All-in-One Support for Business Success

Business Setup and Compliance in Saudi Arabia

From our office in Al Khobar, we handle the paperwork that stands between a company and its first contract in the Kingdom. Company formation and MISA licensing, vendor registration with Aramco and SABIC, Aramco CCC cybersecurity compliance, and ISO certification across six standards.

Book a free consultation See our services

Secure. Comply. Protect.

ARAMCO Cybersecurity &
Compliance CCC Services

Safeguard your digital assets with tailored security solutions, risk assessments, and compliance strategies aligned with national and global standards.

Our Services

Based in Al Khobar, Eastern Province

Five years working in the Kingdom

Aramco CCC and SACS-210

ISO 9001, 14001, 45001, 22000, 27001, 22301

Who we are

Nour Solutions is a business and compliance consultancy based in Al Khobar, working with companies across the Eastern Province and the wider Kingdom. We handle company formation and MISA licensing for foreign and local investors, and registration as an approved vendor with Saudi Aramco, SABIC and the other major buyers. We prepare suppliers for Aramco’s cybersecurity requirements under SACS-210, which leads to the CCC. We implement ISO management systems for quality, environment, health and safety, food safety, information security and business continuity, and get your evidence ready for the audit. We also set up the digital side of a new company, from domain and business email to company profile and branding.

A Nour Solutions consultant meeting a client at the firm’s office in Al Khobar

What we do

Five services, and one problem underneath all of them. Getting a company licensed, approved, certified and trading inside Saudi Arabia.

KSA business setup

Establishing your presence in the Kingdom. MISA licensing, commercial registration, the articles, the business address and the general manager visa. Most clients come to us because a customer here is ready and the entity is not.

Business setup in Saudi Arabia Business setup in Saudi Arabia

Vendor registration

Getting listed as an approved supplier with the organisations that award the work. Aramco, SABIC, Saudi Energy, Marafiq, Ma’aden, NWC, NEOM, Qiddiya and JHAH. We prepare the documents, complete the portal and follow the approval through.

Vendor registration in Saudi Arabia Vendor registration in Saudi Arabia

Cybersecurity and CCC compliance

Aramco assesses its third party suppliers under SACS-210. We take you from a gap assessment through to audit readiness, so that when the assessment comes the evidence is already in place.

Aramco CCC compliance Aramco CCC compliance

ISO certification

Six standards: quality, environment, health and safety, food safety, information security and business continuity. We build the management system and ready the evidence your certification body will audit.

ISO certification in Saudi Arabia ISO certification in Saudi Arabia

IT and branding

Everything a new company needs to look established. Domain, professional business email, website and hosting, company profile, logo and business cards, as one package rather than five separate jobs.

IT and branding solutions IT and branding solutions

Why companies come to us

We are here, not advising from somewhere else

Our office is in Al Khobar, in the Eastern Province, where Aramco and most of its supply chain sit. When a portal needs a document delivered or a signature collected, that is a short drive rather than a courier and a week.

One firm from licence to first contract

Most companies need the licence, then the vendor registration, then the compliance certificate, and each one usually means a different consultant. We handle the whole sequence, so nobody has to explain the business twice.

We say what a thing actually costs

Compliance work has real variables, and a quote that ignores them is a quote that changes later. We tell you what moves the number before you commit.

We prepare you properly, and we say who certifies

A CCC is issued by an Aramco authorised audit firm. ISO certificates come from accredited certification bodies. We build the system and get the evidence audit ready. Anyone who tells you they can issue the certificate themselves is telling you something that is not true.

What we handle for you

Most of this work is paperwork with a deadline attached, and most of the delay comes from a document being wrong rather than a decision going against you.

Supplier registration portals in Saudi Arabia for Aramco, SABIC, Ma’aden, NWC, NEOM, Qiddiya, Marafiq, Saudi Energy and JHAH, handled by Nour Solutions in Al Khobar

Licensing and registration

MISA investment licence, commercial registration, the articles of association, the national address, chamber of commerce membership, and the general manager visa.

Vendor and compliance

Portal registration and prequalification with the major buyers, document preparation, gap assessment against SACS-210, and evidence prepared for the CCC assessment.

Systems and certification

ISO management systems written and implemented, internal audit, corrective action, and the evidence pack your certification body will ask for.

How we work

Four steps, and you will know where you are at every one of them.

We find out what you actually need

A short call. Sometimes a company needs the full licence and sometimes a branch or a simpler structure would do the same job for less. We would rather tell you that at the start than at the invoice.

We tell you the cost and the time

Written, with the variables named. What makes it faster, what makes it slower, and what is outside anybody’s control.

We do the work

Documents prepared, applications submitted, portals completed, follow ups made. You are told when something moves and when something needs you.

You get what you came for

The licence, the vendor code, the audit ready evidence. And where a certificate is issued by somebody else, you are introduced to them properly rather than handed a list.

Who we work with

Foreign companies entering the Kingdom

Usually because a customer here is ready and there is no entity to invoice from. You need a MISA licence and a commercial registration, and you need them in the right order.

Saudi companies wanting to sell to the majors

You have the business, you need the vendor code. That means prequalification, the right documents, and often a compliance certificate before the portal will accept you.

Suppliers who have been asked for a CCC

Aramco has told you their cybersecurity requirement applies to you, and there is a date attached. We start with a gap assessment so you know how far you actually are.

Where we work

Our office is in Al Khobar and most of our clients are in the Eastern Province, which is where Aramco, SABIC and most of the supply chain sit. The licensing and certification work is national, so where the company is registered does not have to be where we are.

Al Khobar and Dhahran

Our own city, and the closest to the Aramco offices most of this work passes through.

Dammam and Jubail

Industrial clients, mostly vendor registration and ISO.

Riyadh

Company formation and MISA licensing, handled remotely with visits when a signature needs one.

The rest of the Kingdom

Licensing and certification work does not require us to be in the room, and we will say so when it does.

Common questions

How do I start a business in Saudi Arabia?

For a foreign investor it starts with a MISA licence from the Ministry of Investment, then commercial registration with the Ministry of Commerce, then the national address, chamber membership and the general manager visa. The order matters, because each step needs the one before it. A Saudi national or a GCC company skips the MISA stage and starts at commercial registration.

Can a foreigner own a company in Saudi Arabia outright?

Yes, in most sectors, through a MISA investment licence. A few activities are restricted or need a Saudi partner, and the list changes, so it is worth checking your specific activity before you plan around it. We check that on the first call.

What does a MISA licence cost?

The licence fee is set by the Ministry, but the total cost of setting up depends on the activity, the legal structure, whether you need a physical office, and how many visas you want in the first year. We give you a written figure with those variables named rather than a number that changes later.

How long does company formation take?

Weeks rather than months when the documents are right, and months when they are not. Attestation of foreign documents is usually the slowest part and it happens in your own country, not here, so it is worth starting that early.

What does ISO certification cost?

It depends on which standard, how many people and sites are covered, and how much of a management system you already have. Two costs sit underneath it: our work implementing the system, and the certification body’s own audit fee, which is paid to them and not to us. We separate the two in writing so you can see what you are paying for.

Do you issue the ISO certificate or the CCC?

No, and nobody who prepares you can. ISO certificates are issued by accredited certification bodies, and the Aramco CCC is issued by an Aramco authorised audit firm. Our work is to build the system, gather the evidence and get you ready, so that the audit is a formality rather than a discovery.

How long does vendor registration with Aramco take?

It depends on the category you are registering under and how complete your documents are when they are submitted. The delay is almost always missing or expired paperwork rather than the review itself, which is why we prepare the pack before anything is uploaded.

Tell us what you need

A short call, and you will know whether we are the right firm for it. If a different structure or a cheaper route would serve you better, we will say so.