Saudi Arabia

Saudi data and AI regulation, read as delivery work

Each instrument here is written for the organisation, not for the warehouse. These pages translate the text into what actually has to be built: classification, ownership, lineage, access control and evidence you can produce on request.

We do not certify compliance. We build the controls and produce the evidence, and the determination stays with your legal and compliance functions.

PDPL

SDAIA

The law is written for the organisation, not for the warehouse. This page translates it into the tables, controls and evidence an engineering team has to produce.

PDPLSDAIANDMO

Open the guide

NDMO controls

National Data Management Office

The national controls read as domains and specifications. Delivery reads as catalogues, owners, quality rules and lineage. This page maps one onto the other.

NDMOSDAIAPDPL

Open the guide

SDAIA alignment

Saudi Data and AI Authority

SDAIA sets the national agenda for data and AI: the strategy, the ethics principles, the data controls and the platforms government runs on. This is what that means for a system you are about to build.

SDAIANDMOVision 2030

Open the guide

NCA Essential Cybersecurity Controls

National Cybersecurity Authority

Security teams own the ECC. Data teams keep discovering they own half of it too, because the controls land on identity, logging, encryption and the third parties a pipeline calls.

NCA ECCSDAIAPDPL

Open the guide

SAMA expectations

Saudi Central Bank

Banks and insurers in Saudi Arabia are not short of models. They are short of the model risk evidence, data lineage and outsourcing position that a supervisor asks about.

SAMANCA ECCPDPL

Open the guide

In-country hosting

Cross cutting

Sovereignty is an architecture, not a logo on a slide. The useful question is which data class may leave, which may not, and where that rule is enforced.

PDPLNDMOSDAIA

Open the guide

Etimad

Ministry of Finance

Public sector buying in Saudi Arabia runs through Etimad, and most technical disqualifications happen on evidence, not on price. This page sets out the artefacts a data and AI bid actually has to carry.

EtimadPDPLNDMONCA ECC

Open the guide

Let's put your AI ambition on the table

Sixty minutes with a senior Bilytica partner. We stress-test your plans against what actually works in your sector, agree which moves are worth funding first, and you leave with a written 90-day plan and honest numbers, whether you work with us or not.

Start the conversation