Results of the Digital Rights Compliance Rating 2025

The law firm DRCQ presented an updated Rating, which for the first time focused on startups and companies in Kazakhstan that create and apply artificial intelligence technologies.

AI today is becoming the key driver of the country’s digital transformation, influencing everyday life, social processes, access to information, and the security of personal data.

After a multi‑level selection, seven companies actively using algorithmic systems and AI solutions were included in the study:

• CEREBRA AI

• FLOWSELL ME

• RE: CREATE AI

• PRESIGHT AI KAZAKHSTAN

• PLEEP APP

• HR MESSENGER

• VERIGRAM AI

The purpose of the Rating is to provide companies with a roadmap for improving their policies and practices in line with the best global standards.

According to RDR‑2025, the first place went to PRESIGHT AI KAZAKHSTAN with 32 points. Second place — CEREBRA AI with 29.7 points. Third — RE: CREATE AI with 24.7 points.

Fourth place was taken by HR MESSENGER (15.18 points), fifth — VERIGRAM AI (14.3). Sixth — PLEEP APP (13.7), and closing the list FLOWSELL ME (12).

General conclusions:

In 2025, RDR showed that Kazakhstani companies working with AI are at the stage of forming transparency and accountability practices. Most companies do not yet demonstrate a systematic approach to corporate governance, privacy protection, and freedom of expression. Policies often remain fragmented, with no independent audit and full disclosure of information.

At the same time, the very fact of participation in the Rating reflects readiness for dialogue and recognition of the importance of digital rights. The study emphasizes: algorithm transparency, non‑discrimination of systems, and protection of personal data should become a competitive advantage for business.

Rating recommendations:

DRCQ experts formulated practical steps for Kazakhstani companies working with AI. The main goal is to help businesses build mature processes for protecting digital rights and comply with new legislative requirements:

• Transparency and corporate governance. Companies are advised to publish clear human rights policies, conduct regular independent audits, and train employees in data protection. It is important to disclose information about the use of algorithms and their impact on users.

• Freedom of expression and information. Recommendations include developing procedures for responding to government requests, ensuring a balance between legal restrictions and the right to access information. Companies must show that their technologies are not used for censorship or discrimination.

• Privacy and data protection. Implement mechanisms for deletion, anonymization, and limitation of personal data processing, as well as minimize the collection of sensitive information (biometrics, behavioral profiles). Transparency is needed regarding what data is collected and how it is used.

• Algorithmic systems. Companies should assess discrimination risks and introduce procedures for reviewing automated decisions with human involvement. It is important to provide users with explanations of key factors influencing algorithmic outcomes.

• Inclusion and accessibility. Recommendations concern ensuring equal access to digital services, especially for people with disabilities, oriented toward international accessibility standards.

• Strategic development. Emphasis is placed on integrating digital rights into business strategies so they become a competitive advantage. Companies investing in these approaches strengthen user trust and build a sustainable reputation.

Taking into account the adoption of the “Law on Artificial Intelligence” and the recommendations, companies can take leading positions in the field of responsible AI use.