Employer of Record in Saudi Arabia (KSA) — Complete Guide 2026

Saudi Arabia is one of the most active and complex hiring markets in the world right now. Vision 2030 has triggered a sustained wave of investment across infrastructure, energy, technology, and professional services. Giga-projects including NEOM, the Red Sea Project, and Diriyah Gate are pulling global consultancies, engineering firms, and specialist contractors into the Kingdom at pace. And project timelines rarely accommodate the time it takes to register a legal entity.

Setting up your own Saudi legal entity takes between one and two years in most cases, and in some business categories even longer. An Employer of Record removes that barrier entirely. Rather than registering your own Saudi entity, your workers are legally employed by the EOR in the Kingdom, with full visa sponsorship, Iqama issuance, GOSI registration, and Mudad payroll compliance handled directly, while you retain complete day-to-day operational control of your team.

Saudi Arabia's compliance environment

Saudi Arabia's regulatory framework for employment operates across three distinct layers: Saudisation, Localisation, and the Nitaqat system, which interact and must all be satisfied before a single visa application can proceed. Companies that have expanded successfully into the UAE, Singapore, or Europe are frequently unprepared for the degree of interdependence between these systems.

Understanding the difference between these three is the starting point for any KSA deployment.

Saudisation and the Nitaqat system

Saudisation is Saudi Arabia's policy requiring private sector employers to maintain a minimum percentage of Saudi national employees in their workforce. Every private sector company operating in the Kingdom is assigned a Nitaqat band based on their current Saudi-to-expat employment ratio. The band structure, as currently in force, runs from Platinum at the top through High Green, Mid Green, and Low Green, down to Red at the bottom. Companies in the Red band cannot process new work permit applications, cannot renew existing work permits, and are effectively blocked from hiring until their Saudisation ratio improves.

The Nitaqat band assigned to an EOR's Saudi entity directly determines visa sponsorship capacity for that entity's clients. Higher bands (Platinum, High Green) provide faster visa processing and greater quota headroom. Lower bands impose restrictions that cascade to every client using that entity. Companies using an EOR should confirm the entity's current band before engagement, as band status affects both the speed and feasibility of any deployment.

Nitaqat requirements vary by sector and company size. The Ministry of Human Resources and Social Development publishes sector-specific Saudisation percentages, and these targets are subject to periodic adjustment. An entity's band can change over time as its Saudi-to-expat ratio shifts with new hires, departures, or changes to sector targets. For EOR clients, this means the provider's Saudisation management is an ongoing operational concern, not a one-time check.

Localisation

Localisation is a frequently overlooked requirement, distinct from Saudisation, and applies regardless of company size or sector.

Saudisation tells you how many Saudi nationals you need to employ. Localisation tells you what kind. It is not sufficient to employ any Saudi national to satisfy a Localisation requirement. For regulated professions and certain technical roles, the Saudi hire must hold the specific qualifications, certifications, or professional accreditations that correspond to the expatriate roles being sponsored.

The clearest example: if you are deploying expatriate engineers into Saudi Arabia, Localisation rules may require that corresponding Saudi hires are not simply any Saudi nationals, but certified Saudi engineers with the relevant professional body accreditation. Hiring Saudi administrative workers will not satisfy this requirement. Authorities assess the candidate's degree, their job title, their industry classification, and their actual responsibilities.

Mismatched Localisation positions are the most common cause of stalled visa applications and rejected Iqama issuances in the Kingdom. The consequences extend beyond the individual application — a Localisation breach can trigger suspension of all active work permits on the entity, affecting every employee, not only the one whose application was non-compliant.

Localisation requirements are published by sector and updated periodically. The engineering, healthcare, legal, and accounting sectors carry some of the most prescriptive Localisation rules, often requiring not only a Saudi national with a matching degree but also active registration with the relevant Saudi professional body.

Pre-deployment compliance audit

Before visa applications are filed, the EOR should map every planned hire against the entity's current Saudisation and Localisation positions, validate that visa quota is available for each role, and flag any roles where Localisation rules require a Saudi national to be hired first.

The output of this audit confirms exactly how many Saudi hires are required, what qualifications those hires must hold, which roles can be filled immediately, and which may require additional sourcing. This process prevents the most common and most costly failure mode in KSA hiring: submitting visa applications without understanding the Localisation obligations, triggering a compliance breach, and having all active work permits suspended as a result.

The audit should be repeated whenever headcount changes, new roles are added, or sector-specific Saudisation targets are adjusted by the Ministry. A deployment plan that was compliant at the time of filing can become non-compliant if the EOR's overall headcount ratio shifts before the new employee's Iqama is issued.

Mudad, WPS, and payroll compliance

Saudi Arabia's Wage Protection System, known as Mudad, requires all private sector employers to process and report salaries through the government platform every month within a defined window. This is not optional and there is no grace period. A single missed or delayed submission, even caused by a banking delay rather than actual non-payment, triggers an automatic suspension of all active work permits for that employer. Every permit. Immediately.

Mudad payroll processing is a continuous monthly cycle. EOR providers operating their own Mudad registration submit on the entity's behalf and are responsible for accuracy and timing. Failed or late submissions result in WPS flags that affect work permit issuance for the entity's full client base. When evaluating an EOR, confirming that the provider holds its own Mudad registration, rather than processing through a sub-partner, is a direct indicator of operational control.

GOSI (General Organisation for Social Insurance) contributions are mandatory for all employees in the Kingdom. For expatriate workers, the employer contributes 2% of the employee's basic salary plus housing allowance, covering occupational hazard insurance. For Saudi national employees, combined employer and employee contributions are significantly higher, covering both occupational hazard and annuity branches. Rates for Saudi national employees are subject to phased changes under the 2024 Social Insurance Law amendments, and applicable rates should be confirmed at the point of engagement.

Qiwa is the Ministry of Human Resources platform used to authenticate employment contracts and manage labour-related government transactions. All employment contracts must be registered and authenticated through Qiwa to carry full legal enforceability. Contract registration on Qiwa is a prerequisite for work permit issuance, and any mismatch between the Qiwa-registered contract and the visa application is grounds for rejection.

Key Saudi employment law requirements

Saudi employment is governed by the Saudi Labour Law (Royal Decree M/51) and enforced by the Ministry of Human Resources and Social Development. The following requirements apply to all employees working in the Kingdom and reflect the most recent amendments including those that took effect in February 2025.

Employment contracts must be in Arabic, or bilingual with an Arabic version, and must be registered and authenticated on the Qiwa platform. The job title in the contract must precisely match the visa category. A mismatch is grounds for rejection or cancellation.

Probation period can be agreed at up to 180 days from the outset under the February 2025 Labour Law amendments. The duration must be explicitly stated in the employment contract. Either party may terminate during the probation period.

Working hours are a maximum of eight hours per day and 48 hours per week, reduced to six hours per day and 36 hours per week during Ramadan for Muslim employees. Overtime is compensated at 150% of the standard hourly rate.

Annual leave is a minimum of 21 days per year for employees with fewer than five years of service, increasing to 30 days per year thereafter. Employees are additionally entitled to paid public holidays including Saudi National Day, Founding Day, and the Eid al-Fitr and Eid al-Adha periods.

Notice periods for indefinite-term contracts are a minimum of 60 days. Non-Saudi employees without a specified contract duration are treated as having a one-year contract that renews automatically under the 2025 amendments.

End-of-service gratuity is a statutory entitlement under Article 84 of the Labour Law. The formula is half a month's wage per year for the first five years of service, and one full month's wage per year thereafter, calculated on the employee's basic salary only. The most common employer error is including housing or transport allowances in the calculation, which inflates the liability without contractual basis. Gratuity accrues from day one of employment. Employees must complete at least two years of service to qualify on resignation, and at least one year to qualify on termination.

Sick leave entitlement is 30 days on full pay, 60 days at three-quarters pay, and 30 days unpaid per year, subject to medical certification. Total sick leave entitlement is 120 days per year.

Maternity leave is 12 weeks under the February 2025 amendments, with at least six weeks postnatal leave being mandatory regardless of any agreement between the parties.

The four-phase KSA onboarding process

A KSA deployment involves four sequential phases, each with its own timeline and requirements. Understanding this process upfront is the best way to set accurate expectations with internal stakeholders and project clients.

Phase 1: Pre-deployment audit and contract issuance (3 to 10 working days). The EOR audits the planned hires against Saudisation and Localisation requirements, confirms visa quota availability, issues the employment contract and authenticates it on Qiwa, and obtains work visa authorisation from the relevant Saudi authority. The employee is then authorised to apply for a Saudi work visa from their home country.

Phase 2: Home country formalities (2 to 4 weeks). The employee undergoes a medical examination at an approved clinic, obtains a police clearance certificate, and where required has their degree and professional certificates attested. The Saudi embassy then stamps the work visa. The bottleneck in this phase is almost always document gathering and authentication, particularly for employees from countries with slower government processing times.

Phase 3: Entry and local compliance (1 to 2 weeks after arrival). The employee enters Saudi Arabia on their work visa, undergoes a post-arrival medical examination, provides biometrics and fingerprints, and receives their Iqama (residence permit). The employee cannot legally work in the Kingdom until the Iqama is issued.

Phase 4: Employment activation (1 to 2 weeks). GOSI registration is completed, Mudad payroll is activated, the employee opens a local bank account, and salary payments are enabled. At this point the employee is fully onboarded, legally employed, and compliant.

Overall timelines vary by case. Best case is 4 to 6 weeks. A typical deployment takes 6 to 10 weeks. Complex cases involving specific professional certifications, certain nationalities with longer visa processing times, or roles requiring Ministry of Health or other regulatory registration may run to 10 to 14 weeks. The EOR should provide a specific timeline estimate at the pre-deployment audit stage based on the individual's profile, nationality, and role requirements.

Why some companies with existing Saudi entities still use an EOR

EOR arrangements in Saudi Arabia are not only for companies with no local presence. Companies with their own registered Saudi entity sometimes use a separate EOR for specific categories of deployment to manage Saudisation pressure on their primary entity.

The most common reason is Nitaqat management. A company whose own entity is at risk of dropping into a lower band due to workforce changes or project-driven expat hiring can place specific roles under a separate EOR entity with higher Saudisation headroom, keeping the company's own entity's ratio healthy while the project headcount sits under the EOR's licence.

A second common use case is the soft-landing model. A company deploys its team through an EOR while simultaneously registering its own Saudi entity, then transfers the employees across once registration is complete. This approach allows market entry without delaying deployment by the 12 to 24 months that entity registration typically requires.

Compliance changes to watch in 2026

Saudi Arabia's regulatory environment continues to evolve. Key developments affecting employers in 2026:

Saudisation targets are increasing across multiple sectors, with the Ministry of Human Resources publishing updated sector-specific quotas throughout 2026. Companies and EOR entities operating close to the lower boundary of their current Nitaqat band should monitor these adjustments, as a sector-level target increase can push an entity from Green into Low Green or Red without any change in its actual headcount.

The 2024 Social Insurance Law amendments introduce phased changes to GOSI contribution rates for Saudi national employees, with the first adjustment taking effect from July 2025. Employers and EOR providers should confirm the applicable rate at each new engagement, as the rates published prior to this amendment may no longer be current.

Labour law penalties have increased under recent amendments. The Ministry of Human Resources has expanded its enforcement capacity, and digital monitoring through Mudad, Qiwa, and Nitaqat systems allows for real-time identification of non-compliance. Companies relying on manual compliance tracking should be aware that the enforcement environment in 2026 is significantly more automated than in previous years.

Hiring in Saudi Arabia without a local entity

Companies that need to deploy staff in Saudi Arabia without setting up their own entity typically use an Employer of Record. The EOR holds the local entity, employs staff on its Saudi commercial registration, and manages payroll, contracts, visa sponsorship, and compliance.

When evaluating EOR providers for Saudi Arabia, the key considerations are:

Whether the EOR holds its own Saudi commercial registration or uses a sub-partner. What Nitaqat band the EOR's entity holds, and how that affects visa quota and processing speed. Whether the EOR operates its own Mudad WPS registration and processes payroll directly. How the EOR manages its Saudisation and Localisation obligations as client headcount changes. Whether the in-country team can handle employee queries, contract amendments, Iqama issues, and termination processes directly.

The delivery model matters more than the platform. A provider with its own entity and in-country team can respond to regulatory changes, process government interactions, and resolve employee issues without the delays that come with a sub-partner arrangement. In Saudi Arabia specifically, the gap between direct-entity and sub-partner models is larger than in most markets because of the interdependence between Mudad, Nitaqat, and Qiwa, all of which require the employing entity to act directly.

About Aspirock

Aspirock Arabia LLC is a Saudi Employer of Record holding Platinum Nitaqat status, operating from a Riyadh office. The company employs staff directly on its own commercial registration and sponsors visas through its own Mudad WPS registration, without sub-partners or third-party delivery agents. EOR services cover full visa sponsorship, Iqama issuance, GOSI registration, monthly payroll, and contract authentication on Qiwa. For deployment timelines and engagement terms, see the Saudi Arabia EOR service page.

Frequently asked questions

Can I hire employees in Saudi Arabia without setting up a local entity?

Yes. An Employer of Record with its own Saudi commercial registration can employ staff on your behalf, handling contracts, payroll, visa sponsorship, and compliance. This is the standard approach for companies entering the Saudi market without the cost and time of entity incorporation, which typically takes 12 to 24 months.

How long does it take to deploy staff into Saudi Arabia using an EOR?

The best-case timeline is 4 to 6 weeks for a straightforward expatriate deployment. A typical deployment takes 6 to 10 weeks, accounting for home-country document gathering, attestation, and post-arrival compliance steps. Complex cases involving professional certifications, certain nationalities with longer visa processing times, or roles requiring additional regulatory registration may take 10 to 14 weeks.

What is the difference between Saudisation and Localisation?

Saudisation (Nitaqat) sets the minimum percentage of Saudi nationals an employer must have in their workforce. Localisation goes further: it specifies that for regulated professions and certain technical roles, the Saudi hire must hold equivalent qualifications to the expatriate roles being sponsored. Hiring any Saudi national is not sufficient if the role requires a certified Saudi professional. Both requirements must be satisfied before visa applications can proceed.

What are the Nitaqat bands and how do they affect visa sponsorship?

The Nitaqat system has five bands: Platinum, High Green, Mid Green, Low Green, and Red. Platinum represents the highest level of Saudisation compliance and grants the fastest visa processing and maximum operational flexibility. High Green and Mid Green companies can process work permits without major restrictions. Low Green companies face restrictions on new visas. Red companies cannot process new work permits or renew existing ones until their Saudisation ratio improves.

What is Mudad and what happens if payroll is not processed correctly?

Mudad is Saudi Arabia's government Wage Protection System. All private sector salaries must be processed and reported through the platform every month within a defined window. A missed or delayed submission triggers an automatic suspension of all active work permits for that employer, with no grace period. The suspension applies to every permit on the entity, not only those associated with the delayed payment.

How is end-of-service gratuity calculated in Saudi Arabia?

End-of-service gratuity is calculated on basic salary only, not total compensation. The formula is half a month's basic wage per year for the first five years of service, and one full month's basic wage per year thereafter. Gratuity accrues from day one. Employees must complete at least two years of service to qualify on resignation, and at least one year to qualify on termination.