Cloud computing service renewal

Communications, Space and Technology Commission

This service enables cloud computing service providers to renew registration with the Authority within four categories (Qualification, A, B, and C) for which the service provider qualifies in dealing with customers according to the subscriber data classification detailed in the cloud computing regulatory framework.

Service Level Agreement

Start the service

Share The Page

Login to the cloud computing system on the CST website
Log in via Nafath portal
View all commercial registration records that a person has
Request the service

Not applicable

A brief description of the nature of the work of the applicant body in the Kingdom or elsewhere, the ownership details,
and information about the group to which the applicant belongs, if any.
Information that clarifies the type of cloud computing service(s) that are intended to be provided or that have been provided earlier to cloud computing subscribers through data centers and/or other capabilities in the Kingdom to:
(A) Subscribers who have a subscriber's residence or address in the Kingdom (b): Subscribers outside the Kingdom.
A brief description of the cloud computing system(s) that are or will be used to provide subscribers with cloud computing services.
Any data centers in the Kingdom will be used to provide cloud computing services with their full addresses,
contact information (phone/fax/email), and the website.
Relationship that clearly describes the applicant's access to data center capacities and infrastructure (for
example: owner, operator, partner operator, leased capacity, tenant, resale, etc...)
The country or foreign countries in which its data centers are located, if those centers are used in the processing, storage, transit, or transfer of the content of the subscriber who has a residence or address in the Kingdom, and CST has the right to refuse any of those centers.
Any international commitment with respect to cloud computing services (including but not limited to:
international agreements, international and local laws and regulations).
A brief description of any major networks or equipment related to the above-mentioned data centers and the
relationship that describes well the applicant's access to that key equipment and the way it is used. The description must include the location and main features of the network connection, whether wired or wireless, between the communications infrastructure licensed by CST and the cloud ecosystem of the service provider inside the Kingdom.
A statement explaining the applicant's experiences in the field of providing communications and information
technology services, or its qualifications in general as a "cloud computing service provider".
Information about storage and processing capacities, data center space (or leased parts), electricity consumption, and expansion plans.
Information about target customers (individuals, private sector, government sector).
Documents proving conformity with the technical standards / requirements mentioned in the table below or exceptionally any technical standards that are equivalent to or exceeding those standards must be submitted according to CST's absolute discretion:
Service Provider
Registration Category
Minimum Standards/Requirements
Class (A)Constructed Facility Certificate Tier 2 or above (or ISO/IEC27001 for the datacenters)
Class (B)
Constructed Facility and Operational Sustainability
Certificate Tier 3 or above 5
Category (C)
Standards/Requirements for Class (B), in addition to referring
to CST to obtain the necessary approvals in accordance with the applicable laws, regulations, policies, and governance models in the Kingdom.
Compliance and fulfillment of the controls and requirements issued by the National Cybersecurity Authority
All requirements shall be submitted in Arabic, with the possibility to submit other supporting documents for the application in English.
The entity requesting registration may attach supporting documents such as technical brochures, website bulletins, or other technical and commercial data related to the cloud computing system(s) or agreements or refer to websites on the Internet to support the application.