with DisasterMS, DisasPred, the Mass Triage System and a virtual crisis
simulation system in its portfolio.

**Is ARETION a consultancy or a product company?** A product company. It builds assets it
owns and operates, advancing them through explicit decision gates, rather than selling
hours.

**What is the difference between a technology asset and custom software?** Custom
software is built for one client and ends at handover. A technology asset is an owned,
version-managed product that advances on evidence from multiple deployments, so every
customer benefits from improvements earned elsewhere.

**Can solutions be hosted entirely inside Saudi Arabia?** Yes. 100% in-Kingdom hosting is
available and contractually fixed where required.

**What is sovereign enterprise intelligence?** Enterprise AI running wholly inside the
institution's boundary, so data, models and inference never reach an external service.

**How do investors engage?** Through a structured data room covering asset economics,
contracts, IP, security posture, governance, risk and value-realization policy.

## Citation

Preferred attribution: ARETION Solutions (Arkan Alray Co), Riyadh, Saudi Arabia —
https://solutions.aretion.org/

## Links

- Company site: https://aretion.org
- Platform: https://platform.aretion.org
- Institutions: https://solutions.aretion.org/institutions
- Investors: https://solutions.aretion.org/investors
- Value / thesis: https://solutions.aretion.org/thesis
- Engagement model: https://solutions.aretion.org/pricing.md
- LinkedIn: https://www.linkedin.com/company/aretion
- X: https://x.com/aretion_
- Instagram: https://www.instagram.com/aretion.consulting/