Compliance, built by people who read the code.
Zairen is a GRC platform incubated at NIC Karachi, building code-aware compliance for teams who are tired of screenshots.
The founding team
Aquib Haq, Founder, CEO & CTO, leads product and engineering. Before Zairen, Aquib worked as a full stack developer and AI engineer across RAG pipelines, multimodal LLM systems, and production infrastructure - the same static-analysis and systems background that shaped Zairen's core engine. GitHub · LinkedIn
Jamal Uddin, Co-founder & COO, runs operations, partnerships, and go-to-market. Before Zairen, Jamal spent years as an assistant lecturer and corporate trainer in Karachi University's Computer Science, Software Engineering & AI department, and has been mentoring founding teams in Pakistani incubators since 2018 - the same operations and people-building experience that shapes how Zairen ships and partners. GitHub · Website · LinkedIn
Incubated at NIC Karachi
Zairen is incubated at the National Incubation Center Karachi, Pakistan's flagship startup incubator, which has supported the company with mentorship, workspace, and access to Karachi's founder and investor community since our earliest prototypes.
How we handle your code
Zairen's static analysis runs against your codebase to map findings to controls - it does not require handing us your source in the open. Scans run against the artifacts you connect, results are scoped to control evidence rather than raw code dumps, and access to any retained evidence is governed by the same control library we sell: least-privilege, logged, and time-bound. A full data-handling breakdown lives in our Privacy Policy and DPA.
Where we are today
We are working toward SOC 2 Type II for our own platform - we won't claim a badge we haven't earned, and we'll update this page the day that changes. In the meantime, our control library, evidence model, and auditor portal are all built to the same standard we're pursuing for ourselves.