Saudi Arabia's WPS (2026): An HR Guide to Mudad, Compliance Obligations, and What Employers Need to Get Right

Saudi Arabia's Wage Protection System is the largest in the GCC by coverage, overseeing wages for more than 8.5 million private sector employees and processing over 300,000 wage files worth SAR 35 billion every month. It is also one of the most integrated: payroll compliance in Saudi Arabia does not sit in isolation from the rest of the regulatory stack. It runs through Mudad, cross-checks against Qiwa, connects to GOSI, and links to Muqeem for visa and residency data.

For HR and payroll teams, that integration is both the system's strength and its operational demand. A gap at any stage creates a compliance exposure that the integrated systems will surface. This guide covers how Saudi Arabia's WPS works, what the compliance obligations are, and what your payroll process needs to handle.

Where Saudi Arabia's framework compares meaningfully with other GCC countries, those points are drawn in where they add clarity.

Saudi Arabia WPS: Quick Summary

• Governing authority: Ministry of Human Resources and Social Development (MHRSD), in coordination with the Saudi Central Bank (SAMA).
• Platform: Mudad, which integrates with Qiwa (employment contracts and Saudization), GOSI (social insurance), and Muqeem (visa and residency data).
• Scope: All private sector employers in Saudi Arabia, regardless of size, as of December 31, 2020. Domestic workers were brought under WPS from January 1, 2026, via the Musaned platform.
• Salary payment deadline: Wages must reach employees' accounts by the 10th of each month for the preceding month's work. Payroll files should be submitted to Mudad at least one business day before payment.
• Payment channels: SAMA-licensed bank transfers or approved digital wallets such as STC Pay. Cash payments are non-compliant and not recognised for WPS purposes.
• Compliance threshold: Mudad tracks a minimum monitoring floor of 80%. Falling below 90% triggers immediate automated MHRSD penalties as of 2026.
• WPS compliance certificate: Auto-generated by Mudad once compliant submissions are confirmed. Required for Iqama renewals, work permit processing, and government service access.
• Employee confirmation: Saudi Arabia's system prompts employees to confirm or dispute salary receipt through Mudad, giving MHRSD visibility without requiring a separate complaint.
• Three-month non-payment rule: If an employer fails to pay salaries for three consecutive months, employees gain the legal right to transfer their work sponsorship to another employer without the current employer's consent.
• Penalties: Financial fines starting at SAR 3,000 per employee for delayed payments. Non-compliant employers blocked from Qiwa and Muqeem portals, preventing work permit renewals and new visa issuance.
• Nitaqat interaction: WPS violations can cascade into Saudization classification consequences, affecting quota standing and visa costs.
• greytHR covers Saudi Arabia and the GCC: Mudad-compatible Wages File generation, GOSI contribution deductions, Saudization reporting, EOSB calculations, and full audit records on one platform.

How Saudi Arabia's WPS Works: The Mudad Compliance Chain

Saudi Arabia launched its WPS in June 2013, initially covering establishments with 3,000 or more employees. The system expanded progressively through multiple phases, achieving universal private sector coverage by December 31, 2020. Today every private sector employer in the Kingdom, regardless of size, must process wages through WPS.

The platform through which this operates is Mudad. What sets Saudi Arabia's WPS apart from most other GCC frameworks is how deeply Mudad integrates with the rest of the government's regulatory infrastructure:

• Qiwa: Employment contracts registered in Qiwa are the reference point against which Mudad validates salary amounts. A mismatch between what is paid and what the Qiwa-registered contract specifies creates a compliance flag.
• GOSI: Social insurance contributions for both Saudi nationals and expatriates are managed through GOSI and must align with payroll data submitted through Mudad.
• Muqeem: Residency and visa data for expatriate workers is held in Muqeem. Work permit renewals and new visa processing run through this system, and access is blocked for employers flagged as non-compliant in Mudad.

The practical implication of this integration is that a payroll error or compliance gap does not stay contained. A mismatch in Mudad can surface as a block in Muqeem, affecting your ability to process visas across your entire workforce, not just for the employees whose salary triggered the issue.

Mudad also goes beyond basic payment verification. Its rules engine detects anomalies including unreasonably low or high salaries and excessive deductions, not just contract mismatches. Employers may receive justification requests from MHRSD when the system flags these patterns.

WPS also sits within Saudi Arabia's broader Vision 2030 agenda, specifically its goals of improving labour market governance, reducing the informal economy, and building a more transparent business environment. This is part of why Saudi Arabia's WPS is more systematically enforced and more deeply integrated than most other GCC frameworks.

The Monthly Payroll Cycle: What WPS Requires of Employers

Compliance with Saudi Arabia's WPS follows a structured monthly sequence. Each step feeds into the next, and an error at any point surfaces across the integrated systems.

1. Payroll data collection: Gather attendance records, overtime, allowances, deductions, and any mid-month changes. Accuracy here determines the integrity of everything that follows.
2. Salary computation: Calculate gross pay, apply GOSI deductions for Saudi nationals, subtract any court-mandated garnishments, and apply gratuity accrual logic for end-of-service liability tracking.
3. Wages File /WPS File generation: Produce WPS complaint wages file in the format provided by MHRSD. The file must contain each employee's identification details (National ID for Saudi nationals, Iqama number for expatriates), contracted salary, actual salary being paid, and authorised deductions. The file must conform to MHRSD's technical specifications
4. Salary transfer: Transfer wages through a SAMA-licensed Saudi bank or an approved digital wallet such as STC Pay. All payments must be in Saudi Riyals. Foreign currency payments require prior Ministry of Labour approval. Cash payments are non-compliant.
5. Mudad upload: Upload the WPS file to Mudad at least one business day before the payment date and no later than the 10th of the month. Mudad validates the file against Qiwa contract data and flags discrepancies before releasing payment instructions.
6. MHRSD validation and employee confirmation: Mudad cross-checks actual payments against registered salary records. Once wages are credited, employees are prompted to confirm receipt or raise a dispute. MHRSD has visibility of this without requiring the employee to file a separate complaint.

For employers operating multiple entities in Saudi Arabia, each registered entity requires its own Mudad account and its own monthly WPS submission. There is no consolidated multi-entity submission.

The Salary Deadline and the WPS Compliance Certificate

The 10th of each month is Saudi Arabia's firm payment deadline. Salaries for a given month's work must reach employees' accounts by the 10th of the following month. Submitting the Mudad file on the 10th is not sufficient if bank processing means the salary credits on the 11th.

The practical recommendation from MHRSD is to set an internal payroll cutoff two to three business days before the 10th. This creates a buffer for identifying and correcting WPS errors before they become compliance failures. A rejected file that is caught on the 8th can be corrected and resubmitted on time. A rejected file caught on the 10th cannot.

Once a compliant monthly submission is confirmed, Mudad auto-generates a WPS compliance certificate for the employer. This certificate matters operationally: it is required for Iqama renewals, work permit processing, and government service access. An employer whose Mudad account is inactive or flagged as non-compliant cannot obtain the certificate, and the consequences cascade quickly across the entire workforce.

The Compliance Threshold: Understanding the 80% and 90% Figures

Two threshold figures appear in Saudi Arabia's WPS framework, and they refer to different things.

The 80% figure is Mudad's base monitoring threshold, the minimum compliance rate the platform tracks as its operational floor. Falling below 80% means the system flags the employer for review.

The 90% figure is MHRSD's enforcement trigger as of 2026. Falling below 90% results in immediate automated penalties, including financial fines and service suspension. This is the operational standard employers need to meet. The practical target is 100%.

The 90% threshold operates at the company level: MHRSD assesses what percentage of your total workforce received wages correctly and on time. This differs from Kuwait and Qatar, where compliance is assessed at the individual worker level with no company-wide aggregate buffer. For large employers in Saudi Arabia, the aggregate threshold provides some operational flexibility, but it does not eliminate per-employee scrutiny where individual violations are escalated by workers directly through the system.

How Saudi Arabia's WPS Compares Across the GCC

Saudization and WPS: Where the Two Systems Intersect

Saudi Arabia's Nitaqat programme sets workforce nationalisation quotas by industry and company size. The connection between Nitaqat and WPS compliance is direct: employers who fall out of WPS compliance risk their Nitaqat classification, which affects their visa cost structure and their ability to hire expatriate workers.

Qiwa monitors Saudization compliance, and Qiwa integrates with Mudad for payroll data. A WPS violation that results in a block on Qiwa and Muqeem services does not just affect payroll processing. It affects the company's ability to renew work permits and issue new visas, and it can affect the Saudi national headcount that counts toward the Nitaqat quota.

For HR teams managing both payroll compliance and Saudization obligations, WPS accuracy is not just a payroll responsibility. It has direct implications for workforce planning and quota management.

Domestic Workers Under WPS: What Changed on January 1, 2026

From January 1, 2026, Saudi Arabia extended WPS coverage to domestic workers. This was a phased rollout beginning July 2024, reaching full universal coverage from January 1, 2026. Employers with even one domestic staff member are now required to process wages through the Musaned platform, which handles domestic worker employment contracts and wage payments separately from the main Mudad system.

The Musaned platform requires registration, contract documentation, and monthly wage transfers in the same way Mudad does for the main private sector workforce. Non-compliance carries the same administrative consequences.

Saudi Arabia is now the most comprehensive GCC country for domestic worker WPS coverage. Qatar brought domestic workers under its main WPS framework in 2020. The UAE, Oman, Kuwait, and Bahrain maintain separate or excluded frameworks for domestic workers.

Common Compliance Gaps and Where They Tend to Occur

Saudi Arabia's integrated WPS architecture catches errors that might pass unnoticed in less connected systems. These are the gaps that surface most frequently:

• Contract-salary mismatches:
  The salary transferred does not match the amount registered in the Qiwa employment contract. This is the most common trigger for a Mudad flag, and it results from salary increments, promotions, or allowance changes that were not reflected in the updated employment contract before the next payroll cycle. The fix is always the same: update Qiwa before processing payroll, not after.
• Incorrect employee identification data:
  Errors in National ID or Iqama numbers, mismatched names, or outdated employee records cause WPS files to fail validation. Regular reconciliation of employee master data across Mudad, Qiwa, GOSI, and Muqeem prevents this.
• Late WPS uploads: Uploading the WPS file after the 10th-of-month deadline, or submitting without sufficient time for bank processing to complete before the deadline. Even where the salary transfer reaches the employee on time, a late Mudad upload is treated as a compliance event.
• Bank file format errors:
  WPS files that do not conform to MHRSD technical specifications are rejected. This typically affects employers generating payroll files manually or using software that has not been updated to the current WPS format requirements.
• Overlooked employees: Workers who joined mid-month, employees on secondment, or staff with irregular pay structures are sometimes omitted from WPS submissions. Every employee covered under WPS must appear in every monthly upload.
• Multi-entity payroll without separate submissions:
  Employers with more than one registered entity must submit separate WPS files through each entity's Mudad account. Consolidated cross-entity submissions are not permitted.
• Ignoring Mudad alerts: Mudad sends automated alerts when anomalies are detected, including salary discrepancies, missing records, and excessive deductions. These alerts should be reviewed and documented within 48 hours. Ignoring them typically escalates the issue.

The Enforcement Sequence for Non-Compliance

The consequence that carries the broadest operational impact is the Qiwa and Muqeem portal block. It does not just affect the employees whose salary triggered the violation. It pauses work permit processing and new visa issuance across the entire company until the issue is resolved.

One consequence worth noting separately: WPS violations create a permanent record in MHRSD systems that employees can reference when filing labour complaints. Employers with a history of non-compliance are at a structural disadvantage in dispute resolution, independent of the administrative penalties.

12-Point HR Checklist for Saudi Arabia WPS Compliance

1. Maintain Qiwa-registered contracts that reflect actual salaries: Update employment contracts in Qiwa whenever salary changes, before the next payroll cycle runs. A mismatch between the Qiwa contract and the Mudad WPS file triggers a compliance flag regardless of whether the employee was paid correctly.
2. Set an internal payroll deadline before the 10th: Build a buffer of two to three business days between your internal cutoff and the regulatory 10th-of-month deadline. This allows time to identify and correct WPS errors before they become compliance failures.
3. Generate accurate WPS files: Ensure employee IBANs, National IDs or Iqama numbers, salary amounts, and payment details in the WPS file match Qiwa records. Validate the file before upload.
4. Use only approved payment channels: All salary transfers must go through a SAMA-licensed Saudi bank or approved digital wallet. Cash payments are non-compliant.
5. Submit through Mudad on time: Upload the WPS file with sufficient lead time for bank processing to complete before the 10th. A late upload is a compliance event even where the actual salary transfer is on time.
6. Reconcile payroll before WPS submission: Before uploading to Mudad, reconcile payroll figures against Qiwa contract records, GOSI data, and bank transfer confirmations. A structured pre-submission check reduces the likelihood of avoidable errors reaching the portal.
7. Maintain GOSI accuracy: Verify GOSI contribution classifications and rates are correct for each employee. Update contribution bases whenever salaries change. GOSI and Mudad cross-check.
8. Monitor Mudad alerts actively: Assign responsibility for reviewing Mudad notifications. Alerts flagging discrepancies or missing records should be investigated and documented within 48 hours.
9. Monitor your compliance rate: Track what percentage of your workforce is receiving wages correctly and on time each month. Keep well above 90% and aim for 100%.
10. Manage multi-entity submissions separately: Each registered entity requires its own Mudad account and WPS submission. Confirm this is in place if your organisation operates multiple entities.
11. Register on Musaned for domestic workers: If you employ domestic staff, ensure they are registered on Musaned and that wages are processed through the platform.
12. Retain payroll records and WPS submissions: MHRSD can request documentation at any point. Records must be accessible for inspection without advance notice.

How greytHR Supports Saudi Arabia and GCC Payroll Compliance

greytHR is a full-suite HRMS used across Saudi Arabia, the UAE, Kuwait, Oman, Bahrain, and the wider GCC, with its payroll engine built around each country's compliance architecture. For Saudi Arabia specifically:

• SAMA and Mudad-compatible WPS file generation: greytHR produces WPS Wages Files in the format required by the SAMA-licensed Saudi banks for salary transfer and for Mudad submissions, validated against MHRSD field requirements to reduce rejection risk.
• Qiwa contract alignment: Salary changes are logged per employee and reflected in the WPS file before the next cycle, keeping Mudad submissions in line with Qiwa-registered contract amounts.
• GOSI contribution tracking: greytHR calculates and tracks GOSI contributions for both Saudi nationals and expatriates, with the correct rates applied based on employee classification and contribution start date.
• Saudization reporting: Workforce nationalisation data is maintained within greytHR, supporting Nitaqat quota tracking without requiring separate manual reconciliation.
• EOSB (Gratuity) calculations: End-of-service entitlements under Saudi Labour Law are calculated automatically, with monthly accrual tracking for accurate liability management.
• Audit-ready records: Every payroll run, WPS submission, GOSI contribution, and statutory calculation is timestamped and retrievable for MHRSD review.
• GCC-wide compliance on one platform: UAE MOHRE compliance, Saudi Arabia's Mudad workflows, Oman's 3-day transfer window, Bahrain's Enhanced WPS and Kuwait AS'HAL requirements, all managed within greytHR without separate tools or manual reconciliation across countries.

Whether you are establishing WPS compliance from scratch or tightening an existing process to meet Saudi Arabia's compliance requirements, greytHR is worth a close look.

Set up a greytHR demo with our ME expert

FAQs

Does Saudi Arabia's WPS apply to all private sector employers regardless of size?

Yes. Universal coverage was achieved by December 31, 2020. Every private sector employer in Saudi Arabia, regardless of company size or industry, must process wages through Mudad.

By when must salaries be paid each month?

Wages must reach employees' accounts by the 10th of each month for the preceding month's work. Payroll files should be submitted to Mudad at least one business day before payment to allow for bank processing.

Can salaries be paid in cash or through a personal account?

No. WPS requires all salary payments to be made through SAMA-licensed bank accounts or approved digital wallets such as STC Pay. Cash payments and informal transfers are non-compliant and not recognised for WPS purposes.

What is the difference between the 80% and 90% compliance thresholds?

The 80% figure is Mudad's base monitoring floor. The 90% figure is MHRSD's enforcement trigger as of 2026. Falling below 90% results in immediate automated penalties. The practical operational target is 100%.

What is the WPS compliance certificate and why does it matter?

Mudad auto-generates a compliance certificate once a compliant monthly submission is confirmed. It is required for Iqama renewals, work permit processing, and government service access. A non-compliant Mudad account blocks certificate generation.

An employee's salary changed but we did not update the Qiwa contract. What happens?

Mudad cross-checks the WPS file against the Qiwa-registered contract. A mismatch is flagged as a discrepancy even if the employee received the correct amount. Update the Qiwa contract before the next payroll cycle runs.

What happens if salaries are not paid for three consecutive months?

Employees gain the legal right to transfer their work sponsorship to another employer without the current employer's consent. This is a statutory right activated automatically under Saudi Labour Law.

We operate multiple legal entities in Saudi Arabia. Do we need separate Mudad accounts for each?

Yes. Each registered entity requires its own Mudad account and its own monthly WPS submission. There is no consolidated multi-entity submission in the current system.

How does a WPS violation affect our Saudization standing?

A Mudad violation resulting in a Qiwa portal block affects work permit renewals and new visa issuance. It can also affect how Saudi national headcount counts toward the Nitaqat quota, with knock-on consequences for visa cost classification.

Are domestic workers now covered under Saudi Arabia's WPS?

Yes. From January 1, 2026, domestic workers must be paid through the Musaned platform. Employers with even one domestic staff member must register on Musaned and process wages electronically.

Does greytHR generate WPS files in the format required by Mudad?

Yes. greytHR produces Salary Information Files in Mudad's required format, with validation to reduce rejection risk before submission.

About greytHR

greytHR is a full-suite HR and payroll platform trusted by 30,000+ businesses and 3.25 million users across 25+ countries, including across the GCC. Built on three decades of HR and payroll expertise, greytHR brings the complete employee lifecycle onto one system, from hire to retire. Payroll, compliance, attendance, performance, and exit management work together, not in silos. With built-in compliance automation for local regulations, AI-powered workflows, and a highly rated mobile app, greytHR gives HR teams the infrastructure to move from administrative overhead to strategic work.