A register that distinguishes official text, interpretation, and proposal. An excerpt check is not a full legal review; pending references stay visible.
15 limited excerpt checks · 1 references pending
Limited excerpt checks cover seven Saudi regulatory/program references and eight technical or international comparison references. The MCIT contact-route reference remains pending after access failures. These checks are not a complete current-law audit or qualified legal sign-off. NCA, NDMO and sector classifications remain withheld.
Editorial review is limited to the displayed excerpts. Last review: . Recheck due: . This is a content-maintenance date, not a legal effective date.
saudi-hosting-sources-2026-10-03.2
The official service URL was retried on 3 October 2026, but returned an access-denied page. Its inherited excerpt remains unverified. This is a proposed submission route only and never evidence of endorsement.
Official URL retried via web fetch and direct HTTP. The saved HTTP 200 body is an Unauthorized Access page, not the service text. Inherited excerpt remains unverified.
applications, proposals, or complaints can be submittedSHA-256: 7397d28577b93d051440ed168b0487424a779037fd18d56a555708f41a6493ef
Open the original referenceThe decision approves version 4, replaces the earlier framework and specifies 10 October 2023 as the effective date. Provider category remains unassigned.
Official text retrieved; only the cited boundary checked, not a complete amendment history.
Cloud Computing Service Provisioning RegulationsSHA-256: 292ef8051c077498760689b9cf3aabf2392b594f524c1831ada21fc1688663d2
Open the original referenceThe current CST landing page describes provider registration procedures and requirements. Its corrected URL and decision number were checked; the full guide and provider-category criteria were not reviewed. No provider class is assigned.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
registration procedures and requirements for cloud computing service providers operating in the Kingdom of Saudi Arabia.SHA-256: 06e440519ab0ee46ffbbf3b770bff6c9b7e76a928fcb245cbc1600fa0d4b005a
Open the original referenceSaudi Tech has its own registration and logo approval process; the independent proposal cannot confer that status.
Official text retrieved; only the cited boundary checked, not a complete amendment history.
proof of localized activities for the product value chainSHA-256: a1c642a37ca8705b3e7b0cff41289d80ca474065e01f5c203942dd97ef961c74
Open the original referenceAnnex D deletes the earlier storage/processing/disaster-recovery and monitoring/support localization subcontrols and directs entities to NDMO. This does not remove other requirements or establish an organization’s NCA/NDMO category. The Arabic version governs interpretation.
The current NCA controls landing page links this exact CCC-2:2024 PDF. Annex D was checked in text and rendered page form. No full amendment-history or organization-specific applicability audit.
Controls related to data localization have been transferred from the document to the National Data Management OfficeSHA-256: a0f9e91559af405d8de160f26b60de037c5984e062302c0721f03b1656d91e54
Open the original referencePersonal-data processing calls for a scoped PDPL review; the territorial conditions and exceptions must be established separately.
Official text retrieved; only the cited boundary checked, not a complete amendment history.
يُطبق النظام على أي عملية مُعالجة لبيانات شخصية تتعلق بالأفراد تتم في المملكة بأي وسيلة كانتSHA-256: e20b56d52313fbac5eb38383a818043da4ec9e485ab1fd9b16662372cd4815c0
Open the original referenceThe text describes adequacy and conditional safeguard routes. An overseas component alone does not establish a legal violation or a valid transfer route.
Official text retrieved; only the cited boundary checked, not a complete amendment history.
تقوم جهة التحكم باستخدام الضمانات المناسبة الآتيةSHA-256: 46989d8ea20ac1a739d2f75812744d06a7c2873d9572a7a0f82d1141188da033
Open the original referenceLicensed accreditation issuers are a separate scheme. This project issues no accreditation or hosting badge.
Official text retrieved; only the cited boundary checked, not a complete amendment history.
جهة حاصلة على ترخيص من قبل الجهة المختصة لممارسة أنشطة إصدار شهادات الاعتماد.SHA-256: 372c112589c4b89043f4aedb21210af8a13e74fbc7c3b0d97934c7d9cadbe75d
Open the original referenceThe scheme operator restricts its label to qualifying offerings, including within mixed portfolios. This supports service-level scope design only; it is neither Saudi law nor a status granted by this project.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
the logo may only be used for offerings that fully meet the criteria.SHA-256: 29fb0414ecf6f9f558c1e9f30c3d7ab629d6a89b2997007bb1d51507de0dcd33
Open the original referenceCloudflare explains that proxied DNS returns its address instead of the origin address. This is technical evidence for treating public IP geography as insufficient proof of origin or backend location.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
receive a Cloudflare IP address instead of your origin server's real IP address.SHA-256: 04be06b2d61cb4ab8ce0398a01145a7c2fd5b00c760148005276a39ee7d18888
Open the original referenceDNS-01 demonstrates control of a domain through a designated TXT record. Domain control does not prove hosting geography, production architecture or regulatory compliance.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
prove control of that domain by provisioning a TXT resource recordSHA-256: 181f3ce43e09ad0777f69783a60b20f1f59743b3e08ff029aa67b01fa90b19cf
Open the original referenceThe standard defines a credential whose authorship can be cryptographically checked. Verifying it does not establish the truth of its claims. This is a future design reference; no credential issuer is implemented here.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
A tamper-evident credential whose authorship can be cryptographically verified.SHA-256: 454e9f55dda1b4aa1d362d75e4243ae1c4d0532dff31aff7b1df5dc4d0f508a3
Open the original referenceThe standard describes publishing credential status, including suspension and revocation. It informs the independent proposal’s lifecycle only; this project runs no credential-status service.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
publishing status information such as suspension or revocation of Verifiable CredentialsSHA-256: 1e0c0bb78e17d6fb70374622e6abf516480b61cb872f350c79633c3cfd4f7ca7
Open the original referenceThe quick reference states the normal-text contrast threshold and its exceptions. It is an accessibility reference, not evidence that every surface meets all WCAG criteria.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
The visual presentation of text and images of text has a contrast ratio of at least 4.5:1SHA-256: 384b07437c9cb322c38b0a110884fd27995490dae6c3e9386ba60cb7b89550dd
Open the original referenceThe Commission page identifies a proposal, COM(2026) 502. This is international policy context, not enacted Saudi law; the source check does not determine the proposal’s later legislative progress.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
The Commission has adopted a proposal for the Cloud and AI Development Act (CADA)SHA-256: 2c10784b8be69703a942717d3ee81fb9884d7220e6a4842ebf247ff8a18822b5
Open the original referenceThe policy explanation distinguishes location from additional sovereignty assurances. It provides comparison context for the independent proposal only; its four EU levels are not the project’s four Saudi hosting scopes.
Publisher or scheme-operator text retrieved; only the cited boundary checked, not a complete legal, technical-conformance or amendment-history audit.
where data is processed and stored in infrastructure located in the UnionSHA-256: 18e7a20c9f444ef6ceeae9813ed4809a9beb933bb35db55d1dce387353eab9d2
Open the original referenceEach reference retains its ID, link, locator, review date, and excerpt hash. Changes require a text comparison, affected-rule mapping, editorial review, new tests, and a separate version. Updates are never automatically approved, and opening this page does not reset a review date.