A system already running at a client organisation, tailored to each client's own procedures — not the other way round.
Mhalah
We file your project — one folder at a time
Web systems • Automation and AI • Documentation and digital consulting —
we document the procedure before a line of code is written
Submit a request
Six fields, then WhatsApp or email.
MhalahDocumentation before implementation
Our services
Seven services, each on its own sheet.
We map the procedure as it is actually practised — in the committee, in the budget — then write it as a requirements document (SRS) any team can build from without guesswork.
Request, committee and disbursement approval workflows in the browser — with permissions for every role and a full audit trail. This includes the public-facing site, payment portals and stores tied to the same route.
What gets retyped by hand between stages moves automatically; where attachments must be read and classified, a language model assists — under human supervision.
Which procedure needs a system and which only needs a spreadsheet — a written opinion before you spend anything.
A programme document that can be funded and measured, and a feasibility study for endowment and investment projects — in language the funder or investor understands.
The corporate profile, the impact report and the investment deck — with figures labelled with their source and status, achieved or targeted, and governance details visible on the cover and in the footer.
A content package built from the same source as the system and its approval workflow: advertisements sized for each platform, the corporate profile, and the letterhead, seal and forms.
How we work
We start on paper, before the code
We understand the procedure
A session with the people who practise it daily, not with those who describe it from a distance: who submits, where it stalls, who signs, and what sends it back.
We document it
A requirements document signed before a single line is written: every screen, every field, and every rule governing a transition.
We build
On the signed document, not on a verbal understanding — so what is delivered is what was agreed, not what was understood in a meeting.
We hand over and run a trial
A trial run with the people who will actually use it, and adjustments to whatever surfaces before final sign-off.
We support and operate
A separate annual contract: fixing what breaks, security updates, and a six-monthly review of what has changed in your procedure.
Our work
Three pieces of work.
Client work · Nonprofit organisation in Madinah
From three offices to a single route: the treatment request
Before: A paper form moving between three offices, and nobody knowing where the request stood.
After: A single approval workflow with four roles, every transition recorded with its time and its actor.
The lesson: A request isn't delayed because someone is stalling — it's delayed because nobody knows it's their turn.
Client work · Nonprofit organisation
From a file handed over by hand to a page opened from anywhere
Before: A printed file handed over by hand, every update a reprint, and copies drifting apart.
After: A single source updated in place, visible to everyone at once.
The lesson: The problem was never that the file was on paper — it was that its copies multiplied.
A system we built
A system we built in full — not client work. We show it because it demonstrates how we build, not to claim an organisation bought it.
The balance that is never typed: inventory, sales and transfers
Before: Stock in one file, sales in another, and what moved between them in an employee's memory.
After: A balance derived from recorded movements, with no quantity column ever edited by hand.
The lesson: If you want a number you can trust, don't build a field to type it into — build a movement log to derive it from.
Frequently asked questions
Nine questions on pricing, timelines, support and getting started.
Why not just buy an off-the-shelf system and save money?
Buy one, if your procedure looks like everyone else's: accounting, payroll, standard inventory. Off-the-shelf is cheaper, faster and better tested there, and we'll say so plainly. But approval workflows differ from one organisation to the next: who signs, when a request moves on, and what stops it. Off-the-shelf imposes its route on you, so you either reshape your work to suit a program, or work around it with side spreadsheets and end up back where you started. The test is practical: if you find something off the shelf that matches your route without workarounds, it's the better value. If you're going to buy it and then work around it, you've paid twice.
How do I know you won't disappear after handover?
That isn't guaranteed by a promise, but by making our presence unnecessary: the repository, the hosting and the database are in your organisation's name, with full keys in your hands, and the documentation is written so another team can pick it up without coming back to us. Post-handover support is a separate annual contract that states in writing what it covers and what it doesn't.
We have a developer in-house — why would we need you?
You may not, and that's an honest answer. Your developer knows the organisation and its people, and that's an advantage we don't have. But what usually stalls these projects isn't the programming: it's getting the procedure written down as it is actually practised, settling who owns changing it, and producing the document that gets signed before building begins — work that is hard for someone inside the organisation who is party to its procedures. So if you have a developer, the most useful thing we can give them is a route document to build from, not a system built in their place.
How secure are your systems, and how is our data protected?
We have cybersecurity expertise on the team, and our systems are built and tested against national cybersecurity controls: permissions for every role, and an audit trail recording every action with its time and its actor.
Your organisation owns its data outright: it is held on secure infrastructure, each organisation's data isolated from every other and not accessible to anyone else, with regular, separate backups. It is never shared with a third party and never used outside the purpose it was collected for. Our access ends when the contract ends, and everything is handed over with its keys.
The written commitments and details are set out in the contract, and we'll provide them on request.
How is pricing calculated?
By scope, not by a fixed rate: the number of approval workflows, the roles involved, the integrations required, and whether we're building from scratch or tailoring our ready system. We quote in writing after understanding and documenting the procedure, not before.
How long does implementation take?
It depends on the scope, and we don't quote a duration before reading the procedure. What we can say is that documentation comes first and shortens everything after it — a system built on a signed document takes less time than one discovered as it's built.
Does the service include support after handover?
Support is a separate annual contract, covering: beginning work on what breaks within two working days, security and dependency updates, and a six-monthly review of what has changed in your procedure and what needs adjusting. It does not cover a new service, a new route, or integration with another system — those are quoted separately before any work begins, and the binding wording for each item is in the contract.
Do you work with nonprofits and government entities?
Yes. Our field is the administrative procedure, wherever it is practised — nonprofits, endowments, government entities, healthcare providers, professional practices, schools and companies. What sets the boundary is the procedure, not the sector.
How do we start?
Send us a request with a description of what you need. We'll reply in writing within two working days of your request being complete, and if there's a fit we'll arrange a session with whoever practises the procedure day to day — that session is where the work actually begins.
About us
With Mhalah, nothing is out of reach
About Mhalah
Our field is the administrative procedure: a request that follows a route, gets reviewed, approved, disbursed and documented — an aid application at a nonprofit, an insurance claim at a clinic, a contractor's payment claim at an engineering office, a purchase request at a company, a fee approval at a school. The names differ; the logic doesn't.
How we think
Documentation before implementation
What we don't do
- We don't build before understanding the procedure as it is actually practised. A session with the people who practise it daily, and a signed document, before any building — even when the client is in a hurry.
- We don't hold on to client accounts or client data. The repository, the hosting and the database are in the organisation's name from day one, and their keys are handed over in full.
- We don't let AI decide in place of a person. It reads, classifies and summarises as a suggestion the employee accepts or rejects; no model decides eligibility.
- We don't take on work that doesn't pass through an approval or disbursement route. The boundary is the procedure, not the sector.
After handover
The repository, the hosting and the database are in your organisation's name from day one, and their keys are yours in full.
Support is a separate annual contract covering: beginning work on what breaks within two working days · security and dependency updates · a six-monthly review of what has changed in your procedure and what needs adjusting. The binding wording for each item is in the contract.
It does not cover a new service, a new route, or integration with another system — those are quoted separately before any work begins.
Fault reports reach us by WhatsApp or email — no account, no ticketing system.
Service area
We work with organisations across all regions of Saudi Arabia and the Gulf — remotely, with site visits when needed.