# Legal Foundation Status — Dealix

> **Status**: NOT YET STARTED  
> **Owner**: Founder  
> **Review**: Monthly until all items green

---

## Company Incorporation

| Item | Status | Target Date | Owner | Notes |
|------|--------|-------------|-------|-------|
| Saudi Arabia entity (MISA/SAGIA) | TBD | — | Founder | Options: LLC via MISA, or startup license |
| Alternative: DIFC/ADGM (UAE) | TBD | — | Founder | For regional HQ with easier banking |
| Bank account opened | TBD | — | Founder | After incorporation |
| Tax registration (ZATCA) | TBD | — | Founder | VAT 15% required if KSA |

**Recommendation**: MISA Startup License if founder is Saudi, DIFC Innovation License if non-Saudi.

---

## IP Assignment

| Item | Status | Target Date | Notes |
|------|--------|-------------|-------|
| Founder IP assignment | TBD | Day 1 | All code/docs contributed to be assigned to entity |
| Contractor agreements | TBD | Per engagement | Must include IP assignment clause |
| Employee agreements | TBD | Per hire | Include IP + non-compete (enforceable in KSA) |
| Third-party license audit | TBD | Quarterly | License compatibility check |

**Template needed**: IP Assignment Agreement (bilingual AR/EN).

---

## Privacy Policy / Terms of Service / DPA

| Document | Status | Drafted By | Reviewed By | Published | Last Review |
|----------|--------|-----------|-------------|-----------|-------------|
| Privacy Policy (AR) | Draft in `docs/legal/privacy-policy-ar.md` | Internal | — | No | N/A |
| Privacy Policy (EN) | TBD | — | — | No | N/A |
| Terms of Service (AR) | Draft in `docs/legal/terms-of-service-ar.md` | Internal | — | No | N/A |
| Terms of Service (EN) | TBD | — | — | No | N/A |
| Data Processing Agreement (DPA) | TBD | — | — | No | N/A |
| Affiliate Rules (AR) | Draft exists | Internal | — | No | N/A |
| Cookie Policy | TBD | — | — | No | N/A |

**CRITICAL**: All existing legal docs are internal drafts NOT reviewed by qualified counsel. Before customer-facing use, must be reviewed by:
- Saudi law firm specializing in PDPL/data protection
- UAE counsel if serving UAE customers

**Budget**: 15K-30K SAR for qualified counsel review.

---

## Trademark Registration

| Mark | Jurisdiction | Status | Registered | Notes |
|------|-------------|--------|-----------|-------|
| "Dealix" | KSA (SAIP) | TBD | No | Class 9 (software) + Class 42 (SaaS) |
| "Dealix" | UAE | TBD | No | Same classes |
| "Dealix" | Egypt | TBD | No | Same classes |
| "Dealix" | Jordan | TBD | No | Same classes |
| "ديلكس" (Arabic) | KSA | TBD | No | Recommended to register alongside English |

**Recommendation**: File in KSA first (primary market), then UAE. Budget ~5K SAR per jurisdiction.

---

## Regulatory Compliance

| Regulation | Status | Evidence | Action |
|-----------|--------|----------|--------|
| PDPL (Saudi) | In-progress | `docs/governance/saudi-compliance-and-ai-governance.md` | Formal compliance assessment needed |
| ZATCA e-invoicing | Not applicable yet | No revenue yet | Activate when first invoice issued |
| NCA cybersecurity ECC | Target | Gap analysis done | Full implementation Tier-1 phase |
| SDAIA AI governance | In-progress | Checklist in saudi-compliance docs | Formal registration when required |

---

## Insurance (Pre-Revenue)

| Type | Status | Notes |
|------|--------|-------|
| Professional Indemnity | TBD | Required by most enterprise customers |
| Cyber Liability | TBD | Required once handling customer data |
| General Liability | TBD | Standard business coverage |

**Budget**: ~5K-15K SAR/year depending on coverage limits.

---

## Action Items (Priority Order)

1. **Decide entity structure** (KSA MISA vs DIFC vs ADGM) — founder decision
2. **File trademark in KSA** — 30 days
3. **Engage Saudi counsel** for privacy policy + ToS review — 60 days
4. **Open business bank account** after incorporation
5. **Obtain professional indemnity insurance** before first customer
6. **Set up formal IP assignment** between founder and entity
7. **ZATCA registration** when approaching first invoice