Employer of Record in Saudi Arabia (KSA) — Complete Guide 2026

Employer of Record in Saudi Arabia — Complete Guide 2026

Saudi Arabia is one of the most active and complex hiring markets in the world right now. Vision 2030 has triggered a sustained wave of investment across infrastructure, energy, technology, and professional services. Giga-projects including NEOM, the Red Sea Project, and Diriyah Gate are pulling global consultancies, engineering firms, and specialist contractors into the Kingdom at pace. And project timelines rarely accommodate the time it takes to register a legal entity.

Setting up your own Saudi legal entity takes between one and two years in most cases, and in some business categories even longer. An Employer of Record removes that barrier entirely. Rather than registering your own Saudi entity, your workers are legally employed by the EOR in the Kingdom, with full visa sponsorship, Iqama issuance, GOSI registration, and Mudad payroll compliance handled directly, while you retain complete day-to-day operational control of your team.

The critical word is directly. Most global EOR platforms operating in Saudi Arabia do not hold their own Saudi licence. The majority rely on third-party local delivery partners, meaning the provider you contract with is not the entity actually sponsoring your visas or employing your staff. Your queries go from your account manager to a delivery partner and back again. Visa issues take days to resolve. Payroll problems cascade. When something time-sensitive breaks, a blocked Iqama, a Mudad flag, a Nitaqat query, you are waiting on a helpdesk ticket rather than a direct answer.

Aspirock holds its own Saudi registration from our Riyadh office. We are the visa sponsor and legal employer in the Kingdom. There is no sub-partner in the chain.

Why Saudi Arabia Requires Specialist Expertise

Saudi Arabia has a compliance environment that is genuinely unlike any other market. Businesses that have successfully expanded to the UAE, Singapore, or across Europe are frequently caught off guard by what Saudi requires. There are three distinct layers — Saudisation, Localisation, and Nitaqat — that work together and must all be navigated correctly before a single visa is filed.

Understanding the difference between these three is the starting point for any KSA deployment.

Saudisation and the Nitaqat System

Saudisation is Saudi Arabia's policy requiring private sector employers to maintain a minimum percentage of Saudi national employees in their workforce. Every private sector company operating in the Kingdom is assigned a Nitaqat band based on their current Saudi-to-expat employment ratio. The band structure, as currently in force, runs from Platinum at the top through High Green, Mid Green, and Low Green, down to Red at the bottom. Companies in the Red band cannot process new work permit applications, cannot renew existing work permits, and are effectively blocked from hiring until their Saudisation ratio improves.

Aspirock Arabia holds a Platinum Nitaqat position, the highest available band. This is not a minor detail. It determines how many expat visas we can sponsor and gives clients access to the fastest visa processing routes available in the Kingdom. Maintaining a Platinum position requires continuous investment in Saudi national employment, active quota management, and ongoing compliance monitoring as headcount changes across our client base. These Saudisation obligations are factored into our per-worker service model, which is standard across the EOR industry in Saudi Arabia. It is the first thing any credible KSA EOR should be able to explain clearly.

Localisation — The Rule Most Companies Miss

Localisation is distinct from Saudisation and is significantly more complex. It is the rule that most companies, including many who believe they understand the Saudi market, fail to account for.

Saudisation tells you how many Saudi nationals you need to employ. Localisation tells you what kind. It is not sufficient to employ any Saudi national to satisfy a Localisation requirement. For regulated professions and certain technical roles, the Saudi hire must hold the specific qualifications, certifications, or professional accreditations that correspond to the expatriate roles being sponsored.

The clearest example: if you are deploying expatriate engineers into Saudi Arabia, Localisation rules may require that corresponding Saudi hires are not simply any Saudi nationals, but certified Saudi engineers with the relevant professional body accreditation. Hiring Saudi administrative workers will not satisfy this requirement. Authorities assess the candidate's degree, their job title, their industry classification, and their actual responsibilities.

This is the compliance trap that shuts companies down. It is also the main reason the Hiring Plan Audit exists as the first step of every Aspirock engagement.

The Hiring Plan Audit

Before Aspirock files any visa or work permit application for a client, we conduct a Hiring Plan Audit. This maps every expatriate role, including job title, nationality, qualifications, and sector classification, against the current Nitaqat and Localisation requirements for your specific business category and headcount band.

The output tells you exactly how many Saudi hires are required, what qualifications those hires must hold, which roles can be filled immediately, and which may require additional sourcing. This audit prevents the most common and most costly failure mode in KSA hiring: submitting visa applications without understanding the Localisation obligations, triggering a compliance breach, and having all active work permits suspended as a result.

The Hiring Plan Audit is offered free of charge for all new clients. It is the first step in every Aspirock KSA engagement, and in most cases it saves clients weeks of back-and-forth that would otherwise happen after the first rejection.

Mudad, WPS, and Payroll Compliance

Saudi Arabia's Wage Protection System, known as Mudad, requires all private sector employers to process and report salaries through the government platform every month within a defined window. This is not optional and there is no grace period. A single missed or delayed submission, even caused by a banking delay rather than actual non-payment, triggers an automatic suspension of all active work permits for that employer. Every permit. Immediately.

Aspirock processes all client payroll through Mudad and monitors submission status proactively, not reactively. Clients do not need to interact with the platform directly. We run the monthly cycle as a managed service and flag any issues before they become permit suspensions.

GOSI (General Organisation for Social Insurance) contributions are mandatory for all employees in the Kingdom. For expatriate workers, the employer contributes 2% of the employee's basic salary plus housing allowance, covering occupational hazard insurance. For Saudi national employees, combined employer and employee contributions are significantly higher, covering both occupational hazard and annuity branches. Aspirock advises clients on the applicable rates for each hire at the point of engagement, as rates for Saudi national employees are subject to phased changes under the 2024 Social Insurance Law amendments.

Qiwa is the Ministry of Human Resources platform used to authenticate employment contracts and manage labour-related government transactions. All employment contracts must be registered and authenticated through Qiwa to carry full legal enforceability. Aspirock manages Qiwa contract registration as part of the standard onboarding process for every client.

Key Saudi Employment Law Requirements

Saudi employment is governed by the Saudi Labour Law (Royal Decree M/51) and enforced by the Ministry of Human Resources and Social Development. The following requirements apply to all employees working in the Kingdom and reflect the most recent amendments including those that took effect in February 2025.

Employment contracts must be in Arabic, or bilingual with an Arabic version, and must be registered and authenticated on the Qiwa platform. The job title in the contract must precisely match the visa category. A mismatch is grounds for rejection or cancellation.

Probation period can be agreed at up to 180 days from the outset under the February 2025 Labour Law amendments. The duration must be explicitly stated in the employment contract. Either party may terminate during the probation period.

Working hours are a maximum of eight hours per day and 48 hours per week, reduced to six hours per day and 36 hours per week during Ramadan for Muslim employees. Overtime is compensated at 150% of the standard hourly rate.

Annual leave is a minimum of 21 days per year for employees with fewer than five years of service, increasing to 30 days per year thereafter. Employees are additionally entitled to paid public holidays including Saudi National Day, Founding Day, and the Eid al-Fitr and Eid al-Adha periods.

Notice periods for indefinite-term contracts are a minimum of 60 days. Non-Saudi employees without a specified contract duration are treated as having a one-year contract that renews automatically under the 2025 amendments.

End of service gratuity is a statutory entitlement under Article 84 of the Labour Law. The formula is half a month's wage per year for the first five years of service, and one full month's wage per year thereafter, calculated on the employee's basic salary. Gratuity accrues from day one of employment. Employees must complete at least two years of service to qualify on resignation, and at least one year to qualify on termination. Aspirock manages all gratuity calculations and provisions directly.

Sick leave entitlement is 30 days on full pay, 60 days at three-quarters pay, and 30 days unpaid per year, subject to medical certification. Total sick leave entitlement is 120 days per year.

Maternity leave is 12 weeks under the February 2025 amendments, with at least six weeks postnatal leave being mandatory regardless of any agreement between the parties.

The Four-Phase KSA Onboarding Process

A KSA deployment involves four sequential phases, each with its own timeline and requirements. Understanding this process upfront is the best way to set accurate expectations with your internal stakeholders and project clients.

Phase 1: Pre-Visa (3 to 10 working days). Aspirock conducts the Saudisation and Localisation check, confirms visa quota availability, issues the employment contract and authenticates it on Qiwa, and obtains work visa authorisation from the relevant Saudi authority. The employee is now authorised to apply for a Saudi work visa from their home country.

Phase 2: Home country formalities (2 to 4 weeks). The employee undergoes a medical examination at an approved clinic, obtains a police clearance certificate, and where required has their degree and professional certificates attested. The Saudi embassy then stamps the work visa. The bottleneck in this phase is almost always document gathering and authentication, particularly for employees from countries with slower government processing times.

Phase 3: Entry and local compliance (1 to 2 weeks after arrival). The employee enters Saudi Arabia on their work visa, undergoes a post-arrival medical examination, provides biometrics and fingerprints, and receives their Iqama (residence permit). The employee cannot legally work in the Kingdom until the Iqama is issued.

Phase 4: Employment activation (1 to 2 weeks). GOSI registration is completed, Mudad payroll is activated, the employee opens a local bank account, and salary payments are enabled. At this point the employee is fully onboarded, legally employed, and compliant.

Overall timelines vary by case. Best case is 4 to 6 weeks. A typical deployment takes 6 to 10 weeks. Complex cases involving specific professional certifications, certain nationalities with longer visa processing times, or roles requiring Ministry of Health or other regulatory registration may run to 10 to 14 weeks. Aspirock provides a specific timeline estimate at the Hiring Plan Audit stage based on the individual profile and role requirements.

Why Some Companies With Existing Saudi Entities Still Use an EOR

EOR arrangements in Saudi Arabia are not only for companies with no local presence. Many international businesses that already have their own registered Saudi entity continue to use Aspirock for specific categories of deployment.

The most common reason is Nitaqat management. A company whose own Saudi entity is at risk of dropping into a lower band due to workforce changes or project-driven expat hiring can use Aspirock's Platinum-band entity as the employer of record for specific roles, keeping their own entity's Saudisation ratio healthy while the project headcount sits under our licence.

A second common use case is the soft-landing model. A company deploys their team through Aspirock while simultaneously registering their own Saudi entity, then transfers the employees across once registration is complete. This is a clean, compliant, and commercially sensible way to enter the market without sacrificing speed.

Addressing the Most Common Questions About Boutique EOR Providers

We hear a consistent set of questions from companies considering Aspirock alongside larger platforms. These are worth addressing directly.

"The large platforms carry familiar brand names. Is a boutique provider a safe bet?" This is a fair question. The large global EOR platforms carry strong brand recognition and that familiarity is reassuring to boards. What is less visible is that most of them use third-party delivery partners for Saudi Arabia specifically. When something goes wrong you are waiting on a chain of intermediaries for a resolution. Aspirock's Saudi registration means every compliance decision is made by people who own the licence and know the market directly. That is the relevant comparison.

"Can a boutique firm scale if we grow from 5 to 50 people?" Yes. Our Platinum Nitaqat position gives us significant headroom for expat visa sponsorship. We manage the Saudisation and Localisation requirements proactively as headcount grows, not reactively when a quota is breached. Scaling within our entity is a managed process, not an afterthought.

"What happens if there is an issue with your licence?" Aspirock Arabia holds a direct Saudi commercial registration. We are not a sub-partner operating under someone else's licence. We are the licence holder. This is the structure that provides genuine long-term security for clients.

Frequently Asked Questions

Can I hire employees in Saudi Arabia without setting up a Saudi legal entity? Yes. Through Aspirock's EOR arrangement, we become the legal employer of your workers in the Kingdom. You do not need Saudi commercial registration, a local partner, or share capital. Aspirock holds the Saudi licence directly from our Riyadh office and manages the full employment stack — visa sponsorship, Iqama, GOSI, Qiwa contract authentication, and Mudad payroll — on your behalf.

How long does it take to deploy staff into Saudi Arabia using an EOR? The best-case timeline is 4 to 6 weeks for a straightforward expatriate deployment. A typical deployment takes 6 to 10 weeks, accounting for home-country document gathering and attestation. Complex cases involving professional certifications or certain nationalities may take 10 to 14 weeks. Aspirock provides a specific timeline at the Hiring Plan Audit stage based on the individual's profile, nationality, and role requirements.

What is the difference between Saudisation and Localisation in Saudi Arabia? Saudisation (Nitaqat) sets the minimum percentage of Saudi nationals an employer must have in their workforce. Localisation goes further — it specifies that for regulated professions and certain technical roles, the Saudi hire must hold equivalent qualifications to the expatriate roles being sponsored. Hiring any Saudi national is not sufficient if the role requires a certified Saudi professional. Aspirock's Hiring Plan Audit maps every deployment against both requirements before any visa application is filed.

What is Mudad and what happens if payroll is not processed through it correctly? Mudad is Saudi Arabia's government Wage Protection System. All private sector salaries must be processed and reported through the platform every month within a defined window. A missed or delayed submission triggers an automatic suspension of all active work permits for that employer, with no grace period. Aspirock processes all client payroll through Mudad as a managed service and monitors submission status proactively every month.

Does Aspirock use sub-contractors or third parties for KSA employment? No. Aspirock holds its own Saudi commercial registration and employs staff in the Kingdom directly from our Riyadh office. We are the visa sponsor and legal employer. There are no sub-partners, aggregators, or third-party delivery agents involved. This means compliance decisions are made directly by our team, issues are resolved without an intermediary chain, and clients have a single point of accountability for everything.

What is a Hiring Plan Audit and why does it matter before hiring in KSA? A Hiring Plan Audit is Aspirock's pre-engagement process where we map every expatriate role against the current Nitaqat and Localisation requirements for your specific business category. It tells you exactly how many Saudi hires are required and what qualifications they must hold before a single visa application is filed. Filing without this audit is the most common cause of compliance breaches and work permit suspensions in Saudi Arabia. Aspirock offers the Hiring Plan Audit free of charge for all new client engagements.

What are the Nitaqat bands in Saudi Arabia and what does each mean? The current Nitaqat band structure has five tiers: Platinum, High Green, Mid Green, Low Green, and Red. Platinum represents the highest level of Saudisation compliance and grants the fastest visa processing and maximum operational flexibility. High Green and Mid Green companies are compliant and can process work permits without major restrictions. Low Green companies face some restrictions on new visas. Red companies are non-compliant and cannot process new work permits or renew existing ones until their Saudisation ratio improves. Aspirock operates in the Platinum band.

---

Ready to deploy into Saudi Arabia? Book your free Hiring Plan Audit — we will map your roles against 2026 Saudisation and Localisation requirements and give you a specific deployment timeline before you commit to anything.