Services · Mobile app development · Fintech apps
Codeeo offers fintech app development in Saudi Arabia for payment providers, finance companies, investment platforms, insurers and the businesses that serve them. We design and build customer apps, operations dashboards and integrations that work with the Kingdom's national infrastructure: Nafath for identity, mada and SADAD for payments, instant transfers, open banking under SAMA's framework, and ZATCA e-invoicing. Every build is planned against the licence you hold or are applying for, so the software and the regulatory file tell the same story.
The Financial Sector Development Program under Vision 2030 has pushed digital payments, new licence categories and open banking forward quickly. That opens room for new products, and it raises the bar for how carefully they are built, tested and documented.
200+ companies servedFrom a first store to an ADX listed developer
Platform capabilities
A Saudi fintech app sits on a stack of national systems that did not exist in this form a decade ago. Identity is verified through Nafath. Card payments run on mada, the domestic network, with Apple Pay widely accepted. Bills are settled through SADAD. Instant account to account transfers have become routine for customers. SAMA's Open Banking Framework sets how account data and payment initiation are shared, and ZATCA's Fatoora programme defines how business invoices must be produced.
Each of these brings its own technical rules, certification steps and partner contracts. Our work is to combine them into one product that feels simple to the customer and holds up under review. The capabilities below are the ones we assemble most often, in different combinations depending on whether you are a payments company, a lender, an investment platform or an insurer. Arabic is the primary language in every design, with English built to the same standard.
Onboarding through Nafath for citizens and residents, with consent captured for each data request and results stored against the customer file. For non residents or corporate clients we add document capture, liveness checks and manual review queues through a KYC provider you choose. Verification level drives what each customer can do, so limits rise as more checks are completed.
Verified customers without branch visits.
mada debit acceptance, Apple Pay, SADAD bill payment and account to account transfers, integrated through licensed processors and banks. Every state, including pending, reversed and partially settled, is designed and tested so the customer always knows what happened. Reconciliation files from each processor are matched automatically against your ledger every day.
Payments customers recognise and trust.
Digital wallet app development in Saudi Arabia for licensed e-money and payment institutions or their partners: top up, send, request, merchant QR and spending insights, with limits tied to the customer's verification level.
A wallet that grows within your licence limits.
Application, SIMAH credit check consent, affordability questions, contract signature and instalment schedules for finance companies and buy now pay later providers. Collections reminders are written to be clear and respectful, in line with consumer protection expectations.
Faster decisions with a full record of each one.
For CMA authorised firms, onboarding with suitability assessment, product disclosures, subscription flows, portfolio views and statements. Crowdfunding platforms get campaign pages, investor limits and payout tracking. Sharia compliant product labels and screening results can be displayed where your offering includes them.
Investors see what they own and why it suits them.
Account aggregation, income verification and payment initiation through licensed open banking providers, with granular consent, expiry and revocation screens that match the framework's expectations. Data received is used only for the purpose the customer approved.
Better products built on data customers chose to share.
For SME and corporate products, company onboarding with commercial registration checks, multiple signatories, approval limits, bulk payments and invoice generation compatible with ZATCA Fatoora through an accredited provider. Accountants can be given read only access so month end does not depend on exported spreadsheets.
Business customers manage finance and tax filings in one place.
Sanctions and PEP screening, transaction monitoring rules, case queues and suspicious activity workflows, with reports your compliance officer can use when engaging with SAMA or the relevant authority.
Controls you can demonstrate, not just describe.
Controls mapped to NCA Essential Cybersecurity Controls, the NCA cloud controls and the SAMA Cyber Security Framework: encryption, key management, device binding, fraud signals and privileged access management for staff.
An evidence pack ready for your next assessment.
Back office tools for teams spread across Riyadh, Jeddah, the Eastern Province and beyond, with regional queues, branch roles and support tooling that keeps every customer interaction on one record. Managers compare service levels by region from a single dashboard.
One operation, wherever your staff sit.
Where we fit
Fintech in the Kingdom is not one market. It is a set of licence categories overseen by SAMA and the Capital Market Authority, each with its own capital rules, controls and product limits. Insurance sits with the Insurance Authority under its own requirements. The right app depends heavily on which route you are taking, so we ask about licensing before we ask about features. These are the four routes we support most often across the country, each with a different first release.
Regulators expect to see a working product, a clear risk assessment and evidence of controls. We help you build a credible minimum product for the SAMA sandbox or a CMA FinTech experimental permit, documented so that your application describes the software accurately. We do not give legal or licensing advice, but we work closely with the advisers who do. Test cohorts, feedback logs and incident records are produced as the product runs, because regulators often ask for them during review.
Build only what the application needs, then grow with approval.
Products that worked for an early customer base in one city often strain when marketing goes national. We review architecture, onboarding drop off, payment failure rates and support load, then plan the upgrades needed for customers in every region, including those on older phones and slower connections outside the main cities. We also look at regional differences in behaviour, such as payment preferences and peak usage around salary dates and religious seasons, before committing to new features.
Foreign companies bring a proven product but often underestimate Arabic first design, data residency, local payment rails and Saudi identity flows. We adapt or rebuild the customer layer for the Saudi market and connect it to local partners, while your core platform keeps doing what it already does well. Contracts with local partners, data hosting and support in Arabic are planned as part of the same programme, so launch is not delayed by a missing piece outside the code.
Localisation goes deeper than translation.
Retailers, telecoms, employers and marketplaces increasingly offer payments, instalments or wallets inside their own apps through licensed partners. We build the embedded experience and the integrations, keeping clear in the product and the contracts which party is regulated for what. Disclosure screens make it obvious to the end customer who provides the financial service, which protects your brand and your partner's licence.
Commercial models
We offer three models. A fixed scope build suits a defined first product or a sandbox application. A dedicated team of designers, engineers and testers suits firms running a longer roadmap with frequent regulatory change. A support and improvement retainer suits live apps that need steady upkeep. Our team of 80+ works across Riyadh, Dubai and Karachi, with Riyadh based people available for workshops in the capital and by video call for teams elsewhere. Cost is driven by licence complexity, the number of national systems and partners involved, compliance tooling, user roles and the depth of assurance testing. Estimates are written against a scope document with every assumption stated.
A defined build with a deadline
We agree what the product has to do, write it down with a price and a date, and build exactly that. Changes are priced before they are made, not discovered on the invoice.
A product that keeps evolving
Named engineers who work your hours, join your standups and stay on the codebase. You direct the backlog; we own the quality of what ships.
Something live that needs looking after
A monthly block of hours for improvements, fixes and the small requests that otherwise wait months. Unused hours carry for a quarter.
Technology
Native Swift and Kotlin or Flutter and React Native, chosen per product and security need. Backends run on cloud regions inside the Kingdom or your own data centre, with infrastructure as code so your team can audit and reproduce every environment. Monitoring covers payment success rates and onboarding completion, not only server health.
01Mobile
02Data and cloud
03Marketing and tracking
Saudi identity, payment rails, data residency and Arabic first design.
Customers expect Nafath onboarding, mada and Apple Pay at checkout, SADAD for bills and instant transfers between banks. Regulators expect personal and financial data handled under PDPL and sector rules, security mapped to NCA and SAMA frameworks, and clear licence boundaries. And customers expect Arabic interfaces that read naturally, not translated screens. A product built for another market usually needs changes in all four areas. We plan for those changes from the first workshop, which is cheaper than retrofitting them after a failed review.
Schedule a free consultation and get a written recommendation, with costs, before you commit to anything.
Get in touchPROVEN RESULTS
Swift
Kotlin
Flutter
React Native
PostgreSQL
MySQL
MongoDB
AWS
Azure
Docker
GA4
Google Tag Manager
Search Console
Meta Pixel
Looker Studio