AI governance · ZeroH Disclosure

Ali knows the contract, not the people.

Ask Ali, the Shariah advisor in the Mudarabah app, advises on every clause, deadline and obligation, and knows which cow is due its vaccination. ZeroH Disclosure keeps it from ever learning who the farmers and investors are, and logs every field it read and every field it was denied.

See it in the Mudarabah appBook a call

What Ask Ali sees · cow IC-017

6 read · 6 withheld

Cow

IC-017 · local breed

Weight

188 kg, +0.5 kg a day

Vaccination

FMD booster due Thursday

Next obligation

Weight record due in 2 days

Contract

Clause 9.3 · sale intent, 21 days

Takaful

Cover active, renews in June

Farmer

farmer.name · withheld

Phone

farmer.phone · withheld

National ID

farmer.national_id · withheld

Purchase price

cow.purchase_price · withheld

Payout account

farmer.bank_account · withheld

Muzzle print

cow.photos · withheld

What you see · cow IC-017

Illustrative values

Cow

IC-017 · local breed

Weight

188 kg, +0.5 kg a day

Vaccination

FMD booster due Thursday

Next obligation

Weight record due in 2 days

Contract

Clause 9.3 · sale intent, 21 days

Takaful

Cover active, renews in June

Farmer

Rahim Uddin

Phone

+880 17•• ••••••

National ID

1990 0000 4471

Purchase price

৳ 74,000

Payout account

Bank account ending 0921

Muzzle print

Photo, 2 files

Move the lamp over the record to see what only you can see

Contract events with a rule
154
from a cow’s registration to the final transfer
Roles, the AI included
10
each with its own rule for every event
Events the AI reads in full
54
clauses, herd health, obligations, phases
Events the AI reads restricted
100
names, contacts, money and files withheld
The line we draw

Ali reads the contract. It never reads the people.

Every field in the Mudarabah app falls on one side of this line, per event and per role, before anyone asks a question.

Ali reads

Clauses

Every clause of the signed Mudarabah, and which one applies to the question.

Clause 9.3 · sale intent, 21 days

Ali reads

Obligations

Each obligation, its owner and its deadline, and which gate is waiting on whom.

obligations tracked
41
Ali reads

Herd health

Which cow is due a vaccination, which is in quarantine, how the weights are moving.

cows in the herd
22
Ali reads

Profit structure

The agreed ratio and when profit may be shared, but never the amounts in money.

70 / 30 · after SSB certification

Withheld

Identities

Names, phone numbers and ID documents of farmers, vets and investors.

farmer.name · farmer.phone
Withheld

Money

Purchase and sale prices, capital amounts, bank accounts and transfer receipts.

cow.purchase_price
Ali reads

The cycle

Where the cycle stands: setup, fattening, sale or settlement, and its dates.

Phase · fattening

Withheld

Buyers

Who bought a cow and for how much. Ali learns that a sale happened, and when.

sale.buyer_name
Withheld

Photos and documents

Muzzle prints, side photos, the signed contract file and uploaded receipts.

cow.photos
How it works

Every question passes the same four steps.

Type a question into the Ask Ali widget in the Mudarabah app, and this is what happens before an answer comes back.

  1. 01 · Mask

    Personal data never leaves the app

    Anything personal you type, an email or a phone number, becomes a token like [EMAIL_1] before the question is sent. With no masking policy active, the question is refused.

    Refused without a policy

  2. 02 · Filter

    The rules build what Ali may read

    For your role and this contract, the rules pick the fields Ali reads. A withheld field arrives as a name and a type, never as a value.

    Fields: read or withheld

  3. 03 · Answer

    Ali answers with the clause

    Ali answers from the clauses, the obligations and AAOIFI standards, and names what it relied on. It drafts; a person approves, submits and pays.

    A person decides

  4. 04 · Receipt

    A receipt goes to the DPO

    What Ali read, what it was denied and which rule version decided are written to immutable storage, where the data protection officer can open them. ZeroH stores its audit records in immudb, an immutable database.

    Kept in immutable storage
One real question

Follow it through the rules.

When fuel prices spiked in the region and cow prices fell, the operator asked Ali whether to buy a small herd now and sell it in a few weeks. Watch what Ali was allowed to read, what it answered, and what the log kept.

How one question to Ask Ali is governedAsk Ali · Mudarabah appFuel prices spiked and cow pricesare falling. Can we buy a small herdnow and sell it in a few weeks?Yes, if you buy them to fatten. A shortcycle is fine: the line is husbandry,not the calendar. Register every cow,feed, vet and weigh it, insure it undertakaful, and keep the records: purchaseand sale weight, feed, vet checks, gain.Get the investor’s approval (48 h).Protected by ZeroH DisclosureZeroH Disclosure rulesherd.healthreadcontract.clausesreadobligationsreadsale.buyer_namewithheldsale.pricewithheldfarmer.phonewithheldAAsk Ali readsPurchase approval · investor, 48 hoursAgreed activity · fatteningAAOIFI SS 13 · MudarabahRegistration, takaful and vet checksAI disclosure log · data protection officerAsked by the operator · fields read 14 · withheld 6 · rule v2.4 · sealed
A receipt of what Ali read and what it was denied is sealed into the DPO’s disclosure log.
  1. Fuel prices spike and cow prices fall. The operator asks Ali, inside the Mudarabah app, whether to buy a small herd now and sell it in a few weeks.
  2. ZeroH Disclosure lets Ali read the herd, the clauses and the obligations, and withholds prices, buyers and phone numbers.
  3. Ali reads the purchase-approval rule, the agreed activity, AAOIFI Shariah Standard 13 and the registration, takaful and vet obligations.
  4. Yes, if the cows are bought to fatten: registered, fed, vet-checked, weighed and insured, with the records kept. A quick flip with no husbandry would be trading. A person decides.
  5. A receipt of what Ali read and what it was denied is sealed into the DPO’s disclosure log.
Reports still work

Ali writes the weekly report. Your team sees the names.

Ali knows a farmer has a name and the week has a feed bill, so it can write the report without reading either. The app fills in the real values on the screen of a reader whose role may see them, and a person sends it.

Ali drafts

Field names only

{farmer.name} completed the FMD boosters for 12 cows. Average daily gain is 0.5 kg. Feed spend this week: {expenses.feed}. Next: weight records due Thursday.

The operator receives

Filled for the reader’s role

Rahim Uddin completed the FMD boosters for 12 cows. Average daily gain is 0.5 kg. Feed spend this week: ৳ 18,400. Next: weight records due Thursday.

Illustrative values.

Every role mapped

Each role sees what its job needs.

The same rules decide what people see, not only the AI. Too much access would change the contract itself: an investor who runs the farm is no longer a silent partner in a Mudarabah.

Ask Ali

The AI

Clauses, the profit ratio, obligations, herd health and the cycle. Never a name, a phone number, an ID, a price or a file.

Rab al-Mal

The investor

The contract, its capital, the herd and the takaful cover. Farmers by name and experience, not by ID or phone.

Mudarib

The farm operator

Everything needed to run the farms: farmers, purchases, expenses and receipts.

SSB

The Shariah board

Governance and Shariah events: the structure, reviews, losses and the profit certification. Not the bank mechanics.

DPO

The data protection officer

The rules themselves, the coverage matrix, and the AI disclosure log for every answer.

Vets, the takaful provider, auditors, the regulator and observers have their own rules too: ten roles in all.

Deterministic rules

One rule for every event and every role.

These are some of the AI’s rules in the pilot. A rule is written and tested before the event can happen; no model decides it on the fly.

COW_REGISTERED

Ali sees the cow’s ID, breed, weight and health.

Withheld: purchase price, muzzle-print and side photos.

CONTRACT_SIGNED

Ali sees every clause and the profit ratio.

Withheld: the parties and the signed document.

PERSONNEL_REGISTERED

Ali sees that a farmer or vet joined, and their role.

Withheld: phone number and ID document.

SALE_RECORDED

Ali sees that a cow was sold, and when.

Withheld: buyer’s name, sale price and receipt.

CYCLE_CREATED

Ali sees the cycle, its phases and its dates.

Withheld: capital amount and each party’s share in money.

Any unknown event

No rule, no access.

Hidden from every role until a rule is written.

Fail closed

When in doubt, Ali sees less.

An event without a rule is hidden from every role. A withheld field reaches Ali as a name and a type, so it knows a price exists without knowing the price. If the masking policy is missing, the question is refused rather than sent.

And Ali never acts on its own. It answers and drafts; a person approves, submits and pays.

The vet asks about herd health and overdue vaccinations. Ali answers from the herd record, without a single name.
Proof for the DPO

Every answer leaves a receipt.

The data protection officer can open any answer and see who asked, which fields Ali read, which it was denied, and which rule version decided. The same console prepares the compliance documents a DPO files.

AI disclosure receipt Ask Ali · Mudarabah pilotIllustrative
Written to immutable storage

Can we buy a small herd now and sell it in a few weeks?

Nothing personal reached the model.

Stored
  • Masking policy activePersonal data in the question replaced before it left the app
  • 14 fields readThe herd, the clauses, the obligations and the agreed activity
  • 6 fields withheldPrices, buyers and phone numbers: names only, never values
  • Rule version recordedThe AI role’s rules for the Mudarabah contract
Who can open it
Data protection officerPlatform administrator
The AI disclosure log for one answer: every financial field marked Withheld.
What each role can see, and why: the AI role across 154 contract events.
One event, rule by rule: for the AI, email, name and phone number are hidden.

Screenshots from the Mudarabah app’s guided demo cycle, with test accounts.

Questions

AI governance in the Mudarabah app: common questions

What is ZeroH Disclosure?

ZeroH Disclosure is the governance layer that decides what each role, including the AI, may see of every event in a Shariah contract. The rules are fixed per event and per role before any question is asked, and every AI answer is logged with the fields it read and the fields it was denied.

What can Ask Ali see in the Mudarabah app?

Ask Ali sees every clause of the contract, the profit structure, each obligation with its owner and deadline, the herd’s health and vaccination schedule, and where the cycle stands. It never sees names, phone numbers, ID documents, bank details, the price of an individual cow, capital amounts or uploaded photos and documents.

Does an AI model decide what to hide?

No. The rules are written per event and per role and checked in tests. Ali receives a context built from those rules; for a withheld field it gets only the field’s name and type, never its value. An event with no rule is hidden from every role.

What happens to personal data I type into Ask Ali?

Anything personal you type, such as an email address or a phone number, is replaced by a token like [EMAIL_1] before the question leaves the app, and restored in the answer on your screen. If no masking policy is active, the question is refused rather than sent unmasked.

Can Ask Ali still write reports with names in them?

Yes. Ali drafts the report against field names, such as {farmer.name} or {expenses.feed}, and the app fills in the real values on the screen of a reader whose role may see them. Ali never reads those values, and a person submits the report.

Who can read the AI disclosure log?

The data protection officer and the platform administrator can open the log of every answer: who asked, which fields Ali read, which were withheld, and which rule version decided. Each entry is kept in immutable storage.

Does Ask Ali make decisions?

No. Ali answers, drafts and points to the clause it relied on. A person always approves, submits or pays.

Put a Shariah advisor on your contract, and keep your people private.

Ask Ali and ZeroH Disclosure come built into every contract on the ZeroH Islamic finance platform.

Book a callMeet Ask AliThe Mudarabah app