Investment Advisory Licensing Under CMA’s 2026 Framework: What Firms Must Complete Before Client Onboarding

Saudi Arabia’s capital market is growing fast, and so is regulatory scrutiny around who gets to advise investors. If your firm plans to offer portfolio guidance, wealth management, or financial planning services in the Kingdom, you cannot open your doors to clients without a valid investment advisory license from the Capital Market Authority (CMA). This is not a formality. It is a legal requirement backed by the Capital Market Law, and skipping it can shut your business down before it starts.

This guide breaks down what the CMA licensing framework actually requires in 2026, how the approval process works, and what firms must finish before they sign their first client. We wrote this for founders, compliance officers, and finance leaders who need clear, accurate information, not legal jargon.

Why CMA Licensing Matters More Than Ever in 2026

Saudi Arabia’s capital market has expanded rapidly under Vision 2030. As of early 2025, the CMA had 188 Capital Market Institutions listed on its website, and that number keeps climbing as regional and international firms move into the Kingdom. The CMA has also rolled out a strategic plan covering 2024 to 2026 aimed at developing the regulatory environment for asset management and encouraging growth in the sector.

At the same time, the CMA’s fintech arm is proving how active this space has become. By 2026, the CMA Fintech Lab had issued more than 68 experimental permits for products spanning robo-advisory, AI-driven investment advice, digital trading, and goal-based investing. This tells you two things: the market is open to innovation, but the CMA is watching closely, and it expects every advisory business, traditional or digital, to operate under proper authorization.

The broader numbers back this up. Saudi Arabia’s asset management industry held assets under management above USD 340 billion at the end of the first quarter of 2026, up 17% year-on-year and 4% quarter-on-quarter, according to Fitch Ratings. That places the sector at roughly 26% of GDP, compared to 23% a year earlier. Fitch projects the industry will surpass USD 400 billion in assets under management by 2027, driven by regulatory easing, growing participation from foreign and domestic investors, and an expanding range of investment products. International and regional capital market institutions also grew their share of industry revenue to about 20% in the first quarter of 2026, up from roughly 15% in the first half of 2025, a sign that new entrants, including advisory firms, are winning real market share, not just licenses on paper.

For firms planning to enter or expand in this space, understanding CMA licensing requirements is the first real step. Get it wrong, and you risk fines, forced closure, or reputational damage that follows your brand for years.

What Is a CMA Investment Advisory License?

A CMA investment advisory license falls under the category of Capital Market Institution (CMI) authorization. The CMA currently issues five license categories, and “Advising” is one of them. This license lets a firm give financial advice and recommendations on dealing in securities, in addition to providing financial planning and wealth management services.

In practice, the Advising license usually goes hand in hand with the Arranging license, which is closer to an investment banking authorization covering securities offerings and corporate finance advice. Many firms apply for both together because client work often overlaps between the two.

Under the Capital Market Institutions Regulations, licensing requirements sit alongside prudential standards, risk management rules, and ongoing reporting duties. These measures exist to protect the integrity of the capital market, build investor confidence, and maintain transparency in every financial transaction. The CMA is the body responsible for enforcing all of this, and it does not make exceptions for firm size or foreign backing.

Who Regulates Investment Advisors in Saudi Arabia?

The Capital Market Authority investment license process sits entirely under the CMA’s authority. The CMA is the government body that issues regulations, approves applications, and supervises every licensed entity operating in the Saudi capital market. Its stated role is overseeing the organization and development of the capital market, issuing rules to implement the Capital Market Law, and building investor confidence in the process.

No other authority can approve you to give investment advice on securities in Saudi Arabia. If a firm operates without CMA authorization, it is acting outside the law, regardless of any other business license it holds, including a commercial registration from the Ministry of Commerce.

Saudi Capital Market: 2026 Data Snapshot and 2027 Outlook

Firms evaluating whether to enter the Saudi advisory market should look at where the numbers stand now and where they are headed. The table below summarizes the most recent figures available in 2026, along with projections for 2027.

Two figures stand out for firms weighing a licensing decision. First, private fund assets, the segment most tied to discretionary advisory and wealth management work, grew 26% year-on-year even during a period of regional geopolitical tension, showing real resilience in client demand. Second, the entry of Saudi Arabia into JPMorgan’s Government Bond Index-Emerging Markets in 2027 is expected to widen the debt capital market and bring fresh liquidity, which typically increases demand for advisory services around fixed income and diversified portfolios.

For a newly licensed advisory firm, these data points to one conclusion: 2026 and 2027 are strong entry years, but only for firms that treat licensing and compliance as seriously as the CMA does. A market growing at double-digit rates draws more regulatory attention, not less.

The CMA Licensing Framework 2026: What’s Different

The CMA’s current strategic direction pushes for more structured oversight while still encouraging market growth. A few shifts stand out heading into 2026:

• Sandbox-to-license pathways are more common. Many fintech and digital advisory firms now enter through the CMA Fintech Lab (ExPermit programme) before applying for full authorization, testing their model with real users under supervision first.
• Fit and proper checks are stricter. The CMA closely reviews the background, experience, and suitability of directors, senior managers, and compliance officers before approving.
• Capital adequacy monitoring is ongoing, not one-time. Licensed firms must maintain minimum capital throughout the license period, and the CMA conducts periodic reviews to confirm compliance.
• Local staffing requirements remain firm. Certain roles must be filled locally, and some positions must go to Saudi nationals, depending on the license type.

This means licensing in 2026 is less about a single approval event and more about building a compliance structure that holds up under continuous supervision.

Step-by-Step: Investment Advisory Licensing in Saudi Arabia

Here is the general pathway firms follow to secure a Saudi investment advisor license.

1. Choose the Right License Category and Legal Structure

Decide whether you need the Advising license alone or paired with Arranging. Foreign firms should also confirm whether they need a standard CMI license or a specialized structure, such as the Offshore Securities Business License, designed for firms serving non-resident clients from a Saudi regional headquarters.

2. Meet Minimum Capital and Staffing Requirements

The CMA mandates minimum capital levels tied to the license category, and this capital must be deposited and maintained on an ongoing basis. Firms also need a minimum number of positions filled, including a Chief Executive Officer, Chief Financial Officer, and Head of Compliance, with certain roles requiring Saudi nationals, depending on the license scope.

3. Prepare Fit and Proper Documentation

Every proposed board member and senior employee must pass CMA’s “fit and proper” assessment, which reviews qualifications, integrity, and relevant experience. Firms should build this file early since gathering references, credentials, and disclosures takes time.

4. Submit Audited and Projected Financial Statements

Applicants must provide audited financial statements prepared according to standards set by the Saudi Organization for Chartered and Professional Accountants, formatted as the CMA requires, along with projected financial statements covering the 12 months following the planned launch date.

5. Complete Required Exams and Residency Steps

Employees in regulated roles may need to sit CMA-prescribed exams before appointment. Any staff hired from outside Saudi Arabia must also secure residency permits in time for onboarding, so firms should treat this as a long-lead task, not a last-minute one.

6. Submit the Full Application to the CMA

Once documentation is complete, the firm submits its full application package. The CMA reviews the submission, and if information is missing, it issues a notice giving the applicant 30 days to respond before deciding whether to approve the application.

7. Await CMA Review and Respond to Queries

The CMA may request clarifications or additional documents during review. Firms that respond quickly and accurately tend to move through the process faster than those that let paperwork sit.

8. Receive Approval and Launch Within the Set Timeframe

Once approved, firms typically must launch operations within 12 months and keep meeting ongoing reporting obligations afterwards.

How Long Does CMA Approval Take?

There is no fixed number of days written into law for full approval, but the process has clear checkpoints. Once the CMA reviews an application, it has 30 days from its notice to decide whether to approve it. That 30-day clock, however, only covers one stage. In practice, the complete process from first submission to final license takes several months, and sometimes longer, depending on how prepared the applicant is and how quickly they respond to CMA follow-up questions.

Firms that treat documentation, staffing, and fit-and-proper checks as parallel workstreams rather than sequential ones tend to shorten their overall timeline significantly.

Documents Required for CMA Licensing

Each of these categories needs to reflect the specific license type requested. A firm applying for Advising alone will submit a narrower compliance framework than one also applying for Managing or Custody activities.

Investment Advisory Compliance in Saudi Arabia: What Continues After Licensing

Getting the license is only the starting line. Investment advisory compliance in Saudi Arabia is an ongoing obligation, not a one-time checklist. Licensed firms must:

• Maintain minimum capital at all times, with regulators conducting periodic capital adequacy reviews.
• Keep compliance and risk management functions staffed and active.
• File regular reports with the CMA covering financial position and operational activity.
• Update the CMA on any material change to ownership, management, or business activity.
• Renew fit and proper standing whenever key personnel change.

Firms that fall below minimum capital or fail reporting duties typically face a remediation period before facing suspension, so early detection and correction matter far more than reacting after a breach.

What Must Happen Before Client Onboarding

Before a firm can sign its first client, it needs more than a license certificate on the wall. Here’s what must be in place:

1. Active CMA authorization covering the exact services being offered to clients.
2. A functioning compliance department, with a Head of Compliance already appointed and operational.
3. Client agreement templates reviewed against CMA disclosure and suitability rules.
4. Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures tested and documented.
5. Segregated client asset arrangements, if the firm will hold or direct client funds.
6. Staff training completed on suitability assessments, risk profiling, and disclosure obligations.
7. Record-keeping systems ready to log every client interaction and recommendation.

Skipping any of these steps creates real regulatory exposure. Onboarding a client before your compliance infrastructure is fully tested is one of the most common nd costly mistakes new licensees make.

Can Foreign Firms Obtain a CMA Investment Advisory License?

Yes. Foreign capital market institutions can apply for CMA authorization, including through structures built specifically for international players. The Offshore Securities Business License, for example, allows foreign capital market institutions to operate offshore securities business through their regional headquarters in Saudi Arabia, offering dealing, arranging, advising, managing, and custody services tied to foreign-issued securities.

This structure comes with its own conditions. Client bases are restricted to non-resident foreigners, Saudi government entities, and local financial institutions, with retail clients excluded, and client funds must be held in non-SAR currencies. Firms must also maintain capital covering at least one year of expenses and meet prudential and indemnity requirements. Some outsourcing flexibility exists, too; firms can outsource key roles such as compliance officer or money laundering reporting officer to law or audit firms based in Saudi Arabia.

Foreign firms interested in standard CMI licensing rather than the offshore structure follow the same core application steps as local firms, though they often need additional legal structuring around ownership and local representation.

Common Mistakes Firms Make During Licensing

Avoiding these errors from day one saves months of back-and-forth with regulators.

Why Work With a Licensing Advisory Partner

Navigating CMA licensing requirements without local regulatory experience is risky. A firm’s application can stall for months over documentation gaps, unclear governance structures, or compliance frameworks that don’t match CMA expectations. Working with an experienced advisory partner helps firms build the right structure the first time, covering everything from capital planning to compliance documentation to client onboarding readiness.

At Insights, our Investment Advisory team supports firms through every stage of entering Saudi Arabia’s capital market, from structuring the right license application to building the compliance systems regulators expect to see. If your firm is preparing to become a licensed investment advisor in Saudi Arabia, our Investment Advisory Solutions connect you with the regulatory and strategic guidance needed to move from application to client onboarding without costly delays.

Securing an investment advisory license in Saudi Arabia is a serious undertaking, but it is also a clear, achievable path when firms approach it with the right preparation. The CMA licensing framework 2026 rewards firms that build strong governance, sufficient capital, and a real compliance infrastructure before they ever meet with the CMA. With industry assets under management on track to pass USD 400 billion by 2027, the opportunity for properly licensed advisory firms is real and growing. Firms that treat licensing as a checklist to rush through often stall. Firms that treat it as the foundation of their business tend to move through faster and build the kind of trust that keeps clients long after onboarding is done. 

FAQs

How do you get an investment advisory license in Saudi Arabia?

You apply to the CMA as a Capital Market Institution, meeting capital, staffing, and fit-and-proper requirements. This includes submitting audited financials, governance documents, and a compliance framework before the CMA reviews and approves your application.

Who regulates investment advisors in Saudi Arabia?

The Capital Market Authority (CMA) regulates all investment advisors and capital market institutions in the Kingdom. No firm can legally offer investment advice on securities without CMA authorization.

What documents are required for CMA licensing?

Firms need corporate documents, audited and projected financial statements, governance and compliance policies, fit-and-proper files for key staff, and proof of minimum capital deposit.

How long does CMA approval take?

The CMA has 30 days to decide once an application is complete, but the full process, including document preparation and follow-up queries, often takes several months from start to finish.

Is CMA licensing mandatory for investment advisors?

Yes. Any firm or individual offering investment advice on securities in Saudi Arabia must hold a valid CMA license. Operating without one is a legal violation, regardless of business size.

What happens before client onboarding?

Firms must have an active license, a working compliance department, tested KYC/AML procedures, reviewed client agreements, and trained staff ready to handle suitability and disclosure requirements.

Can foreign firms obtain a CMA investment advisory license?

Yes. Foreign institutions can apply for standard CMI licensing or use structures like the Offshore Securities Business License, which allows advising and other services for non-resident clients through a Saudi regional headquarters.