Saudi Sector Regulators: Who Licenses What in Each Industry

Motaded Limited Team | 11 min read

The Ministry of Investment grants a foreign investor the right to enter the Saudi market. But what happens after that is decided by a number of other authorities, each regulating a specific sector and issuing the operational licenses that govern it. Setting up a company in the financial sector differs fundamentally from setting up in food, contracting, or defense.

This article maps the regulatory authorities for each major Saudi sector, what distinguishes each, and how their powers intersect with the Ministry of Investment license. Everything here is grounded in current regulations published on the official websites of each authority.

The Two-Layer System

Grasp this idea before the specifics: Saudi Arabia regulates foreign activity on two independent layers.

The first layer is managed by the Ministry of Investment (MISA). This is the general gateway — it grants you the right to invest in the Kingdom, determines the capital required for your activity, and imposes prior-experience conditions where applicable. The license issued is the foundation for everything that follows.

The second layer is the sectoral regulator. This is what decides what your company can actually do after incorporation: can it sell a health product? Can it open a bank branch? Can it operate a hotel? Each sector has its own regulator that issues operational licenses, separate from the commercial registration and the MISA license.

If you ignore the second layer and assume the commercial registration alone is enough, you'll hit reality after operations begin — violations, closure, possibly cancellation of the parent license.

Banking and Finance

The financial sector splits across three main authorities, each regulating a different segment.

The Saudi Central Bank (SAMA) supervises banks, finance companies, money exchange companies, payment companies, and fintech in general. Any activity involving lending, deposit-taking, currency exchange, or payments processing — passes through SAMA.

The Capital Market Authority (CMA) regulates the securities market: brokerage firms, asset management companies, investment companies, and any activity involving securities trading or fund issuance. Its license is entirely separate from SAMA.

The Insurance Authority is the unified reference for all insurance types — health insurance, motor insurance, property insurance, and reinsurance. The health insurance sector's powers transferred entirely from the Council of Cooperative Health Insurance to the Insurance Authority by Council of Ministers Decision 85. Today, if you want to establish an insurance company, an insurance agency, or an insurance advisory firm — the Insurance Authority is the single point.

The largest category of fintech belongs operationally to SAMA, but overlap with CMA exists when a product enters into providing investment solutions. SAMA's sandbox makes fintech entry easier, but final licenses come after a testing period.

For those targeting this sector, the Finance & Fintech sector page on our site explains investment opportunities and entry mechanisms.

Communications, Technology, and Space

The Communications, Space and Technology Commission (CST) — the new name since November 2022, having previously been CITC — regulates everything that falls under communications and information technology, with the addition of space and radio frequencies. Companies providing communications services (ISPs, telecom operators, cloud communications), data networks, postal services, and even large-scale digital content platforms — all fall under CST.

Technology companies in general (software development, specialized cloud services, data management systems) don't necessarily require a CST license, unless they provide a communications service per se. The dividing line: does the product transmit data to the end user via a communications infrastructure?

The communications sector itself, per the MISA guide, requires at least 40% Saudi partnership. This is a regulatory requirement that doesn't belong to CST but to MISA, yet it governs foreign entry to the sector.

 The technology sector page reviews the investment opportunities in this sector specifically.

Healthcare

Private healthcare facilities (hospitals, medical complexes, clinics, radiology and laboratory centers) are licensed by the Ministry of Health via the "Sehha" platform. Licensing requirements scale with facility type: a single-physician clinic differs from a general medical complex, which in turn differs from a specialty hospital with surgical operations.

Healthcare professionals (physicians, nurses, health technicians) aren't licensed by the Ministry of Health — they fall under the Saudi Commission for Health Specialties (SCFHS) through professional classification, registration, and qualifying exams. This is an important split for anyone establishing a healthcare center: you need the facility license from the Ministry + each staff member's certification from SCFHS.

Drugs, medical devices, cosmetics, and food products subject to health regulation fall under the Saudi Food and Drug Authority (SFDA). Any company that imports, distributes, or manufactures any of these — even if its business is purely commercial — needs SFDA product registration before market placement.

This overlap matters: a dental clinic needs a Ministry of Health facility license + SFDA registration for each medical device used + SCFHS certification for every practicing dentist. Three authorities for one facility.

Food, Drugs, and Cosmetics

 The Saudi Food and Drug Authority (SFDA) is the unified authority for this sector. Its remit covers:

Registration of food products destined for retail before they enter the market, particularly imports. Registration of human and veterinary medicines. Certification of medical devices across four classes (from simple ones like medical gauze to complex ones like imaging equipment). Cosmetic product registration before circulation. Supervision of facilities producing or manufacturing these categories.

The municipal dimension matters too: restaurants, cafes, and food-manufacturing facilities need, in addition to SFDA — a municipal license from the Ministry of Municipalities and Housing, and Civil Defense approval for safety. Each is a separate authority.

A company planning a food or pharma product launch should build its timeline on the basis that SFDA product registration takes time independent of how fast the company is incorporated. Setup can finish in 60-90 days, but drug registration can take many months.

Tourism and Hospitality

The Ministry of Tourism is the authority responsible for licensing tourism activities. An important distinction: the Saudi Tourism Authority (STA) is a separate body responsible for promoting Saudi Arabia as a tourism destination, while actual licenses come from the Ministry.

The Ministry of Tourism issues several licenses depending on activity: hospitality facilities (hotels, serviced apartments, resorts), travel and tourism agencies, tour operators, tour guides, Hajj and Umrah service providers. Each activity carries sub-licenses and different requirements.

A mid-sized hotel in Riyadh needs: a commercial registration with the hospitality activity, a tourism hospitality facility license from the Ministry of Tourism, a municipal license for the location, a Civil Defense permit, and in some cases health approvals if it offers additional services like a pool or fitness center.

 The tourism sector page on our site addresses the investment opportunities in this sector.

Real Estate

The Real Estate General Authority (REGA) regulates operational real estate activity. The license for working in real estate brokerage and marketing is called the "Fal" license. Its types are multiple:

Fal for brokerage and real estate marketing — for those mediating in sale, purchase, and lease transactions. Fal for property management — for companies managing a property's affairs on the owner's behalf. Fal for facility management — for the technical affairs of buildings. Fal for managing real estate auctions. Fal for real estate consulting and analysis.

Note that real estate development itself (development, off-plan sales) has separate regulation within REGA covering real estate developers. The transactions themselves (title transfers) fall under notarial offices and the Ministry of Justice, with the Real Estate Transactions Tax of 5% applied — which we covered in the Zakat and Tax guide.

Construction and Contracting

This sector spans multiple authorities. The usual sequence for a contracting firm in Saudi Arabia:

The Saudi Contractors Authority (SCA) is a developmental body established by Council of Ministers Decision 510. Its role is to develop the sector, regulate membership, and run professional events. It is not the authority that issues contractor classification — but it is the professional umbrella of the sector.

Contractor classification required for government tenders is issued under a separate system enacted by Royal Decree. It determines a contractor's capacity to execute projects by tier (typically First to Fifth, plus a sixth tier for the private sector). The issuing body falls under the Ministry of Municipalities, Rural Affairs, and Housing.

The Saudi Council of Engineers is responsible for registering engineers and engineering consulting offices. Any engineering consulting office operating in Saudi Arabia needs the responsible engineer and the office itself accredited by the Council.

Operationally, establishing a contracting company that will participate in government tenders means: commercial registration with the contracting activity, classification certificate, SCA membership, chamber of commerce subscription, and an engineering team certified by the Saudi Council of Engineers.

Defense and Military Industries

This is a highly specialized sector, regulated by the General Authority for Military Industries (GAMI). GAMI was established in 2017 and became the single licensing authority for the defense sector, both for Saudi companies and for foreign firms targeting the sector.

GAMI licenses fall into three categories: military industries (manufacturing), provision of military services, and supply of military products or services. Each category has its own requirements and security and localization conditions.

Anyone entering this sector should expect a longer and more complex path than other sectors — security requirements, background checks, technology transfer requirements, and typically strategic partnerships with Saudi entities to meet localization requirements. GAMI targets localizing 50% of military spending by 2030.

Logistics and Transport

Land transport in all its forms (freight, passenger transport, commercial trucking) is regulated by the General Transport Authority. Foreign companies that want to operate in land transport face an important condition: capital of no less than SAR 10 million, experience in at least 3 countries, and 10 years of activity — per MISA requirements.

Shipping, import, and export fall under Saudi Customs (which became part of the Zakat, Tax and Customs Authority, ZATCA). Customs brokerage firms require a customs broker license from ZATCA, with their own specific requirements.

Maritime shipping and ports are supervised by the Saudi Ports Authority, and aviation by the General Authority of Civil Aviation (GACA). Each regulates its own activities (ports, airports, carriers).

 The logistics and transport sector page on our site addresses investment opportunities in this sector specifically.

Education and Training

The Ministry of Education is responsible for licensing private schools, international schools, private colleges, and private universities. Licenses scale by educational level and required academic accreditations. Higher education academic licenses require accreditation from the Education and Training Evaluation Commission.

Vocational and technical training is regulated by the Technical and Vocational Training Corporation (TVTC). Private training centers require its license, with requirements covering curricula, teaching competencies, and professional standards.

Sector-Specific Capital and Ownership Requirements

The MISA guide specifies capital requirements and ownership ratios by sector. The most notable:

Commercial activity at 100% foreign ownership requires capital of SAR 30 million plus experience in 3 international markets. This is a high threshold aimed at large corporations. The alternative: partnership with a Saudi entity reduces the requirements.

Land transport: SAR 10 million plus 3 countries plus 10 years of experience. This is one of the highest threshold requirements imposed by the MISA guide on sectors.

Communications: Saudi partnership of no less than 40%. Full foreign ownership is not available in this sector.

Most other sectors that don't have a MISA statutory requirement can start from SAR 5,000 declared capital. But note: requirements from the sectoral regulator may impose a higher threshold. For example, a bank (SAMA) imposes minimum paid-in capital in hundreds of millions, regardless of the MISA threshold.

Saudization (Nitaqat) — An Independent Pillar Across All Sectors

Saudization is not a sectoral regulator, but it is a commitment that touches all sectors to varying degrees. The Ministry of Human Resources runs the Nitaqat program to set the required ratio of Saudis for each establishment based on activity and size. Ratios scale and change periodically.

Some sectors face high Saudization ratios (retail, parts of communications, certain professions reserved entirely for Saudis), and others are more flexible (heavy industry, specialized technology). Workforce planning is part of overall cost planning, and tracking it through the Qiwa platform is a condition for annual commercial registration renewal.

The Negative List

Some activities are closed to foreign investment either fully or partially under what is known as the Negative List. The Ministry of Investment updates it periodically, and it covers sensitive sectors where foreigners aren't permitted or full ownership isn't allowed. The most notable areas include:

• Petroleum exploration, drilling, and production

• Certain security and military activities

• Retail of certain sensitive commodities

• Hajj and Umrah-related services (with recent exceptions)

• Real estate activities in Mecca and Madinah

This is a general list — verifying your specific activity requires reviewing the latest Negative List update with the Ministry of Investment or with a consulting firm.

How to Match Your Activity to the Right Authority

The practical order we follow at Motaded when establishing a company in a specialized sector:

We start by identifying the activity code (ISIC) that describes what your company does. That code gives you three pieces of information at once: MISA capital requirements, the sectoral regulator, and the Saudization ratio in Nitaqat. Picking the wrong code opens the door to problems later in operational licenses.

After identifying the code, we plan the licensing path in the right order. Order matters: MISA license first, then commercial registration, then the sectoral authority's license. Jumping to the sectoral authority before a commercial registration exists prevents you from submitting a valid application.

The final step: a realistic timeline. Standard company incorporation can finish in 90 days, but an operational license in a specialized sector (like a bank or insurance company) needs additional months. Build this into your financial planning and cash flow.

Motaded's Role in Specialized Sectors

Motaded handles company setup across various sectors. For specialized sectors (finance, defense, insurance), we complete the entity path itself, then direct the client to specialized law firms that handle the granular sectoral licenses. This is a clear division: we specialize in incorporation, and each sector has its specialists.

For more common sectors (trade, logistics, technology, tourism, real estate), we manage the full cycle including the sectoral licenses for their direct requirements, through multiple execution partnerships. The business setup service page explains what the packages cover.

Frequent Questions From Investors in Specialized Sectors

Do I need two different licenses if my business combines activities from two sectors?

Yes, usually. For example, a drug trade + pharmacy management company needs: SFDA license for drugs + Ministry of Health license for the pharmacy + SCFHS certification for the pharmacists. Each activity is treated independently even if under a single commercial registration.

How long does a sectoral license take after incorporation?

Varies dramatically. A Fal license (REGA) takes days. A Ministry of Tourism license for a hospitality facility can take weeks. A SAMA license for a finance company takes months. An insurance company license can reach a year. Plan ahead.

Are there sectors that can only be established with a mandatory Saudi partnership?

Yes. Communications requires a 40% Saudi partnership as a minimum. Some activities in defense require strategic partnerships with Saudi entities. The Negative List identifies the closed or restricted sectors.

Is the Regional Headquarters (RHQ) required for a specific sector?

Not tied to a sector — tied to client type. A foreign company seeking to win major government contracts (across any sector) falls under Council of Ministers Decision 377, which requires a Regional Headquarters in Riyadh. The sector you operate in is secondary to whether you target the government client.

Do free zones exempt you from sectoral licenses?

No. A free zone may grant tax or customs exemptions, but sectoral licenses remain required. A pharmaceutical company in a free zone still needs SFDA registration for its products before they can circulate in the Saudi market.

The Next Step

The sector you're planning to enter determines the nature of the setup, the cost, and the timeline. An initial consultation with us clarifies:

The sectoral regulator for your specific activity, MISA requirements for your sector, the correct order of licenses, and the total cost to reach a fully operational state.

Book a consultation, or review the packages and the business setup service page.