Saudi cloud market-entry desk
Your Saudi customer wants the workload in the Kingdom. Know the path before the deal stalls.
The hosting clause, the provider class, the data rules, who may sign — these questions arrive late in procurement, and the answers you collect will disagree. We frame them the way the buyer’s own teams will ask, so the first provider conversation starts prepared.
Reply target 4 business hours · Path Note in about 48 hours where there is a fit
The Path Check
Seven questions, in the order the buyer’s rules apply. A provisional route in about three minutes.
There is no account and no call; the result is yours to forward.
The four questions
The four questions that stop a Saudi deal.
Each one has a knowable answer.
They surface in the middle of procurement and they sound legal. The Path Note settles them in writing.
01
The in-Kingdom hosting clause
The tender says the workload sits inside Saudi Arabia, with a CST-registered provider.
What you want to know
Which live region fits your stack, and what a port costs you in time.
02
The provider class question
CST registers providers in classes — Qualifying, A, B, C. Government-linked buyers cite Class C.
What you want to know
Which class your buyer’s data requires, so the shortlist matches the classification.
03
PDPL roles and the transfer rule
The data law is fully enforceable, and transfers out of the Kingdom carry their own regulation.
What you want to know
Who is controller, who is processor, and what must be explicit before counsel signs off.
04
Contracting standing
Etimad registration, a Saudi CR or MISA route, SAR invoicing, Arabic paper.
What you want to know
Whether you need an entity at all, established before you pay for one.
What you get
What the desk gives you.
Three deliverables, each in writing.
01
A provisional route in three minutes.
The Path Check asks the seven questions a provider’s enterprise team would ask, and returns the route the public rules support — sourced, dated, and yours to forward.
02
A written Path Note in about 48 hours.
Where there is a fit: the route, the facts behind it with sources, the order of operations, and what the first provider conversation will ask for. Written to be read by your CTO, your counsel, and your deal desk at the same time.
03
An introduction that starts at the real questions.
We route the enquiry to the CST-registered provider or specialist that fits, framed the way their team qualifies. Scope, terms, and the contract stay between you and them.
What it costs youan enquiry is free; engagement terms are agreed directly with the downstream party.
The Path Check
Three minutes to a provisional route.
Sourced, dated, and yours to forward.
Seven questions, in the order a provider’s enterprise team would ask them. The result is a provisional route from public rules, honest about what it cannot settle, and it ends in an enquiry that arrives already structured.
- 01Who is the end customer?
- 02What data will the workload hold?
- 03Does the customer or tender require in-Kingdom hosting?
- 04Do you have a Saudi entity, CR, or MISA registration?
- 05Where must you deploy?
- 06Which stack do you run on today?
- 07When must it be live?
The Saudi cloud map
The Saudi cloud map.
Sourced from providers and regulators, dated on every row.
Live regions, purchase routes, provider classes, regulators — the facts a stalled deal turns on, each row linked to its primary source. Last checked 30 Aug 2026; re-checked monthly and on any provider announcement, with a public changelog.
| Provider | In-Kingdom region | Status | Access |
|---|---|---|---|
| Google Cloud | Dammamme-central2 | Live | KSA-billed customers buy through CNTXT (Google’s designated route); customers with a non-KSA billing address may buy from Google or a partner, but their Dammam access requires invoiced billing. |
| Oracle Cloud | Jeddah · Riyadhme-jeddah-1 · me-riyadh-1 | Live | Direct from Oracle; single availability domain per region. |
| Alibaba Cloud via sccc by stc | Riyadh | Live | Bought through sccc (Saudi Cloud Computing Company), the stc–Alibaba joint venture; over 90 localized Alibaba Cloud products. |
| Huawei Cloud | Riyadh | Live | Direct from Huawei Cloud; Huawei publishes its KSA Class C registration, covering government-sector data classes. |
| SITE Cloud | Riyadh RD1 · Jeddah JD1 | Live | Government-linked provider (Saudi Information Technology Company); dedicated-region offering. |
| stc / Solutions, Mobily, Zain, Salam, NourNet, Detasad and other CST registrants | Various (KSA) | Live | CST publishes the authoritative register of cloud providers and their classes; ask any provider for its current CST registration class. |
| AWS | Saudi Arabia | Announced | AWS's infrastructure page lists Bahrain and UAE (me-central-1) as its live Middle East regions and Saudi Arabia among announced plans. In-Kingdom today: Outposts, Direct Connect, and a Jeddah CloudFront edge. |
| Microsoft Azure | Saudi Arabia East (Eastern Province) | Q4 2026 | Datacenter construction completed December 2024; Microsoft has confirmed availability for customer workloads from Q4 2026. Not live at the date checked. |
Regulators, provider classes, glossary, and the changelog of checks.
The objections
The questions to ask any intermediary.
Our answers, in writing.
Who are you, legally?
A Saudi cloud market-entry desk — an introduction and preparation layer. We claim no licence, registration, or certification, and the downstream agreement is never with us.
Why not go to a provider directly?
You can, and the route ends with a provider either way. The desk’s job is that you arrive at that conversation with classification, residency, and standing already framed — one conversation instead of five.
Do you take a cut of the provider bill?
No. No margin, no reseller position. Your commercial relationship with the provider is direct.
Are you lawyers or auditors?
No. We point to the control sets and the questions counsel will ask; accredited parties issue the opinions.
What happens to our customer relationship?
The relationship stays yours. Product, data terms, and the buyer remain with you; the provider serves you under their own agreement.
How fast is the response?
The target is a reply within 4 business hours, Sunday–Thursday, Riyadh time; where there is a fit, a written Path Note in about 48 hours. The targets depend on a complete enquiry, which is what the Path Check produces.
Boundaries
What Cloudi Arabia is not.
Counsel will ask; here is the answer in advance. The desk is deliberately the introduction and preparation layer — nothing downstream is claimed.
Not a cloud provider
No hosting, capacity, uptime, or sovereignty claims of our own.
Not a law firm
Orientation on the questions counsel will ask, not legal advice.
Not an auditor
We point to the control sets; accredited parties issue the opinions.
Not a reseller
No margin on the provider bill; your commercial relationship is direct.
For Saudi providers and specialists
If you receive introductions as a CST-registered provider or specialist, they arrive framed: buyer type, workload classification, residency expectation, timeline, budget band. The desk takes no margin, makes no SLA representation, and stays out of scope.
Enquiries
Know your Saudi cloud path before the deal stalls.
Three minutes to a provisional route; a written Path Note where there is a fit.
hello@cloudiarabia.com · reply target 4 business hours, Sunday–Thursday, Riyadh time