Location · Saudi ArabiaUpdated October 18, 2026

Clinical trial software for studies in Saudi Arabia

Saudi trials run through the SFDA, an IRB registered with the national bioethics committee and a young data protection law with a stated preference for data staying in the Kingdom. Capture hosts in the EU and the US, so the transfer question comes first.

  • Hosted in EU or US only
  • Ask about the PDPL early
  • Free sandbox, pay at go-live

Free sandbox · No credit card · 21 CFR Part 11 aligned

Study settings · Region
SA

Study region

Saudi Arabia

Regulator
SFDA (Saudi Food and Drug Authority)
Ethics
IRB registered with the NCBE
Registry
Saudi Clinical Trials Registry
Data protection
PDPL, supervised by SDAIA
Hosting region
EU (Frankfurt) or US (N. Virginia). Not in the Kingdom.
AES-256 at rest TLS in transit Chosen at study setup

Key points for studies in Saudi Arabia

  • Drug trials need approval from the Saudi Food and Drug Authority (SFDA), applied for through an electronic system and the Saudi Clinical Trials Registry, where sponsors set up accounts before applying.
  • Research ethics review is by an IRB registered under the Law of Ethics of Research on Living Creatures, with the National Committee of Bio-Ethics (NCBE) playing a registration and oversight role. NCBE notification is also reported to apply when biological material leaves the Kingdom.
  • Sources say a sponsor without a legal entity in Saudi Arabia applies through an SFDA-licensed Saudi CRO. Capture is not a CRO and has no presence in Saudi Arabia.
  • The Personal Data Protection Law (PDPL), supervised by SDAIA, treats health data as sensitive. Draft executive regulations described a default of storing and processing data in the Kingdom, with transfers abroad needing a condition or approval. Check the final regulations.
  • Capture hosts in the EU (Frankfurt) and the USA (N. Virginia) only. If your sponsor, institution or counsel requires data to stay in the Kingdom, Capture is not the right fit for that data.

Regulation

SFDA approval, the registry and the role of a Saudi CRO

The SFDA regulates clinical trials of medicinal products in Saudi Arabia and publishes guidance on conducting drug clinical trials. The application is made electronically, and the Saudi Clinical Trials Registry holds the official record of drug studies in the country. Industry sources advise setting up registry accounts before you begin preparing the application.

One secondary source states that sponsors without a legal entity in Saudi Arabia must apply through an SFDA-licensed Saudi CRO. If that applies to you, the CRO is the submission and oversight partner, and the EDC choice is yours or the CRO choice. Capture works as a self-serve platform the sponsor or CRO configures, with no local partner of its own. Confirm the requirement directly with the SFDA, since guidance changes.

Inspections and monitoring will look at records. Expect questions on who entered what, when and why. Capture records every change with timestamp, user, old value, new value and reason for change in an append-only audit trail, and edit checks raise queries automatically. For what to show an inspector see audit trail software for clinical trials and risk-based monitoring and SDV software.

Ethics committees and the NCBE

University hospitals, ministry hospitals and private hospitals typically have their own IRBs, registered with the NCBE under the research ethics law and its implementing regulations. A multi-site study usually needs approval from each institution or a recognised arrangement between them. Ask each site research office which IRB applies, and whether the NCBE needs notification if samples will be sent abroad. See how to get IRB approval for a package list.

Data protection

The PDPL and the question of where data lives

Saudi Arabia enacted the Personal Data Protection Law by royal decree, with implementing regulations and a separate regulation on transfers outside the Kingdom, supervised by the Saudi Data and AI Authority (SDAIA). Commentary on the healthcare sector notes that health data is sensitive personal data, and that the legitimate interests basis does not apply to it. That raises the bar on consent and purpose for research.

On transfers, the draft executive regulations that we found described a starting position that personal data should be stored and processed in the Kingdom, with transfers abroad allowed when conditions are met or when the controller applies for approval, and a notice period of at least 30 days for an application. Another source says a university collaboration form requires standard contractual clauses for transfers. These are secondary and partly draft sources, so check the final text and any health-sector rules before relying on them.

For Capture the position is plain. Data is hosted in Frankfurt or N. Virginia. If a Saudi institution or the SFDA requires trial data to remain in the Kingdom, or if counsel concludes that the transfer conditions cannot be met, Capture should not be used for that data. If the transfer is permitted, document the basis in consent and in the agreements, use coded IDs for sponsor-side users (site coordinators see names, researchers see coded IDs), and rely on encryption (AES-256 at rest, TLS in transit).

PDPL transfer readiness · sample study

Sites

4

Hosting

EU or US

Items open

3

  • Counsel confirms transfer basis under final PDPL regulationsLegal
  • Consent form names hosting regionsStudy team
  • Sponsor-side users see coded IDs onlyRoles set
  • Any approval needed from the competent authority identifiedCheck lead time
  • Institution confirms it accepts EU or US hostingSite office
  • Vendor assessment filedQuality
Sample data for illustration. Not legal advice.

Prepare your Saudi submission package

Build the forms and export the blank eCRF PDF for the SFDA and IRB package in the free sandbox.

Build your Saudi study free

Planning

Who does what in a Saudi drug trial

TaskWho usually owns itNote for the data system
SFDA application and registrySponsor, or the Saudi CRO if the sponsor has no local entityThe blank eCRF PDF shows what will be collected.
IRB submission and NCBE mattersPrincipal investigator with the site research officeConsent PDF with signatures and audit trail.
Import of investigational productSponsor or CRO with the importerKit and shipment records stay with supply logistics.
Data protection assessmentSponsor with Saudi counsel and the siteDocument hosting, access roles and transfer basis.
Safety reportingInvestigator and sponsor safety teamSAE alerts and timelines set in the safety plan.
MonitoringCRA or sponsor monitorField-level SDV flags, queries and audit trail.

Roles differ by study. Confirm with the SFDA and your Saudi CRO.

Saudi research

A growing trial market and what it means for tooling

Saudi Arabia is investing heavily in its life sciences and healthcare sector, with major hospitals in Riyadh, Jeddah and the Eastern Province running industry and investigator-initiated studies, and a national registry that makes trials visible. Sponsors enter through a Saudi CRO or a local entity, often as part of a Gulf or Middle East programme.

A self-serve platform suits investigator-initiated and academic studies where a team wants to design its own eCRFs. See EDC for academic clinical trials and clinical trial software without a CRO. For large global sponsors, a Saudi site is one site among many: see multi-site clinical trial management and Turkey for another regional regime.

Before you start

Saudi Arabia study set-up checklist

SFDA route and registry account

Application pathway confirmed and accounts created in the Saudi Clinical Trials Registry.

Saudi CRO or entity

Local representation confirmed if the sponsor has no Saudi legal entity.

IRB approval

NCBE-registered IRB at each site, with notification steps for samples leaving the Kingdom.

PDPL assessment

Final transfer regulations reviewed and a lawful basis documented, or a decision that data must stay in the Kingdom.

Arabic materials

Consent and participant materials translated and approved by your team and the IRB.

Connectivity plan

Paper source and delayed entry planned for sites without reliable access, since Capture has no offline mode.

FAQ

Questions teams ask before they switch

Something not covered here? Ask us directly.

Who regulates clinical trials in Saudi Arabia?

The SFDA approves drug trials, and an IRB registered under the research ethics law reviews each study. The Saudi Clinical Trials Registry holds the official record. Confirm current requirements with the SFDA.

Do I need a Saudi CRO?

A secondary source says sponsors without a legal entity in Saudi Arabia must apply through an SFDA-licensed Saudi CRO. Check this with the SFDA. Capture is not a CRO.

Does the PDPL require data to stay in Saudi Arabia?

Draft executive regulations described a default of storing and processing in the Kingdom, with transfers allowed under conditions or with approval. Check the final regulations and the health-sector rules with Saudi counsel.

Does Capture host data in Saudi Arabia?

No. Capture hosts in the EU (Frankfurt) and the USA (N. Virginia) only. If your study must keep data in the Kingdom, Capture is not the right fit for that data.

Does Capture support Arabic?

This page makes no claim about Arabic or other language support. Ask in a demo what is available, and prepare approved Arabic materials with your own translators.

Does Capture work offline?

No. Capture is web based and needs a connection. Plan paper source and delayed entry for sites that cannot rely on a connection.

Is Capture registered with the SFDA?

No regulator registers or approves EDC software of this kind. Capture provides an audit trail, e-signatures and access controls. Your validated use is what is assessed.

Can I try it free?

Yes. The free sandbox has every feature, with no credit card and no time limit.

Settle the data question, then build

Build and test your Saudi study free, and take the hosting question to counsel. Pay only at go-live.

Build your Saudi study free