The Compliance Landscape
Saudi Arabia has no standalone blockchain license. Regulation is activity-driven — what you build determines which regulator you engage.
Critical: There is no "blockchain license" in KSA. The regulator you engage depends entirely on what your platform does — not what technology it uses. A supply chain app has zero financial regulation. A tokenized real estate platform needs both REGA and CMA.
Lane A — Technology Provider
No financial regulator. Build and deploy as a pure tech company. Fastest path to revenue.
Lane B — SAMA Sandbox
Payments, escrow, cross-border transfers. SAMA Regulatory Sandbox required. 6-month cohorts.
Lane C — CMA FinTech Lab
Securities, tokenized assets, investment platforms. CMA FinTech Lab required. Most complex path.
Payments, banking, fintech, cross-border transfers, stablecoins
Securities, tokenized assets, investment platforms, sukuk
Real estate tokenization, property registry, fractional ownership
Halal traceability, food/pharma supply chain, product certification
Cybersecurity controls for all blockchain deployments
PDPL data protection, AI governance, data residency
Foreign investment licenses, entity setup
Blockchain adoption guidelines, digital infrastructure
| Sector | Regulator | Lane | Friction | Permitted Use Cases |
|---|---|---|---|---|
Financial Services | SAMA | Lane B | High | Payments, cross-border, trade finance |
Real Estate | REGA + CMA | Lane C | Very High | Tokenization, fractional ownership, registry |
Food & Pharma | SFDA | Lane A | Low | Halal traceability, cold chain, certification |
Healthcare | MOH + SDAIA | Lane A | Medium | Patient records, drug traceability, consent |
Islamic Finance | SAMA + CMA | Lane B/C | Very High | Sukuk, murabaha, smart contracts |
Logistics | ZATCA + SFDA | Lane A | Low | Customs, provenance, auto-settlement |
Government | DGA + NCA | Lane A | Medium | Document notarization, identity, procurement |
Digital Assets | CMA | Lane C | Very High | Crypto exchanges, token issuance, NFTs |