Customer document collection, built for UAE financial institutions.
DocChat helps CBUAE-regulated institutions collect KYC and customer documents through a compliant, auditable workflow — replacing messaging apps and consumer channels with a system designed for regulated environments.
Document requests
Designed for every institution
regulated by the Central Bank of the UAE.
Hundreds of institutions across the UAE operate under CBUAE supervision — each with the same fundamental requirement to demonstrate controlled, auditable customer engagement. DocChat is built for all of them.
Three principles, engineered for regulated environments.
DocChat is purpose-built for institutions that need to demonstrate control, evidence, and accountability — not adapted from consumer messaging tools.
Compliance by design
Every request, document, and decision is captured in a tamper-evident audit chain that satisfies regulator inspection. Designed to align with CBUAE governance expectations from day one.
Sovereign and secure
Customer documents and records are stored in the Microsoft Azure UAE North region. Encryption in transit and at rest, HSM-protected signing keys, and private network paths throughout.
Operationally efficient
Agents send a document request in seconds. Customers receive it via SMS or email and upload securely from any device. No app installation. No training. Just measurable improvements in completion time.
Every action, evidenced. Every record, verifiable.
DocChat maintains a cryptographically linked audit chain for every request, document, and operator action. Each entry is hashed and linked to its predecessor — making tampering mathematically detectable and providing regulators with verifiable evidence on demand.
- RFC 8785 canonical JSON serialization for cross-system verification
- SHA-256 chained entry hashes with HSM-signed root
- One-click regulator evidence packages — exportable, signed, verifiable
- Continuous integrity verification, every six hours
From request to receipt — controlled, traceable, complete.
Agents create document requests from pre-approved templates. Customers receive secure, time-limited links via SMS or email. Submissions land in your review queue with full provenance. Every step is timestamped, attributed, and immutable.
- Pre-approved document templates with mandatory fields
- Email and SMS delivery of secure, time-limited links
- Branch-level isolation and role-based access controls
- Configurable expiry windows and automatic reminders
Designed for your customer — no app required.
Customers receive a single secure link, open it on any device, and upload from their photo library or camera. No downloads, no logins, no friction. The branded upload page reflects your institution — not ours.
- Web-based — works on any modern phone or browser
- Full Arabic and English language support
- Branded with your institution's logo, colors, and domain
- Clear guidance, accessibility-compliant interface
Engineered to support rigorous regulatory review.
DocChat is designed to help your institution demonstrate the controls expected under CBUAE governance and UAE data-protection frameworks. Security is not a feature — it is the foundation.
UAE Data Residency
Customer documents and records are stored in Azure UAE North.
HSM-Protected Keys
Hardware security module–protected keys for audit-chain signing. Azure Key Vault with purge protection.
Tenant Isolation
Row-level security enforces strict separation between institutions' data at the database layer.
UAE PDPL Aligned
Built to support your obligations under the UAE Personal Data Protection Law, with data-subject-rights workflows and a DPA available on request.
What institutions ask before adopting DocChat.
Ready for a compliant
alternative to messaging apps?
Request access to discuss your institution's requirements with our team. We respond to qualified inquiries within one business day.