One record for every decision, budget and task.
From the first business need to the benefits review, maham+ keeps governance and delivery together, with the view each role needs, in Arabic or English, in the cloud or on your own servers.
From business need to measured benefit.
With the lifecycle switched on, every initiative moves through ten stages. Each stage has a form that saves as you type and a gate with a named decider, and the pipeline shows each initiative's stage, how long it has waited and who acts next.
- 1–4 Before the project
- 5–8 Delivering the project
- 9–10 Go-live and benefits
-
Business need
Requestor submits · PMO reviews every field
-
Business proposal
Requestor writes it · PMO authorizes
-
Feasibility
Business units sign off · PMO authorizes
-
Charter approval
Sponsor approves · the project is created
-
Initiation
PMO sets governance, team and reporting
-
Planning
Project manager plans · PMO approves
-
Execution and monitoring
Scheduled status reports · PMO confirms
-
Testing
Security, UAT and business sign-offs
-
Go-live
Unit manager, then PMO, approve
-
Closure and benefits
Benefits assessed, KPIs measured · PMO closes
- Reviewed field by field. The PMO, or a project coordinator it nominates, accepts or flags each field of the business need and the proposal, and returns them to the requestor with comments.
- Feasibility from the business units. Business units marked as required receive a sign-off request automatically when feasibility opens, and the gate waits for all of them.
- The sponsor decides. The sponsor approves the charter, rejects it or returns it for correction. Approval creates the project.
- Reporting on a schedule. Status reports with a RAG rating, progress and commentary are due weekly, every two weeks or monthly, as set at initiation. Overdue reports are flagged to the PMO.
- Ready before go-live. Testing carries a defect register and security, UAT and business sign-offs. Go-live needs business readiness, security clearance and, where it applies, technical readiness, then approval from the business unit's manager and then the PMO.
- Closed only when benefits are measured. The closure gate stays locked until every promised benefit is assessed and every charter KPI has an actual result.
- Documents travel with the work. Files attached at each stage are copied into the project's documents, in a folder named after the stage.
- Corrections with a full record. Before the charter is approved, the PMO can reopen an earlier stage for changes, and it can correct a completed stage in place; every changed value is recorded with its old and new value.
The PMO switches the lifecycle on. It needs project charters, which are included from Pro M.
Project charters with sponsor approval.
Organizations that do not run the full lifecycle can take new projects through a project charter: a seven-step form with autosave, reviewed by the PMO and approved by the sponsor, whose approval creates the project.
- Seven sections. Identification, objectives and KPIs with success criteria, scope, governance, schedule and phases, budget, and resources.
- Two levels of approval. The PMO reviews first, then the sponsor. Each can approve or reject with a reason, and the sponsor can forward it to another sponsor.
- From charter to project. An approved charter becomes a project, and its phases and milestones carry over.
- A full history. Every decision is recorded, with a snapshot of the charter at each revision.
Included from Pro M.
Charter approval flow
- Draft Requestor
- Review 1 PMO
- Review 2 Sponsor
- Approved
- Activated Project created
Rejected Edit and resubmit
Every decision is recorded, with a snapshot of each revision.
Decisions with an owner.
Every approval has a named decider. Sponsors and unit managers can name a deputy while they are away, and sign-offs are kept away from the people whose request they judge.
One approvals inbox
Charters, staffing requests and lifecycle sign-offs arrive in one inbox, with a count in the menu. Approve or reject with a reason; sponsors can forward a charter, and feasibility and first go-live sign-offs can be delegated.
Cover for absence
Sponsors set out-of-office rules. A business-unit manager going on leave hands every lifecycle approval to someone in their team for those dates, and whatever is still undecided returns when they are back.
Separation of duties
A sign-off is never handed to the requestor, business owner or project manager of the record it judges, and it can be delegated only once, never along a chain. The two go-live approvals come from two different people wherever your organization has them.
Change control in six steps
Submit, project-manager review, impact assessment by a named assessor for each area, PMO review, approval, then verify and close. The PM, the PMO or the sponsor approves, and CAB or executive-committee decisions are recorded with their meeting reference. Every step stays in the change log.
Staffing approval
When switched on, adding someone from outside your own team to a project becomes a request to their line manager.
Task completion approval
When switched on, a task that a team member marks as done waits for the project manager to confirm it.
Charters, the lifecycle, change requests and staffing approval are included from Pro M; task completion approval from Pro S.
Money under control.
Budgets, commitments and payments sit with the project. A change to an approved budget requested on the Budget page goes to a second manager, and payment approval can require a second person too. The one exception is an organization's only PMO manager, who has nobody else to ask.
A budget baseline
The first budget becomes the baseline. Later changes requested on the Budget page need a second manager's approval.
Contracts and purchase orders
Record commitments and draw payments against them, so you can see what is committed, paid and still available.
Maker-checker payments
Switch on payment approval and each payment must be approved by someone other than the person who entered it.
An over-budget policy
Choose whether a payment that would take a project over budget brings a warning or is blocked.
A financial report per project
Each payment carries its currency, vendor, category and attachments. The financial report brings the budget, approved additions, contracts, purchase orders and payments together.
On the phone too
Budgets, payments and their approvals are also in the Android app.
The right view for every role.
Each person lands on one dashboard, chosen by their role. Every figure comes from your own records, and a card with no records yet is clearly labeled as sample data.
Illustration of the maham+ PMO dashboard with sample data: projects on track, at risk and critical, the share of the budget used, and projects by status and by stage.
PMO dashboard
Department health, projects by status and by stage, budget use, top risks, milestones, approvals waiting, and workload by business unit.
Portfolio dashboard
Scoped to the projects a portfolio manager runs or created: approved budget against forecast with variance, stage, health, decisions waiting, team workload and change requests.
Executive board
For sponsors: organization-wide KPIs, a budget gauge, top risks with a suggested action, and the decisions that need an executive. With the lifecycle on, it also shows initiatives in flight, gates waiting and for how long, and status reports due.
Shown in English.
My Work
For everyone else: what is overdue or due today, the week ahead, your share of each project, messages and notifications, and your own delivery record.
Reports
A report catalogue shown by role: project summary, detailed and financial reports, budget, risk register, work packages, overdue tasks, workload, business-unit and strategic-alignment reports. Print any report or save it as PDF, email it, or schedule it daily, weekly or monthly.
Generated reports are in English.
Arabic and English, natively.
Each person chooses their language, and the layout follows it.
Right-to-left layouts
Menus, forms, boards and the Gantt mirror for Arabic.
Templates in both languages
20 ready-made project templates in seven categories, each in English and Arabic.
A user guide in both languages
The built-in guide, arranged by role, is in English and Arabic.
AI writing that keeps Arabic in Arabic
Writing help improves a text in the language it was written in. Included in Unlimited.
Your own weekend
Choose your organization's weekend days; task durations, due dates and the Gantt follow them.
Time zones
Set a time zone for the organization, and each person can set their own.
Deploys where your data must stay.
Use our cloud service, or run maham+ on your own servers, including networks with no internet connection.
Cloud or self-hosted
The same product either way. A guided web installer checks the server, sets up the database, creates the first administrator and sends a test email.
No internet connection needed
Self-hosted maham+ is supported on networks with no internet connection, and its AI features can use a model server on the same network.
Your directory, your sign-in
Sign in through Active Directory with scheduled sync, or through single sign-on with Microsoft Entra ID or an OpenID Connect provider such as ADFS 2016 or later (ask us about yours). SCIM 2.0 provisioning adds and removes people and signs leavers out on web and mobile; ask us to confirm your identity provider. Entra ID needs internet access; on closed networks use Active Directory or ADFS. A guided wizard moves people from Active Directory to single sign-on.
Encrypted backup and restore
An AES‑256 encrypted export of all your organization's data, plus an archive of your files. Compare a backup with what is there now before restoring; a restore either completes fully or changes nothing.
Audit log
Recorded actions with who, what, when and from which IP address, filterable by category, action, user and date, with the page you are viewing exportable to CSV.
Bring your own AI
Connect your organization's own OpenAI-compatible AI provider; on self-hosted maham+ it can be a model server on your own network. Design a project by conversation, get writing help in Arabic or English, and ask questions about your portfolio. Every AI call is audited, and maham+ has no AI provider of its own. Included in Unlimited.
On the cloud service, directory sign-in, single sign-on and backup are included from Pro S. Self-hosted maham+ is quoted per organization.
TWI: a priority score, not a label.
The Task Weight Index separates three forces behind a priority and divides by the working days a task takes, so heavy, urgent work with a short window rises to the top:
- Importance: strategic value, from Low to Critical (1 to 4)
- Urgency: time pressure, from Low to Critical (1 to 4)
- Effort: work required, from Very low to Very high (1 to 5)
TWI = (Importance × Urgency × Effort) ÷ duration in working days
You can sort My Tasks and the table view by TWI, and the capacity planner weights each person's load by it. A score of 2 or more reads as high priority, 1 to 2 as medium, 0.5 to 1 as normal, and below 0.5 as low.
TWI and the capacity planner count Monday to Friday as working days. Included in every plan.
Worked example
| Importance | Critical (4) |
|---|---|
| Urgency | High (3) |
| Effort | Medium (3) |
| Duration | 6 working days |
| TWI score | (4 × 3 × 3) ÷ 6 = 6.0 |
High priority
A risk register on every project.
Risks have their own register, not a custom field: category, owner, severity, likelihood, status, mitigation and resolution, with a history for each risk.
- Severity × likelihood. Each risk is scored on a 4 × 4 scale and placed on a heat map.
- A cross-project view. The PMO's risk dashboard lists risks across every project, with a heat map and filters, and links back to each register.
- Alerts that reach people. Project members are notified of new risks, and automation rules can alert on critical ones.
- Seven categories. Schedule, resource, technical, budget, dependency, scope and external.
Included in every plan.
Where the work happens.
Governance only works when the work itself is easy to run. These are the tools teams use every day.
Board, table, sheet and Gantt
Every project has a board that follows its own statuses, a sortable table, a Gantt with dependencies and milestones, and a phases view. Project managers and the PMO also get a spreadsheet-style sheet.
Tasks in detail
Owners and secondary assignees, followers, tags, dependencies, required skills with suggestions of who has them, work packages that must close before their task can, attachments, reminders, work logs and a change history.
Templates and imports
20 ready-made templates in English and Arabic, plus your own. Import tasks from CSV and export a project to Excel.
Capacity planner
Each person's load day by day, weighted by TWI and including personal work, with suggestions to rebalance and reassignment in a click. Included from Pro S.
Conversations and documents
Project discussions with @mentions of people and tasks, notifications in the app and by email, and documents in folders up to three levels deep.
Automation rules
Rules that act when a status changes, a task is overdue or due soon, a budget threshold is passed or a critical risk is raised: change a status, assign someone, notify or email. The number of rules depends on the plan.
Guest portal
Invite clients, auditors or partners to a read-only view of chosen projects and sections. Invitations can carry an expiry date, guests sign in with an emailed code, and every view is logged.
Android app
My Tasks, boards, risks, budget, documents, the PMO dashboard, capacity and notifications on an Android phone. Included from Pro S.
Integration API
Projects, tasks, users, risks, milestones, time entries and reports. Every request is signed with HMAC‑SHA256, and each key has scopes, an IP allow-list, a rate limit and a request log. Included from Pro S.
What each plan includes.
Plans apply to the cloud service. Self-hosted maham+ is quoted per organization.
- Board, table, sheet, Gantt, phases and a personal board
- My Tasks as a list or a calendar
- TWI scoring
- Risk registers and the risk dashboard
- Reports and role dashboards
- Business units and strategic goals
- Custom fields and statuses
- Audit log
- Guest access
- Automation rules, in a number set by the plan
- Capacity planner
- Integration API and the Android app
- Encrypted backup and restore
- Active Directory / LDAP
- Single sign-on with Entra ID or an OpenID Connect provider such as ADFS, and SCIM provisioning (ask us to confirm your identity provider)
- Your logo and color themes
- Task completion approval
- Project charters with sponsor approval
- The ten-stage lifecycle with change requests
- Staffing approval
- Bring-your-own AI: AI Studio, writing help and the assistant
- No limits on users, projects, storage or automation rules