Saudi Arabia's cloud infrastructure enters its AI era

Microsoft and AWS are preparing to join Google Cloud, Oracle, Alibaba Cloud, Huawei Cloud, Tencent Cloud, SAP and Saudi operators on the ground. This complete market guide explains what each model means for AI, data residency and government workloads.

From limited local choice to a multi-cloud market

Saudi Arabia is moving from a market with selected in-country cloud options to a broad and competitive infrastructure landscape. Oracle, Google Cloud, Alibaba Cloud through SCCC, Huawei Cloud and Tencent Cloud all list live Saudi regions or availability zones. SAP operates Saudi cloud locations and locally hosted application services. Microsoft has announced that Saudi Arabia East will become available in November 2026, and AWS says its first Saudi Region is on track to launch in December 2026.

That sequence matters. It gives Saudi organizations more ways to place data and applications inside the Kingdom, but it also makes cloud selection more nuanced. A region is not a universal catalogue: managed AI services, accelerator types, backup options, security products and commercial terms can differ by provider and by region. The correct question is therefore not simply “is this cloud in Saudi Arabia?” but “does the Saudi deployment support this workload, this classification and this continuity model?”

Azure Saudi Arabia East: three zones, announced for November 2026

Microsoft confirmed on 31 August 2026 that its Saudi Arabia East datacenter region is scheduled to be available in November 2026. The region is in the Eastern Province and is designed around three availability zones with independent power, cooling and networking. Microsoft positions the region for local data residency, lower-latency services, high availability and supported cloud and AI workloads for public- and private-sector organizations.

For organizations already standardized on Microsoft identity, data platforms, security tooling or Microsoft 365, the local region may reduce the architectural compromises involved in keeping eligible Azure workloads in-country. Readiness still requires a service-by-service check: organizations should confirm which Azure and AI products are generally available in the Saudi region at launch, which data is processed or supported elsewhere, and how recovery is designed if a service is regional rather than zonal.

AWS: a three-zone Saudi Region targeted for December 2026

AWS first announced its Saudi infrastructure Region in March 2024 with three availability zones and a planned investment of more than US$5.3 billion. In October 2026, AWS migration guidance stated that the Region was on track for December 2026. AWS has also announced an expanded collaboration with HUMAIN intended to make up to 50 MW of AI Zone capacity available by 2028, including AWS Trainium and NVIDIA infrastructure for training and inference.

The distinction between the general AWS Region and future AI Zone capacity is important. A standard region provides the cloud foundation; large-scale model training depends on the actual availability, topology and scheduling of accelerated compute. Teams planning for the Saudi launch should inventory application dependencies, estimate costs, check the regional services list as it is published and avoid setting migration dates around services that have not yet been confirmed locally.

Google Cloud in Dammam and Oracle in Jeddah and Riyadh

Google Cloud opened its Dammam region in 2023. Google later announced expanded data-sovereignty, security and AI capabilities for the region, including Sovereign Controls offered with local partner CNTXT. The Dammam region gives organizations an existing Saudi location for supported Google Cloud services, analytics and AI workloads, subject to the product catalogue and the operating model selected.

Oracle has the longest public-cloud-region history among the global providers covered here: its Jeddah region opened in 2020, followed by the Saudi Arabia Central region in Riyadh in July 2024. Two in-country locations can be useful for organizations evaluating geographic recovery, although each application still needs to be checked against Oracle service availability, availability-domain design and recovery requirements.

A two-zone Riyadh partner region with a Saudi operating structure

Alibaba Cloud lists Saudi Arabia (Riyadh) as a partner region with two availability zones, released in 2022. Its Saudi gateway describes dual local data centers, Class C cloud-provider certification and locally available infrastructure, data, security and cloud-native products. Buyers should still check the Alibaba regional product matrix because the Riyadh catalogue is not identical to every global Alibaba Cloud region.

The operating structure is as important as the technology. SCCC was established with stc, Alibaba Cloud, eWTP Arabia, the Saudi Company for Artificial Intelligence and SITE; stc's published reports state that it holds 55 percent. SCCC now describes itself as a Saudi national cloud provider and says it offers more than 100 localized IaaS, PaaS and SaaS products with Saudi-run managed and professional services. This makes the offering a partner-operated Saudi cloud model rather than a simple copy of an overseas Alibaba region.

A three-zone Riyadh region with cloud-native, data and AI services

Huawei Cloud launched its Riyadh Region in September 2023 with three availability zones. Huawei said the initial portfolio would span infrastructure, databases, containers, big data and AI, with 68 services across data, AI and cloud-native categories. Its compliance materials state that the Riyadh data center supports in-Kingdom processing and that Huawei Cloud holds a CST Class C registration.

Huawei said in 2025 that the Riyadh Region had entered the Saudi government's National Framework Agreement, enabling direct procurement by government entities. That can simplify the commercial route, but technical due diligence remains necessary: teams should validate the exact service, model, accelerator, backup location, support path and encryption-key design for the intended workload rather than treating the three-zone label as coverage for every Huawei Cloud product.

A newer two-zone Riyadh region in the international catalogue

Tencent Cloud's current global-infrastructure documentation lists Saudi Arabia as its Middle East region, with two Riyadh availability zones under the region identifier me-saudi-arabia. Product documentation also shows Riyadh endpoints for services including compute-adjacent logging and object storage, indicating that the region has moved beyond an announcement into the operating service catalogue.

Tencent adds another international platform to the Saudi market, particularly relevant to organizations evaluating media, gaming, communications, internet-scale applications and Tencent's AI portfolio. As with every newer region, availability is product-specific. A buyer should use the Saudi service matrix—not the provider's global catalogue—to confirm what can actually be deployed in Riyadh and whether required support and compliance arrangements are available locally.

SAP, IBM and NAVER Cloud expand the market through different models

SAP is part of the Saudi cloud footprint, but it should not be described as another general-purpose hyperscaler. SAP's trust and infrastructure material lists Saudi cloud locations in Riyadh and Dammam; SAP HANA Cloud documentation lists Dammam availability on Google Cloud; and SAP has announced in-country Business Network capabilities for public-sector data sovereignty. Availability must be checked product by product because an SAP application, SAP BTP service and SAP HANA Cloud instance can have different location and subprocessor arrangements.

IBM's Saudi approach is centered on hybrid cloud and AI delivery rather than an IBM public-cloud region in the Kingdom. IBM Cloud Satellite with Edarat was designed to bring IBM Cloud services to Saudi environments while data remains local, and IBM has made watsonx.ai and the ALLaM Arabic model available to government entities through SDAIA's DEEM Cloud. IBM also operates a Riyadh security operations center. These are meaningful local capabilities, but they are not the same topology or responsibility model as an IBM-operated public region.

NAVER Cloud is an emerging sovereign-technology partner. It has agreements with Aramco Digital and SDAIA around sovereign cloud, Arabic AI, digital twins and data-center technology, and in 2026 announced a partnership with HanmiGlobal to pursue Saudi data-center projects. These initiatives should be classified as partnerships and planned infrastructure unless a contracted service identifies an active Saudi hosting location and operating boundary.

Local infrastructure is more than a hyperscaler map

Saudi cloud infrastructure also includes locally operated data centers, managed clouds, sovereign platforms, connectivity and hybrid services. stc states that its cloud is hosted in Saudi data centers in Riyadh and Jeddah, while solutions by stc offers locally based cloud and data-center services. stc also markets a sovereign platform powered by Oracle Alloy, aimed at government, public-sector and critical-industry requirements with local operations and governance.

The wider local market is substantial. CST's first-half 2026 latency report identifies 19 Class C cloud providers operating across 31 data centers: Mobily, stc, DETASAD, Oracle, Edarat Group, SAP, Salam, Virtual Vision, Zain, Tamkeen Technologies, NourNet, Safe Decision, SITE, GO Telecom, ZainTECH, DEEM, SCCC, Google Cloud and Huawei Cloud. The list mixes telecom clouds, managed and private-cloud operators, enterprise platforms and hyperscalers; it is evidence of local infrastructure presence, not proof that every provider offers an equivalent public-cloud catalogue.

Colocation, disaster recovery, private cloud, managed security and sovereign operations can be the correct answer when an entity needs local administrative control, a Saudi public-sector procurement route, integration with existing facilities or a tightly governed hybrid boundary around especially sensitive systems. International technology can therefore appear as a public region, a Saudi-operated partner region, software hosted on another cloud, or a platform deployed inside a customer's chosen Saudi facility.

Five delivery models that should not be compared as if identical

Provider lists become misleading when every logo is placed in one row. Saudi buyers should first identify the delivery and control model, then compare services within that category.

• Provider-operated public regions: for example Oracle, Google Cloud, Huawei Cloud and Tencent Cloud, with region-specific service catalogues.
• Saudi partner regions: Alibaba Cloud technology delivered through the Riyadh partner region and SCCC operating structure.
• Announced hyperscale regions: Microsoft Azure Saudi Arabia East and the AWS Saudi Arabia Region, which should be treated as future capacity until generally available.
• Application and platform clouds: SAP products hosted in Saudi locations or on an underlying hyperscaler, with residency assessed service by service.
• Hybrid and sovereign deployments: IBM, NAVER, Oracle Alloy and other technologies deployed through Saudi partners, government clouds, private facilities or customer-controlled infrastructure.

Data residency is necessary for some workloads, but it is not the whole control model

Saudi government cloud decisions sit inside several overlapping frameworks. The Digital Government Authority describes Cloud First as a mechanism for accelerating government cloud adoption. CST regulates cloud service provision and data-center services. The National Cybersecurity Authority’s Cloud Cybersecurity Controls set minimum requirements for cloud service providers and tenants. SDAIA and the National Data Management Office provide the national data-governance and classification framework, while the Personal Data Protection Law and its implementing rules apply where personal data is processed.

A government entity should begin with the information and service, not the provider logo. Classify the data; identify sector obligations; map where data, backups, logs, support access and model telemetry travel; define the identity and encryption boundaries; then choose the public, sovereign, private or hybrid landing zone that satisfies those requirements. “Hosted in Saudi Arabia” does not by itself answer who can administer the environment, where support data goes, how keys are controlled or whether every AI service keeps prompts and outputs inside the same boundary.

Inference becomes easier to localize; training still depends on capacity

The immediate benefit of more local regions is likely to appear first in enterprise inference: assistants over internal records, document intelligence, forecasting, computer vision and workflow agents can sit closer to Saudi users and systems of record. Lower network distance can improve responsiveness, while local storage and processing options can simplify—but not automatically satisfy—residency requirements.

Large-model training is a different infrastructure problem. It needs dense accelerator clusters, high-bandwidth networking, storage throughput, power and cooling at a scale that is not implied by the existence of a general-purpose cloud region. Organizations should separate three questions: where the base model was trained, where their own tuning or retrieval data is processed, and where production inference and logs reside. Those answers may involve different facilities and different contracts.

Eight checks before a Saudi government or regulated AI deployment

The expanding provider landscape creates leverage for buyers, but only if requirements are made comparable. A useful request for proposal should ask each provider and implementation partner to answer the same architecture questions.

• Workload and data classification: which records, prompts, embeddings, outputs and logs are involved?
• Service geography: where are primary data, replicas, backups, telemetry and support artifacts stored and processed?
• Regional product availability: are the required model, GPU, database, security and observability services actually offered in the Saudi region?
• Operational sovereignty: who can administer the platform, from which jurisdictions and under which approval process?
• Encryption and keys: can the entity control keys, separation of duties and emergency access?
• Resilience: is the design zonal, multi-region, hybrid or recoverable to an entity-controlled environment?
• AI governance: how are models evaluated, prompts protected, outputs reviewed and consequential actions approved?
• Exit and portability: how will data, models, containers, policies and audit history move if the provider or operating model changes?

The competitive advantage will come from governed use, not capacity alone

By the end of 2026, announced schedules point to Saudi organizations having a materially wider selection of in-country platforms: US and Chinese hyperscalers, Saudi-operated partner clouds, enterprise application clouds, telecom and managed clouds, government platforms and sovereign or hybrid deployments. That is a foundational change for the Kingdom’s AI ambitions and for government entities that have waited for a stronger local service footprint.

Infrastructure, however, is only the first layer. The organizations that benefit most will be those that modernize data estates, build reusable landing zones, measure model quality, automate evidence collection and make approval boundaries explicit. The winning architecture will not be “all cloud” or “one cloud.” It will be the smallest set of platforms that can meet the workload’s performance, sovereignty, security and operating requirements—with a clear path to change later.

Sources

• Microsoft — Saudi Arabia East available in November 2026: https://news.microsoft.com/source/emea/2026/08/microsoft-announces-saudi-arabia-east-datacenter-region-will-be-available-in-november-2026
• AWS — planning migration to the Saudi Arabia Region: https://aws.amazon.com/blogs/migration-and-modernization/how-to-plan-your-migration-to-the-aws-region-in-saudi-arabia/
• Google Cloud — Dammam region and sovereign capabilities: https://cloud.google.com/blog/products/identity-security/google-cloud-expands-services-in-saudi-arabia-delivering-enhanced-data-sovereignty-and-ai-capabilities
• Oracle — Riyadh and Jeddah cloud regions: https://www.oracle.com/sa/cloud/cloud-regions/riyadh/
• Amazon — AWS Saudi Region and AI Zone plans: https://www.aboutamazon.com/news/aws/aws-cloud-region-saudi-arabia
• Oracle — Saudi Arabia Central region release note: https://docs.oracle.com/en-us/iaas/releasenotes/changes/45cb2bf5-290f-40fb-af89-b7b9455f35fe/index.htm
• stc — local Saudi cloud and data centers: https://cloud.stc.com.sa/
• stc — sovereign cloud powered by Oracle Alloy: https://www.stc.com.sa/en/business/integrate/cloud/stc-Alloy.html
• Digital Government Authority — cloud computing in government: https://dga.gov.sa/sites/default/files/2024-08/Cloud%20Computing%20and%20its%20Role%20in%20Accelerating%20Digital%20Transformation%20and%20its%20Sustainable%20Impact%20in%20the%20Government%20Sector%20-%20V1.0.pdf
• CST — cloud computing regulation and registered providers: https://www.cst.gov.sa/en/knowledge-center/digital-knowledge/cloud-computing
• NCA — Cloud Cybersecurity Controls: https://nca.gov.sa/en/regulatory-documents/controls-list/ccc/
• SDAIA — data and AI laws, regulations and policies: https://sdaia.gov.sa/en/SDAIA/about/Pages/RegulationsAndPolicies.aspx
• Alibaba Cloud — Riyadh partner region and Saudi gateway: https://www.alibabacloud.com/en/campaign/saudi-arabia-gateway
• Huawei Cloud — launch of the three-zone Riyadh Region: https://www.huaweicloud.com/intl/en-us/news/20230904160557526.html
• Tencent Cloud — global regions and Riyadh availability zones: https://intl.cloud.tencent.com/global-infrastructure?lang=en
• SAP — Saudi cloud data-center locations: https://www.sap.com/about/trust-center/certification-compliance/central-cloud-services-c5-2026.html
• IBM — Cloud Satellite with Edarat in Saudi Arabia: https://mea.newsroom.ibm.com/2021-09-01-Edarat-Group-Adopts-IBM-Cloud-Satellite-to-Accelerate-Digital-Transformation-for-its-Enterprise-Customers-in-Saudi-Arabia/
• NAVER Cloud — Saudi sovereign AI and cloud collaboration: https://www.navercorp.com/en/media/pressReleasesDetail?seq=31670
• CST — 2026 Saudi cloud providers and data-center locations: https://www.cst.gov.sa/en/knowledge-center/reports/cloud-latency-report-26-dashboard
• stc — ownership and operating structure of SCCC: https://www.stc.com.sa/content/dam/groupsites/en/pdf/stc2023-annual-report-en-v4.pdf
• SCCC by stc — Saudi-operated cloud services: https://sccc.sa/en
• Huawei Cloud — Saudi AI capabilities and government framework: https://www.huaweicloud.com/intl/en-us/news/20250209215529936.html
• Tencent Cloud — Saudi Arabia region and zone identifiers: https://intl.cloud.tencent.com/ind/document/product/416/64284
• IBM — watsonx.ai and ALLaM on Saudi DEEM Cloud: https://mea.newsroom.ibm.com/watsonx-and-ALLaM-on-DEEM-cloud
• NAVER Cloud — Saudi data-center infrastructure partnership: https://navercorp.com/en/media/pressReleasesDetail?seq=10034276