Saudi regulatory operations platform
CHERT Regulatory brings products, regulatory cases, laboratory results, documents and CHERT-certified consultants into one bilingual platform — integrated with CHERT ERP, and built around the official SFDA process, never around shortcuts.
Who it is for
Businesses own their products and cases, CHERT-certified consultants bring expertise, laboratories bring results — each in their own workspace, on the same records.
Keep every product’s regulatory file, evidence and case history in one place, and see what is ready and what is still missing before anything is submitted.
Work cases through requirements, evidence and review with clear roles — a signer is never the approver — and a full audit trail.
Offer services in the marketplace and work assigned cases under scoped, time-bounded engagements. CHERT Certificate — a private training and assessment certificate issued by CHERT; not a government accreditation or SFDA authorization.
Receive samples, run and verify analyses in CHERTREG Lab, and release certificates of analysis straight into the customer’s regulatory case.
The regulatory lifecycle
Ten recorded stages, each an event with an actor, a time and a reason. Select a stage to see what happens and which parts of the platform make it work.
Stage 01 / 10
Your organisation, your people, one sign-in.
Register the organisation, invite the owner, QA officer and regulatory specialist, and give each the role they need. Everyone signs in once and reaches every workspace their role allows.
Powered by
Stage 02 / 10
One CRPN for the product’s whole regulatory life.
Create the product or bring it from CHERT ERP: names in both languages, GTINs, composition and revisions. The CRPN stays the same while ERP codes and authority numbers are kept as references.
Powered by
Stage 03 / 10
Know what is required before you start collecting.
A versioned rule pack turns the product’s category and claims into a requirement checklist. Packs pending a qualified reviewer’s sign-off are labelled as such and cannot freeze a package.
Powered by
Stage 04 / 10
New registration, renewal or variation — one case each.
The case gathers requirements, evidence, work and submission, and tracks four separate state machines from the first draft to the official outcome.
Powered by
Stage 05 / 10
Every document linked by version and hash.
Upload to CHERTREG Documents or link existing files; each link records the source, version, SHA-256 and who linked it. Missing requirements stay visible until they are met.
Powered by
Stage 06 / 10
From sample to released certificate of analysis.
Register samples in CHERTREG Lab, follow analyses through verification, and link the released report to the case as evidence. A lab release is a laboratory result — never an authority approval.
Powered by
Stage 07 / 10
Expert help from a CHERT-certified consultant, scoped to the case.
Request a service in the marketplace, accept a quote, and the consultant is assigned to the case for the engagement’s duration — access ends when the assignment does.
Powered by
Stage 08 / 10
Reviewed, signed, hashed — and then unchangeable.
When the evidence is complete and reviewed, the package is frozen with its rule-pack version, sign-offs and hashes. Any later change creates a new revision; the frozen one stays as it was.
Powered by
Stage 09 / 10
Through the authority’s channel, by your authorized person.
Your authorized person submits through the SFDA’s official channel; CHERT Regulatory records the submission, reference and receipt as evidence. Nothing is submitted automatically.
Powered by
Stage 10 / 10
Official status only from the official document.
The authority’s decision is entered from the official document with its source and date. Registrations are then watched for expiry, and renewals start as new cases.
Powered by
Ready ≠ Submitted ≠ Accepted ≠ Approved
Each one answers a different question and is owned by a different party. They are tracked side by side and never merged.
Internal readiness of the product record
ExceptionsNeeds rework
CHERT Regulatory workflow — “submitted” means submitted with evidence, never approved
ExceptionsAction requiredWithdrawn
Changes only when official evidence is attached
ExceptionsRejected (official evidence)
The commercial relationship with a consultant
ExceptionsDisputed
Interactive architecture
Select any component to learn what it does, or play a journey and watch a case move through the platform.
Where records live, and the systems CHERT Regulatory talks to — each keeps what it owns.
Proven open-source engines, branded and wired to one sign-in and one set of records.
CHERT-owned: the regulatory lifecycle, the CRPN and the rules that keep ready apart from approved.
One platform, a workspace for each role — Arabic right-to-left and English left-to-right.
One sign-in, isolation in the database, an audit trail that cannot be rewritten.
A platform that watches itself and grants access from one place.
Details appear in the panel above the diagram.
Clear boundaries
CHERT ERP owns product and quality master data. The SFDA owns official outcomes. CHERT Regulatory owns the regulatory cases, the evidence links and the workflow between them.
Owns: Products, formulas, batches, quality records
Product & quality data — read through the ERP service API
Regulatory status — written to CHERT Regulatory’s own table only
Owns: CRPN, regulatory cases, evidence links, workflow, audit
Package submitted by your authorized person, through the official channel
Outcome entered from the official document, with source and date
Owns: Official submissions, decisions, registration numbers
The ERP connection is configured and verified per customer. No government portal is automated and no government credentials are stored.
One platform, many engines
Each engine does one job well, keeps its own license and attribution, and answers to one sign-in and one set of permissions.
CHERT
The CHERT-owned heart of the platform: products and CRPN, cases and their state machines (with embedded Flowable workflow), rule packs, the evidence ledger, the marketplace and the audit ledger.
License: CHERT
Flowable (embedded in the Core)
The workflow engine inside the Regulatory Core: one process per case, pinned to its version.
License: Apache-2.0
Mayan EDMS
Document management with versions, previews, OCR and cabinets for each organisation.
License: GPL-2.0
SENAITE LIMS
Laboratory information management: samples, analyses, verification and certificates of analysis.
License: GPL-2.0
Apache Superset
Interactive dashboards per organisation, isolated in the database.
License: Apache-2.0
OpenSearch Dashboards
Health, audit, broker and backup dashboards for CHERT operators.
License: Apache-2.0
Keycloak
One sign-in for the portal and every engine, with roles per organisation.
License: Apache-2.0
PostgreSQL
The system of record, with row-level security for every organisation.
License: PostgreSQL
SeaweedFS
Content-addressed evidence files with hashes and encrypted off-site backups.
License: Apache-2.0
OpenSearch
Bilingual search across products, cases and consultants.
License: Apache-2.0
NATS JetStream
Durable events from a transactional outbox to notifications, search and dashboards.
License: Apache-2.0
Inside the platform
Not mock-ups: captured from the deployed platform with a reference organisation (illustrative data).
Why CHERT Regulatory
Product readiness, case progress, official status and engagement are four separate state machines. No screen can turn “ready” into “approved”.
Versions, SHA-256 hashes, rule-pack versions and sign-offs travel with every frozen package; later changes become new revisions.
Organisations are separated by PostgreSQL row-level security, consultants by active assignments — proven by negative tests.
No portal automation and no government credentials stored. Submissions are made by your authorized person; outcomes come from the official document.
CHERT ERP owns product and quality master data. CHERT Regulatory reads it and writes back only its own regulatory status.
Right-to-left Arabic and left-to-right English from one codebase, with identifiers that stay legible in either direction.
CHERT Regulatory is opening to businesses, CHERT-certified consultants and laboratories in Saudi Arabia. Tell us about your products and we will set up your organisation.
Emailhello@chertreg.com
