SCIS License: How to Verify a Security Company is Licensed in Saudi Arabia

Before you award a security services contract in Saudi Arabia, verifying that the provider holds a valid license from the Security Companies and Investigations Authority (SCIS) is not optional — it is the first thing any professionally managed procurement process should do. Contracting an unlicensed or inadequately licensed security provider creates legal liability, regulatory exposure, and operational risk that no savings in the contract rate can justify. This guide explains the SCIS licensing system, what each classification means for your procurement, and how to verify status before you sign.

What is SCIS and what authority does it have?

SCIS stands for the Security Companies and Investigations Authority (جهاز أمن الشركات والتحقيقات الخاصة), which operates under the Ministry of Interior of Saudi Arabia. SCIS is the regulatory body responsible for licensing, classifying, and overseeing all private security companies operating in the Kingdom.

Every private security company operating legally in Saudi Arabia must hold both an MOI private security license and a SCIS classification. The MOI license establishes the right to operate; the SCIS classification defines what category of services the company is authorized to provide. A company can hold an MOI license without SCIS classification, but SCIS classification without a valid MOI license is impossible. Both must be current for a provider to be fully compliant.

Understanding SCIS classification categories

SCIS classifies private security companies into different categories based on their authorized scope of operations. While classification structures are periodically updated by the MOI, the practical distinctions that matter to procurement officers are:

If you are procuring security for a facility that operates across multiple cities in Saudi Arabia, or for a sector that requires specific regulatory clearance (healthcare, banking, oil and gas, government), you need to confirm that the provider's SCIS classification matches these requirements. A Class C provider cannot legally operate a national contract regardless of what they quote you.

Why SCIS classification matters beyond licensing

SCIS licensing is not purely a box-checking exercise. The classification process requires security companies to demonstrate minimum standards in guard training, operational capability, supervision structure, and documentation practices. Companies that have invested in building a genuine operational infrastructure tend to earn higher classification. Companies that are primarily body-supply operations with minimal management overhead tend to hold lower classifications.

This correlation is imperfect — classification alone does not guarantee quality — but it gives you meaningful baseline information at the start of a procurement process. A provider who cannot tell you their SCIS classification, or who provides vague answers about their authorization, should be investigated further before you proceed.

How to verify SCIS license status

There are two primary methods to verify that a security company holds a valid SCIS license and classification:

Method 1: Request documentation directly

Ask the security company to provide: their MOI private security license certificate (showing license number, issue date, and expiry date), their SCIS classification certificate, and their current Commercial Registration (CR) certificate. All three should be consistent in company name and current in validity. A legitimate, licensed provider will have these documents accessible and will provide them without hesitation or delay.

Method 2: Verify through the Ministry of Interior

The Ministry of Interior's Absher platform and related government service portals allow verification of licensed security entities. For formal procurement processes — particularly in government or semi-government organizations — direct verification through the MOI portal is the appropriate standard. Contact the MOI's relevant directorate if you require formal verification for a competitive tender process.

Red flags to watch for

Document name mismatches are more common than many procurement officers realize. Security companies sometimes bid under a parent company name while the license is held by a subsidiary — or vice versa. The legal entity that holds the license and the legal entity you are signing the contract with must be the same, or the license does not apply to your contract.

Individual guard licensing: separate from company licensing

SCIS licenses the company. But each individual security guard deployed at your facility must also hold a personal security guard license issued by the MOI. Company licensing and individual guard licensing are separate requirements, and a licensed company can deploy unlicensed guards if their internal compliance controls are weak.

When you request documentation from a prospective provider, ask not only for the company license but also for a sample of individual guard licenses from their active deployments, and request a clause in your contract requiring that only individually licensed guards are deployed at your facility with documentation available for audit.

SCIS licensing and sector-specific requirements

SCIS classification is the baseline for all security operations. Certain sectors impose additional authorization requirements on top of SCIS:

• Industrial and critical infrastructure: Requires HCIS (High Commission for Industrial Security) authorization in addition to SCIS. See our HCIS Compliance Security Guards page.
• Banking and financial institutions: SAMA (Saudi Central Bank) regulations impose specific security requirements for bank premises. Your provider should be familiar with these.
• Healthcare: CBAHI and MOH facility security standards apply. Guards must typically undergo additional orientation for clinical environments.
• Government facilities: Additional vetting and clearance requirements may apply depending on the ministry and facility classification.

None of these sector-specific requirements replace SCIS licensing — they layer on top of it. A provider operating in any of these sectors without the appropriate sector-specific authorization is non-compliant regardless of their SCIS status.