KSA HR Compliance Guide for SMEs (2026)

GOSI (General Organization for Social Insurance) covers Saudi nationals with pension and hazard contributions. Non-Saudi employees pay occupational hazard only. Employers register new joiners within 15 days, calculate contributions on eligible wage components, and remit monthly before deadlines.

Late filing incurs penalties and can affect Saudization reporting. Reconcile payroll with GOSI invoices each month — discrepancies between Qiwa wages and GOSI declarations trigger audits. Keep registration certificates and monthly payment receipts.

Contribution bases exclude certain allowances — verify GOSI wage definitions against your payroll structure. Terminate GOSI promptly on exit to avoid ghost contributions.

ArcHR calculates GOSI from payroll and exports contribution files aligned with current rates.

Mudad is Saudi Arabia's wage protection platform. Employers upload payroll data and pay salaries through approved channels so HRSD can verify timely payment. Registration links to Qiwa establishment data.

Upload each salary cycle before pay date, match employee IBANs in Qiwa, and resolve Mudad errors before they block visa services. Mudad works alongside GOSI — both must be accurate in the same payroll run.

Common SME failures include uploading after pay date, wrong establishment codes, and IBAN mismatches. Build payroll cut-off dates that leave 48 hours for Mudad validation.

ArcHR Mudad-ready exports reduce manual re-keying between payroll and government portals.

Nitaqat classifies establishments by Saudization percentage and industry activity. Bands (Platinum, High Green, Low Green, Yellow, Red) affect visa quotas, fee discounts, and tender eligibility. Report accurate nationalities in Qiwa monthly.

Plan Saudi hiring to maintain your target band — dropping to Red restricts new visas. Use headcount analytics to forecast quota impact before expat hires. Part-time Saudi contracts may help in some sectors.

Saudization is not a one-time hire — retention matters. Turnover destroys Nitaqat metrics faster than new Saudi joiners fix them.

ArcHR Nitaqat dashboards show live Saudi versus expat ratios from integrated payroll.

Every expatriate requires a valid iqama (residency permit). Expired iqamas block legal work, GOSI continuity, and exit/re-entry. Employers sponsor renewals through Qiwa and Jawazat.

Track expiry 90 days ahead, ensure medical insurance and profession alignment, and penalties apply for late renewal. Absconding reports have serious consequences — maintain accurate contact records.

Coordinate PRO, HR, and finance so renewal fees and fines are paid before Jawazat blocks processing. Update Mudad and GOSI if employee status changes during renewal.

ArcHR iqama expiry alerts notify HR and employees at 30, 60, and 90 days.

Under Saudi Labour Law Article 109, employees earn 21 days of annual leave until five years of service, then 30 days for many employees. Leave must be scheduled with employer approval and paid before leave when required.

Accrue leave in HR systems, settle unused leave on termination, and do not confuse annual leave with sick leave entitlements. Public holidays and Eid periods require separate workforce planning.

Document leave policies in Qiwa contracts and employee handbooks. Manager approval workflows in ESS reduce disputes.

ArcHR KSA leave rules encode accrual and carry-forward policies with Arabic ESS support.

Qiwa is the central platform for employment contracts, establishment data, and Saudization reporting. Standard employment contracts must be registered for covered employees.

Keep contracts aligned with payroll, GOSI, and Mudad each month. Labour law governs working hours, termination, and end-of-service awards — document disciplinary processes and maintain audit-ready records for HRSD inspections.

Qiwa contract amendments must follow termination and transfer rules. Mismatched job titles between Qiwa, GOSI, and iqama profession codes cause renewal delays.

ArcHR links employee master data to payroll so Qiwa-reported wages match monthly runs.