Regulatory, Compliance
Governance and compliance that turn authority and obligations into a clear working system
Governance and compliance services for companies in Saudi Arabia: allocating authority, board policies, conflicts of interest, internal regulations and compliance programmes.
Governance and compliance that turn authority and obligations into a clear working system
Governance is not a file to keep until someone asks for it. Its value shows when it is clear who holds the decision, who reviews it, how it is documented, and when disclosure or escalation is required. And compliance is not effective if it turns into a list of laws with no owner for each obligation and no practical procedure to apply it.
Authority and decision map
We review the ownership and management structure and the delegations, then identify the matters that need approval from the partners, the board or executive management, and the limits on signing, contracting, spending, hiring and settling.
The board and its committees
We help organise agendas, resolutions, minutes, disclosures, conflicts of interest, committees and the mechanisms for following up decisions, according to the type of company, the governing documents and sector requirements.
The compliance programme
It starts by listing the obligations attached to the activity and classifying them by risk and by the owner within the company, then setting the policies, controls, training, reporting and escalation mechanism, and periodic review.
Policies and procedures
These may cover delegation of authority, conflicts of interest, contracting and procurement, gifts and benefits, whistleblowing, record retention, confidentiality, signing, and dealing with regulators.
Assessment and improvement
A gap assessment can test both the documents and how they are applied in practice, and then produce a clear plan of priorities.
Next step
If governance exists on paper but is unclear in operation, we start with a diagnostic session and a review of samples of decisions, delegations and policies, rather than rewriting everything from scratch.
Mistakes we see most often in this kind of matter
Written policies nobody knows. A policy the employee does not know and that is not applied does not protect the business and may even be used against it.
Copying ready-made policies. A policy that does not fit the activity and size adds a burden without real control.
No register of authority and conflicts. When it is not recorded who holds signing authority and who declared an interest, the decision is hard to defend later.
Compliance as a one-off project. Obligations change with the activity and the laws, and need periodic review.
How the work runs
- 01
The map of obligations. We identify the obligations that actually apply to your activity and size.
- 02
Identifying the gaps. We compare actual practice with what is required.
- 03
Policies and authority. We draft policies and procedures that can be applied, and a clear authority matrix.
- 04
Training and documentation. We help move the policy into practice and document it.
- 05
Periodic review. We review what has changed and update what is needed.
What we need to start
You do not need every document before you contact us, but having the following shortens the first assessment:
- The organisational structure
- Existing internal regulations and policies
- Licences and registers
- Key third-party contracts
- The register of authority and delegations
Frequently asked questions
Does every company need governance?
Yes, in varying degrees depending on size and ownership. The aim is for authority and responsibilities to be clear and documented.
Do you prepare internal policies?
Yes, and we tie them to procedures that can be applied, not to theoretical texts.
How do we start?
By identifying the activity, ownership and the main risks, then drawing the map of obligations.
The information on this page is general and is not a legal opinion on a specific matter; the answer depends on the facts and on the law in force at the time.