
Author

Omar Sami
Attorney at Law (Germany) I Legal and Tax Consultant (UAE) I Managing Partner
Corporate / Regulatory · Compliance · August 2026
Saudi Arabia’s Ministry of Commerce (MOC) is rapidly advancing the implementation of its Unified Commercial Register and mandatory Ultimate Beneficial Owner (UBO) disclosure regime. Driven by the Kingdom’s commitments under the Financial Action Task Force (FATF) and its own Anti-Money Laundering Law, these interconnected initiatives represent the most significant overhaul of corporate transparency requirements in Saudi history.
The Unified Commercial Register consolidates all commercial registrations onto a single digital platform (Utasil), eliminating separate branch registers. Simultaneously, the UBO regime requires all companies — including foreign entities with a Saudi presence — to identify, verify, and disclose their ultimate beneficial owners to the MOC. Non-compliance carries severe penalties, including the suspension of the commercial register and restrictions on director authorities.
This guide explains what the Unified Commercial Register entails, who qualifies as a UBO under Saudi law, what the disclosure obligations are, and what steps businesses must take to achieve compliance.
Part One: The Unified Commercial Register
What the System Does
Historically, companies operating in Saudi Arabia maintained a primary commercial registration with the MOC, supplemented by separate branch registrations for each additional location. This created administrative duplication, data inconsistencies, and enforcement challenges for regulators.
The Unified Commercial Register replaces this fragmented system with a single, centralized digital register managed through the Utasil platform. Under the new framework:
- A company operates under one unified Commercial Registration (CR) number, regardless of how many branches it operates.
- Branch details, addresses, and manager authorizations are consolidated under the main CR.
- All changes — whether to the head office or a branch — must be updated on the unified platform.
Impact on Existing Companies
The MOC has mandated that all companies currently holding separate branch commercial registrations must migrate to the unified system. During the transition:
- Existing branch CR numbers are being deactivated and linked to the main unified CR.
- Companies must review their branch details, update authorized signatories, and ensure that the unified register accurately reflects their current operational structure.
Failure to migrate within the prescribed timelines results in the automatic suspension of the affected branch’s ability to conduct transactions, including opening bank accounts, signing leases, or issuing invoices.
Part Two: UBO Disclosure Requirements
What is a UBO?
Under the implementing regulations of the Anti-Money Laundering Law, an Ultimate Beneficial Owner is defined as any natural person who ultimately owns or controls the company. Ownership or control is presumed under the following thresholds:
- Direct or indirect ownership of 25% or more of the company’s capital, shares, or voting rights.
- De facto control over the company’s management, board of directors, or through other means (such as veto rights or contractual arrangements), even if ownership is below 25%.
- If no individual meets the above criteria, the UBO is the senior managing official (e.g., CEO, Managing Director) of the company.
Who Must Comply?
The UBO disclosure obligation applies to:
- All Saudi-incorporated entities (LLCs, JSCs, limited partnerships).
- Foreign companies operating through a branch or representative office in Saudi Arabia.
- Non-profit organizations and associations (with specific modifications regarding “control”).
Exemptions are highly limited. Government entities, entities listed on the Saudi stock exchange (Tadawul) that are already subject to strict disclosure rules, and certain regulated financial institutions may have modified requirements, but they are not entirely exempt from the AML framework.
The Disclosure Process
Companies must take the following steps to comply:
- Identify: Conduct a corporate mapping exercise to trace the ownership chain upwards until natural persons are identified.
- Verify: Obtain reliable, independent evidence of the UBO’s identity (e.g., passport, national ID, proof of address). Reliance on self-declarations alone is insufficient under MOC guidance.
- Record: Maintain an internal, up-to-date UBO register at the company’s principal place of business in Saudi Arabia. This register must be available for inspection by MOC officials or the Saudi Anti-Money Laundering Permanent Committee.
- Disclose: Submit the UBO details electronically via the MOC portal, linked to the Unified Commercial Register.
Ongoing Obligations
UBO disclosure is not a one-time event. Companies must update the MOC within 15 days of any change in the UBO’s identity, ownership percentage, or the nature of their control. This includes changes triggered by share transfers, board reshuffles, or the death of a beneficial owner.
Penalties for Non-Compliance
| Violation | Penalty |
|---|---|
| Failure to maintain an internal UBO register | Fine up to SAR 100,000 |
| Failure to submit UBO details to the MOC | Fine up to SAR 500,000 |
| Submitting false or misleading UBO information | Fine up to SAR 1,000,000; potential criminal prosecution under the AML Law |
| Failure to update UBO details within 15 days of a change | Fine up to SAR 200,000 |
Critical enforcement tool. The MOC has the authority to suspend the company’s Commercial Registration (CR) and restrict the powers of authorized signatories until the UBO violation is rectified. A suspended CR effectively paralyses a company’s ability to operate legally in the Kingdom.
What Businesses Must Do Now
- Initiate a corporate mapping exercise. Do not assume you know who your UBO is. Trace all shareholdings, nominee arrangements, and voting rights to identify every natural person who meets the 25% threshold or exercises de facto control.
- Prepare your verification documents. Gather certified copies of passports, national IDs, and proof of address for all identified UBOs. If a UBO is a foreign national residing abroad, ensure the documents meet the MOC’s apostille/legalization standards.
- Audit your internal register. Ensure your physical or digital internal UBO register complies with the exact data fields required by the MOC (full name, nationality, date of birth, residential address, and the basis of their control/ownership).
- Migrate to the Unified Commercial Register. If you have not already done so, consolidate your branch CRs into the unified Utasil system. Verify that all authorized signatories for branches are correctly reflected under the main CR.
- Brief your shareholders and parent companies. Foreign parent companies often resist disclosing their ultimate owners. You must communicate clearly that Saudi law requires this disclosure regardless of the parent company’s home jurisdiction secrecy laws. Non-compliance in Saudi Arabia will result in operational suspension.
- Implement a change-management protocol. Establish an internal compliance trigger so that any change in shareholding or management automatically initiates the 15-day MOC update process.
Frequently Asked Questions
Our company is 100% owned by a listed foreign entity. Do we still need to file a UBO disclosure in Saudi Arabia?
Yes. While the listed parent company is technically the legal owner, Saudi regulators still require the identification of the natural persons who ultimately own or control the listed entity, or, if that is impractical due to the dispersed nature of public shareholding, the identification of the senior managing officials exercising control over the Saudi branch. You should consult legal counsel to determine the appropriate category for your specific structure.
What if the actual owner is using a nominee shareholder?
Saudi AML regulations explicitly target nominee arrangements. If a natural person holds shares on behalf of another, the beneficial owner (the person for whom the shares are held) must be disclosed as the UBO. Relying solely on the nominee’s identity constitutes a violation.
Does the UBO have to be a resident of Saudi Arabia?
No. The UBO can be a non-resident foreign national. However, the company must still collect and verify their identity documents and residential address abroad, and these documents may need to be notarized and legalized or apostilled depending on the country of origin.
Can the MOC share our UBO data with foreign authorities?
Yes. The Saudi Anti-Money Laundering Permanent Committee and the MOC are legally permitted to share UBO information with counterpart foreign financial intelligence units and regulatory authorities as part of international AML/CFT cooperation frameworks.
How TME Legal Can Assist
TME Legal advises local and international businesses on corporate governance, regulatory compliance, and anti-money laundering obligations in Saudi Arabia. Our work in this area covers:
- Conducting corporate mapping and UBO identification exercises for complex multi-jurisdictional structures
- Preparing, reviewing, and legalizing UBO verification documentation for foreign nationals
- Assisting with the migration to the Unified Commercial Register (Utasil) and consolidation of branch registrations
- Drafting and implementing internal UBO policies and change-management protocols
- Representing companies before the MOC in response to UBO non-compliance warnings or penalty notices
- Advising on the interaction between Saudi UBO requirements and foreign data protection or secrecy laws
If you would like to discuss the compliance position of your company under the Unified Commercial Register or UBO regimes, we would be glad to assist.
This article is provided for general information only and does not constitute legal advice. The Unified Commercial Register and UBO regulations are subject to ongoing MOC guidance and updates. Please contact TME Legal for advice tailored to your individual circumstances.

