Skip to main content

EXPANDWAY

Setting up internal operations in Saudi Arabia turns a registered company into a business that can serve customers, manage employees, and control its finances.

Your commercial registration is an essential starting point. However, your operating setup also needs banking, suitable premises, tax processes, workforce administration, and clear approval rules.

For foreign investors and business owners, the challenge is connecting these requirements in the right order. This guide explains what to prepare, which systems matter, and how to organize your first 90 days.

What does setting up internal operations involve?

Internal operations cover the people, processes, systems, and controls that keep your Saudi business running. Your launch plan should address six connected areas:

AreaWhat to prepare
Legal foundationInvestment registration where applicable, commercial registration, activity permissions, and authorized signatories
PremisesSuitable lease, national address, and relevant operating approvals
Banking and financeCorporate account, bookkeeping, payment approvals, and cash planning
Tax and invoicingApplicable ZATCA registrations and compliant invoicing
WorkforceEmployment contracts, GOSI, immigration processes, payroll, and Saudization
GovernancePurchasing rules, data protection, reporting, and a compliance calendar

Assign an owner to each area. Also, record what must happen before the next task can begin. For example, payroll preparation depends on accurate employee records and confirmed banking arrangements.

If you are still establishing the legal entity, start with our [business setup in Saudi Arabia guide

1. Confirm your registration and licensed activities

Start by checking that your company documents match the business you intend to operate.

Review your commercial registration, Articles of Association, ownership details, national address, and signing authority. Then compare your registered activities with your planned services, products, and contracts.

Check the current MISA registration framework

The updated Investment Law replaces the foreign investor licensing requirement with an investment registration framework. Foreign investors must complete the applicable MISA registration before investing and obtain the other approvals their activities require.

Investment registration does not replace sector-specific permissions. MISA explains this distinction in its Updated Investment Law guidance.

Schedule annual commercial registration confirmation

Saudi Arabia introduced its new Commercial Register framework on 3 April 2025. Under the general regime, annual electronic confirmation of registration data replaces the former renewal process.

Update your calendar accordingly. Continue tracking separate expiry dates for operating permits and other licences. The Ministry of Commerce announcement, reported by SPA, explains the change.

2. Prepare premises and operating approvals

Choose premises that suit your licensed activity before committing to fit-out costs.

An office, warehouse, retail shop, and manufacturing facility may have different requirements. Consequently, confirm the relevant municipal, safety, and sector approvals for your location and activity.

Use this checklist when evaluating premises:

  • Check permitted use and any activity restrictions.
  • Confirm the lease documentation your applications require.
  • Establish or update the business national address.
  • Identify inspections and safety requirements.
  • Confirm which approvals must be complete before opening.

Treat a lease and operating permission as separate tasks. Signing a rental agreement does not, by itself, confirm that the premises are ready for your business activity.

3. Open a corporate bank account and establish controls

Keep company money separate from personal funds from the beginning.

Ask your chosen bank for its current corporate account checklist. Requirements vary by entity, ownership structure, and bank. Typical preparation includes company documents, signatory identification, ownership information, and an explanation of business activity and funding.

Once the account is active, establish:

  • Named users with appropriate access.
  • Payment limits and approval responsibilities.
  • A process for verifying new beneficiaries.
  • Monthly bank reconciliations.
  • Clear records of shareholder funding and withdrawals.

Where practical, separate payment preparation from final approval. Also, verify supplier bank-detail changes through a trusted contact before transferring money.

4. Set up accounting, ZATCA, and e-invoicing

Choose your accounting process before issuing customer invoices. Your records should connect sales, purchases, bank movements, payroll, and applicable tax obligations.

Ask your accountant to assess VAT, Zakat, corporate income tax, and any withholding tax exposure relevant to your structure and transactions. Do not assume every company has the same tax profile.

Assess VAT registration

For resident businesses, the general mandatory VAT registration threshold is SAR 375,000 in taxable supplies over the relevant 12-month period. Voluntary registration may be available above SAR 187,500, subject to the applicable tests.

Review both actual and expected activity. Special rules can apply, including to non-residents. Consult ZATCA’s SME guidance when assessing your position.

Match your invoicing system to your obligations

ZATCA divides e-invoicing into two phases:

  • Phase 1: Generate and store compliant electronic invoices and notes.
  • Phase 2: Meet additional requirements and integrate your solution with ZATCA’s Fatoora platform.

Phase 1 began on 4 December 2021. Phase 2 started in waves on 1 January 2023. ZATCA notifies targeted taxpayers at least six months before their integration date.

Check the official e-invoicing rollout guidance and your company’s notification.

Include the 2026 Wave 25 update

On 24 July 2026, ZATCA announced Wave 25. It targets taxpayers whose VAT-subject revenue exceeded SAR 187,500 in any of 2022, 2023, 2024, or 2025. Targeted taxpayers must integrate by 1 February 2027.

This is a wave-specific deadline, not a universal launch deadline for every new company. Confirm your position through the official Wave 25 announcement and ZATCA correspondence.

Before going live, test invoice creation, corrections, credit notes, storage, and any required integration.

5. Connect Qiwa, GOSI, and employee onboarding

Your HR process should keep contracts, employee records, social insurance, and payroll consistent.

Assign responsibility for these systems:

SystemMain operational role
QiwaEmployment contracts and relevant labour services
GOSISocial insurance registration and employee contribution records
Muqeem or applicable immigration channelsRelevant residency and immigration administration
MudadWage Protection Program compliance and wage-file processes

For each employee, check identity details, job title, joining date, salary components, banking information, and required permissions. Arrange applicable health insurance and maintain supporting records.

The PDF identifies GOSI registration as a core onboarding task. Use GOSI’s current registration guidance to confirm the process and deadlines that apply to each case.

Apply the 2026 Qiwa contract update

HRSD states that, from 15 April 2026, electronically documented Qiwa contracts form the basis of Nitaqat Saudization calculations. Documenting Saudi employees’ contracts is a fundamental requirement for their inclusion.

Therefore, a signed internal offer letter alone is insufficient for this purpose. Complete the applicable Qiwa documentation and check the employee’s status. See HRSD’s official announcement.

6. Build reliable payroll and Saudization processes

Payroll needs a documented monthly workflow. Assign a payroll preparer, reviewer, approver, and backup owner, even if one person covers several roles initially.

Before paying salaries:

  1. Review joiners, leavers, attendance, and approved changes.
  2. Check basic salary, allowances, deductions, and overtime.
  3. Validate bank details and net pay.
  4. Approve and release the bank payment file.
  5. Complete the applicable wage-protection submission.
  6. Resolve discrepancies and reconcile payroll with accounting records.

HRSD directs establishments to submit wage files through Mudad for Wage Protection Program compliance.

Plan Saudization before making hiring commitments

There is no single Saudization percentage that suits every company. Your establishment’s economic activity and workforce affect its Nitaqat calculation.

Use the official Nitaqat calculator when planning headcount. Also, check any separate localization decisions affecting the occupations you intend to recruit.

Review your classification after staffing changes. Keep contract documentation and employee records accurate so your hiring plan reflects your actual position.

For a related guide, see [Saudization and hiring in Saudi Arabia — INSERT INTERNAL LINK].

7. Establish purchasing, reporting, and data controls

Effective internal operations in Saudi Arabia require clear rules for everyday decisions.

Create a short approval matrix covering purchases, supplier contracts, recruitment, discounts, refunds, and bank payments. Specify who can approve each decision and when escalation is necessary.

For purchases, connect the request, approval, receipt of goods or services, and supplier invoice. This creates a practical record of why the business paid.

Prepare a monthly management report covering:

  • Cash balance and upcoming commitments.
  • Sales, gross margin, and operating expenses.
  • Overdue customer invoices.
  • Payroll and headcount.
  • Filing deadlines, expiring permissions, and unresolved issues.

Protect employee and customer information

Map the personal information your company collects and which employees or suppliers can access it.

Review privacy notices, access permissions, retention rules, and incident procedures. Before adopting overseas HR or customer-management software, assess cross-border data transfers and any sector-specific requirements.

Use SDAIA’s data protection knowledge centre for the Personal Data Protection Law and supporting guidance.

A practical 90-day plan for internal operations in Saudi Arabia

Use this schedule to organize the work. It is a management plan, not a statutory grace period or a guarantee of approval times. Complete required registrations and permissions before the activity that triggers them.

PeriodMain prioritiesEvidence of progress
Days 1–30Review activities and documents; start banking, premises, tax, and employer setup in parallel where possibleAssigned owners, complete applications, and a list of launch dependencies
Days 31–60Configure invoicing, employee records, payroll, and approval rulesTested workflows, documented contracts, and relevant approvals
Days 61–90Reconcile initial transactions, review workforce status, and complete management reportingA monthly dashboard, organized records, and a dated compliance calendar

A business hiring immediately needs its employment and payroll processes earlier. Similarly, a company invoicing in its first month must address tax and invoicing requirements before that point.

What should your operating budget include?

Build your budget around the activity, location, staffing plan, and transaction volume. A single company-formation price rarely represents the full cost of becoming operational.

Separate these categories:

  • Initial costs: Professional support, premises deposits, fit-out, equipment, and applicable approvals.
  • Recurring costs: Rent, salaries, insurance, accounting, software, and administration.
  • Transaction costs: Banking, logistics, payment processing, and activity-specific charges.
  • Working capital: Funds needed while you wait for customer payments.

Obtain current quotes and distinguish government charges from professional service fees. Then prepare a rolling cash forecast that shows when each payment falls due.

Adjust the setup to your business activity

The basic operating framework stays similar, but sector requirements differ.

ActivityAdditional matters to check
Trading and e-commerceProduct requirements, customs, storage, fulfilment, and consumer obligations
ConstructionRelevant classification, project permissions, site safety, and workforce requirements
ManufacturingIndustrial permissions, environmental requirements, zoning, and facility approvals
Professional servicesPermitted scope, professional qualifications, client contracts, and confidentiality
Technology and SaaSPersonal data handling, customer security requirements, and any relevant sector approvals

Use this table to scope further checks. It is not an exhaustive licence list.

Frequently asked questions

Can a company operate immediately after commercial registration?

Commercial registration alone does not establish readiness for every activity. Confirm your premises permissions, banking arrangements, tax position, and employee requirements before the relevant work begins.

Does every company need Phase 2 e-invoicing immediately?

No. Phase 2 follows ZATCA’s targeted rollout. Check your company’s wave criteria and notification, while meeting any Phase 1 requirements that already apply.

Can you outsource accounting and payroll?

You can arrange external support, subject to applicable requirements. However, define who approves payments, checks submissions, and retains records. Appoint an internal owner to monitor the provider’s work.

How long does operational setup take?

Timing depends on your activity, documents, bank checks, premises, staffing, and approvals. Use the 90-day plan to coordinate tasks, then update it against actual processing times.

Turn your registration into an operational business

Setting up internal operations in Saudi Arabia requires coordinated action across finance, HR, premises, and compliance.

Start with a readiness review. List each outstanding requirement, assign an owner, and set a completion date. Then test your invoicing, payroll, and payment processes before transaction volumes grow.

Ready to move from company registration to daily operations? [Book a Saudi business setup consultation]. Share your activity, location, ownership structure, and hiring plan to discuss your next steps.

Leave a Reply

Your email address will not be published. Required fields are marked *