Saudi Arabia's Zakat, Tax and Customs Authority (ZATCA) published final economic substance regulations on 7 August 2026 covering four of the Kingdom's special economic zones: King Abdullah Economic City (KAEC), Ras Al-Khair, Jazan, and the Cloud Computing SEZ. Licensed entities in those zones must now demonstrate genuine operational substance inside the zone and submit an annual return to ZATCA proving it — from the first financial year in which they conduct qualified activities.
The regulations close a consultation that ECZA and ZATCA opened in February 2026 and that ran on the ISTITLAA platform until 3 March. They arrive four months after the SEZ regulatory frameworks themselves entered into force on 16 April 2026.
Key Highlights
- Final ESR regulations published 7 August 2026, covering KAEC, Ras Al-Khair, Jazan and Cloud Computing zones
- Licensed entities must maintain adequate premises, assets and full-time staff physically present in the zone
- Management and control must be exercised from inside the SEZ, including at least one resident director and board meetings held in Saudi Arabia with documented strategic decisions
- IP-related activities face a stricter test: at least 50% of managing directors resident in the Kingdom, a detailed business plan justifying the asset's location, and activity beyond "mere marketing of IP assets"
- An annual ESR return in a ZATCA-prescribed format is mandatory; the Economic Cities and Special Zones Authority (ECZA) imposes penalties for failure
The Cloud Computing SEZ Is the Interesting Case
Three of the four zones are physical: industrial land at Ras Al-Khair, logistics and manufacturing at KAEC, minerals and food processing at Jazan. The fourth is not. The Cloud Computing SEZ is a virtual zone anchored to King Abdulaziz City for Science and Technology (KACST) in Riyadh, designed so that licensed companies can provide cloud services from the zone while building and operating data centres across the Kingdom.
That design is why the substance rules land differently for technology companies. A requirement to maintain "adequate premises and assets within the SEZ" and to employ staff "physically present in the zone" is unambiguous for a factory in Jazan. For a cloud or AI company licensed into a zone with no fixed perimeter, the operative questions become where the engineers actually sit, where the infrastructure actually runs, and where the decisions about both are actually made and recorded.
What Is at Stake
The incentives the SEZs offer are substantial, and they are what the substance test protects. Published zone materials describe a 5% corporate income tax rate for up to 20 years, 0% withholding tax on repatriation of profits abroad, customs duty deferral or exemption on capital equipment and inputs, 0% VAT on goods exchanged within and between the zones, flexible rules on foreign talent during the first five years, and special tax treatment aligned with OECD principles to avoid double taxation.
Advisers reviewing the framework caution that the list, value and duration of incentives are zone-specific, and that any incentive should be treated as conditional until it is confirmed in the entity's own licence and tax analysis. The ESR regulations make that conditionality explicit and annual.
Impact
For technology and AI companies that have used the Cloud Computing SEZ as their entry route into Saudi Arabia — an increasingly common structure as the Kingdom pushes data centres, AI infrastructure and digital sovereignty — the practical consequence is a new evidentiary burden rather than a new tax bill.
The evidence the annual return calls for does not sit in one system. Headcount and physical presence live in HR and payroll. Operational expenditure aligned to the nature of the activity lives in the finance ledger. Premises and assets live in an asset register. Management and control lives in board minutes and resolutions. Assembling that into a defensible annual filing is a reporting problem across systems that were never designed to answer this particular question — and it repeats every year, for every licensed entity, in every zone.
Groups running multiple licensed entities across more than one zone face the compounding version: the same test, applied separately, with different qualified activities and different documentation trails.
Background
The four zones were launched in 2023 as a Vision 2030 diversification instrument. The Council of Ministers approved detailed regulatory frameworks for them in January 2026, which entered into force 90 days after publication in the Official Gazette, on 16 April 2026. Economic substance requirements are the standard international counterweight to preferential tax regimes, designed to ensure that a low headline rate attaches to real activity rather than to a registered address. Saudi Arabia's version follows the OECD-influenced pattern already familiar from the UAE and other jurisdictions.
The move also sits alongside a broader tightening of digital reporting obligations on businesses operating in the Kingdom, from the Fatoora e-invoicing programme — whose Wave 25 threshold was halved earlier this month — to the CST guidance on AI adoption for technology companies.
What's Next
ZATCA has not published a filing deadline expressed as a number of days after financial year end, nor scheduled penalty amounts; ECZA imposes penalties under each zone's own regulations. Licensed entities should expect the prescribed return format and submission window to be issued ahead of the first filing cycle.
Companies whose first qualified-activity financial year is 2026 are already inside the assessment period. The evidence for that year is being generated now, in systems that are probably not tagging it.
If you are running licensed entities in a Saudi SEZ and are not sure your systems can produce the substance evidence on demand, talk to us — we build the reporting layer over ERP, HR and finance systems that turns a compliance question into a query. Related reading: Gulf enterprises lead on agentic AI in production and AI sovereignty and Arabic models.
Source: KPMG TaxNewsFlash