The Activities Edition

Vol. 16 — For Founders, Country Heads & GCs

The MISA Activities & ISIC4
Guide to Saudi Arabia

How activity selection at MISA application drives every downstream decision — capital, sectoral restrictions, tender eligibility, the visas you can pull and the customers you can sell to. Get this right at hour one or pay for two years.

Direct answer. Every Saudi MISA licence is built around a set of ISIC4 economic-activity codes that define what your company can do — and equally importantly, what it cannot. Activity selection drives minimum capital (SAR 500K for services LLC, SAR 26.6M for trading, SAR 30M for industrial), determines sectoral restrictions and partner requirements, decides which government tenders you can bid for, and shapes the categories of work visa you can pull. Adding activities later requires a MISA amendment, ZATCA notification, possibly a Commercial Registration update — typically 4–8 weeks. Picking the right initial bundle saves months of remediation. The right bundle is precise, not maximalist: pick what you actually need, plus one strategic neighbour for optionality.

Takeaways

  • ISIC4 (International Standard Industrial Classification, rev. 4) is the global activity-classification standard Saudi uses on MISA licences.
  • Activity selection drives capital requirement, sectoral restrictions, tender eligibility and visa categories.
  • Most Saudi LLCs operate with 3–8 ISIC4 codes — fewer is cleaner, more invites scrutiny on each.
  • Some activities require sectoral regulator approval (CMA for fintech, SFDA for medical devices, MoH for clinics, MOC for telcos).
  • Pick activities for what you do today plus one strategic neighbour — not for every future possibility.
  • Adding activities later is a 4–8 week MISA amendment. Removing them is faster.
  • Activity codes determine which Nitaqat sector your Saudization target lives in — material for HR planning.

01 · The system

ISIC4 as the operating taxonomy.

Why MISA's activity classification quietly dictates every other Saudi business decision.

ISIC4 — the United Nations International Standard Industrial Classification, revision 4 — is the global system for codifying economic activity. Saudi Arabia adopted it for MISA licensing in 2018, replacing an older bespoke list. Today every MISA licence carries one or more ISIC4 codes that, together, define the company's permitted activities.

Why this matters: every government portal in Saudi Arabia talks to MISA's activity register. Your bank, when opening your business account, queries it. ZATCA, when assigning your tax category, queries it. Qiwa, when categorising your Nitaqat sector, queries it. The Ministry of Commerce, when setting your registration class, queries it. Government tendering platforms, when filtering eligible bidders, query it.

Picking activities at MISA application is therefore not paperwork. It is the single most consequential structural decision in the first 90 days of any Saudi entry. Tamra spends the first hour of every engagement on it.

02 · The big four

The four licence categories activities resolve into.

How a list of ISIC4 codes maps to one of MISA's four operating licence types.

Services licence. Consulting, IT, professional services, marketing, training. Capital floor SAR 500,000. Most foreign entrants start here.

Trading licence. Import, wholesale, retail, distribution. Capital floor SAR 26.6 million (reducible in some structures including 100% foreign-owned trading subsidiaries). Required for any company that takes title to physical goods sold in Saudi Arabia.

Industrial licence. Manufacturing, assembly, processing. Capital floor SAR 30 million. Comes with land allocation rights through MODON (industrial cities authority) and significant utility subsidies.

Professional / specialised licences. Engineering, architecture, healthcare, legal, financial services. These carry sectoral regulator approvals on top of MISA — SCE for engineering, MoH and SFDA for healthcare, CMA and SAMA for finance — and a longer setup timeline.

A handful of activities sit across categories — e.g. an IT services company that also wants to import hardware. The choice is whether to single-licence (services) and outsource imports, or dual-license (services + trading) and absorb the higher capital. Tamra runs both scenarios at hour one.

03 · The bundle

How to pick the right activity bundle.

The decision frame Tamra uses with every client at hour one.

Step 1 — the core. What is the primary economic activity? One ISIC4 code. This is the licence's centre of gravity.

Step 2 — the operational neighbours. What two or three adjacent activities will the company definitely perform within 12 months? Add them now. Adding later means a 4–8 week MISA amendment.

Step 3 — the strategic neighbour. What one adjacent activity might the company want to perform within 24 months as a strategic option? Add it now if it doesn't trigger a different licence type or sectoral regulator. Skip it if it does.

Step 4 — the trim. Cut anything you added 'just in case'. Each unused activity is a small ongoing audit risk and adds nothing to revenue. ZATCA may ask why you have it.

Step 5 — the regulator check. For each activity, list the sectoral regulators it triggers (SCE, SFDA, CMA, SAMA, MoH, MoCIT, MOC). Confirm you can clear each before MISA application — otherwise the MISA licence issues but the operational stack stalls.

04 · Sector-by-sector

Activity traps and shortcuts by sector.

What we tell clients in the four sectors that account for most MISA applications.

Tech / SaaS. Core activities: ISIC 6201 (computer programming), 6202 (consulting). Add 6311 (data processing/hosting) for cloud-led models. Avoid trading codes unless you genuinely sell hardware. Sectoral regulator: MoCIT for some categories.

Healthcare services. Core: 8610 (hospital activities), 8620 (medical and dental practice), 8690 (other human health activities). Sectoral regulators: MoH for licensure, SFDA for any device or pharma adjacent. Build 6–9 months of regulator timeline into the MISA setup.

Trading / import. Core: 4690 (non-specialised wholesale), specific 4xxx codes for the product category. Be specific — generic 'wholesale of goods' invites ZATCA queries. Always pair with the right HS codes at customs.

Engineering / construction. Core: 4290 (construction of other civil engineering projects), 7110 (architectural and engineering activities). Sectoral regulator: SCE — the licensed engineer requirement is real and gates project bids.

Fintech. Core: 6499 (other financial services), specific MISA fintech category. Sectoral regulator: SAMA (Saudi Central Bank) and CMA (Capital Market Authority). Use the SAMA Sandbox before committing to a full licence.

05 · Amendments

When to add, remove, restructure.

Activity register changes are inevitable. The right cadence keeps friction low.

Adding an activity. File MISA amendment, attach business case, pay fee, await approval (typically 3–6 weeks). Once MISA approves, file Commercial Registration update with Ministry of Commerce, then notify ZATCA, then update Qiwa. Total elapsed: 4–8 weeks.

Removing an activity. Faster — typically 2–3 weeks. Useful when ZATCA scrutiny on an unused activity becomes a friction point, or when the company exits a product line.

Changing licence category. The hardest. Moving from a Services LLC to a Trading LLC requires MISA category change, capital injection to the new floor, ZATCA reclassification, and often Commercial Registration restatement. 8–12 weeks. Plan ahead — pick the right category at first incorporation if there is any prospect of needing it.

Sectoral regulator changes. Adding a regulated activity (e.g. a tech company adding a fintech sub-activity) requires the regulator's approval before MISA will amend. SAMA, CMA, SFDA, MoH each have their own timelines, often 3–6 months.

Tamra's licensing desk runs amendment workstreams across all the portals as a single project. Self-served amendments routinely take twice as long because each portal bounces validation back to the previous one.

The most expensive hour of a Saudi expansion is the hour spent picking ISIC4 codes — because the wrong choice costs nine months of remediation, and the right choice costs nothing.
— Tamra Editorial

Frequently asked questions

What is ISIC4?

The United Nations International Standard Industrial Classification, revision 4 — the global taxonomy of economic activities Saudi Arabia uses on every MISA licence.

How many activities should I list on my MISA licence?

Most Saudi LLCs operate with 3–8 ISIC4 codes. Fewer is cleaner from a ZATCA perspective; more invites scrutiny on each.

Which activities require sectoral regulator approval?

Healthcare (MoH, SFDA), engineering (SCE), finance (SAMA, CMA), telecoms and IT in some categories (MoCIT and MOC), real estate brokerage (REGA). Confirm before MISA application.

Can I add activities to my MISA licence later?

Yes — typically a 4–8 week amendment process across MISA, Commercial Registration, ZATCA and Qiwa. Plan ahead where possible.

Do activities affect Nitaqat?

Yes. Your activity codes determine which Nitaqat sector you fall into, which sets the Saudization target you must hit. Material for HR planning.

What if I pick the wrong licence category?

Changing licence category (e.g. Services to Trading) is possible but takes 8–12 weeks and requires capital injection to the new floor. Pick correctly at first incorporation if there is any chance of needing it.

Related resources

Pick the right Saudi activities, the first time

Tamra runs ISIC4 selection, MISA application and the full licence cycle as one workstream. 30 minutes to brief us.

Talk to Tamra