Five stages
1 · IncorporateMISA investment licence, commercial registration and entity structure.
2 · LicenseSAMA and CMA applications, from licence selection to final approval.
3 · BuildSaudi CCO and AML Director, risk assessment and the AML/CFT programme.
4 · OperateCo-sourced compliance, reporting, PDPL and training.
5 · AssureIndependent AML review, health checks and inspection support.
Digital assets & GCCPerimeter advice in KSA and VASP licensing in the UAE and Bahrain.
How an engagement runs
Every engagement starts with a scoping call and a short written scope: which licence or regime applies, what the regulator will expect, what you already have, and what we'll produce. You get a fixed scope and a named engagement lead before any work starts.
Deliverables are prepared in Arabic and English. Where a requirement is unclear in the published rules, we say so in writing and tell you how we propose to handle it with the regulator.
Who we work with
- Foreign fintechs and payment companies entering Saudi Arabia
- Saudi founders preparing a first SAMA or CMA application
- Licensed payment, BNPL, finance and crowdfunding companies that need AML or compliance support
- CMA-authorised firms and FinTech Lab participants
- Crypto and web3 firms that need to understand the Saudi perimeter or license elsewhere in the GCC
Last reviewed: 11 October 2026
General information, not legal advice. Saudi rules change; we confirm every requirement against the regulator's current text before you file.
