The Saudi Regulatory Landscape: What you need to know

When I ask most international health companies what their biggest concern is about entering Saudi Arabia, and regulation comes up almost immediately.

The SFDA. The SCHS. MoH licensing. Entity registration. It can feel like a wall.

And the regulatory piece is genuinely important; it has to be done properly, in the right sequence, and with the right support. There’s no shortcut worth taking.

But here’s the thing most companies get wrong: they treat regulation as the primary obstacle, but in reality, it’s just a process that needs to be managed. The companies that stall in Saudi usually don’t stall because of regulatory failure. They stall because they haven’t addressed the commercial, relational, and structural foundations that sit alongside it.

Sure, regulation is a prerequisite, but it is not a strategy.

With that framing in place, let’s walk through what the landscape actually looks like.

The three main bodies you need to understand

Saudi Arabia’s healthcare regulatory environment sits across three main institutions, and understanding what each of them governs matters more than most companies initially appreciate.

The Saudi Food and Drug Authority (SFDA) is responsible for approvals relating to medical devices, diagnostics, pharmaceuticals, food products, and cosmetics. If your solution requires any kind of product registration, a device, an IVD, a software-as-medical-device classification, this is the primary body you’ll engage with.

The Saudi Commission for Health Specialities (SCHS) governs the licensing and classification of healthcare professionals operating in the Kingdom. If your service involves clinical practitioners, telemedicine specialists, or any kind of professional credentialing, SCHS is relevant to your operating model.

The Ministry of Health (MoH), through its various departments and the regional health clusters, governs broader healthcare operations, facility licensing, and procurement frameworks for public sector engagement. If you’re looking to work with the public system, hospitals, clinics, cluster procurement, understanding MoH structure is foundational.

These three don’t operate in isolation. Your pathway through them will depend on what you’re offering, how it’s classified, and where in the system you’re trying to operate.

Medical device registration: what the process actually looks like

For companies in medtech and diagnostics, the Saudi route to market runs through the SFDA’s Medical Device Marketing Authorization (MDMA) process.

As of 2026, all medical devices must follow the MDMA2 route, the Saudi national pathway, which requires a full Technical File Assessment (TFA) submitted through the SFDA’s GHAD portal. This applies regardless of device class and regardless of whether you already hold a CE, US FDA, or other international approval.

International manufacturers without a local office must appoint an SFDA-licensed Authorised Representative (AR) in the Kingdom. This isn’t optional. The AR submits your application, manages post-market obligations, and acts as your in-country regulatory interface. Choosing the right AR matters, not just for compliance, but for how your application is positioned and followed up. At WHV, we work with several ARs and support Saudi FDA application submissions by helping to coordinate efforts with the ARs.

Saudi FDA timelines: Companies are often surprised by the range here. In straightforward cases where documentation is complete and well-organised, with prior CE or US FDA approval, the initial review can be completed within 30 days.

A few practical observations are worth noting, though:

Prior international approvals (CE, US FDA) support your application, but don’t replace the SFDA review. 

Build your TFA with the Saudi submission explicitly in mind; don’t simply repurpose a European technical file and expect it to land cleanly.

Classification matters. Getting your device class right at the outset affects which pathway you follow and how your timeline is managed. Taking advice from someone with direct SFDA experience at this stage pays for itself quickly.

Digital health and software: a more nuanced picture

Companies working in health software, AI diagnostics, or digital health platforms face a slightly different regulatory environment, one that is still evolving.

The SFDA’s Software as a Medical Device (SaMD) policies are broadly aligned with international IMDRF guidance. The classification and registration requirements for digital health tools depend significantly on the software’s intended use and risk classification.

Telehealth platforms, clinical decision support tools, and AI-powered diagnostic applications each occupy different positions within this framework. The picture is more dynamic than for traditional hardware devices, which means engaging with specialists who are actively tracking SFDA SaMD policy is important.

What’s clear is that Saudi is not waiting for a fully mature regulatory framework before moving forward with digital health adoption. PoCs, pilots and procurement can proceed in parallel with registration processes in some cases, but this requires careful structuring from the outset.

Entity structure and business setup

One question that consistently arises at early-stage market entry is whether a local entity is required to do business in Saudi.

For most meaningful commercial engagements, especially with public sector institutions, government procurement, or hospital systems, the answer is effectively yes. Tenders are published both privately and publicly; in almost every case, there is a requirement to contract “locally”.

The options include a fully owned foreign entity under the MISA (Ministry of Investment) framework, a joint venture with a Saudi partner, or operating through a locally established distributor or authorised representative. Each has different implications for control, liability, and the depth of commercial relationship you can build.

Since 2021, international companies have been able to establish 100% foreign-owned entities in Saudi Arabia across most sectors. This has removed a barrier that previously pushed many companies toward partnership structures by necessity. That said, the choice between operating independently or with a local partner isn’t purely a regulatory one, it’s a commercial and strategic question that deserves careful thought.

A local entity signals seriousness and permanence to health system stakeholders. It enables direct contracting with public institutions. And increasingly, larger health clusters are asking for it as a condition of engagement, particularly for anything beyond an initial pilot.

Even more progressive, recent changes now see foreigners being able to buy property in Saudi Arabia, including in areas within Makkah and Madinah. More on that on another time.

Where to start?

Many see regulatory approval as a step to complete before launching in the market, only to find that building market relationships often takes just as long or longer.

The most successful companies manage this by working on both simultaneously. Early regulatory preparation and ongoing commercial and relationship activities should progress together. Demonstrating progress, like starting your Saudi FDA application will definitely help your early conversations with potential buyers. By the time approvals are obtained, you will already have an active pipeline, rather than starting from scratch.

Properly managing this process can reduce the overall time to market. Invest early in qualified local support, understand the differences among SFDA, SCHS, and MoH, and choose the most relevant AR for your offering as you plan your timelines. See compliance not just as a necessity but as an opportunity to build credibility within the health system you want to access.

How WHV can support you

Getting regulation right in Saudi is not difficult but does require care. Integrating regulation into a broader market entry strategy, rather than treating it as a standalone hurdle, means starting earlier than expected, aligning regulatory and commercial timelines, engaging the right stakeholders early, and building credibility alongside compliance, seemingly simultaneously.

We are able to support companies across this entire journey, from regulatory navigation and AR selection, through to stakeholder engagement, pilot structuring, and in-market execution.

Getting regulatory approval in Saudi is only one part of the story.

Knowing what to do next is where most need support.