Zala Proof

Software that shows an organisation which AI is in use, by whom and on whose approval, applies its decisions where AI is used, and keeps the evidence. It reads the tools the organisation already runs, such as firewalls, EDR, sign-ins and SaaS logs.

On one virtual machine on your own site, on VMware, Hyper-V, Nutanix or KVM. It needs no general internet access, and Zala has no standing access.

No. Prompt contents stay out of reach. The browser extension checks for sensitive data before it is sent, on the device, and reports what happened, never the prompt.

No. Each of those sees one slice of AI use. Zala Proof reads them, joins them, and shows what is still missing.

Zala Proof is in pilot. Contact us and tell us what you run; a first picture can come from exported files, with nothing changed on your network.

A website, a parent and staff portal, a learning platform, the school’s own mobile app and practical AI, built as one system with one sign-in, in Arabic and English.

No. Each part has its own price and its own acceptance, so a school can start with what it needs most.

No. Official grades and fee balances stay where they are entered. The platform reads them and shows each family what is theirs, so nothing is typed twice.

Yes. We measure what is really used, then move it: course files, question banks, grades and message history, checked against the original.

Answers come only from what that person may see. Teachers approve every AI draft before a student or parent sees it, and early warnings explain why a student was flagged and decide nothing on their own. The provider does not keep or train on the data, and families can opt out.

It reads scanned vouchers, invoices, e-invoices and sheets of small receipts, in Arabic and English, and proposes journal entries against that client’s own chart of accounts.

No. A person approves every entry, and each proposed line traces back to the page it came from.

Yes. Approved entries go into that system, or out as a file your accountant imports. The books are opened read-only, and anything written goes to a separate file.

It runs on the firm’s own machine. Only the page image leaves the office, to a reader that keeps nothing and trains on nothing, and everything read stays on that machine.

A field that could not be read comes back empty with a note, rather than a guess. When a page states a figure twice and the two disagree, the figure is dropped and a person is shown why.

A clinical record for outpatient clinics: patients, visits, diagnoses, medicines, allergies, results and documents, in Arabic and English, on the phone as well as the desk.

Yes. Photograph a page, a lab report or a sheet in the doctor’s own hand, and each line comes back separately. Nothing reaches the record until a clinician files it, line by line.

No. A value is transcribed as written, with the range exactly as the laboratory printed it. No result is marked abnormal, because that is a clinical claim.

That is a rule in the database itself, not a hidden menu. The front desk handles bookings, invoices and payments, and never sees a diagnosis, a result or a note.

Patient data is held in the EU, in Frankfurt. Every record names the person who put it there, and no clinical fact is deleted: it is amended, with a reason.

An AI-powered personal finance app. Log expenses and income by typing, photographing a receipt, or sending a voice note — from the app, from Telegram or from WhatsApp — and your budget, goals and reports stay up to date on their own.

Web, iPhone and Android, all available today. You can also use it entirely through Telegram or WhatsApp without installing anything, and everything stays in sync across all of them.

Yes — every new account gets 30 days of full access, no credit card required.

Subscribe to keep full access, or stay on the free tier with reduced monthly limits. Nothing is charged unless you choose to subscribe.

Plus subscribers can buy a one-time top-up without waiting for the next billing cycle. It adds roughly 50% more receipt scans, AI questions, voice notes and WhatsApp messages for the rest of the month, and anything unused carries into the next one.

No. Zala Savings never asks for your bank login, card number or IBAN, and has no way to move money. You decide what gets recorded, which means the worst case here is nothing like the worst case for an app holding your banking credentials.

Yes to both. Export reports as PDF any time, and delete your account from Settings — that removes your ledger, your receipt images and your Telegram and WhatsApp links.

Your paperwork already contains every date you are going to regret missing. Zala Life reads each document as it arrives, pulls out the dates, amounts and obligations buried in it, puts them on one timeline, and reminds you while there is still time to act.

Three ways: upload them, forward them to your own Zala email address, or import them from Google Drive. An imported file behaves exactly like one you uploaded.

Only where you allow it, and only for one purpose each: turning a scan into text, and reading a document for dates and amounts. Those two are a single permission you can withdraw at any time in Settings. Every company, the country it operates in and what it may keep are named in the privacy policy — we name them rather than saying “our providers”.

No. Every provider Zala uses is set up so that what is sent is not kept after the answer comes back, is not used to train any model, and is not reviewed by a person. The privacy policy names each one and says exactly what it is contracted to do.

They are never read at all. Passports, national identity cards, residence permits and driving licences are held back from reading entirely — and the check is on the words inside the document, not on which folder you filed it in. They are stored and left alone. An identity document rarely carries a deadline, so there is little to gain by reading one and a great deal to lose.

In the European Union, in infrastructure Zala controls. Documents are encrypted with keys we hold, stored so they cannot be silently altered, and every account is separated at the database level — one account cannot reach another’s documents even if our own code asks for it. The privacy policy gives the detail, including which countries.

Only the individual files you pick yourself in Google’s own file chooser. Zala cannot list, search or browse your Drive. The file travels from Google to your browser and then into your storage; the access token stays in your browser and never reaches our servers, so there is nothing for us to keep or lose.

Yes. Every action on a document is written to an append-only record, which is how we can tell you exactly what was read, when, and by which model — rather than asking you to take our word for it.

Until you delete them. Deleting moves a document to Trash for 30 days, where you can still restore it. A document emailed to your Zala address is taken out of the message, and the message itself is discarded within seven days.

No. The two products do not share documents, and a request to read one carries the document itself — not your name, your email or your account.

Zala Life is still in development. Use “Keep me posted” anywhere on this page and we will tell you when it opens up.

A second opinion before you click, pay or reply. Send it a message, link, screenshot, voice note, invoice, QR code or phone number you are unsure about, and it tells you what it found, what that means and what to do next. It also remembers who you normally deal with, so it can show you when something important changes — like a supplier’s invoice arriving with a new bank account.

Paste it into the web app at secure.zala-me.com/app, send it to @zala_secure_bot on Telegram, forward a suspicious email to check@zala-me.com from the address on your account, or share it to the Zala Secure app from WhatsApp, Messages or any other app on your phone.

No, never. Zala Secure says what it found: clear signs of a scam, warning signs, or no warning signs. No warning signs is not the same as safe — a new scam is not on any list yet. If a message asks for money, a code or a password, check another way: the organisation’s own app, or a number you already have.

No. A message is checked and then discarded. Card numbers and codes are removed, and phone and account numbers replaced with one-way codes, before any AI model sees it. What is kept is the verdict — the result and which checks fired — never the message itself.

In the European Union. The Zala Secure privacy policy (zala-me.com/privacy) names every company involved, which country each operates in, and the few things that happen outside the EU — website sign-in, email replies, and breach lookups.

On Android, a great deal: which apps can control your screen, read your text messages or notifications, act as device administrator or install other apps — and it can warn you when an app gains one of those permissions. The list of your apps never leaves the phone. Apple does not let apps see other apps, so on iPhone the checkup reads what it can and walks you through the rest, with an offline filter for texts from unknown senders.

Only with your agreement. You accept an invitation from a relative, and after that they are told when something you check comes back high risk — never what it was. Either of you can end it at any time.

One list for sign-in alerts, password and recovery changes, new bank beneficiaries and SIM changes, each with one question: was this you? A security setting changing is not necessarily an attack. Fake security alerts are among the most common scams, so an email only counts as confirmed when it passes the sending service’s own authentication. Zala keeps the event, never the message.

If you shared a code or card details, or paid, call your bank now on the number on your card and ask them to freeze the card and try to recall the transfer. Zala Secure then walks you through recovering the account, step by step. It cannot get money back — and anyone who contacts you offering to recover it for a fee is almost always the same scam again.

Zala Secure is in pilot and free to use during the pilot, within daily limits. It is available to anyone 16 or older, except people who live in the European Union, the European Economic Area, the United Kingdom or Switzerland.

Send /forget to the bot, or use “Remove everything I’ve shared” in the app. For anything else — your account, your verdict history, your Trust Book — email info@zala-me.com from the address you signed in with, and we will delete it within one month.

An AI software company building practical, secure AI products for individuals and organizations. Zala Savings is our first product. Zala Secure (a second opinion on scams and account security) is in pilot, and Zala Life (paperwork read and put on a timeline) is in development.

Email support@zala-me.com any time, or visit our Support page. We reply within one business day.

Both are linked in the footer of this site, and from our Support page. Zala Savings and Zala Life each have their own privacy policy, because they are built differently and hold different things. Zala Secure has its own too, on the same Privacy and Terms pages.