Navigator · RegulatorsFINTECH NAVIGATOR / REGULATORS
REGULATORREGULATOR

Capital Market Authority (CMA)

Supervises securities business — automated advisory, asset management, and equity crowdfunding sit here, not with SAMA. Runs its own Fintech Lab: 68 experimental permits granted and 50 firms registered by Q2 2025.

2 ACTIVITIESSCOPE
2003ESTABLISHED

ACTIVITIES THIS REGULATOR SUPERVISES

Robo-advisory & wealthEquity crowdfunding

WHY THERE IS NO ACTIVITY LIST

HOW IT GOT HERE

2003 — Established under the Capital Market Law as the securities regulator.2018 — Opened the Fintech Lab as a separate testing route from the SAMA sandbox.2025 — Reached 68 experimental permits and 50 registered firms by the end of Q2 — 36 live, 5 fully graduated.

HOW TO ENGAGE

3 ROUTES

Licensing enquiries go through the regulator’s e-services portal, not a general inbox. Pre-application questions are handled by the relevant supervision department.

LICENCE

Licence application

The standing route into a regulated activity. Submitted through the portal with a full application pack; expect at least two rounds of clarification before a decision.

WHAT YOU WILL BE ASKED FOR

  • Incorporated entity with the activity in its commercial registration
  • Committed capital evidenced, not merely pledged
  • Named compliance officer and governance structure
  • Full policy pack — AML/CFT, risk, outsourcing, continuity, consumer protection
  • Technology and information security assessment

VIA THE REGULATOR’S E-SERVICES PORTAL · TYPICAL TIMEFRAME 6–12 MONTHS TO DECISION

SANDBOX

Regulatory sandbox admission

A permitted period of live testing with real customers under agreed caps. For some activities it is the only available entry; for others it is optional and slower than applying directly.

WHAT YOU WILL BE ASKED FOR

  • A defined test scope with customer and volume caps
  • Stated exit criteria agreed up front
  • Reporting cadence you can actually meet
  • A plan for the capital step-up at exit

SANDBOX APPLICATION WINDOW — TWO COHORTS A YEAR · TYPICAL TIMEFRAME 2–4 MONTHS TO A DECISION

CONSULTATION

Public consultation response

Draft rules are published for comment before they take effect. This is the one point where the rule is still movable — and the one most operators skip.

WHAT YOU WILL BE ASKED FOR

  • A written response against the specific clauses
  • Evidence from your own operating data where you can share it
  • Submission before the deadline; late responses are not read

CONSULTATION PAPERS ARE PUBLISHED WITH A FIXED WINDOW · TYPICAL TIMEFRAME BY PUBLISHED DEADLINE