Industry Solutions
Healthcare & Life Sciences
Digital solutions for Saudi hospitals, clinics, and pharmaceutical companies. From patient management systems and AI diagnostics to telemedicine platforms and regulatory compliance with Saudi MOH and CBAHI standards.
Why this matters
Saudi healthcare runs under a uniquely dense regulatory stack — MOH sets the digital-health policy, CBAHI audits the quality controls hospitals are accredited against, the SFDA regulates any software classified as a medical device, NPHIES is the national health-information exchange every claims and clinical-data pipeline now plugs into, and the SDAIA Personal Data Protection Law governs how patient data is stored, processed and shared. Build the platform wrong and any one of these can stall a launch for months. Mantiqi designs and ships hospital-grade EHR, triage AI, telemedicine and pharmacy integrations that are scoped against each authority on day one rather than retrofitted at UAT.
Industry Challenges
Paper-based patient records and appointment systems
Difficulty meeting Saudi MOH digital health mandates
Long patient wait times and inefficient triage
Data silos between departments and facilities
Our Solutions
Electronic health record (EHR) implementation and migration
AI-assisted triage and diagnostic support tools
Telemedicine platforms with Arabic language support
Interoperability layers connecting labs, pharmacy, and billing
How we deliver
- 01
Regulatory scope + clinical workflow mapping
Weeks 1–2
We sit with clinical leadership and IT, map your existing patient journey, and classify which surfaces fall under the SFDA's medical-device software definition (anything that influences a clinical decision usually does). Output is a written compliance plan — MOH expectations, CBAHI controls touched, SFDA classification, NPHIES integration scope, SDAIA data residency.
- Clinical workflow map (current + target state)
- SFDA SaMD classification per surface
- NPHIES integration scope (claims + clinical exchange)
- Data residency + PHI handling plan
- 02
Secure platform build
Weeks 3–10
EHR / patient portal / triage AI / telemedicine surfaces ship in two-week iterations. HL7 FHIR-based NPHIES connectors land first because they're the riskiest. Arabic-first UX with RTL, mixed-language clinical free-text, and an evaluation harness for any AI surface so accuracy is measured rather than hoped for.
- FHIR-based NPHIES connectors
- Arabic + English clinical UI
- Audit-grade encrypted PHI store
- AI evaluation harness with held-out clinical sets
- 03
Clinical validation + CBAHI readiness
Weeks 9–14
Clinical pilot with named end-users, structured evaluation against the eval set, IT-security review against NCA ECC, and CBAHI control-mapping for the surfaces that touch accredited standards. SFDA submission support where the software classifies as a medical device.
- Clinical pilot report + signed acceptance
- Penetration test + remediation
- CBAHI control mapping
- SFDA submission package (when applicable)
- 04
Go-live + ongoing surveillance
Ongoing
Production monitoring with clinical-incident workflows, quarterly model refresh on any AI surface, annual NCA + SDAIA reviews, and post-market surveillance for SaMD-classified surfaces. We don't disappear at go-live — managed services keep the regulatory posture intact between audits.
- Production monitoring + clinical incident workflow
- Quarterly AI model + retrieval refresh
- Annual NCA / SDAIA review support
- Post-market surveillance dossier (SaMD)
What clients see
FHIR-native from day one
NPHIES connectors built on HL7 FHIR R4 so the same primitives talk to bedside monitors and EHRs already deployed
Arabic-first triage and clinical UX
Saudi-Arabic clinical NLP tuned on real chief-complaint phrasing, not Google-translated baselines
Audit-grade PHI handling
Encrypted at rest, tamper-evident audit trails, in-Kingdom residency on Saudi-hosted or sovereign cloud as required
Compliance & regulators we work with
MOH sets the policy frame for hospital digitalisation, telemedicine licensing, and digital prescriptions. Anything patient-facing in the Kingdom maps back to MOH guidance.
CBAHI accreditation controls drive what hospitals are audited against on safety, quality and clinical documentation. Software touching accredited workflows is mapped to specific CBAHI controls during build.
SaMD-classified software requires SFDA registration before clinical use. Classification is decided up-front — surfaces that influence a clinical decision usually qualify; pure administrative surfaces usually don't.
NPHIES is the standard interoperability layer for claims, eligibility, pre-authorisation and clinical data exchange between providers and payers. Integrations use HL7 FHIR R4.
Saudi PDPL governs how patient personal data is collected, stored, transferred and disclosed. Particularly load-bearing for cross-border data flows and AI training on clinical data.
The NCA's ECC framework applies to critical healthcare infrastructure. Tenant architecture, encryption, audit logging, and incident response map back to specific ECC controls and are reviewed pre-launch.
Services for Healthcare & Life Sciences
AI & Intelligent Automation
From conversational AI agents and knowledge Q&A engines to agentic AI workflows,...
Mobile & .NET Applications
Enterprise-grade mobile and desktop applications — from duty-of-care and travele...
Web & WordPress
Professional websites, portals, and web applications — from institutional and co...
Data Analytics & Business Intelligence
Turn your data into actionable business intelligence — from interactive dashboar...
Business Process Automation
Eliminate manual bottlenecks and streamline your operations with intelligent bus...
Frequently asked questions
Healthcare & Life Sciences questions our team hears most often.
Healthcare software in the Kingdom sits under several overlapping authorities. The Ministry of Health (MOH) sets the digital-health policy; CBAHI accreditation drives the quality and safety standards hospitals are audited against; the SFDA regulates medical-device software (including AI-as-a-medical-device); NPHIES is the national health information exchange you connect to for claims and clinical data sharing; and the SDAIA Personal Data Protection Law governs how patient data is stored, processed and transferred. NCA Essential Cybersecurity Controls layer on top for infrastructure security.
Yes. NPHIES is the standard interoperability surface for clinical data, claims, and provider-payer exchange in Saudi Arabia, built on HL7 FHIR R4. We build NPHIES-compliant integrations for hospitals and digital-health providers — eligibility checks, pre-authorisation, claim submission, and clinical-data exchange. The same FHIR foundation lets the system play with bedside monitors and EHR systems already deployed in the facility.
Triage models ingest vital signs, chief complaints in Arabic and English, EHR history, ED occupancy, and labs — predicting acuity, admission likelihood, and deterioration risk. Arabic NLU tuned to clinical terminology is mandatory in the Saudi setting; we test on real Saudi chief-complaint phrasing with native clinical reviewers, not Google-translated baselines. See our AI patient triage guide for the integration patterns.
If the software influences a clinical decision — diagnosis, triage acuity, treatment recommendation, drug dosing, patient risk scoring — it almost certainly qualifies as Software as a Medical Device (SaMD) and needs SFDA registration before clinical use. Pure administrative surfaces (scheduling, billing, claims aggregation) usually don't. We make the classification call up front during discovery so the regulatory path is decided before build, not after.
By default, in-Kingdom — on Saudi-hosted cloud infrastructure where it's permitted, with sovereign-cloud or on-premise options for higher-classification workloads. Cross-border data flows are opt-in, scoped against SDAIA PDPL Article 29, and documented in the patient privacy notice. Audit trails are tamper-evident and feed CBAHI documentation reviews without manual aggregation.
No — Mantiqi is an engineering partner, not a licensed healthcare provider or medical-device manufacturer. Our model is to build and operate the technical surface (EHR, triage AI, telemedicine, NPHIES integrations, audit logging) while you carry the MOH licence as the hospital or pharmacy, and we coordinate directly with the SFDA where SaMD registration applies and with CBAHI on accredited workflows.
Plan on 10–16 weeks end-to-end for a typical engagement: 2 weeks of regulatory scoping and clinical-workflow mapping, 6–10 weeks of build (with two-week iterations), and 2–4 weeks of clinical pilot, penetration testing, and CBAHI mapping before go-live. AI surfaces requiring SFDA registration add 4–8 weeks for the submission cycle in parallel.
Common patterns: EHR implementation and migration off paper or legacy systems, AI-assisted triage and clinical-decision-support surfaces (scoped against SFDA SaMD classification), Arabic-first telemedicine platforms with Nafath identity, pharmacy and lab interoperability layers, NPHIES connectors for claims and clinical exchange, and CBAHI documentation workflows. Engagement scope is set during discovery based on which authorities apply.
Still have questions?
Our team is ready to help. Reach out and we'll get back to you as soon as possible.
Free Saudi healthcare compliance review
Ready to Transform Your Healthcare Operations?
Send us a short brief on what you're building (EHR, triage AI, telemedicine, pharmacy interop, NPHIES integration). We'll send back a written review covering which MOH / CBAHI / SFDA / NPHIES / SDAIA frameworks apply, where your existing architecture sits against them, and the highest-leverage gaps to close before clinical pilot. No sales call required.
Get the compliance reviewInsights & Guides
Healthcare & Life Sciences Articles
Expert insights and technical guides for healthcare & life sciences businesses in Saudi Arabia.
AI-Powered Patient Triage for Saudi Hospitals: How It Works and What the Evidence Shows
AI triage adds data-driven predictions of acuity, admission likelihood and deterioration risk to the nurse's assessment. Here's how it works, which Saudi regulators it must satisfy, and what the publi...
Muhammad Usman Mansha
March 8, 2026
Building MOH-Compliant Telemedicine Platforms for Saudi Healthcare Providers
The Saudi MOH recognises virtual consultations as a standard mode of care. This guide covers the technical requirements, MOH regulations, and architecture for building a compliant telemedicine platfor...
Matti ur Rehman
February 28, 2026