This Saudi business operations checklist covers the essentials for running your company in 2026. Use it to manage licenses, taxes, payroll and ongoing compliance.

Your Saudi company has its Commercial Registration. Can you now hire employees, issue invoices and start trading?

The answer depends on which operational requirements you have completed. Investment registration, activity licenses, tax obligations and employment approvals each need attention. This Saudi business operations checklist helps you connect those tasks and assign responsibility before problems disrupt your business.

Use it when launching a foreign-owned company, opening a new location or reviewing an existing operation. Requirements vary by ownership, activity, workforce and location, so confirm the rules that apply to your company.

What should a Saudi business operations checklist include?

A practical checklist covers corporate records, premises, tax, employment, banking, contracts, data protection and imports. It also includes recurring deadlines and evidence that each task is complete.

Start with these operational priorities:

Area	What to confirm	Suggested owner
Corporate registration	Correct activities, current records and annual confirmation	General manager or company secretary
Premises and licenses	Suitable location and required operating approvals	Operations manager
Tax and accounting	ZATCA files, VAT position and invoicing system	Finance manager
Employment	Contracts, payroll, GOSI and work authorization	HR manager
Saudization	Applicable workforce and occupation requirements	HR manager
Banking and purchasing	Bank access, signatories and payment controls	Finance manager
Data and imports	Applicable privacy, customs and product requirements	Relevant operational lead

For each item, record its status, deadline, owner and supporting document. Then appoint a backup person who can act during absences.

If you are still choosing an entity structure, begin with our guide to business setup in Saudi Arabia.

1. Check investment registration and corporate records

Confirm your MISA registration and approved activities

Under the updated Investment Law, foreign investors generally register with the Ministry of Investment before investing. MISA explains that investors can then obtain a Commercial Registration and the necessary activity licenses. Restricted activities may need additional approval.

Source: MISA’s updated Investment Law and investor guidance.

Check the following documents together:

• Investment registration and any required special approvals.
• Commercial Registration, including the correct business activities.
• Articles of Association and shareholder records, where applicable.
• Manager appointments, resolutions and signing authorities.
• Beneficial ownership records and required disclosures.
• Saudi National Address and applicable Chamber of Commerce registration.

Also confirm that your chosen structure supports the work you plan to perform. An LLC, foreign branch and regional headquarters can have different permissions and obligations.

Schedule annual CR confirmation

Update older checklists that say “renew the CR.” The current Commercial Registration framework replaces the expiry-and-renewal approach with annual confirmation of registration data.

The Ministry of Commerce states that confirmation falls due one year after registration. Failure to confirm within 90 days of the due date can lead to suspension.

Sources: Commercial Registration changes and annual confirmation guidance.

Therefore, put the confirmation date in your calendar. Track municipal and sector license renewals separately, because those obligations still depend on the relevant license.

2. Confirm premises and activity licenses

Before signing a long lease, check whether the property can support your licensed activity. An attractive office or warehouse may still fail activity-specific requirements.

Your premises review should cover:

• Permitted use, zoning and a suitable lease.
• Municipal licensing through Balady, where applicable.
• Signage, accessibility and workplace safety.
• Civil Defense approvals or safety permits where required.
• Sector approvals, including any inspection requirements.

Use Balady to identify the relevant municipal service and activity requirements.

For example, food and medical activities may need Saudi Food and Drug Authority approvals. Relevant communications activities may require Communications, Space and Technology Commission approvals. Education, transport and healthcare activities need their own checks.

Also identify the correct financial regulator. The Saudi Central Bank regulates relevant banking, finance and payment activities. The Insurance Authority regulates the insurance sector, so insurance businesses should check its licensing requirements.

Source: Insurance Authority mandate.

Keep an approval register for each site. Record the issuing authority, covered activity, conditions and renewal date.

3. Set up ZATCA registration, tax and accounting

Activate the appropriate files with the Zakat, Tax and Customs Authority, known as ZATCA. Then document which taxes apply and who will prepare each return.

Assess income tax, Zakat and cross-border payments

Ownership affects the company’s direct-tax treatment. ZATCA states that income-tax rules apply to resident capital companies in respect of non-Saudi ownership, subject to the law’s provisions.

Source: ZATCA income-tax guidance.

Assess the Saudi or qualifying GCC ownership share separately for Zakat. Mixed ownership, special regimes and group structures need a company-specific review.

Additionally, review payments to overseas suppliers and group companies for withholding tax. The treatment depends on the payment type and applicable rules. Do this before agreeing to a supplier’s net payment amount.

Source: ZATCA withholding-tax service.

Check VAT registration thresholds

For resident businesses, the key figures are:

VAT item	General position
Standard VAT rate	15%, with different treatment for qualifying exempt or zero-rated supplies
Mandatory registration threshold	Annual taxable supplies exceeding SAR 375,000, subject to applicable rules
Voluntary registration threshold	SAR 187,500 in qualifying taxable supplies or expenses, subject to eligibility

Sources: ZATCA VAT guidance and VAT implementing regulations.

Monitor both the previous 12 months and expected supplies over the next 12 months. However, non-resident businesses can face different registration rules. Do not assume the resident threshold applies to them.

Next, establish monthly accounting routines. Reconcile bank accounts, sales, expenses, receivables and inventory. Keep contracts, invoices and evidence of payments for the applicable retention periods.

For international groups, assess related-party pricing and permanent-establishment exposure. These issues can affect transactions beyond the Saudi company’s ordinary sales.

4. Check Saudi e-invoicing requirements for 2026

Your Saudi business operations checklist should include a working invoicing process before the first customer transaction.

ZATCA’s e-invoicing system has two phases. Phase 1 covers compliant electronic invoice generation and storage. Phase 2 adds integration with the Fatoora platform for targeted taxpayers.

Source: ZATCA e-invoicing rollout phases.

Review the July 2026 Wave 25 announcement

On 24 July 2026, ZATCA announced that Wave 25 covers taxpayers whose VAT-subject revenues exceeded SAR 187,500 in 2022, 2023, 2024 or 2025. The announced integration deadline is 1 February 2027.

Source: ZATCA’s Wave 25 announcement.

This wave criterion does not change the mandatory VAT registration threshold. It identifies a group for e-invoicing integration.

Check your company’s notification and any earlier integration obligation. Then test invoices, credit notes, tax details and system responses with your provider. Keep evidence of successful setup and assign someone to resolve failed submissions.

5. Prepare employment, payroll and Saudization

Employment compliance starts before an employee’s first working day. First, activate the establishment’s labor services and confirm access to Qiwa and other required platforms.

Your HR checklist should include:

• Employer and employee registration with GOSI, as applicable.
• Written employment contracts and required digital documentation.
• Payroll arrangements and Wage Protection compliance.
• Required employee medical insurance.
• Appropriate work authorization for foreign employees.
• Iqama and work-permit issuance or renewal, as applicable.
• Leave, attendance, overtime and end-of-service records.

Review contracts against the amended Labor Law

Saudi Labor Law amendments took effect on 19 February 2025. Therefore, review older contract templates and HR policies against the amended provisions.

Source: HRSD announcement on Labor Law amendments.

For payroll, HRSD identifies Mudad’s compliance system as the channel for uploading Wage Protection files. Assign responsibility for submissions and exception handling, as well as salary payments.

Source: HRSD Wage Protection file service.

Check Saudization before approving headcount

Saudization and Nitaqat requirements depend on factors such as activity, establishment size and employee classification. In addition, specific occupations may have separate localization rules.

Check the current position through Qiwa and the relevant HRSD decisions before making offers. Then review compliance whenever you change your workforce or business activity.

For a deeper explanation, see our guide to Saudization requirements.

6. Establish banking and purchasing controls

Open and activate the corporate bank account. Keep shareholder funds and personal spending separate from operating transactions.

Next, agree on basic financial controls:

• Confirm bank signatories and complete required KYC checks.
• Set approval limits for purchases, expenses and transfers.
• Use purchase orders and contracts for material commitments.
• Check supplier identity, bank details and invoice accuracy.
• Reconcile bank accounts and payment gateways regularly.
• Record capital contributions and intercompany loans clearly.

For example, verify a supplier’s changed bank details through a known contact before sending payment. Also review tax treatment before making international transfers.

These controls help managers trace payments and understand available cash.

7. Review contracts, insurance and commercial protection

Use contracts that reflect your actual delivery model. Specify the scope, payment terms, VAT treatment, warranties and termination rights.

Where relevant, review:

• Employment, customer and supplier agreements.
• Agency, distribution and franchise arrangements.
• Confidentiality and intellectual property ownership.
• Liability limits and dispute-resolution provisions.
• Arabic or bilingual documentation requirements.

Also check whether government procurement rules affect your customers or activities. Protect commercially valuable trademarks and other intellectual property where appropriate.

Finally, match insurance to your operations. A consultancy, restaurant and logistics company face different risks. Review applicable mandatory cover and consider suitable property, liability, professional indemnity and cyber policies.

8. Protect personal data and business systems

Customer databases, recruitment files and payroll records can contain personal data. As a result, data protection belongs in your daily operations plan.

Saudi Arabia’s Personal Data Protection Law and implementing regulations govern personal-data processing. Separate rules address transfers outside the Kingdom.

Source: SDAIA laws and regulations.

Start with a simple data inventory. Identify what you collect, why you need it, who can access it and how long you retain it.

Then implement:

• Clear privacy notices and an appropriate lawful basis for processing.
• Consent processes where required.
• Controls for access requests, retention and deletion.
• Access restrictions, backups and incident-response procedures.
• Due diligence and contracts for data-processing suppliers.

Before using overseas cloud tools or sharing employee data with a foreign head office, assess the applicable transfer requirements. Also review e-commerce, advertising and consumer-protection obligations for your website.

9. Check imports, customs and product approvals

If you import goods, confirm requirements before shipment. Certification problems are easier to resolve before goods leave the supplier.

Your import checklist should cover:

• Importer and customs registration, where required.
• Correct HS classification and applicable duties and import VAT.
• Restricted-product checks and sector approvals.
• Product registration and conformity requirements.
• Commercial invoices, packing lists and origin documents.
• Importer-of-record duties, Incoterms and cargo insurance.

For relevant products, SASO’s Saber platform supports conformity and shipment certification. Check the applicable product route and any separate SFDA or other regulator requirements.

Source: SASO product-tracking and Saber guidance.

After clearance, reconcile customs documents with stock and accounting records. This creates a clear record from supplier invoice to customer sale.

10. Turn your Saudi business operations checklist into a calendar

A checklist becomes useful when someone owns every deadline. Use the following schedule as an internal management routine, then add your company’s actual statutory dates.

Frequency	Recommended review or action
Monthly	Reconcile accounts, process payroll, review government alerts and check expiring employee documents
Monthly or quarterly, as assigned	Prepare, file and pay VAT; investigate invoice discrepancies
When relevant payments arise	Assess withholding tax and schedule the applicable return and payment
Quarterly internal review	Review cash flow, contracts, safety, data access and workforce plans
Annually or at the applicable due date	Complete CR confirmation, tax or Zakat filings and required financial-statement submissions
By individual expiry date	Renew relevant permits, insurance, leases and employee documents
When details change	Update ownership, management, address, activity and authority records as required

ZATCA’s 2026 guidance distinguishes monthly VAT filers with annual supplies above SAR 40 million from quarterly filers at or below that level. Check the filing period assigned to your business.

Source: ZATCA’s March and Q1 2026 VAT filing reminder.

Separately, assess whether your entity must appoint an auditor. An internal compliance review does not replace a statutory financial audit where one is required.

Final launch-readiness checklist

Before opening for business, record evidence against each applicable item:

• Investment registration and corporate records are complete.
• The CR contains the correct activities and remains active.
• The address, premises and required licenses are ready.
• The bank account and payment approvals work.
• The company has documented its tax and VAT position.
• Its invoicing system meets applicable ZATCA requirements.
• Employment contracts, payroll, insurance and work authorization are in place.
• HR has checked Saudization and occupation requirements.
• Import and product approvals are complete where needed.
• Managers have assigned compliance deadlines and backup responsibilities.

If an item does not apply, record why. This makes later reviews more useful than an unexplained tick in a spreadsheet.

Frequently asked questions

Is a Commercial Registration enough to start operating?

No. Your activity may also require investment registration, municipal or sector licenses, tax setup and employment approvals. Confirm each applicable requirement before launch.

Does every Saudi company need VAT registration?

No. Registration depends on taxable activities, residency and the relevant threshold rules. Resident businesses generally need registration when annual taxable supplies exceed SAR 375,000, subject to applicable provisions.

Does every company have the same e-invoicing deadline?

No. ZATCA rolls out Phase 2 in waves. Check the company’s notification and applicable wave rather than using another business’s integration date.

Who should manage ongoing business compliance?

Appoint one coordinator, then assign specialist tasks to finance, HR and operations. External advisers can support the process, while management retains oversight and access to company records.

Put your Saudi business operations checklist into action

Start with a status review today. Identify missing approvals, confirm your tax and payroll setup, and assign the next deadline to a named owner.

Then revisit this Saudi business operations checklist whenever you add a location, hire staff, introduce a product or change ownership. A current operating plan helps your team make informed decisions as the business grows.

Ready to check your company’s operational readiness? Book a Saudi business compliance consultation. Share your activity, ownership structure and current setup stage so the review can focus on your next steps.