Services · Mobile app development · Banking AI agents

Governed AI agents for Saudi banks, built to SAMA, PDPL and NCA expectations.

Banking AI agent development Saudi Arabia institutions can defend in front of a regulator: we design, build and operate AI agents for banks, finance companies, payment providers and fintechs across the Kingdom. Our agents answer customers, prepare cases and draft work for staff, using national identity, payment and open banking rails where your licence allows. Every agent has a defined task, approved data sources, human approval for consequential decisions and a complete audit trail.

Saudi financial services are changing quickly under Vision 2030's Financial Sector Development Program and the National Fintech Strategy. AI agents can take on real work in that shift, but only when they are designed around the rules that already govern the sector.

Built for
SAMA licensed banks, digital banks, finance companies, payment and open banking providers operating across the Kingdom.
Typical timeline
Set after discovery and your first security and model risk review, with each rollout wave across regions scheduled and agreed in writing.
What you own
Agent code, prompts, evaluation sets, logs, connectors and documentation, all hosted in infrastructure and accounts your institution controls.
Rated
4.7 / 5 from 23 Google reviews

200+ companies servedFrom a first store to an ADX listed developer

Modon
Majid Al Futtaim
HP
Belkin
Dulsco Group
OneClickDrive
Hanayen
HMS
Clocksprings
Ghezlan

National capabilities

What a Kingdom wide banking agent programme can include.

A national bank does not need one clever chatbot. It needs a set of narrow agents that work across many channels, regions and customer groups while meeting the same control standard everywhere. That means connecting to the shared infrastructure Saudi financial services run on: Nafath for identity, mada and sarie for payments, SADAD for bills, SIMAH for credit information, and open banking interfaces under SAMA's framework.

The capabilities below describe a typical national programme. Few institutions build all of them at once. Most start with one or two, prove the governance model, and then add agents on the same foundations so each new one reuses controls the regulator and internal audit have already reviewed. Good AI agent development for banks Saudi Arabia wide is less about the model and more about these shared foundations.

Explain your project
  • Omnichannel retail service agent

    One agent serves the mobile app, website and contact centre with the same knowledge and rules. It handles card, account and transfer questions for authenticated customers in Arabic and English, recognises dialect from the Najd, Hijaz, Eastern Province and south, and hands complex requests to staff with the conversation and account context attached.

    Customers get the same answer whichever channel they use.

  • Nafath verified actions

    For sensitive actions such as updating contact details or raising a card limit within policy, the agent triggers step up verification through Nafath or your approved authentication flow before anything changes. It cannot bypass the step, and every verified action is logged with the verification reference.

    Sensitive changes only happen after the customer proves who they are.

  • Open banking insights assistant

    Where customers have consented to share accounts held at other banks under SAMA's open banking framework, the agent helps them understand spending, recurring payments and upcoming obligations across those accounts. Consent scope, expiry and revocation are respected at every request, and the agent explains clearly what data it can see.

    Consented account data turned into useful guidance, inside consent limits.

  • Card dispute and fraud intake

    When a customer reports an unknown mada or credit card transaction, the agent blocks the card through your approved flow if requested, gathers the dispute details, attaches transaction data and opens the case in your disputes system. Investigation and refund decisions stay with your disputes and fraud teams.

    Disputes opened correctly in one conversation.

  • SME banking agent

    Small business owners ask about account services, payroll through Mudad, bill collection through SADAD and point of sale acceptance. The agent answers from your product rules, checks which documents an application needs and tracks progress, so a business owner in Abha gets the same service as one in Riyadh.

    Consistent SME service across every region you operate in.

  • Compliance and AML case preparation

    For monitoring alerts, screening hits and periodic KYC reviews, the agent assembles evidence from your core, screening and SIMAH data where permitted, drafts the case narrative and proposes next steps. Investigators decide, and the agent records their decision and reasons for audit.

    Case handlers decide faster with evidence already gathered.

  • Islamic finance documentation helper

    Retail and corporate customers ask how Sharia compliant products are structured and what they are signing. The agent explains using only material your Sharia board has approved, references the relevant contract section and refers anything beyond that material to a specialist.

    Product explanations match approved Sharia wording in every region.

  • Respectful collections assistant

    The agent sends reminders, explains options already permitted by your policy and books calls with collections officers, following SAMA's consumer protection expectations on tone and timing. It stops contact on request and never negotiates terms itself.

    Earlier, fairer contact with customers who fall behind.

  • Staff knowledge agent for every branch

    Branch and contact centre staff in dozens of cities need the same current answer on products, procedures and regulatory requirements. An internal agent answers from your policy library with citations, notes when a rule changed recently and sends unclear questions to the policy owner. New joiners in smaller branches get the same support as teams at head office.

    One current answer for staff, wherever they sit.

  • Programme governance console

    A single console lists every agent in production, its owner, risk rating, model and prompt version, data access, test results, escalation rates and drift checks, by region and channel. Compliance, model risk and internal audit use it to oversee the whole programme.

    One place to show a regulator how every agent is controlled.

Who this is for

Four kinds of Saudi institution planning agents at scale.

Banking in the Kingdom is concentrated in a small number of large national banks with branches in every region, alongside newer digital banks, finance companies and a fast growing group of licensed fintechs. Each has a different starting point for AI agents. What they share is the need to satisfy SAMA, the PDPL as enforced by SDAIA, and NCA's cyber security controls with every agent they deploy. Most also want Arabic first experiences that do not feel translated, and products that respect Islamic finance requirements where they apply.

01

A national bank with branches and service centres in every region

The challenge is consistency: customers in Tabuk, Qassim and Jazan deserve the same answer as those in Riyadh, in the dialect they use. We design one agent platform with shared controls and regional test sets, and roll it out in waves so each region is measured before the next goes live. Head office keeps one governance view across all of them. Seasonal demand in the Makkah region and Ramadan service hours are built into capacity plans rather than discovered during the first peak.

Rollout in measured waves, not a single national switch on.

02

A digital bank built for mobile customers

Digital banks licensed by SAMA serve customers almost entirely through the app, so service agents carry much of the customer relationship. We build them with Nafath step up verification, clear handover to people and the evaluation discipline your risk function expects, from the first release onwards. Because app reviews and social media amplify service failures quickly, we pay particular attention to how the agent says it does not know something.

03

A finance company or BNPL provider

Consumer and SME finance companies handle large volumes of application, repayment and statement questions. Agents that explain products, collect documents and send reminders within consumer protection rules let small operations teams serve customers in every city without opening more service centres.

04

A payment or open banking provider

Fintechs building on SAMA's open banking framework need agents that understand consent, explain data use plainly and handle merchant and customer support at national scale. We design those agents so consent rules are enforced in code rather than left to the prompt. Payment initiation, now covered by the framework's second release, gets the same treatment: the agent can explain and prepare, while initiation follows your certified flow.

Consent checked by the system, not trusted to the model.

Six phases of a national banking agent programme.

  1. 01Portfolio and risk triageWe list candidate tasks across the bank, rate each for value and risk with your compliance and model risk teams, and choose a first agent that proves the governance model.
  2. 02Regulatory design packData flows, PDPL lawful basis, hosting inside the Kingdom, NCA control mapping, outsourcing considerations and human approval points are documented for internal review.
  3. 03Shared foundationsIdentity, logging, retrieval, evaluation tooling and the governance console are built once, so later agents reuse approved components instead of starting again.
  4. 04First agent and pilotThe first agent goes live with a limited group, full output review and measured accuracy, escalation and time saved against agreed acceptance criteria.
  5. 05Regional wavesRollout extends region by region, with dialect test sets for each, monitoring of local escalation patterns and a review before each new wave begins.
  6. 06Programme operationsOngoing drift checks, sampling, periodic model reviews and a release process that reruns every test set keep agents reliable as products and rules change.

Technology

What we build this with.

Models, hosting and tooling are chosen to fit your data classification and residency rules, including in Kingdom cloud regions or on premises infrastructure. Agents integrate through your API gateway, identity provider and security monitoring rather than around them.

01Mobile

  • Swift
  • Kotlin
  • Flutter
  • React Native

02Data and cloud

  • PostgreSQL
  • MySQL
  • MongoDB
  • AWS
  • Azure
  • Docker

03Marketing and tracking

  • GA4
  • Google Tag Manager
  • Search Console
  • Meta Pixel
  • Looker Studio

Questions Saudi institutions ask about banking AI agents.

SAMA's rules, the PDPL, NCA controls and SDAIA's AI guidance, at minimum.

SAMA sets the banking, consumer protection, outsourcing and cyber security expectations for licensed institutions. The Personal Data Protection Law, overseen by SDAIA, governs how customer data is processed and transferred. NCA's cyber security controls apply to many institutions and their systems. SDAIA has also published AI ethics principles and generative AI guidance. Your legal and compliance teams interpret these; we design agents that make compliance demonstrable. In practice that means a design pack, evaluation evidence and logs that can be shown to an examiner without assembling them after the fact.

Tell us what the business needs. We will tell you what to build first.

Schedule a free consultation and get a written recommendation, with costs, before you commit to anything.

Get in touch

PROVEN RESULTS

4.7 / 5from 23 Google reviews