Help center
Answers to the questions buyers ask on every call.
41+ articles across pricing, security, compliance, curriculum, cohorts, integrations, and legal. Search or browse by category.
Getting started
Onboarding timeline, what you provide, NADRA, IT requirements.
- What is the onboarding timeline?Two to six weeks from contract signing to first cohort, depending on white-label and SSO scope.
- What do you need from us to start?Signed MSA and DPA, learner roster, single admin contact, IDP metadata if using SSO, and brand assets if white-labeling.
- Do you integrate with NADRA for ID verification?Yes, indirectly. We work through your NADRA verification partner (Tasdeeq, NADRA VeriSys, or your own contract). We do not hold a direct NADRA license.
- What are the IT requirements?Modern browser, 1 Mbps per learner for video, optional WhatsApp Business number. No on-prem install, no special hardware.
Pricing and billing
How per-seat pricing works, volume discounts, PKR vs USD, invoices.
- How does per-seat pricing work?You pay one annual fee per active learner. A seat is one named human, not a device or browser session.
- What volume discounts apply at 100, 500, 1000+ seats?Discount tiers stack with annual prepayment. Largest discount in market is at 1000+ seats with three-year annual commit.
- Annual or quarterly billing?Annual is the default. Quarterly is available for orders above 500 seats with a 4 percent uplift to cover collection overhead.
- Can we pay in PKR or only USD?PKR is the default for Pakistan-incorporated buyers. USD is available for foreign affiliates and offshore parent entities.
- Do you offer a paid pilot?Yes. 8-week paid pilots for 50 to 200 seats. Pilot fees are credited toward a full-year contract if you sign within 30 days of pilot end.
Curriculum
Tracks, update cadence, authoring, white-label, custom modules.
- How many tracks are available?Eight live enterprise tracks today, two more in build for 2026-Q3. Track index lives at /[locale]/aizaadi.
- How often is curriculum updated?Quarterly major refresh, monthly minor patches, and unscheduled patches when model behavior changes break a lesson.
- Who writes the content?In-house team of Pakistani subject-matter experts plus Polymath Fellows. Every track is reviewed by an industry practitioner from the sector.
- Can we white-label AIzaadi?Yes, on the 500+ seat plan. Your logo, colors, custom domain, and email sender. The AIzaadi brand is removed end to end.
- Can we add our own modules?Yes. Bring SCORM packages or work with our authoring team. Custom modules sit alongside AIzaadi tracks in the learner UI.
Cohorts and teaching
Cohort sizes, instructor model, female quotas, dropout policy.
- How big is a cohort?Default 30 learners per cohort. Smaller cohorts on request. Larger cohorts split automatically into 30-seat sections.
- Who teaches the cohorts?Salaried Pakistani instructors trained in our pedagogy. Each instructor handles three cohorts at a time. No gig instructors.
- Female participation policyWe target a minimum 40 percent female participation per cohort. Tenants can set a higher floor; we operate accordingly.
- How do you handle dropouts?Three-strike intervention then automatic next-cohort transfer. No refund for dropped seats; reassignable after 30 days.
- How often is recertification needed?Certificates list a 24-month validity window. After 24 months the learner takes a short refresher and re-issues for free if seats are still active.
Security
Where data lives, encryption, access control, backups, sub-processors.
- Where is our data stored?Primary data lives in Supabase Tokyo (ap-northeast-1). Pakistan residency option available for buyers that require it under PDPA-2023.
- How is data encrypted?AES-256 at rest, TLS 1.3 in transit, application-level encryption for CNICs and any sensitive PII fields.
- How is access controlled?Role-based access, row-level security on every tenant table, audit trail on every privileged action. Optional SSO with SAML 2.0.
- Backups, RPO, and RTOContinuous WAL backups with point-in-time recovery to any second in the last 7 days. RPO 1 minute, RTO 4 hours.
- Who are your sub-processors?Supabase, Cloudflare, Resend, Twilio, Mux, OpenAI/Anthropic for AI agents. Current list maintained at /aizaadi/help/sub-processors.
- Do you run pentests?Yes. Annual third-party penetration test plus continuous bug bounty. Summary report shared under NDA.
- Are you SOC 2 or ISO 27001 certified?Not yet. SOC 2 Type I is in progress, target 2027. ISO 27001 will only be pursued if customer demand justifies the cost.
Compliance
PDPA-2023, NAIP, SBP circulars, PVARA Act, FERPA-equivalent posture.
- How do you comply with PDPA-2023?PDPA-2023 ready. Lawful basis is contract performance, optional Pakistan residency, full DSAR workflow, breach notification under 72 hours.
- Does AIzaadi cover the National AI Policy (NAIP)?Yes. AIzaadi curriculum is mapped to NAIP workforce upskilling targets. Mapping document available under NDA.
- How does this map to SBP circulars for banks?AIzaadi tracks align with SBP BPRD circulars on staff training, IT risk management, and digital onboarding controls.
- Are you regulated under the PVARA Act?No. AIzaadi is a workforce learning platform. PVARA covers virtual assets. The Act does not apply to our service.
- Is there a FERPA-equivalent posture for student data?For university and school customers, AIzaadi treats learner records under PDPA-2023 with FERPA-style consent and parental access controls.
Integrations
SSO/SAML, SCORM, API, webhooks, your LMS.
- Do you support SSO and SAML?SAML 2.0 supported on all enterprise plans. SCIM provisioning on 1000+ seat plans. Tested against Azure AD, Okta, Google Workspace, ADFS.
- Can we export to SCORM for our LMS?Yes. SCORM 2004 4th edition export is available for any track you have licensed. xAPI is on the roadmap.
- Do you have an API?Yes, a read-mostly admin API. Endpoints for seat assignment, progress, certificate verification, and cohort listings.
- Do you support webhooks?Yes. Events for enrollment, completion, certification, dropout, and reassignment. HMAC signed, retried with backoff.
Legal
DPA, MSA, data residency, termination, indemnification.
- Do you have a DPA?Yes. Standard DPA available on request, aligned with PDPA-2023 and GDPR articles 28 and 32. Custom DPAs accepted for orders over 500 seats.
- What are the key MSA terms?One-year initial term, auto-renew with 60-day opt-out, mutual indemnification capped at fees paid, Pakistan law and Lahore arbitration.
- Data residency commitmentDefault Tokyo region. Pakistan residency mirror is contractually optional, not the default. Contract specifies the chosen option.
- What happens to our data on termination?Free data export for 30 days. Hard deletion 90 days after termination. Certificates and audit logs retained 7 years for verification.
- Indemnification scopeMutual indemnification for third-party IP claims and data breach. Capped at 12 months of fees paid. AI hallucination is excluded.
- How do learners exercise PDPA data-subject rights?Learners file requests directly with their tenant org. The org forwards to AIzaadi DPO. SLA: 30 days, extendable to 60 with notice.