Saudi Arabia Market Entry:
The Practical Guide for AI & Tech Companies
Saudi Arabia is the largest economy in the Arab world and the centrepiece of Vision 2030 — a SAR 27 trillion transformation programme that is actively pulling in foreign AI, cloud, and tech companies. But the regulatory landscape is complex, and the rules have changed significantly since 2021. Here is what you actually need to know.
1. MISA — Ministry of Investment Licensing
The Ministry of Investment Saudi Arabia (MISA, formerly SAGIA) is the single point of entry for foreign companies wishing to establish a legal entity in the Kingdom. Almost every structure that involves foreign ownership requires a MISA investment licence before commercial registration (CR) can be obtained from the Ministry of Commerce.
Eligible structures for tech/AI companies
- 100% foreign-owned LLC (Limited Liability Company) — now permitted in most technology and services sectors
- Branch of a foreign company — allowed but carries corporate liability exposure; MISA may restrict the permitted activities
- Joint stock company (JSC) — required for regulated activities such as fintech, healthcare IT, or defence-adjacent work
- Representative / liaison office — no commercial activity; used for market research only
Core documentation required
- Certified and apostilled articles of incorporation from your home country
- Board resolution authorising establishment in Saudi Arabia
- Audited financial statements for the past two years (translated into Arabic)
- Business plan describing activities, investment amounts, and Saudi employment targets
- Copy of commercial register from parent company (legalised by Saudi embassy in country of origin)
- Power of attorney for the authorised representative in Saudi Arabia
Estimated costs
| Item | Approx. Cost (SAR) |
|---|---|
| MISA investment licence fee | 2,000 – 10,000 / yr |
| Ministry of Commerce CR registration | 1,200 – 5,000 |
| Chamber of Commerce membership | 500 – 2,000 / yr |
| Muqeem (expat employee) admin | 800 / employee / yr |
| Legal / formation agent fees | 15,000 – 60,000 (one-off) |
| Office lease (Riyadh, co-working) | 15,000 – 50,000 / yr |
2. Regional Headquarters (RHQ) Mandate
In February 2021, Saudi Arabia announced that any multinational company wishing to win Saudi government contracts would need to relocate its regional headquarters to Riyadh by 1 January 2024. This policy — often called the RHQ mandate — was driven by a desire to shift economic activity from Dubai, which had historically hosted the Gulf HQs of most multinationals.
Who must comply
- Any multinational bidding on Saudi government or government-related entity (GRE) contracts
- Companies listed as "strategic partners" under Vision 2030 mega-projects (NEOM, Diriyah, Red Sea Global, etc.)
- Firms receiving Saudi Public Investment Fund (PIF) investment where the fund requires it as a condition
RHQ licence requirements
The RHQ is a distinct licence category from a standard MISA LLC. An approved RHQ must:
- Be headquartered physically in Riyadh (not just registered there)
- Employ a minimum of 15 full-time staff in Saudi Arabia, of whom at least 3 must be Saudi nationals in decision-making roles
- Have a regional mandate covering at least two Middle East & Africa countries
- Commit to a minimum SAR 500,000 annual spend on regional activities
- Report annually to MISA on headcount, Saudization rate, and regional activity
3. Saudization (Nitaqat) — Hiring Obligations
Nitaqat (Arabic for “ranges”) is Saudi Arabia's mandatory localisation programme, requiring all licensed businesses to maintain a minimum percentage of Saudi nationals on their payroll. It is administered by the Ministry of Human Resources and Social Development (MHRSD) and is enforced through the QIWA platform.
How Nitaqat works
Each company is assigned a colour-coded band based on its sector and headcount:
Platinum
Exceeds quota by wide margin — full government services access, priority visa processing
Green (High / Mid / Low)
Meets or exceeds quota — normal business operations
Yellow
Below quota — restricted from adding new expat employees; cannot transfer visas in
Red
Significantly below quota — government services suspended; fines applicable; visa block
Approximate Saudization quotas by sector
| Sector | Green band minimum |
|---|---|
| IT services & software | ~20–25% |
| Telecommunications | ~35–40% |
| Management consulting | ~25–30% |
| Engineering & technical services | ~15–20% |
| Cybersecurity (government-aligned) | ~30%+ |
| Retail (not tech) | ~40%+ |
Practical implications for AI & tech companies
- For a 10-person tech team, you likely need 2–3 Saudi nationals on payroll from day one to stay green
- Saudi engineers and data scientists exist in growing numbers but are in high demand — budget a 15–25% salary premium over equivalent expat hires
- Part-time and graduate scheme Saudi hires count toward Nitaqat (partial weighting) — useful for early-stage entities
- Training nationals through HRDF (Human Resources Development Fund) co-funding is possible and reduces your net salary cost
- QIWA portal tracks your status in real time — failure to maintain green status blocks new visa issuance immediately
4. Foreign Ownership — What Has Changed
Saudi Arabia historically required foreign companies to take a local Saudi partner holding at least 25% of any entity. This requirement has been substantially liberalised as part of Vision 2030 reforms.
Sectors still requiring a Saudi partner (or subject to ownership caps)
- Defence and security-adjacent technology — local partnership or government co-ownership typically required
- Insurance and financial services — ownership caps apply; Saudi Central Bank (SAMA) approval needed
- Healthcare services — NCBE licensing with minimum Saudi ownership requirements in some clinical-facing categories
- Media and broadcasting — 20% cap on foreign ownership of licensed media entities
- Retail trade of certain goods — tiered restrictions depending on product category
- Real estate investment in Mecca and Medina — restricted to Saudi nationals
Even where 100% ownership is legally permitted, many foreign companies choose to appoint a Saudi commercial agent or strategic partner for practical reasons: access to government relationships, local market knowledge, and navigating bureaucracy. This is not the same as a formal ownership requirement — it is a commercial choice.
5. Special Economic Zones & Free Zones
Saudi Arabia established a framework for Special Economic Zones (SEZs) in 2022, offering enhanced incentives beyond the standard MISA licensing route. Unlike traditional Gulf free zones (Jebel Ali, DIFC), Saudi SEZs are not offshore structures — entities incorporated in them are subject to Saudi corporate law but receive specific tax and regulatory concessions.
King Abdullah Economic City (KAEC)
Jeddah Coast, Makkah Province · Focus: Logistics, manufacturing, e-commerce, light tech
- 5% corporate income tax rate for qualifying activities (vs standard 20%)
- Expedited customs and single-window import/export
- Freehold property ownership for businesses
- Proximity to King Abdullah Port — Saudi Arabia's largest industrial seaport
More relevant for hardware, logistics tech, or e-commerce fulfilment than pure software companies.
NEOM
Tabuk Province, northwest Saudi Arabia · Focus: Smart city, AI, energy tech, biotech, advanced manufacturing
- Zero corporate tax for up to 50 years (NEOM-specific exemption currently proposed)
- Separate legal and regulatory framework (NEOM Authority)
- Integrated smart city infrastructure — high-speed connectivity, autonomous logistics
- Direct access to PIF investment for qualifying companies
Genuinely frontier infrastructure but also genuinely frontier risk — project timelines have slipped significantly from initial announcements. Best suited to companies with high risk tolerance and a long horizon.
Riyadh Special Integrated Logistics Zone (SILZ)
Adjacent to King Khalid International Airport, Riyadh · Focus: Air cargo, regional distribution, light manufacturing, e-commerce
- 0% customs duty on goods imported into the zone for re-export
- Dedicated bonded warehouse and fulfilment infrastructure
- 5% CIT for zone-qualifying revenues
Best for SaaS or platform companies with hardware or fulfilment components serving GCC markets from Riyadh.
Jazan Economic City (JEZC) / Jazan Integrated Gasification Combined Cycle (IGCC)
Jizan Region, southwest Saudi Arabia · Focus: Heavy industry, energy, chemicals, food processing
- Industrial land at subsidised rates
- Proximity to Red Sea shipping lanes
- SABIC and Saudi Aramco off-take relationships for industrial suppliers
Primarily industrial — limited relevance for AI/software unless your product directly serves energy or chemical plants.
6. Government Procurement — Getting on Vendor Lists
Saudi government procurement is substantial — the government spends over SAR 900 billion annually across ministries, Vision 2030 programmes, and PIF-backed entities. Getting access to this pipeline is a primary reason most foreign tech companies enter Saudi Arabia. Here is how the system works.
Etimad — the central procurement portal
Etimad (etimad.gov.sa) is the official e-government procurement platform operated by the Ministry of Finance. All regulated government tenders above SAR 100,000 must be published here.
- Register your company on Etimad using your MISA licence number and commercial registration (CR)
- Upload audited financials, insurance certificates, and technical capability statements
- Assign a responsible Saudi national as your authorised signatory for tender submissions
- Tenders are classified by sector (IT, construction, health, etc.) — set up alerts for your categories
- Pre-qualification questionnaires (PQQs) are common for large contracts; respond even if you lose to build a track record
Beyond Etimad — where the large deals actually happen
- MCIT Approved Vendor List — register as a licensed IT and digital services provider with the Ministry of Communications and Information Technology for access to national digital transformation tenders
- Aramco supplier portal (SAP Ariba) — mandatory for any company seeking Aramco Digital or Saudi Aramco business
- SFDA (Saudi Food and Drug Authority) pre-qualification — required for health IT and medical AI companies
- NCA (National Cybersecurity Authority) certification — required for any product or service touching critical national infrastructure
- Absher / Elm ecosystem — government service platforms; integration partnerships require separate qualification
Local content requirements
The National Programme for Technology Localisation (Taqnia) and the Local Content and Government Procurement Authority (LCGPA) track “local content” scores on government contracts. Companies with higher local content scores — Saudi employees, Saudi suppliers, Saudi R&D spend, Saudi manufacturing — receive a scoring advantage in tender evaluations. For large contracts, this can be worth 10–15% of the evaluation weighting.
7. Vision 2030 Opportunity Sectors
- SDAIA (Saudi Data and AI Authority) is the national regulator and is actively building the AI ecosystem
- National AI Strategy targets SAR 20bn in AI contribution to GDP by 2030
- Government clients: SDAIA itself, NCBE, Elm, STC, Saudi Aramco Digital
- Arabic NLP and computer vision for Arabic script are persistent unmet needs
- Data sovereignty requirements: sensitive government data must stay on Saudi soil
- All three hyperscalers (AWS, Azure, Google Cloud) have Saudi regions — but government data localisation means sovereign cloud is a growth area
- Hyperscaler presence does not exclude niche players: specialist cloud security, sovereign cloud orchestration, and sector-specific platforms are actively procured
- Alibaba Cloud and Huawei Cloud also have Saudi points of presence
- MCIT's Cloud-First Policy requires government entities to move 80%+ of IT to cloud by 2030
- National Cybersecurity Authority (NCA) is one of the most active regulators in the region — Essential Cybersecurity Controls (ECC) apply to all government entities
- CITC (Communications, Space and Technology Commission) licenses cybersecurity products and services for the commercial sector
- Saudi Arabia spent an estimated $1.7bn on cybersecurity in 2024; forecast to grow to $2.5bn by 2027
- NCA requires all cybersecurity vendors selling to government to obtain the Approved Products List (APL) certification
- OT/ICS security for energy infrastructure (Aramco, SEC, NEOM) is a high-value niche
- NEOM is the flagship — but also the most delayed. Red Sea Global, Diriyah, Qiddiya, and King Salman Park are all active procurement programmes
- Smart city platform vendors: traffic management, utilities IoT, smart building BMS, public Wi-Fi, digital twin software
- Amanat (municipalities authority) is digitalising 14 major Saudi cities — active tenders on Etimad
- Urban air mobility (drone logistics) is an emerging regulated category with NCA and GACA (General Authority of Civil Aviation) dual oversight
8. Practical Realities — Timeline, Costs, Culture
Realistic entry timeline
Cultural and language considerations
- Arabic is the language of government — all official contracts, tenders, and regulatory correspondence are in Arabic. Budget for certified translation of all key documents.
- Relationships (wasta) matter. First meetings are relationship-building; do not expect to close a deal in a first meeting with a government buyer.
- Decision-making is often centralised at senior leadership level. Identify the actual decision-maker early — middle management rarely has authority to commit.
- Business hours shifted significantly after COVID: Sunday–Thursday is the standard work week. Friday and Saturday are the weekend.
- Ramadan is a real operating constraint — government processing slows markedly; do not plan licence applications or tender submissions in the final two weeks of Ramadan.
- Gender mixing regulations have relaxed substantially since 2017. Mixed-gender offices and business meetings are now normal and unremarkable.
- Business cards and formal titles carry weight — ensure your Saudi-facing representatives are senior enough.
9. Common Mistakes Companies Make Entering Saudi Arabia
Using a UAE entity to sell into Saudi Arabia
A UAE company can do limited advisory work in Saudi Arabia without a local licence, but as soon as you have employees on the ground, a regular office, or are bidding government contracts, you need a Saudi legal entity. Many companies get this wrong and operate in a grey zone that creates tax and labour law exposure.
Treating Saudization as a checkbox exercise
Hiring Saudi nationals just to hit a quota number — without integrating them into the business — results in high turnover, complaints to the MHRSD, and reputational damage. The Saudi talent pool for tech is genuinely improving; invest in finding good hires rather than nominal ones.
Assuming a distributor agreement is a market entry
Appointing a Saudi commercial agent is a useful first step for market testing but does not give you control over your brand, pricing, or customer relationships in the long run. Large government buyers often want to contract directly with the technology vendor, not through an intermediary.
Underestimating bank account timelines
Opening a corporate bank account in Saudi Arabia takes 2–4 months for a new foreign entity, and some international banks will not onboard you without 12 months of Saudi operating history. Budget for this — you will need a Saudi account to pay employees and register on Etimad.
Ignoring data localisation requirements
Saudi Arabia's Personal Data Protection Law (PDPL), enforced by SDAIA's National Data Management Office, includes data residency requirements for certain categories of personal data. If your product processes Saudi government or citizen data, legal review of data flows is essential before any commercial contract.
Going to NEOM before going to Riyadh
NEOM is the marquee project but procurement is slower and timelines have repeatedly slipped. Companies that focus exclusively on NEOM opportunities while ignoring the larger, steadier flow of Riyadh-based government and enterprise procurement often wait years for their first Saudi revenue.
Sending junior or regional staff to senior government meetings
Saudi government counterparts expect to meet senior company leadership — C-level or at minimum regional director level. Sending a business development manager to a Ministry meeting signals that you are not serious.
Find the professionals who will get you set up
MISA-experienced company formation agents, Saudi corporate lawyers, Nitaqat consultants, and local business development professionals — all in the 2030Vision directory.
Browse Market Entry Professionals