A European technology group signs a non-binding letter of intent to acquire a Saudi software company. The deal looks clean on paper. Three months later, the foreign buyer discovers that the target's key government contract contains a change-of-control clause requiring ministry approval. and that its primary financing facility carries terms that a local counsel would have flagged immediately as requiring Sharia-compliance review. The acquisition stalls. The opportunity cost is significant. This scenario is far from unusual.
M&A due diligence in Saudi Arabia requires a structured legal review covering corporate standing, regulatory approvals, foreign ownership restrictions, Sharia-compliance of financial instruments, and employment obligations under Saudi labour legislation. A full legal due diligence exercise for a mid-size target typically spans six to twelve weeks. The process culminates in a negotiated share purchase agreement containing representations and warranties tailored to the Saudi regulatory environment.
This guide sets out a step-by-step legal due diligence process for foreign acquirers targeting Saudi entities. It covers the procedural sequence, the key documentary checklist, common errors that cost international buyers time and money, and a self-assessment framework for deciding which approach fits your deal structure.
The Saudi M&A regulatory environment and what makes it distinct
Saudi Arabia's investment legislation has been substantially reformed since Vision 2030 was launched. The Ministry of Investment of Saudi Arabia (MISA) has progressively reduced the list of restricted sectors and simplified the foreign investment licensing process. Despite these improvements, the regulatory environment for M&A transactions remains materially more layered than in comparable Gulf jurisdictions.
Several features distinguish Saudi M&A due diligence from equivalent exercises in Western markets. First, Islamic law principles – specifically the prohibition on riba (interest-bearing transactions) – affect how target companies structure their financing. A foreign acquirer that does not probe this layer may inherit financing arrangements that are unenforceable or require immediate restructuring post-closing. Second, government-linked commercial relationships are common across industries. Change-of-control clauses in public-sector contracts are frequently triggered by share transfers. Third, Saudi corporate legislation – particularly the rules governing sharikah dhat mas'uliyah mahdudah (limited liability companies) and joint-stock companies – imposes shareholder consent thresholds and pre-emption rights that must be addressed before any share purchase agreement can proceed to closing conditions.
Foreign acquirers accustomed to English or continental European deal processes frequently underestimate the time needed to obtain regulatory clearances. The General Authority for Competition (GAC) applies merger control rules to transactions above defined thresholds. Depending on sector, additional approvals from sector-specific regulators. such as the Capital Market Authority (CMA) for listed entities or the Saudi Central Bank (SAMA) for financial institutions. may also be required before closing conditions are satisfied.
Understanding this regulatory setting is the necessary foundation for every subsequent step in the due diligence process. Without it, the checklist that follows cannot be applied with appropriate weight to each item.
Step-by-step due diligence process: from first request to signing
The due diligence process for a Saudi acquisition typically runs in five sequential phases. Each phase has defined deliverables and gating conditions for the next step.
Phase 1 – Preliminary legal assessment (weeks 1–2). Before a formal data room is opened, legal counsel should conduct a preliminary assessment of the target's corporate form, ownership structure, and sector classification. This phase confirms whether the proposed acquisition is permissible for a foreign buyer under current investment legislation, identifies the applicable ownership ceiling, and maps the regulatory approvals that will be needed. A corporate structure chart and current commercial registration documents are the minimum inputs required at this stage.
Phase 2 – Data room review and document requests (weeks 2–6). Once a confidentiality agreement is in place, a structured data room request list is submitted to the target. The documentary review covers the items listed in the checklist section below. This is the most time-intensive phase. Practitioners with experience in Saudi transactions note that sellers frequently provide incomplete document sets at first disclosure. A second-round request is the rule rather than the exception. Foreign acquirers should build this iteration into their timeline and budget.
Phase 3 – Regulatory and third-party verification (weeks 4–8, overlapping with Phase 2). Certain items cannot be verified from documents alone. Independent confirmation is needed from public registers, government databases, and in some cases direct engagement with regulatory bodies. This includes verifying the target's MISA licence, confirming the status of any pending litigation at the Board of Grievances (the primary administrative court), and obtaining a certificate of good standing from the commercial register.
Phase 4 – Legal due diligence report and risk matrix (weeks 8–10). Legal counsel consolidates findings into a due diligence report. The report categorises risks as deal-breakers, conditions precedent to closing, post-closing remediation items, or matters to be addressed through representations and warranties in the share purchase agreement. This categorisation directly shapes the SPA negotiation that follows. Items that cannot be resolved before closing must be reflected in appropriate indemnities or price adjustments.
Phase 5 – SPA negotiation and closing conditions (weeks 10–14). The share purchase agreement is negotiated against the background of the due diligence report. Key provisions specific to Saudi transactions include: representations and warranties covering Sharia-compliance of financial instruments, regulatory licence validity, government contract assignability, and labour law compliance. Closing conditions typically include receipt of MISA approval, GAC clearance if applicable, and any sector-specific regulatory consent. The SPA should also address the mechanics of share transfer, which in a Saudi limited liability company requires execution of a notarised deed before a Saudi notary and registration with the commercial register.
For a comprehensive view of how Ferraz & Whitmore structures M&A transactions in the Kingdom, visit our dedicated page on M&A advisory services in Saudi Arabia.
The legal due diligence checklist: seven core categories
The following categories form the backbone of a complete legal due diligence exercise for a Saudi target. Each category identifies what to request, what to verify independently, and what red flags to watch for.
1. Corporate standing and ownership structure. Request the current commercial registration certificate, articles of association, and all amendments. Verify the ownership chain back to ultimate beneficial owners. Confirm that all historical share transfers were validly executed and registered. In Saudi limited liability companies, any transfer made without proper notarisation and commercial register registration has questionable legal effect. This is a frequent source of title defects.
2. Regulatory licences and MISA status. Confirm that the target holds a valid MISA foreign investment licence if foreign shareholders are involved. Verify sector-specific licences – including any issued by SAMA, the CMA, or sector ministries – are current and do not contain conditions that would be breached by the proposed change of ownership. Licences that are tied to the identity of specific shareholders rather than the entity itself require particular scrutiny.
3. Material contracts and government relationships. Review all contracts with a value above a defined threshold, all government contracts without exception, and all contracts containing change-of-control or consent-to-assign provisions. Government contracts in Saudi Arabia frequently include clauses that suspend performance or trigger termination upon a change of control. Identifying these provisions early allows the acquirer to either seek advance consent or adjust deal structuring accordingly.
4. Financing arrangements and Sharia-compliance. Review all loan agreements, sukuk (Islamic bond) instruments, murabaha (cost-plus financing) facilities, and ijara (lease-based financing) arrangements. Confirm that each instrument was structured in compliance with Islamic finance principles and that the target has performed its obligations without default. An instrument that contains riba elements may be unenforceable under Saudi law and may expose the target – and any successor – to regulatory consequences.
5. Intellectual property and technology assets. Verify registration of trademarks, patents, and domain names with the Saudi Authority for Intellectual Property (SAIP). Confirm ownership of software and technology – particularly where development was outsourced. Check for any IP encumbrances, licences granted to third parties, or pending infringement claims. Technology companies operating in Saudi Arabia must also comply with data localisation requirements under data protection legislation, which affects where customer data may be stored.
6. Employment and labour law compliance. Saudi labour legislation imposes Saudization requirements – known formally as the Nitaqat programme – under which employers must maintain a defined ratio of Saudi national employees relative to total workforce. Verify the target's current Nitaqat band and any history of non-compliance. Non-compliance can result in restrictions on new work permit issuances, which would materially impair operations post-closing. Also review employment contracts, end-of-service benefit accruals, and any pending labour disputes before the Labour Courts.
7. Litigation and regulatory proceedings. Conduct a litigation search across the Board of Grievances, the Labour Courts, and any arbitral bodies. Obtain written confirmation from the target's management of all pending or threatened claims. Note that Saudi arbitration legislation permits commercial disputes to be resolved through arbitration, and undisclosed arbitral proceedings are a recurring gap in seller disclosures. The SPA should contain robust representations and warranties on the absence of undisclosed proceedings.
Common errors by foreign acquirers – and their consequences
Several patterns of error appear with notable regularity in cross-border acquisitions of Saudi targets. Recognising them in advance is the most effective way to avoid them.
Treating the preliminary assessment as optional. Many foreign acquirers skip or compress Phase 1 in the belief that sector restrictions are unlikely to apply to their specific target. In practice, sector classification in Saudi Arabia can be non-intuitive. A software company that derives revenue primarily from defence or media clients may be classified under a restricted activity code. Discovering this after a data room has been opened wastes time and destroys negotiating momentum.
Using a Western-form SPA without adaptation. A share purchase agreement drafted for a UK or US transaction is not directly transferable to a Saudi deal. Key provisions – including choice of law, dispute resolution, and the enforceability of certain indemnity structures – require careful adaptation. Saudi courts apply Saudi law to disputes involving Saudi entities, regardless of what the SPA states. A foreign acquirer that relies on English-law representations and warranties without considering enforceability in Saudi Arabia faces real exposure if post-closing claims arise.
Underestimating closing conditions timelines. GAC merger control review can take several months for transactions that meet the notification threshold. MISA approvals and sector-specific regulatory consents add further time. Foreign acquirers that set aggressive closing dates without accounting for these processes create pressure that often leads to poorly negotiated concessions or failed closings.
Overlooking end-of-service benefit liabilities. Saudi labour legislation requires employers to pay an end-of-service gratuity to employees upon termination. These accruals – calculated on length of service and final salary – can be substantial for companies with a long-tenured workforce. If the SPA does not address how these liabilities are valued and allocated between buyer and seller, the acquirer may inherit an undisclosed obligation that erodes deal economics significantly.
Practitioners advising on Saudi deals consistently note that the cost of thorough due diligence is a fraction of the cost of managing post-closing disputes arising from undisclosed liabilities. The complexity of the Saudi regulatory environment rewards preparation.
For a comparative view of due diligence requirements across the Gulf region, our guide on M&A due diligence in the UAE sets out the equivalent process for transactions in that jurisdiction.
Self-assessment checklist: is your deal ready to proceed?
Before advancing from preliminary discussions to a formal due diligence process, a foreign acquirer should be able to answer each of the following questions affirmatively. Where the answer is uncertain, the item represents a pre-condition that must be resolved first.
- Has the target's sector activity code been verified against the current list of activities open to foreign ownership under investment legislation?
- Has a preliminary review confirmed that no sector-specific regulator (SAMA, CMA, or ministry) imposes ownership restrictions that would block the proposed acquisition structure?
- Is a qualified lawyer in Saudi Arabia – with experience in both commercial law and Islamic finance principles – engaged to lead the legal due diligence exercise?
- Has the confidentiality agreement been reviewed and confirmed as enforceable under Saudi law, including provisions on jurisdiction and governing law?
- Is the proposed timeline for the due diligence process and closing realistic, having accounted for GAC merger control review and any sector-specific regulatory approval windows?
If all five conditions are met, the deal is structurally ready to proceed to a formal data room process. If two or more cannot be confirmed, additional preparation is needed before committing resources to a full due diligence exercise.
Beyond the checklist, the decision framework depends on the deal's commercial rationale. A strategic acquirer purchasing a Saudi entity for its government relationships faces a categorically different risk profile than a financial investor acquiring a private technology company. The former must treat government contract continuity as a primary due diligence objective. The latter should prioritise IP ownership, data compliance, and Nitaqat band status. In both cases, the share purchase agreement must reflect the findings of the due diligence process – not a generic template.
To discuss how this framework applies to your specific transaction, reach out to our team at info@ferrazwhitmore.com for a preliminary review of your M&A due diligence position in Saudi Arabia.
Frequently asked questions
Q: How long does M&A due diligence typically take in Saudi Arabia?
A: For a mid-size acquisition in Saudi Arabia, a full legal due diligence exercise typically runs between six and twelve weeks. Complexity increases when the target operates across multiple regulated sectors or holds government-linked contracts. Restricted information disclosure rules under Saudi corporate legislation can extend the timeline further, so foreign acquirers should plan accordingly from the outset.
Q: Do foreign acquirers always need a Saudi local partner to complete an acquisition?
A: Not in every sector. Saudi Arabia's investment legislation has progressively opened a growing number of industries to full foreign ownership. However, certain sensitive sectors – including media, telecommunications, and specific defence-adjacent activities – retain local ownership requirements. A foreign acquirer must verify the applicable ownership ceiling for the specific activity code of the target before advancing to the share purchase agreement stage.
Q: What is the most common mistake foreign buyers make during Saudi Arabia M&A due diligence?
A: The most frequent error is treating Saudi due diligence as equivalent to a Western deal process and underestimating Sharia-compliance considerations. Many foreign acquirers focus on financial statements and overlook whether the target's financing arrangements, revenue streams, or contractual obligations contain terms that conflict with Islamic finance principles. Engaging a law firm in Saudi Arabia with dual expertise in commercial law and Islamic law principles is essential to identify these issues before closing conditions are negotiated.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in M&A due diligence and transaction advisory across the Middle East and beyond. We support international entrepreneurs, institutional investors, and in-house legal teams managing complex acquisitions in high-growth and regulated markets. The firm's M&A practice covers transactions across both civil law and common law systems, with particular experience in Saudi Arabia and the broader Gulf region. Our attorneys have advised on share purchase agreements, regulatory approvals, and post-closing integration matters in transactions spanning multiple jurisdictions. For advice on corporate structuring and regulatory matters in the Kingdom, our team also works closely with the analysis set out in our corporate law advisory page for Saudi Arabia. To explore how we can support your next acquisition in the region, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.