M&A Due Diligence Saudi Arabia 2026: Checklist, Red Flags and Local Compliance

M&A due diligence Saudi Arabia now operates under a materially evolving compliance landscape, and buyers entering the market in 2026 must adapt their playbooks accordingly. Recent reform activity, an expanded beneficial-ownership transparency agenda, active merger-control enforcement and broader foreign-investor access under the Kingdom’s investment framework, has widened the scope of what acquirers must investigate before signing, and increased the importance of correct sequencing. This guide sets out a practitioner-level, step-by-step roadmap for legal, financial and regulatory diligence in the Kingdom, mapping each task to the documents required, the responsible regulator and realistic lead times.

Whether you are an in-house counsel, a private-equity buyer or international counsel coordinating a cross-border deal, the objective is the same: identify liabilities early, sequence approvals correctly and structure the transaction to withstand regulatory scrutiny.

Introduction: why 2026 matters for Saudi M&A

The current reform cycle affects how diligence is scoped, resourced and sequenced. Three themes dominate. First, beneficial-ownership transparency is increasingly a documented, verifiable exercise, meaning the ownership trail behind a target should be evidenced rather than assumed. Second, merger-control and disclosure obligations are actively enforced, so a buyer that discovers a reportable transaction late in the process risks missing statutory notification requirements. Third, expanded foreign-investor access under the framework administered by the Ministry of Investment broadens the range of viable deal structures but also raises new licensing questions that must be resolved before closing. Taken together, these developments make early-stage M&A due diligence Saudi Arabia both more demanding and more strategically valuable.

Quick summary of the checklist

• Corporate and ownership. Verify the corporate chain, shareholder register and ultimate beneficial owners.
• Regulatory filings. Map MISA, CMA and GAC obligations to deadlines and documents.
• Foreign-investor licensing. Confirm whether the change of control triggers MISA review.
• Sharia compliance. Assess riba exposure and contract forms for Sharia-sensitive targets.
• Employment and Saudization. Check Nitaqat status, GOSI records and end-of-service liabilities.
• Red flags and remediation. Prioritise findings and build protections into the transaction documents.

For buyers still assembling their advisory team, our overview of M&A lawyers Saudi Arabia 2026 provides useful context on selecting counsel for the Kingdom.

Reforms that shape M&A due diligence in 2026

Understanding the applicable rules is the starting point for any credible diligence exercise. Each requirement affects either the scope of information a buyer must gather or the timeline within which approvals must be secured. The following subsections summarise the practical effect of each, with reference to the responsible regulator or the governing legislation available through the Bureau of Experts at the Council of Ministers.

Beneficial-ownership verification, what to expect

Beneficial-ownership transparency is now central to M&A due diligence Saudi Arabia. Buyers should not rely solely on a shareholders register; they should trace ownership to the natural persons who ultimately control the target and document that chain with supporting evidence. In practice this means obtaining identity documents, ownership declarations and, where holding structures are layered, evidence of control at each tier. The Companies Law framework and the Ministry of Commerce’s beneficial-ownership requirements underpin these obligations. Because verification can be time-consuming where offshore holding companies are involved, experienced practitioners recommend starting the ownership trail at the earliest diligence stage rather than treating it as a closing formality. Ownership declarations are increasingly scrutinised, so gaps identified late can jeopardise timing.

Filing and notification windows, practical impact

Filing and notification requirements are among the most consequential considerations for deal teams. Where a transaction triggers a disclosure or notification to the Capital Market Authority for a listed target, or to the General Authority for Competition on competition grounds, the parties must be ready to file completely and within the applicable window. The practical effect is that diligence, drafting and regulatory preparation should run in parallel rather than in strict sequence. A buyer that leaves competition analysis until after the share purchase agreement is agreed may find itself unable to close on schedule. Early identification of whether the applicable thresholds are met, and assembly of the underlying market and financial data, is therefore a diligence priority, not an afterthought.

Expanded foreign-investor access, implications for structure and licensing

Broader foreign-investor access, administered by the Ministry of Investment, has opened sectors and ownership levels that were previously restricted. For acquirers, this expands the menu of viable structures but introduces licensing checkpoints. A buyer should confirm not only whether foreign ownership is permitted in the target’s sector, but also whether the target’s existing investment licence must be amended or reissued following a change of control. The practical effect is that structuring decisions and licensing analysis become tightly linked: choosing the wrong holding structure can trigger unnecessary approvals or forfeit an available exemption.

Pre-deal corporate and legal due diligence checklist

This is the operational core of any Saudi M&A due diligence checklist. The tasks below should be assigned to named owners within the deal team, tracked against the documents to be requested from the seller, and sequenced so that long-lead items, particularly ownership verification and sector approvals, begin immediately. Legal due diligence Saudi Arabia typically covers six workstreams, each with its own document set and its own risk profile.

Corporate records and ownership

Begin with the target’s constitutional and ownership documents. Request the articles of association and any amendments, the commercial registration certificate issued through the Ministry of Commerce, the shareholders register, board and shareholder resolutions, and records of recent share transfers. The corporate chain must be reconciled against the register to confirm that current ownership is properly documented. Layered on top of this is beneficial-ownership verification, now a core element of M&A due diligence Saudi Arabia. The steps are:

• Identify. Establish every natural person who ultimately owns or controls the target, including through intermediate entities.
• Document. Obtain identity evidence, ownership percentages and control declarations at each tier of the structure.
• Verify. Cross-check declared ownership against the shareholders register and any regulator-held records.
• Timing. Complete verification before closing, since gaps can delay licensing and filings.

Any discrepancy between the declared beneficial owners and the documentary trail is a first-order red flag and should be resolved or protected against before the transaction proceeds.

Contracts and commercial

Review all material contracts for value, duration and termination risk, paying particular attention to change-of-control provisions that may allow counterparties to terminate or renegotiate on a transfer of ownership. Supply agreements, distribution and agency arrangements, customer contracts and financing documents should all be examined. Intellectual property warrants specific attention: confirm ownership and registration of trademarks, patents and licences, and check that key IP is held by the target rather than an affiliate outside the transaction perimeter. Where change-of-control consents are required, list them early so that the timeline for obtaining them can be built into the deal calendar.

Litigation, arbitration and regulatory investigations

Request a schedule of all pending and threatened litigation, arbitration and regulatory investigations, together with correspondence from regulators. Assess both quantum and reputational exposure. Because sellers do not always disclose contingent proceedings voluntarily, buyers should corroborate the schedule through independent checks and require robust disclosure warranties. Where material proceedings exist, holdbacks or escrow arrangements are the standard remediation, sized to the potential liability and released as matters are resolved.

Real estate and permits

For asset-heavy targets, verify title to owned and leased real estate, confirm that municipality permits and building approvals are current, and review lease terms for change-of-control or assignment restrictions. Unregistered or informally held property is a recurring issue and should be flagged for remediation before closing, since it can affect both valuation and the buyer’s ability to operate the site post-completion.

Financial statements, tax and contingent liabilities

Alongside the financial audit, review the target’s tax position, including any open tax audits, value-added tax compliance and zakat obligations, all administered by the Zakat, Tax and Customs Authority (ZATCA). Contingent liabilities, guarantees, indemnities given to third parties and off-balance-sheet exposures, must be identified and quantified. Tax exposures are frequently addressed through specific indemnities where the risk is identifiable but uncertain in amount, and this workstream should be coordinated closely with the legal diligence team so that findings feed directly into the transaction documents.

Environmental, health and safety

For industrial, energy or manufacturing targets, assess environmental permits, historical contamination risk and health-and-safety compliance. Sector-specific obligations can carry significant remediation costs and regulatory penalties, so where the target’s activities are environmentally sensitive, specialist technical advisers should be engaged early to support the legal analysis.

Regulatory filings and timelines: CMA, MISA, GAC and sector regulators

Regulatory sequencing is where many Saudi transactions lose time. The table later in this article summarises who files what and when; the subsections below explain each regulator’s role. The overarching principle for M&A due diligence Saudi Arabia is to identify every applicable filing at the diligence stage, so that preparation runs in parallel with negotiation and no statutory window is missed.

CMA, thresholds, mandatory filings and common documents

The Capital Market Authority regulates transactions involving listed companies, including takeovers and significant acquisitions of shares in public companies. Where a target is listed, the acquirer must consider the CMA’s takeover and disclosure framework, which governs the content and timing of offers and the disclosure obligations that attach to building a stake. Typical documentation includes an offer document, audited financial information and shareholder information. Buyers should confirm the applicable thresholds and disclosure triggers against current CMA rules before taking any step that might constitute a reportable acquisition.

MISA, foreign investor registration and pre-approval steps

The Ministry of Investment governs foreign participation in Saudi companies. Where the buyer is a foreign investor, or where a change of control alters the foreign-ownership profile of the target, MISA registration or an amendment to the target’s investment licence may be required. Depending on the sector and the nature of the investor, this can be a pre-closing or post-closing step. Because MISA processing time varies by sector, the licensing analysis should be completed early and, where a licence must be amended, the application prepared in advance of signing.

GAC, merger control thresholds and process

The General Authority for Competition administers merger control in the Kingdom under the Competition Law and its implementing regulations. Where a transaction (an “economic concentration”) meets the applicable notification thresholds, the parties must notify the GAC and obtain clearance before completing. Notification is typically made jointly and supported by transaction documents and market data. Because assembling competition data can take time, and because closing without required clearance exposes the parties to penalties, GAC analysis should be one of the first regulatory questions addressed in any Saudi M&A due diligence checklist.

Sector-specific regulators

Regulated sectors add a further layer. Banking and insurance targets fall within the remit of the Saudi Central Bank (SAMA); telecommunications and technology targets engage the Communications, Space & Technology Commission (CST). These bodies commonly require pre-approval of a change of control, together with fit-and-proper assessments of the incoming owners. Sector approvals frequently carry the longest lead times of any regulatory checkpoint, so buyers should confirm the requirements at the outset and factor generous timelines into the deal calendar. Our forthcoming guide to sectoral approvals in Saudi acquisitions will address these regimes in detail.

Foreign investor rules and licensing (MISA): structuring implications

Foreign-investor rules shape both whether a deal can proceed and how it should be structured. The expanded access introduced in recent years widens the field, but each sector still has its own ownership limits and licensing conditions, and getting the structure wrong can create avoidable delay. Practical checks include confirming the permitted foreign-ownership level in the target’s sector, identifying any nationality-sensitive approvals, and determining whether special licences or a registered entity are required for the buyer’s activities.

When a change of control triggers MISA review

A change of control can trigger a MISA review where it introduces foreign ownership, increases it beyond a permitted threshold, or alters the basis on which the target’s existing investment licence was granted. Buyers should analyse the target’s current licence terms early to establish whether the transaction requires a new registration, an amendment or no MISA action at all. Resolving this question in diligence avoids the common scenario of a signed deal stalling because a licensing step was identified too late.

Investment licences and employment quotas

Investment licensing is closely connected to employment obligations. A foreign-owned entity remains subject to Saudization requirements, and the buyer must understand how the target’s licence interacts with its workforce composition. These points link directly to the Saudization and employment checks described below, and buyers coordinating a cross-border transaction should treat licensing and employment as a single, integrated workstream.

Sharia-compliant M&A due diligence and transaction structuring

For Sharia-sensitive targets, or where the buyer itself must maintain Sharia compliance, an additional diligence layer applies. Sharia-compliant M&A due diligence examines the target’s financing arrangements, contract forms and revenue sources to identify features that are inconsistent with Sharia principles, and considers whether structuring adjustments are needed to bring the transaction and the acquired business into line.

Common Sharia red flags in purchase agreements

Typical issues include exposure to riba (interest) through conventional financing, contract forms that embed prohibited elements, and revenue derived from non-compliant activities. Where such features are identified, buyers may restructure financing, amend covenant language in the purchase agreement, or provide for the disposal or ring-fencing of non-compliant activities. The earlier these issues surface, the more room there is to address them without disrupting the deal timetable.

Role of Sharia compliance opinions and timing

Where compliance is material to the transaction, a formal Sharia opinion, often from a recognised Sharia board or scholar, provides comfort to the buyer and its stakeholders. Because obtaining an opinion takes time and may require documentary amendments, the process should be initiated during diligence rather than at signing, so that any required changes can be reflected in the final transaction documents.

Employment, Saudization (Nitaqat), GOSI and transfer risks

Employment liabilities are a frequent source of post-completion disputes, and Saudi-specific obligations make this workstream unavoidable. Buyers must understand the mechanics of employee transfer, the target’s Saudization status under the Nitaqat framework administered by the Ministry of Human Resources and Social Development, and its record with the General Organization for Social Insurance (GOSI). Detailed treatment appears in our companion guide on Saudization and employment in Saudi M&A.

Key documents to request

• Employment contracts. For all staff, with particular attention to senior and key employees and any change-of-control or retention terms.
• Payroll and benefits records. To quantify end-of-service liabilities and confirm consistency with reported figures.
• GOSI records. To verify contribution history and confirm the employer is current on its social-insurance obligations.
• Nitaqat status. To establish the target’s Saudization band and any exposure to sanctions for non-compliance.

A poor Nitaqat status or unpaid GOSI contributions can restrict a business’s ability to obtain visas, renew permits and operate normally, so these are substantive commercial risks rather than administrative details.

Typical indemnities and escrow protections

Where employment or social-insurance exposures are identified, the standard responses are specific indemnities for quantifiable liabilities and escrow or holdback arrangements for contingent ones. End-of-service liabilities are commonly addressed through purchase-price adjustments or completion accounts, ensuring the buyer does not inherit an undisclosed accrual.

Red flags, remediation and representations and warranties

The final analytical step is to prioritise findings and convert them into contractual protection. Not every issue warrants a holdback; the discipline lies in distinguishing deal-breakers from matters that can be managed through warranties, indemnities or conditions precedent.

Top red flags

• Undisclosed or threatened litigation and regulatory investigations.
• Gaps or inconsistencies in the beneficial-ownership trail.
• Unregistered or informally held real estate and other assets.
• Regulatory non-compliance, including missing or lapsed licences.
• Saudization (Nitaqat) violations or unpaid GOSI contributions.
• Change-of-control clauses that allow key contracts to terminate on the deal.
• Open tax audits, unpaid VAT or unresolved zakat obligations.
• Sharia non-compliance in financing or revenue where the buyer requires compliance.

Remediation playbook and conditions precedent

Where a red flag is capable of cure, make remediation a condition precedent to closing, for example, obtaining a missing licence, settling a regulatory matter or correcting an ownership record. Where the risk is contingent, use escrow or holdbacks sized to the exposure and released over time. Where the risk is quantifiable, use a specific indemnity supported by seller warranties. Warranty and indemnity insurance, addressed in a forthcoming companion article, can bridge gaps where the seller’s covenant strength is limited. The remediation plan should also flow into post-merger integration so that compliance gaps are closed promptly after completion.

Comparison table: regulatory checkpoints and who is responsible

The table below gives an at-a-glance view of the principal filings that may arise in M&A due diligence Saudi Arabia. Lead times are indicative only and vary considerably by sector and transaction complexity; always confirm current requirements against the relevant regulator before relying on them.

Conclusion: operational next steps and a 30/60/90 day checklist

Effective M&A due diligence Saudi Arabia in 2026 is a matter of sequencing as much as substance: identify the long-lead items, beneficial-ownership verification, MISA licensing, GAC and sector approvals, at the outset, and run diligence, drafting and regulatory preparation in parallel. In the first 30 days, scope the transaction, launch the ownership trail and confirm which filings apply. By day 60, complete the core legal, financial and employment workstreams and prepare regulatory submissions. By day 90, resolve conditions precedent, finalise indemnities and escrow, and align the remediation plan with post-completion integration. Buyers who apply this discipline will find that a thorough M&A due diligence Saudi Arabia process not only manages risk but also strengthens their negotiating position.

For a diligence scope tailored to your transaction, contact the Global Law Experts team.

This article is general guidance and does not constitute legal advice. Readers should consult qualified counsel for advice on any specific transaction.

Sources

1. Ministry of Investment, Kingdom of Saudi Arabia (MISA)
2. Capital Market Authority (CMA)
3. General Authority for Competition (GAC)
4. Ministry of Commerce, Saudi Arabia
5. General Organization for Social Insurance (GOSI)
6. Ministry of Human Resources and Social Development (HRSD)
7. Zakat, Tax and Customs Authority (ZATCA)
8. Saudi Central Bank (SAMA)
9. Bureau of Experts at the Council of Ministers, Laws and Royal Decrees