Setting up a company in Saudi Arabia is only the beginning. Staying compliant with Saudi Arabia’s extensive regulatory framework is where many foreign businesses stumble. From filing CIT returns within 120 days to mandatory e-invoicing, Saudization quotas, and GOSI contributions the compliance calendar is dense, the penalties are steep, and the consequences of non-compliance can be severe.
This comprehensive guide covers every major compliance obligation your Saudi company will face in 2026, with deadlines, penalties, and actionable checklists.
Saudi Compliance Overview Key Regulators
Your Saudi company will interact with multiple government authorities. Understanding who regulates what is the first step to staying compliant:
| Authority | Full Name | What They Regulate |
|---|---|---|
| ZATCA | Zakat, Tax & Customs Authority | CIT, Zakat, VAT, WHT, e-invoicing, customs |
| MISA | Ministry of Investment Saudi Arabia | Foreign investment licences, annual MISA renewal |
| MoC | Ministry of Commerce | Commercial Registration (CR), company governance |
| MHRSD / Qiwa | Ministry of Human Resources & Social Development | Saudization (Nitaqat), labour law, work permits |
| GOSI | General Organisation for Social Insurance | Social insurance contributions for employees |
| SAMA | Saudi Central Bank | Financial services, insurance, payment regulation |
CIT & Zakat Returns The 120-Day Deadline
This is your most important annual tax obligation. All Saudi-registered companies whether paying CIT (foreign companies) or Zakat (Saudi/GCC companies) must file their annual tax return within 120 days of the end of their financial year.
What to Prepare
- Audited financial statements (mandatory for most companies)
- Detailed breakdown of revenue, expenses, and deductions
- Transfer pricing disclosure form (if applicable)
- Related party transaction schedule
- Depreciation schedules
- Reconciliation between accounting profit and taxable income
Filing Process
- Log into the ZATCA portal (zatca.gov.sa)
- Complete the CIT return form electronically
- Attach financial statements and required schedules
- Pay any tax due (same deadline as the return)
- Retain acknowledgment receipt for your records
Extension
ZATCA may grant an extension of up to 60 additional days on application, but this must be requested before the original 120-day deadline expires. Extensions are not automatic.
Critical: Tax payment is also due within the 120-day window. Filing the return without paying the tax still results in late payment penalties.
VAT Compliance Quarterly Returns
VAT-registered businesses must file returns and remit VAT on a quarterly basis for most companies, or monthly for businesses with annual taxable turnover exceeding SAR 40 million.
VAT Return Checklist
- ✅ Reconcile output VAT (VAT charged to customers) vs input VAT (VAT paid to suppliers)
- ✅ Ensure all invoices comply with Fatoorah e-invoicing requirements
- ✅ File return within 30 days of quarter/month end via ZATCA portal
- ✅ Pay net VAT due (output minus input) by the filing deadline
- ✅ Retain all tax invoices for a minimum of 6 years
- ✅ Report any supplies subject to the reverse charge mechanism
Common VAT Mistakes
- Failing to charge VAT on digital services supplied to Saudi customers
- Incorrectly claiming input VAT on non-business expenses
- Missing the quarterly deadline due to confusion over Gregorian vs Hijri calendar
- Not registering for VAT when the SAR 375,000 threshold is crossed
ZATCA E-Invoicing (Fatoorah) Mandatory for All VAT-Registered Businesses
The Fatoorah e-invoicing mandate is one of the most significant compliance changes in Saudi Arabia in recent years. All VAT-registered businesses must issue electronically generated invoices paper invoices are no longer compliant.
Two Phases of Fatoorah Implementation
| Phase | What’s Required | Status (2026) |
|---|---|---|
| Phase 1 — Generation | Electronic generation and archiving of invoices (QR code required on simplified invoices) | Live since Dec 2021 — all businesses must comply |
| Phase 2 — Integration | Real-time integration with ZATCA’s platform; invoices cleared/reported before delivery to buyer | Rolling out by taxpayer wave — check your wave date on ZATCA portal |
Types of E-Invoices
- Standard Tax Invoice: B2B transactions must include all buyer details, tax number, and be cleared with ZATCA in Phase 2
- Simplified Tax Invoice: B2C transactions must include QR code; reported to ZATCA within 24 hours in Phase 2
Fatoorah Compliance Checklist
- ✅ Use ZATCA-compliant invoicing software (many options available: Zoho, SAP, Oracle, local Saudi solutions)
- ✅ Include all mandatory invoice fields (VAT number, date, description, amounts, VAT amount)
- ✅ Generate QR codes for simplified invoices
- ✅ Integrate with ZATCA’s API for Phase 2 clearance (check your wave date)
- ✅ Archive all e-invoices for minimum 6 years
Saudization / Nitaqat The Most Critical Compliance Obligation
Saudization, formally known as the Nitaqat programme, is Saudi Arabia’s mandatory quota system requiring companies to employ a minimum percentage of Saudi nationals. This is arguably the most complex and consequential compliance obligation for foreign-owned companies in Saudi Arabia.
How Nitaqat Works
MHRSD classifies every company into one of four colour bands based on its Saudization compliance rate:
| Band | Colour | Saudization Rate | Privileges & Consequences |
|---|---|---|---|
| Platinum | 🟣 | Exceeds premium by significant margin | Maximum work permit privileges; can transfer visas freely |
| High Green | 🟢 | Meets premium quota | Full work permit access; can sponsor new visas |
| Medium/Low Green | 🟢 | Meets basic quota | Standard work permit access |
| Yellow | 🟡 | Below required quota | Restricted from issuing new work permits |
| Red | 🔴 | Significantly below quota | Cannot renew existing work permits; severe business disruption |
Saudization Rates by Sector (2026)
Required Saudization percentages vary by industry. Some indicative rates:
- Retail trade: 30–70% (higher for certain sub-sectors)
- Construction: 6%
- IT and technology: 15%
- Professional services: 20–35%
- Healthcare: 35%
- Financial services: 60%+
Critical Warning: Saudization is monitored in real-time by MHRSD. A drop in your Saudization percentage due to a Saudi employee resigning, for example can immediately affect your company’s band and your ability to process work permits for other staff. Build a Saudi HR pipeline before you need it.
Saudization Compliance Checklist
- ✅ Register all employees (Saudi and non-Saudi) on the Qiwa platform
- ✅ Monitor your Nitaqat band on the Qiwa dashboard regularly
- ✅ Maintain active employment contracts for all Saudi employees
- ✅ Ensure Saudi employees are on the GOSI system (ghost employees do not count toward Saudization)
- ✅ Do not terminate Saudi employees without following proper MHRSD procedures
- ✅ Explore “premium Saudization” options: women employment, people with disabilities, and university graduates can give your company higher Nitaqat credit
GOSI General Organisation for Social Insurance
All employers in Saudi Arabia must register with GOSI and make monthly contributions for their employees.
GOSI Contribution Rates (2026)
| Employee Type | Employer Contribution | Employee Contribution | Total |
|---|---|---|---|
| Saudi Nationals | 12% of salary | 10% of salary | 22% |
| Expatriates (Non-Saudi) | 2% of salary (occupational hazard only) | 0% | 2% |
GOSI Compliance Requirements
- Register your company with GOSI within 10 days of hiring your first employee
- Add each new employee to GOSI within 10 days of joining
- Pay GOSI contributions monthly by the 15th of the following month
- GOSI is linked to Nitaqat Saudi employees must appear on GOSI to be counted in your Saudization percentage
- Report any employee salary changes, promotions, or terminations to GOSI promptly
Note for Indian entrepreneurs: GOSI contributions for your Indian/expatriate employees are 2% (employer only, no employee deduction). However, for Saudi employees, the combined 22% contribution is a significant labour cost to factor into your Saudi payroll budget.
Commercial Registration (CR) Annual Confirmation
Your Saudi Commercial Registration (CR) must be renewed annually through the Ministry of Commerce. This is distinct from the MISA licence renewal.
CR Renewal Checklist
- ✅ Confirm renewal date on the MoC portal (mc.gov.sa)
- ✅ Pay the annual CR fee (SAR 1,200–2,000 depending on company type and capital)
- ✅ Ensure your registered address is current and valid
- ✅ Update any changes to directors, shareholders, or business activities before renewal
- ✅ Confirm that your company’s Saudization status (Nitaqat band) is Green or above — a Red/Yellow band can block CR renewal
Consequence of lapsed CR: An expired CR prevents your company from conducting any business transactions, opening bank accounts, or renewing employee work permits/Iqamas.
MISA Annual Registration Update
Foreign-owned companies registered under MISA (Ministry of Investment Saudi Arabia) must update their MISA licence annually. Failure to do so can result in suspension of your foreign investment licence.
MISA Annual Update Requirements
- ✅ Submit annual business activity report to MISA (evidence of actual business operations)
- ✅ Confirm that the investment activities declared in the licence are being carried out
- ✅ Pay any applicable renewal fees (MISA registration fees have been suspended in recent years under Vision 2030 incentives verify current status on the MISA portal)
- ✅ Update any changes in ownership, directors, or business scope
Vision 2030 Incentive: MISA has periodically waived registration fees for foreign investors as part of Saudi Arabia’s drive to attract FDI. Always check the current fee status on invest.gov.sa before assuming fees apply.
Penalties for Non-Compliance
Saudi Arabia has significantly strengthened its enforcement mechanisms in recent years. The penalties for non-compliance are substantial:
Tax Penalties (ZATCA)
| Violation | Penalty |
|---|---|
| Late CIT/Zakat filing | 1% of tax due per month, up to 25% maximum |
| Late tax payment | 1% of unpaid tax per month |
| Tax evasion | Up to 25% of unpaid tax + potential criminal prosecution |
| Failure to register for VAT | SAR 10,000 fine + back-taxes and penalties |
| Non-compliant e-invoicing | SAR 1,000–50,000 per violation |
| Failure to file WHT | 1% of WHT due per month |
Labour & Saudization Penalties (MHRSD)
| Violation | Consequence |
|---|---|
| Red Nitaqat band | Cannot renew work permits; existing permits not renewable; potential business closure |
| Illegal employment of expat without valid permit | SAR 10,000 fine per employee + deportation of employee |
| Failure to pay GOSI | GOSI surcharges + potential work permit suspension |
| Wage Protection System (WPS) violations | Blocked from issuing/renewing work permits |
Saudi Arabia Compliance Calendar 2026
Use this calendar as your compliance reference throughout the year. Dates assume a calendar year financial year ending December 31.
| Month | Compliance Obligation | Authority |
|---|---|---|
| January | Q4 VAT return filing (Oct–Dec quarter); GOSI monthly payment | ZATCA; GOSI |
| February | GOSI monthly payment | GOSI |
| March | GOSI monthly payment | GOSI |
| April | Q1 VAT return; CIT/Zakat annual return (120 days from Dec 31 FY end = April 30); GOSI | ZATCA; GOSI |
| May–June | GOSI monthly payments; monitor Nitaqat band | GOSI; MHRSD |
| July | Q2 VAT return (April–June); GOSI | ZATCA; GOSI |
| August–September | GOSI; Qiwa platform updates; MISA annual update (if due) | GOSI; MHRSD; MISA |
| October | Q3 VAT return (July–September); CR annual renewal (if due); GOSI | ZATCA; MoC; GOSI |
| November–December | GOSI; year-end tax planning; start preparing audit/financial statements | GOSI; ZATCA |
Note: CR and MISA renewal dates are based on your specific incorporation date, not the calendar year. Set reminders 60 days before each renewal date.
Frequently Asked Questions
Do I need a local accountant/auditor in Saudi Arabia?
For most companies, yes. Saudi law requires annual audited financial statements from a SOCPA-licensed auditor (Saudi Organisation for Certified Public Accountants) for the CIT/Zakat return. Only small businesses below a certain threshold may be exempt.
Can I manage Saudi compliance remotely from India?
Partially. ZATCA portal access, VAT filing, and some MISA updates can be done online. However, GOSI, work permit processing, and certain MHRSD interactions typically require a local representative or PRO (Public Relations Officer) in Saudi Arabia.
What is the Wage Protection System (WPS)?
WPS is a mandatory system requiring all Saudi employers to pay employee salaries through approved bank channels and report salary payments to MHRSD. Non-compliance directly affects your ability to process work permits and Iqama renewals.
Is a physical office mandatory for compliance purposes?
Yes. Saudi Arabia requires a physical registered business address for your CR and MISA licence. Virtual offices are not accepted. As of 2024, Saudi Arabia’s Regional Headquarters (RHQ) programme also requires multinationals to establish genuine physical operations in Riyadh.
Conclusion
Saudi Arabia’s compliance environment is rigorous, digital, and increasingly automated. ZATCA cross-checks tax data with GOSI records, MHRSD monitors Saudization in real time, and the Fatoorah e-invoicing system creates a complete digital audit trail of every transaction.
For Indian entrepreneurs, the key is to get compliance right from day one. The penalties for non-compliance — particularly on Saudization and tax filing can quickly exceed the cost of proper setup and ongoing compliance support.
Ready to stay compliant in Saudi Arabia? Speak to our Saudi Arabia compliance team today.