Saudi Arabia Fintech Business Setup: Licensing, Entity Formation & Compliance

Establishing a fintech business in Saudi Arabia involves navigating regulatory approvals, licensing requirements, and company formation. Explore the key steps global fintechs need to establish and operate a local presence in the Kingdom.

For global fintechs looking to establish a presence in the Kingdom, entering the market requires more than identifying a commercial opportunity.

Companies must determine which regulatory framework applies to their activities, select an appropriate market-entry structure, and complete the necessary licensing, company formation, and operational requirements.

Understanding these steps early can help fintechs develop a more effective market-entry strategy, anticipate regulatory obligations, and prepare for establishing a sustainable business in Saudi Arabia.

1. Identify the Regulatory Authority for Your Fintech Activities

The first step in establishing a fintech business in Saudi Arabia is determining which regulatory authority oversees the company's proposed activities.

The primary regulatory authorities include:

• Saudi Central Bank (SAMA): Oversees banking, payments, financing, and other financial activities within its regulatory mandate.
• Capital Market Authority (CMA): Regulates securities and capital market activities, including investment management, securities dealing, and other capital market services.
• Insurance Authority (IA): Oversees insurance activities and the development of the Kingdom's insurance sector.

Before proceeding with company formation, businesses should establish a clear understanding of their proposed services and the regulatory requirements associated with each activity.

2. Determine the Appropriate Licensing and Market Entry Route

Once the relevant regulatory authority has been identified, fintech companies must determine how they can legally establish and operate their business in Saudi Arabia.

The appropriate route depends on the company's activities, existing regulatory status, and plans for operating in the Kingdom.

Establishing a regulated fintech business

The licensing process typically involves demonstrating that the company has the financial resources, governance structures, technical capabilities, and operational systems required to conduct its proposed activities.

Depending on the business model, applicants may need to prepare a detailed business plan, demonstrate compliance capabilities, and meet specific capital requirements.

Operating through a licensed partner

Some international fintechs may enter the Saudi market by partnering with an already licensed financial institution.

This approach may allow a company to provide technology or financial services through an established regulatory framework, depending on the activities involved and the terms of the partnership.

However, working with a licensed partner does not automatically exempt a fintech from regulatory requirements. Companies must assess whether their own activities require separate authorization.

Exploring regulatory testing environments

Fintech companies developing innovative financial products may also consider regulatory testing environments offered by relevant authorities.

SAMA's regulatory sandbox and the CMA's FinTech Lab provide frameworks for eligible businesses to test certain innovative financial products and services under applicable regulatory conditions.

4. Obtain the Required Investment Registration and Establish Your Saudi Entity

Foreign fintech companies establishing a local presence must also complete the applicable investment registration and company formation procedures.

Under Saudi Arabia's updated investment framework, foreign investors must register with the Ministry of Investment (MISA) before engaging in investment activities in the Kingdom.

The specific requirements depend on the investor's structure and proposed business activities.

Complete investment registration

Foreign companies should prepare the documents required for their investment registration application.

Depending on the circumstances, these may include:

• Commercial registration documents from the parent company
• Authenticated corporate documents
• Financial statements
• Information about shareholders and authorized representatives
• Documentation related to the proposed investment activity

The required documentation should be confirmed through the applicable MISA registration process.

Establish the legal entity

Following the relevant investment registration and regulatory approvals, companies can proceed with establishing their Saudi entity through the applicable Ministry of Commerce and Saudi Business Center procedures.

The process may involve:

1. Selecting the appropriate legal structure.
2. Reserving a company name.
3. Preparing and authenticating the Articles of Association.
4. Completing company establishment procedures.
5. Obtaining the Commercial Registration (CR).
6. Completing any additional activity-specific registrations.

The appropriate legal structure depends on the company's ownership, operational requirements, and regulatory framework.

5. Complete Post-Setup Registrations and Operational Requirements

Obtaining a Commercial Registration is an important milestone, but it does not mean a company is ready to begin operations.

Foreign fintechs must complete additional registrations and establish the infrastructure required to operate locally.

Establish a physical business presence

Companies should assess their office requirements based on their licensing conditions, operational model, and applicable regulations.

This may include securing a registered business address and completing relevant municipal or location-specific requirements.

Open a corporate bank account

A Saudi corporate bank account is generally an important part of establishing local operations.

Companies should prepare the required corporate documents, ownership information, and regulatory approvals for the bank's onboarding and due diligence procedures.

Register with relevant government authorities

Depending on the company's activities and workforce, post-setup registrations may include:

• ZATCA: Tax and applicable VAT registration
• GOSI: Social insurance registration
• Qiwa: Employment and labor-related services
• Mudad: Wage Protection System and payroll compliance
• National Address: Registered business address
• Muqeem and Absher: Relevant residency and employee-related services

The exact requirements depend on the company's legal structure, workforce, and activities.

Recruit employees and meet localization requirements

Companies planning to hire in Saudi Arabia should understand the applicable labor regulations and Saudization requirements. The relevant localization requirements depend on the company's sector, workforce size, and occupational categories.

Fintechs should incorporate these obligations into their workforce planning and operational budgets from the outset.