** ISSUE 08 │ REGIONAL EXPANSION │ READ TIME: 9 MIN ** ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**THE FOUNDER STORY ** Layla had built something rare. Her Dubai-based fintech had grown from a two-person operation in a DIFC co-working space into a regulated platform with sixty staff, a clean cap table, and a Series A in the bank.
By the time she decided to expand to KSA, she had a deck, a term sheet template, and what she described to her board as "a clear plan."
Six months later, she had:
▸ A Saudi entity she couldn't operate
▸ A sponsor relationship she couldn't exit
▸ Two senior hires in Riyadh without valid work permits
▸ A regulator asking why her platform had been live-marketing in the Kingdom for ninety days without local licensing
Nothing she had done was reckless. Every single step had been signed off by someone — a corporate service provider, an introducer, a well-meaning advisor.
But no one had stress-tested the plan as a whole.
That, in our experience, is how expansion stories most commonly unravel.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**WHY THIS MATTERS NOW ** Saudi Arabia is the most significant growth opportunity available to UAE-based founders today. By early 2026, more than 700 multinational companies had already relocated their regional headquarters to the Kingdom, exceeding the Vision 2030 target of 500 companies four years ahead of schedule.
It is also the jurisdiction where the gap between "we set up an entity" and "we can actually operate" is the widest in the region.
This issue is about closing that gap — before, not after, the capital is committed.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**BEFORE YOU SET UP ANYTHING: THE QUESTION MOST FOUNDERS SKIP ** The first mistake is treating expansion as an incorporation exercise. It isn't.
Incorporation is the last step, not the first.
The right starting question is structural:
What does your business actually need to do in the Kingdom, and what is the lightest-touch legal footprint that allows you to do it?
There are, broadly, four ways to access the Saudi market, each with a different legal, regulatory, and tax profile:
▸ Cross-border servicing from the UAE, with no Saudi presence at all
▸ A commercial agency or distribution arrangement with a Saudi partner
▸ A Regional Headquarters (RHQ) licence in Riyadh
▸ A full operational subsidiary, foreign-owned under MISA
Each ripples through your cap table, your tax residency, your data flows, your hiring strategy, and your ability to bid for government and quasi-government contracts.
Choosing the wrong vehicle is not a problem you can quietly fix later.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**🏛 THE RHQ LANDSCAPE IN 2026 — WHAT'S ACTUALLY CHANGED ** Since 1 January 2024, Saudi government entities, institutions, sovereign funds, and their affiliates have been barred from contracting with foreign companies whose regional headquarters sit outside the Kingdom.
In February 2026, that position was refined, not reversed.
A structured exemption mechanism is now available through the Etimad procurement platform. Non-RHQ companies can bid on government tenders, but their bids will only be accepted in two narrow scenarios:
▸ Only one technically compliant bid is received, OR
▸ The non-RHQ bid is technically best AND at least 25% lower in price than the second-best offer
Contracts valued under SAR 1 million (~USD 266,000) are exempt from the RHQ requirement entirely.
What this means in practice:
The exemption looks like a workaround. It is structured to fail unless your bid is either small enough to sit below the threshold, or dramatically cheaper than every RHQ-licensed competitor.
For founders selling enterprise-scale solutions to Vision 2030 entities, the RHQ is not optional. It is the price of admission.
And it is not a postbox: the RHQ regime requires genuine substance: mandatory and optional activities, quarterly board meetings held physically in Saudi Arabia, and SAR 100,000 fines for failing to meet employee quotas or activity requirements.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**DO THIS FIRST — THE FOUNDATIONS THAT SURVIVE SCRUTINY ** ▸ DO ▸ MAP YOUR ACTIVITIES BEFORE YOUR ENTITY
Every commercial activity in Saudi Arabia is tied to a specific licence code under MISA, the Ministry of Commerce, and (depending on sector) a vertical regulator: SAMA (financial services), CMA (capital markets), CITC (communications and tech), the SFDA (food and drug), or SDAIA (data and AI).
Your licence determines what you can invoice for, who you can hire, what visas you can sponsor, and whether you can lease commercial premises.
Founders routinely apply for the activity that matches their UAE licence, only to discover the Saudi equivalent is narrower, sits under a different regulator, or requires capitalisation and Saudisation thresholds that weren't budgeted for.
Map the activities first. Choose the entity second.
▸ DO ▸ PLAN FOR SAUDISATION FROM DAY ONE
The Nitaqat programme imposes minimum Saudi national hiring quotas, calculated as a percentage of total headcount and varying by sector, company size, and activity.
Falling out of the green band restricts your ability to renew expatriate work permits, transfer sponsorships, and in some cases issue new commercial visas at all.
Saudisation is not an HR issue. It is a corporate continuity issue.
▸ DO ▸ BUILD A REAL TAX AND TRANSFER PRICING POSITION
Saudi Arabia has corporate income tax for non-GCC-owned companies, Zakat for GCC-owned companies, withholding tax on cross-border payments, VAT at 15%, and an active transfer pricing regime under ZATCA.
If your UAE parent invoices the Saudi subsidiary for IP, management services, or shared infrastructure (and most do) those flows need to be priced, documented, and defensible before the first invoice is raised. Not after the first audit notice arrives.
▸ DO ▸ LOCALISE YOUR DATA POSTURE
Saudi Arabia's Personal Data Protection Law (PDPL), enforced by SDAIA, imposes meaningful restrictions on cross-border transfers of personal data and, for certain categories, mandates local processing.
If your platform processes Saudi user data on UAE or EU infrastructure today, your expansion plan needs a data architecture answer — not a privacy policy update.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**DON'T DO THIS — THE MISTAKES THAT COST THE MOST TO UNWIND ** ⚠ DON'T ▸ OPERATE BEFORE YOU'RE LICENSED
It is remarkably common for UAE founders to begin marketing, signing letters of intent, or onboarding Saudi customers in the gap between "entity registered" and "licence active."
That gap can stretch for months. Any commercial activity inside it is unlicensed activity.
Regulators in regulated sectors (fintech, healthtech, edtech, ride-hailing) have become substantially more active on enforcement.
⚠ DON'T ▸ USE A LOCAL "SPONSOR" AS A SHORTCUT
Foreign ownership under MISA can, in most sectors, reach 100%.
Despite this, founders are still routinely offered "simpler" structures involving a Saudi national holding shares on their behalf, a side letter, and a verbal promise.
These arrangements are not enforceable in the way the side letter suggests. They create exposure on tax residency, beneficial ownership disclosure, and (at exit) title to the company itself.
If a structure cannot survive a Q&A with a Series B due diligence team, it is not a structure. It is a future problem.
⚠ DON'T ▸ SIGN THE STANDARD SAUDI COMMERCIAL LEASE WITHOUT REVIEW
Saudi commercial leases routinely contain automatic renewal clauses, escalator mechanisms, and exit penalties materially harsher than their UAE counterparts.
Ejar registration is mandatory for enforceability and to support visa applications, but registration does not validate the commercial terms.
Negotiate first. Register second.
⚠ DON'T ▸ REPLICATE YOUR UAE EMPLOYMENT CONTRACTS
Saudi labour law differs from the UAE's onshore Labour Law and from the DIFC and ADGM employment regimes in several material respects: end-of-service calculations, notice periods, non-compete enforceability, probation rules, and the treatment of remote and hybrid arrangements.
A UAE contract translated into Arabic is not a Saudi contract. It is a UAE contract in Arabic, and it will be read against Saudi law, not the law it was drafted under.
⚠ DON'T ▸ TREAT THE RHQ AS A POSTBOX
The substance requirements have teeth: mandatory strategic functions, optional activities, physical board meetings in the Kingdom, and fines for non-compliance.
A nameplate office with a single administrative hire will not satisfy the regime. The cost of remediation, once flagged, is significantly greater than the cost of getting the substance right at the outset.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
THE COSTLY MIDDLE: DECISIONS FOUNDERS DEFER UNTIL IT'S TOO LATE
Between the obvious do's and don'ts sits a middle band of decisions that rarely feel urgent at the point of expansion — and almost always become urgent later.
THE IP QUESTION
Where does the intellectual property live after expansion? If it remains in the UAE parent and is licensed down to the Saudi subsidiary, the licence terms, the royalty rate, and the documentation must withstand transfer pricing scrutiny.
If it is transferred to the Saudi entity, that transfer is itself a taxable event with valuation consequences.
There is no neutral answer; only an answer that has been thought through, and one that hasn't.
THE CAP TABLE QUESTION
Will Saudi investors take equity in the UAE parent, the Saudi subsidiary, or a new holding company above both?
Each choice has consequences for future funding rounds, exit optionality, founder dilution, and (increasingly) the willingness of regional sovereign and quasi-sovereign LPs to participate.
This decision is best made before the first Saudi term sheet lands, not after.
THE GOVERNANCE QUESTION
Two boards, or one? Local director requirements, signing authorities, board reserved matters, and information rights all need to be aligned across the group.
Founders who run two parallel governance structures without a clear hierarchy tend to discover the gap during a dispute — which is the most expensive moment to discover it.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📋 THE PRE-EXPANSION CHECKLIST
Before any capital is committed to a Saudi expansion, the following should be on paper, reviewed, and signed off, not in someone's head:
☐ Activity mapping completed: every commercial activity intended in KSA matched to a specific MISA licence code and vertical regulator
☐ Entity vehicle selected: cross-border, agency, RHQ, subsidiary, or combination — with the rationale documented
☐ RHQ position taken: required, optional, or strategic — and aligned with your government and quasi-government sales pipeline
☐ Saudisation modelling completed: Nitaqat band targeted, hiring plan reverse-engineered, salary bands stress-tested
☐ Tax and transfer pricing memo drafted: corporate tax / Zakat position, intercompany flows, withholding exposure, VAT registration triggers
☐ Data architecture reviewed against PDPL: cross-border transfer mechanisms identified, data localisation triggers mapped
☐ IP holding structure decided: parent-licensed, transferred, or restructured — with valuation and documentation
☐ Cap table impact modelled: where Saudi investors enter, dilution scenarios, exit pathways
☐ Group governance designed: board composition, reserved matters, signing authority matrix, intercompany agreements
☐ Employment templates re-drafted under Saudi law: not translated from UAE templates
☐ Sequencing locked: licence → bank account → hires → lease → commercial activity. In that order.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
**THE BOTTOM LINE ** Layla's mistake was not that she expanded into Saudi Arabia. It was that she treated expansion as a series of administrative tasks rather than a coordinated legal strategy.
Each individual step had been handled. The strategy had not.
The founders who scale cleanly into the Kingdom are not the ones with the biggest budgets. They are the ones who spend two weeks pressure-testing the plan before spending six months executing it.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📩 THINKING ABOUT SAUDI?
If you're weighing a move into the Kingdom, or already mid-execution and quietly worried, let's pressure-test the plan before more capital is committed.
The Legal Rooms
The Legal Rooms
Share this article