CST Cloud Computing Regulations (CCRF) — Registration Classes & Buyer's Guide

Saudi Arabia is one of the few markets where cloud provision itself is a regulated activity. The Communications, Space & Technology Commission (CST) — formerly CITC — first issued the Cloud Computing Regulatory Framework (CCRF) in 2019, and in October 2023 approved updated Cloud Computing Service Provisioning Regulations that superseded CCRF version 3. The core mechanics carried through: any provider that directly or effectively controls data-centre or critical cloud infrastructure used to serve Saudi customers must register with CST, and registration falls into categories tied to the sensitivity of subscriber data the provider is allowed to handle.

That data-classification ladder is what buyers actually need to understand. CST recognises four levels — from Level 1 public content up to Level 4 highly sensitive data — and providers in higher registration classes may carry the more sensitive tiers, including government workloads. In practice this means a marketing site and a ministry database cannot be judged by the same checklist: the first works on almost any registered provider, the second belongs only with a provider whose class and in-Kingdom infrastructure match the data. Because classes, obligations and even the framework's name have changed more than once, treat CST's published regulations and its current cloud register as the source of truth — verify a provider's entry rather than relying on a badge on a sales page.

For most private-sector buyers the practical checklist is short: confirm the provider appears on the CST register, ask which category it holds, and confirm where the infrastructure physically sits. Skyline Cloud answers the infrastructure question plainly — cloud hosting in Saudi Arabia runs from Riyadh (ksa-c-1) and Jeddah (ksa-w-1), with a Dammam region powered by Google Cloud (me-central-2), billed in SAR with Arabic and English support. If you are mapping your own data against the CST levels, our team can review the classification with you, and a free 14-day trial (no credit card) lets you evaluate the platform before any commitment.