Saudi Arabia

Status: Not enabled — assessment required

Saudi PDPL under SDAIA supervision with cross-border transfer restrictions; SFDA assessment for clinically positioned software; NPHIES ecosystem expectations.

MedXline is not enabled for production use in this region until regional legal, clinical, security, and data-residency reviews are complete. Nothing on this page is a certification or compliance claim.

What MedXline is designed to support

Consent-led privacy workflows with audit evidence
In-Kingdom hosting as a deployment option, pending assessment
Arabic-first experiences once Arabic/RTL surfaces are built

Current platform readiness

Hash-chained audit logging with exportable evidence packs
Role- and tenant-scoped access control enforced by build-time verification gates
Consent versioning and break-glass access with recorded justification
Assistive, human-reviewed AI with runtime guardrails, kill switches, and audit trails
Secret scanning, dependency review, and release verification gates in the delivery pipeline

Required reviews before launch

Legal review — SDAIA transfer rules and PDPL obligations
Regulatory review — SFDA SaMD classification for CDS features
Security review — in-Kingdom hosting assessment
Clinical review — Arabic and English clinical content

Current launch blockers

Arabic/RTL surfaces not started
In-Kingdom residency approach not assessed
SFDA position not obtained

Localization

Arabic with full right-to-left layout required; not yet built.

Next step

Counsel review of SDAIA transfer rules alongside an in-Kingdom hosting assessment.

Operating in Saudi Arabia?

Tell us about your organization and regulatory context. We will share a candid readiness assessment for your region — including what remains blocked.

Explore the platform Contact us