Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Middle East & Africa

Identity verification
built for Saudi Arabia Flag of Saudi Arabia

Saudi National ID, Iqama, GCC ID and Passport on one session, screened against Saudi regulatory watchlists — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Saudi Arabia.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Saudi identity fraud: deepfake and synthetic-ID attacks targeting the SAMA-licensed digital banks and fintech-sandbox cohort, Iqama and residence-credential misuse across the expatriate workforce, and AML pressure on Hajj-season remittance volumes and cross-border trade-finance. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • AML Law 2017 (Royal Decree M/20) and Implementing Regulations
  • Personal Data Protection Law (PDPL 2021, amended 2023)
  • SAMA AML/CFT Rules
  • CMA AML/CFT Regulations
  • SAMA Cyber Security Framework
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Saudi Arabia.

These are the supervisors a Saudi Arabia verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • SAMA

    Saudi Central Bank — prudential supervisor for banks, Electronic Money Institutions (EMIs), payment service providers, and the licensed fintech sandbox. Sets remote-onboarding requirements through the SAMA AML/CFT Rules.

  • CMA

    Capital Market Authority — securities and capital-markets supervisor for licensed brokers, fund managers, and capital-markets institutions on the Tadawul exchange.

  • SAFIU

    Saudi Arabia Financial Intelligence Unit — receives Suspicious Transaction Reports under the AML Law of 2017 (Royal Decree M/20) and its Implementing Regulations.

  • SDAIA

    Saudi Data and Artificial Intelligence Authority — enforces the Personal Data Protection Law (PDPL) issued in 2021 and amended in 2023. Governs every identity verification on Saudi residents.

  • Absher / NIC

    Absher digital-government platform operated by the Ministry of Interior — the authoritative civil-registry surface for the Saudi National ID and Iqama.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Saudi Arabia database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every credential Saudi Arabia actually presents — Saudi National ID Card (the authoritative 10-digit civil-affairs credential surfaced via Absher), Iqama (the residency credential for foreign workers), GCC ID Cards under mutual recognition, Passport (with the chip read on e-Passports), and the Saudi driving licence.
  • Returns the name, National ID / Iqama number, date of birth, nationality, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Saudi National ID Card · Iqama
  • GCC ID Card · Passport — chip read on e-Passport
  • Driving Licence
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Saudi watchlists:

  • Saudi Arabia Financial Intelligence Unit (SAFIU) — Suspicious Transaction Report watchlist.
  • Saudi Central Bank (SAMA) — regulatory enforcement and suspended-licence list.
  • Capital Market Authority (CMA) — enforcement and restricted-persons list.
  • ZATCA (Zakat, Tax and Customs Authority) — enforcement and customs blacklists.
  • Permanent Counter Terrorism Committee, Presidency of State Security — National List pursuant to UNSCR 1373.
  • National Assembly of Saudi Arabia — PEP Level 1 register.
  • Council of Ministers (Ministry of Interior, Foreign Affairs, Finance, Justice) — PEP Level 3 registers.
  • Saudi Arabia Stock Exchange — Unlisted Corporates Sukuk/Bonds warnings.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Bind every check to one audited session.

  • The full bundle anchors at $0.33 per session — same price worldwide.
  • Add Ongoing AML Monitoring ($0.07 per user / year) for the periodic-review obligation the AML Law of 2017 expects.
  • Saudi Arabia does not currently expose a public consumer or government API for direct authoritative-registry lookups — the Absher / NIC population register is accessible only through SAMA-approved data-partner integrations on Enterprise. Talk to sales to wire that into your workflow.
Read the docs
Stage 04Bind every check to one audited session

Bind every check to one audited session — see the docs for the full module surface.

Documents covered

Every Saudi Arabia document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Saudi Arabia.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Saudi Arabia.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page