Saudi Corporate Compliance Checklist: Annual Obligations

Saudi companies must comply with multiple regulators and laws. This guide provides a corporate compliance checklist covering entity, tax, labour, sector, and governance obligations. See MISA annual compliance, ZATCA penalties, HRSD violations, and AML compliance.

Overview

A typical Saudi company must meet: entity (commercial registration, MISA if applicable, beneficial ownership); tax (VAT, withholding, corporate tax, e-invoicing); labour (HRSD, GOSI, contracts); sector (licence renewals, sector reporting); and AML/sanctions (if obligated). This checklist helps you track key deadlines and avoid gaps. See AGM requirements and annual audit.

Entity and Regulatory

Keep commercial registration valid and updated (activity, address). If you have a MISA licence: annual reporting and renewals. Update beneficial ownership with the Ministry of Commerce when there are changes. Notify company amendments (capital, directors, etc.) to the relevant authority. Hold AGM and file where required.

Tax (ZATCA)

Register for VAT, withholding tax, and (if applicable) excise and corporate tax when required. File returns and pay on time. Implement e-invoicing (Fatoorah) for B2B. Keep records. See VAT guide, withholding tax, and ZATCA penalties. Use accounting software that supports compliance.

Labour (HRSD)

Comply with HRSD and GOSI: valid employment contracts, sponsorship, wage protection, and Saudisation where applicable. Avoid HRSD violations. Report and pay GOSI on time. See HRSD violations for penalties.

Sector and AML

Renew sector licences (tourism, fintech, healthcare, etc.) on time. If you are an AML-obligated entity: maintain AML compliance and sanctions screening. See your sector guide (e.g. fintech, tourism) for specific renewals.

Governance and Data

Meet corporate governance and annual audit requirements. Handle personal data per the PDPL. Comply with anti-bribery and competition law where relevant.

Annual Checklist Summary

Entity: CR and MISA renewals/reporting; beneficial ownership; AGM; company amendments if any.
Tax: VAT, WHT, CIT returns and payment; e-invoicing; record-keeping. See ZATCA penalties.
Labour: HRSD/GOSI compliance; wage protection; Saudisation. See HRSD violations.
Sector: Licence renewals; sector reporting. See MISA and sector guides.
AML/Governance: AML and sanctions (if obligated); governance; PDPL; anti-bribery. See AML and sanctions.

Frequently Asked Questions

How often should we review this checklist?

At least annually, and when you have a new activity, new licence, or change in structure. Set calendar reminders for key deadlines (MISA, VAT, WHT, licence renewals). See MISA compliance and ZATCA penalties.

Who is responsible for compliance?

The board and management are responsible. Designate owners for tax, HR, and sector compliance. Larger or regulated entities often have a dedicated compliance officer. See corporate governance.

What if we discover a past breach?

Remediate and consider voluntary disclosure where the authority allows it (e.g. ZATCA). Seek professional advice. Continuing to breach can worsen penalties. See ZATCA penalties and HRSD violations.

Do small companies have fewer obligations?

Some obligations are size- or threshold-based (e.g. VAT registration, audit). Small companies still need valid CR, labour compliance, and (if applicable) MISA and sector licences. Check each obligation. See VAT guide for thresholds.

Where do we get the official deadlines?

From each authority: MISA portal, ZATCA (VAT/WHT/CIT), HRSD, and your sector regulator. Laws and portals set the exact dates. This checklist is a guide — confirm with official sources. See MISA and ZATCA.

Is ESG or sustainability reporting required?

Requirements are evolving. Some listed companies and large entities may have ESG or sustainability reporting obligations. Check CMA and sector guidance. See ESG and sustainability.

Saudi Corporate Compliance Checklist: Annual Obligations 2026