Saudi Arabia Government Regulator Directory

MISA | Ministry of Investment

Arabic: وزارة الاستثمار

Portal: misa.gov.sa

Mandate: Foreign investment licensing and promotion. MISA issues the foreign investment license that every non-Saudi entity needs before it can register a company with MOC.

When you engage: At the very start of market entry. Your MISA license is a prerequisite for entity formation. MISA also manages the RHQ program and sets conditions for foreign investor activities.

Related guides: LLC in Saudi Arabia · Branch Registration · RHQ

MOC | Ministry of Commerce

Arabic: وزارة التجارة

Portal: mc.gov.sa

Mandate: Company registration, Commercial Registration (CR) issuance and renewal, corporate governance oversight, business name reservation, articles of association filing, and commercial licensing.

When you engage: Immediately after obtaining your MISA license. MOC issues the CR, which is your core operating document. You will return to MOC for CR renewals, activity amendments, changes to directors or partners, and dissolution.

Related guide: How to Set Up an LLC

SEZA | Special Economic Zones Authority

Arabic: هيئة المناطق الاقتصادية الخاصة

Portal: seza.gov.sa

Mandate: Governance, regulation, and licensing of Saudi Arabia's special economic zones (SEZs). SEZA administers the frameworks for zones including King Abdullah Economic City (KAEC), Ras Al-Khair, Jazan, Cloud Computing SEZ, and others.

When you engage: If you are evaluating whether to establish operations inside a SEZ rather than (or in addition to) a standard onshore entity. SEZs may offer distinct regulatory, tax, and ownership incentives.

Related guide: Special Economic Zones Comparison

ZATCA | Zakat, Tax and Customs Authority

Arabic: هيئة الزكاة والضريبة والجمارك

Portal: zatca.gov.sa

Mandate: All tax administration (corporate income tax, withholding tax, VAT), zakat collection from Saudi-owned entities, customs duties and clearance, and e-invoicing (FATOORA) compliance.

When you engage: Shortly after CR issuance. You must register for VAT if your revenue exceeds the mandatory threshold, obtain a tax identification number, and maintain ongoing filing compliance. ZATCA also governs customs clearance for all imports and exports.

Related guide: VAT and Tax Guide

SAMA | Saudi Central Bank

Arabic: البنك المركزي السعودي

Portal: sama.gov.sa

Mandate: Monetary policy, banking supervision, insurance regulation, payments system oversight, and foreign exchange controls. SAMA licenses banks, insurance companies, fintech firms (under its Sandbox and licensing programs), and payment service providers.

When you engage: If you operate in banking, insurance, payments, or lending. For other businesses, SAMA's regulations affect you indirectly through your banking relationships, foreign currency transactions, and any insurance products you purchase or provide.

Related guide: Opening a Business Bank Account

CMA | Capital Market Authority

Arabic: هيئة السوق المالية

Portal: cma.org.sa

Mandate: Regulation of the Saudi capital market, including the Saudi Exchange (Tadawul), investment funds, securities offerings, and advisory and asset management activities.

When you engage: If you plan to raise capital through public or private offerings in Saudi Arabia, establish or manage investment funds, provide securities advisory services, or list on Tadawul. Fund managers and investment advisors need CMA authorization.

MOHRSD | Ministry of Human Resources and Social Development

Arabic: وزارة الموارد البشرية والتنمية الاجتماعية

Portal: hrsd.gov.sa | Labor platform: qiwa.sa

Mandate: Labor law enforcement, Saudization (Nitaqat) oversight, work visa and permit management, wage protection (Mudad), and employment dispute resolution.

When you engage: From the moment you hire your first employee. Qiwa is the primary digital platform for labor transactions: work permits, contract registration, employee transfers, and Saudization compliance monitoring.

Related guides: Saudization and Nitaqat · Saudi Labor Law Employer Guide

GOSI | General Organization for Social Insurance

Arabic: المؤسسة العامة للتأمينات الاجتماعية

Portal: gosi.gov.sa

Mandate: Social insurance administration. All employers must register employees and contribute to GOSI. Coverage includes retirement pensions (for Saudi employees), occupational hazard insurance (for all employees), and unemployment insurance (SANED, for Saudi employees).

When you engage: At the time of hiring your first employee. GOSI registration and monthly contributions are mandatory and are linked to your Saudization compliance status. Non-compliance blocks visa issuance and CR renewal.

LCGPA | Local Content and Government Procurement Authority

Arabic: هيئة المحتوى المحلي والمشتريات الحكومية

Portal: lcgpa.gov.sa

Mandate: Oversight of the Government Tenders and Procurement Law, local content policy development and measurement, and supplier compliance monitoring. LCGPA sets the rules that govern how all government entities buy goods and services.

When you engage: If you are selling to the Saudi government or any entity subject to the procurement law. LCGPA's local content scoring directly affects bid evaluations.

Related guide: How to Win Government Contracts

Nupco | National Unified Procurement Company

Arabic: الشركة الوطنية للشراء الموحد

Portal: nupco.com

Mandate: Centralized procurement of pharmaceuticals, medical devices, and healthcare supplies for government hospitals and health facilities.

When you engage: If you supply pharmaceuticals, medical devices, laboratory equipment, or other healthcare products to the public sector. Nupco manages tenders, framework agreements, and distribution logistics for the government healthcare system.

CST | Communications, Space and Technology Commission

Arabic: هيئة الاتصالات والفضاء والتقنية

Portal: cst.gov.sa

Mandate: Regulation of telecommunications, internet services, postal services, space activities, and technology-sector licensing. CST issues telecom operator licenses, ISP licenses, and regulates spectrum allocation.

When you engage: If you operate in telecommunications, provide internet or cloud services, develop satellite or space technology, or require telecom-related licenses to operate your technology platform in Saudi Arabia.

NCA | National Cybersecurity Authority

Arabic: الهيئة الوطنية للأمن السيبراني

Portal: nca.gov.sa

Mandate: National cybersecurity policy, critical infrastructure protection, cybersecurity standards and compliance frameworks, and incident response coordination.

When you engage: If you provide cybersecurity products or services, operate critical national infrastructure, or bid on government IT contracts. NCA's Essential Cybersecurity Controls (ECC) and related frameworks are mandatory for government entities and their suppliers.

SDAIA | Saudi Data and AI Authority

Arabic: الهيئة السعودية للبيانات والذكاء الاصطناعي

Portal: sdaia.gov.sa

Mandate: National data governance, artificial intelligence strategy and regulation, personal data protection enforcement, and open data policy. SDAIA oversees the Personal Data Protection Law (PDPL) implementation.

When you engage: If your business processes personal data of individuals in Saudi Arabia, develops or deploys AI systems, or handles government data. PDPL compliance is mandatory for all entities processing personal data.

SFDA | Saudi Food and Drug Authority

Arabic: الهيئة العامة للغذاء والدواء

Portal: sfda.gov.sa

Mandate: Registration and regulation of pharmaceuticals, medical devices, cosmetics, food products, animal feed, and pesticides. SFDA issues marketing authorizations and import permits for regulated products.

When you engage: Before importing or selling any regulated product. SFDA registration is required prior to market entry for pharmaceuticals, medical devices, and food products. The registration process includes product evaluation, manufacturing site inspection (for some categories), and ongoing pharmacovigilance or safety reporting.

MOH | Ministry of Health

Arabic: وزارة الصحة

Portal: moh.gov.sa

Mandate: Public healthcare policy, hospital and clinic licensing, healthcare professional credentialing (in coordination with SCFHS), and public health programs.

When you engage: If you are establishing a healthcare facility, providing clinical services, or working with the public hospital system. MOH issues facility licenses and oversees compliance with healthcare delivery standards.

SCFHS | Saudi Commission for Health Specialties

Arabic: الهيئة السعودية للتخصصات الصحية

Portal: scfhs.org.sa

Mandate: Classification, registration, and licensing of all healthcare professionals practicing in Saudi Arabia. SCFHS evaluates credentials, administers professional examinations, and issues practice licenses.

When you engage: If you are hiring or deploying healthcare professionals (physicians, nurses, pharmacists, technicians) in Saudi Arabia. All healthcare workers must hold a valid SCFHS classification before they can practice.

SASO | Saudi Standards, Metrology and Quality Organization

Arabic: الهيئة السعودية للمواصفات والمقاييس والجودة

Portal: saso.gov.sa

Mandate: Setting and enforcing product standards, metrology, and quality requirements. SASO manages the SABER product conformity platform, through which importers must obtain Certificates of Conformity (CoC) before goods can clear customs.

When you engage: If you are importing physical goods into Saudi Arabia. Most products require a conformity certificate through SABER (saber.sa) before customs clearance. SASO standards apply to everything from building materials and electrical equipment to toys and textiles.

Balady | Municipal Services Platform

Arabic: بلدي

Portal: balady.gov.sa

Mandate: Municipal business licensing, construction permits, signage approvals, and compliance with local zoning and land-use regulations. Balady is the digital platform for municipal services across all Saudi municipalities.

When you engage: After obtaining your CR but before opening a physical location. Municipal licenses are required for retail, food service, office space (in some cases), warehouses, and any premises open to the public. Requirements vary by municipality and activity type.

RCRC | Royal Commission for Riyadh City

Arabic: الهيئة الملكية لمدينة الرياض

Portal: rcrc.gov.sa

Mandate: Urban planning, infrastructure development, and strategic project management for Riyadh. RCRC oversees major development initiatives and coordinates with municipal authorities on city-level regulations.

When you engage: If you are involved in large-scale development, infrastructure, or construction projects in Riyadh. RCRC also plays a role in investment facilitation for companies establishing headquarters in the capital.

Related guide: Operating in Riyadh

STA | Saudi Tourism Authority

Arabic: الهيئة السعودية للسياحة

Portal: sta.gov.sa

Mandate: Tourism promotion, destination development, and tourism-sector regulation. STA works alongside the Ministry of Tourism on licensing and standards for hospitality, tour operations, and tourism experiences.

When you engage: If you operate in hospitality, tourism services, entertainment, or event management. Tourism licensing requirements are managed through the Ministry of Tourism's platforms, with STA focused on promotion and destination strategy.

Ministry of Energy

Arabic: وزارة الطاقة

Portal: moenergy.gov.sa

Mandate: Energy policy, petroleum and gas regulation, mining licensing, and renewable energy development. The Ministry oversees the upstream and downstream energy sector alongside sector-specific entities.

When you engage: If you operate in oil and gas, mining, renewable energy, or energy services. Licensing for energy-sector activities involves the Ministry and, depending on the subsector, entities like Saudi Aramco, the Water and Electricity Regulatory Authority (WERA), or the Saudi Geological Survey.