Conducting thorough due diligence in Saudi Arabia has never been more critical. Vision 2030 is reshaping entire industries, regulatory frameworks are evolving at pace, and deal volumes across KSA and the broader GCC are climbing year on year. A structured due diligence checklist Saudi Arabia is not optional – it is the foundation of every sound transaction.
Why Due Diligence in Saudi Arabia Requires a Localised Approach
Saudi Arabia’s regulatory and business environment is distinct from Western markets and even from its GCC neighbours. ZATCA enforcement is tightening, SOCPA-aligned financial reporting is increasingly scrutinised, and the CMA imposes disclosure and ownership requirements that directly affect deal structuring. A generic due diligence framework imported from elsewhere will miss gaps that are material in the KSA context.
Financial Due Diligence Checklist – Saudi Arabia
- Audited financial statements – Minimum three years of SOCPA-compliant or IFRS financial statements prepared by a licensed Saudi auditor.
- Quality of earnings analysis – Adjust EBITDA for non-recurring items, owner benefits, related-party revenues, and accounting policy differences.
- Revenue disaggregation – Break down revenues by customer, contract type, geography, and product line. Identify concentration risk and contracted versus spot revenues.
- Working capital analysis – Assess normalised working capital requirements. Flag receivables aging, especially government receivables with extended collection cycles.
- Zakat and tax position – Review ZATCA zakat assessments, open disputes, instalment arrangements, and the adequacy of zakat provisions. Assess VAT audit exposure.
- Debt and liabilities – Map all bank facilities, Islamic finance instruments (murabaha, ijara), off-balance-sheet commitments, and contingent liabilities.
- Cash flow verification – Reconcile reported profits to actual cash generation. Identify any cash-flow manipulation through supplier payment deferrals or accelerated collections.
- Related-party transactions – Identify all transactions with shareholders, affiliates, and family entities. Assess whether terms are arm’s-length and whether these transactions will continue post-acquisition.
Commercial Due Diligence Checklist – KSA Market Assessment
- Market size and growth – Validate the total addressable market using independent data sources. Assess how Vision 2030 initiatives are reshaping demand in the target sector.
- Competitive landscape – Map direct and indirect competitors, including government-linked entities and emerging regional players. Assess barriers to entry and any licensing advantages the target holds.
- Customer analysis – Review the top 10-20 customer relationships by revenue. Assess contract tenure, renewal history, switching costs, and customer concentration risk.
- Revenue sustainability – Distinguish between recurring, project-based, and one-off revenues. In KSA, assess reliance on government contracts and the pipeline health of major public-sector clients.
- Saudisation compliance – Confirm Nitaqat classification (Platinum, Green, Yellow, Red). Understand the cost and operational impact of Saudisation targets on headcount planning post-acquisition.
- Supplier concentration – Identify critical suppliers, sole-source dependencies, and import risks given KSA’s localisation push under Vision 2030 industrial strategy.
Legal Due Diligence Checklist – Saudi Arabia
- Corporate structure and ownership – Verify the commercial registration (CR), articles of association, shareholder register, and any foreign ownership restrictions applicable to the sector.
- Licences and regulatory approvals – Confirm all Ministry of Commerce, MISA, sector regulator, and municipality licences are current, transferable, and not subject to revocation risk.
- Material contracts – Review all significant customer contracts, supplier agreements, leases, and JV arrangements. Assess change-of-control clauses, termination rights, and assignment restrictions.
- Employment and labour compliance – Review compliance with the Saudi Labour Law, EOSB accruals, GOSI contributions, and any pending labour disputes at the Saudi Labour Court.
- Real estate and asset ownership – Confirm title to land and buildings. Note foreign entity restrictions on real estate ownership in certain areas.
- Litigation and disputes – Identify all current and threatened litigation, arbitration (SCCA or ICC), and regulatory investigations.
- Intellectual property – Verify trademark registrations with SAIP, patent filings, and licensing agreements. Ensure IP is held within the target entity, not by individual founders.
Technical Due Diligence Checklist – Operations and Infrastructure
- Asset condition and capex requirements – Commission independent physical inspections of plant, equipment, and infrastructure. Identify deferred maintenance and near-term replacement capex not in management projections.
- IT systems and cybersecurity – Assess the scalability and security of core IT systems. Review compliance with NCA frameworks and Saudi Personal Data Protection Law (PDPL) data localisation requirements.
- Environmental, Health and Safety (EHS) – Review EHS compliance with NCEC requirements. Assess any environmental liabilities or site contamination risk.
- Key personnel and operational risk – Identify operational key-person dependencies. Assess retention risk for technical and managerial talent, particularly where Saudisation targets are driving talent scarcity.
KSA-Specific Compliance: ZATCA, SOCPA, and CMA
ZATCA – Zakat, Tax and Customs Authority
ZATCA has significantly expanded its audit and enforcement activity. Buyers must obtain ZATCA clearance certificates and review zakat base calculations, open assessments, and any disputes lodged with the Zakat Appeal Committee. VAT registration status and transfer pricing documentation for cross-border intercompany transactions must also be assessed. Unresolved ZATCA exposures must be priced into the transaction or resolved via escrow arrangements.
SOCPA – Saudi Organisation for Chartered and Professional Accountants
Financial statements prepared under SOCPA standards can differ materially from IFRS in zakat accounting, lease treatment, and revenue recognition. Buyers applying IFRS-based valuation models must perform a SOCPA-to-IFRS bridge to ensure like-for-like comparability. Confirm that the target’s auditor holds an active SOCPA licence.
CMA – Capital Market Authority
For transactions involving Saudi-listed companies or entities that have issued sukuk or other regulated instruments, CMA rules govern disclosure timelines, mandatory offer thresholds, and foreign ownership limits in regulated sectors. Legal counsel must map all CMA touchpoints early in the process to avoid regulatory delays.
Frequently Asked Questions
How long does due diligence typically take in Saudi Arabia?
A full M&A due diligence process in KSA typically takes between four and ten weeks, depending on the size and complexity of the target, the quality of information in the data room, and the number of workstreams running in parallel. Red-flag or Phase 1 reviews can be completed in two to three weeks.
What are the most common due diligence red flags in Saudi Arabian transactions?
The most frequently encountered red flags in KSA due diligence include: unresolved ZATCA zakat or VAT assessments, significant related-party revenues that may not continue post-acquisition, heavy concentration in a single government customer or contract, expired or non-transferable licences, EOSB liabilities that are under-provisioned, and IP assets held outside the target entity by founding shareholders.
Is financial due diligence mandatory for M&A transactions in Saudi Arabia?
Financial due diligence is not legally mandated for most private M&A transactions in KSA, but it is considered essential best practice by institutional investors, private equity funds, and lenders financing the acquisition. Lenders providing acquisition finance will typically require due diligence reports as a condition of credit approval.
Can foreign investors acquire majority stakes in Saudi businesses?
Yes, but with sector-specific restrictions. MISA has progressively opened more sectors to 100% foreign ownership under Vision 2030 liberalisation reforms. However, certain sectors – including defence, real estate in Makkah and Madinah, and some regulated financial services – retain foreign ownership caps. Foreign investors should conduct a sector-specific regulatory mapping exercise early in the due diligence process.
Need expert due diligence support in Saudi Arabia? Contact Advisory Corp for a confidential consultation.