Salesforce Consulting in Saudi Arabia
We work with Saudi organisations remotely from India, sharing about 6.5 hours a day from Monday to Thursday, with the PDPL and SDAIA's draft changes in view.
GeekMidst works with organisations in Saudi Arabia remotely from India. We have no office, address, phone number or team in Riyadh, Jeddah or anywhere in the Kingdom, and every meeting is a video call. We work in English only; Arabic may be expected for consumer-facing material, so plan for translation separately. Prices are agreed per proposal.
Saudi data rules are moving: an SDAIA consultation draft, open until 5 November 2026, would add an in-Kingdom storage duty. It isn't law, but it's worth designing with it in mind.
Working across time zones
Saudi Arabia is on UTC+3 with no daylight saving (a standard offset we haven't checked against an official Saudi page), so India is 2.5 hours ahead. The bigger difference is the week. Government works Sunday to Thursday and is closed Friday and Saturday, while we work Monday to Friday, so our shared days are Monday to Thursday.
Four shared days a week
| Your time (Riyadh) | India time (IST, UTC+5:30) | Note |
|---|---|---|
| 9:00 a.m. | 11:30 a.m. | Start of the shared window |
| 11:00 a.m. | 1:30 p.m. | Workshops and design reviews |
| 3:30 p.m. | 6:00 p.m. | End of the window, about 6.5 hours |
| Sunday | Our weekend | We send written updates on Thursday |
| Friday | Your weekend | We build and test, ready for your review on Sunday |
Data and privacy rules to plan for
The Personal Data Protection Law (PDPL) was issued in 2021 and amended in March 2023. According to law firm Clyde & Co, it took effect on 14 September 2023 and became fully enforceable on 14 September 2024, when the one-year grace period ended. The regulator is SDAIA, which also runs a data governance portal. We couldn't read either SDAIA site when researching this page, so the dates and rules here rest on law-firm sources. Check them with your legal adviser.
Today, breaches likely to cause harm are notified to SDAIA within 72 hours (law-firm source, not confirmed on SDAIA's site).
The draft proposes:
- a duty to store personal data inside the Kingdom, while transfers abroad stay allowed under the PDPL;
- breach notice to SDAIA within 72 hours regardless of whether harm is likely;
- stricter evidence of consent, and of its withdrawal, for direct marketing;
- registration rules moved into the Implementing Regulations.
How we'd plan: keep consent evidence (time, channel and wording) on every contact now, and write breach runbooks that assume a 72-hour clock in every case. Don't move data or change hosting on the strength of a draft. Our international data governance architecture shows the reference pattern.
Salesforce data residency: announced, not listed
On 10 February 2025 Salesforce announced it "will bring Hyperforce" to Saudi Arabia as part of a $500M investment, with no date given. The Infrastructure and Sub-processors document of 19 December 2025 doesn't list Saudi Arabia as a hosting location for Salesforce Services; it appears only under a third-party provider. A newer version dated 20 October 2026 exists, but we couldn't read it. Check Salesforce's current list, and get written confirmation from your account team, before planning on in-Kingdom hosting.
Services Saudi teams ask us about
- Salesforce CRM consulting
- Service Cloud implementation for customer service and case handling
- Marketing Cloud consulting, with consent evidence captured per channel
- Salesforce security and governance, including breach runbooks
Industries
Invest Saudi (MISA) frames technology, energy, manufacturing, tourism and entertainment, healthcare, financial services, logistics and mining under Vision 2030. See our financial services, healthcare, travel and hospitality and logistics pages, or all locations.
How a remote engagement works
- 01
Discovery call
We ask where your data must sit, how you record consent, and how breaches are handled today.
- 02
Proposal
Scope, assumptions and the agreed price, with any hosting questions listed for Salesforce.
- 03
Workshops and build
Sessions in your morning; sandbox build continues on Friday, ready for your review on Sunday.
- 04
Test and launch
Your users test before go-live; releases avoid Eid holidays, whose dates you confirm locally.
- 05
Support
Ongoing help with releases and fixes, or a clean handover.
Questions we hear
Do you have an office in Saudi Arabia?
Does the PDPL require us to keep data in the Kingdom?
Is Hyperforce available in Saudi Arabia?
Do you work in Arabic?
Sources
Plan ahead of the draft
Tell us where your data sits today and how you record consent, and we'll help you plan the Salesforce side.
