Direct Answer / Quick Summary:

In the Kingdom of Saudi Arabia, having a Saudi employee registered in the General Organization for Social Insurance (GOSI) and paying their salary via Mudad WPS is no longer sufficient to secure Saudization credit. Under regulations enforced by the Ministry of Human Resources and Social Development (MHRSD / وزارة الموارد البشرية والتنمية الاجتماعية), unauthenticated employment contracts trigger catastrophic Nitaqat band demotions:

The Zero-Point Disqualification Rule: A Saudi national whose electronic employment contract is not authenticated (غير موثق) on the Qiwa Platform (`qiwa.sa`) is automatically stripped of their Nitaqat counting weight (0.0 points)* once the statutory grace window expires.

The Denominator Trap: Even though the unauthenticated Saudi worker yields 0.0 points in the numerator, they remain recorded as 1.0 active worker in the denominator, actively diluting your establishment's Saudization percentage and dragging your band down into Low Green or Red*.

The 10-Day Employee Verification Window: When an employer creates a digital contract on Qiwa Business, the employee receives an automated SMS challenge and has a strict 10-day window to log in via Nafath (نفاذ)* and digitally accept or reject the terms. If the employee fails to accept, the contract enters an unauthenticated state.

Expatriate Transfer Vulnerability: For expatriate workers, an unauthenticated contract voids the employer's labor protections. The foreign employee gains the immediate legal right to transfer sponsorship to another employer on Qiwa without current employer consent or notice period*.

Mandatory Compliance Quota: MHRSD enforces an establishment-wide Contract Authentication Rate (نسبة توثيق العقود) of 100%*. Falling below required milestones triggers automated service freezes across Qiwa, halting work permit renewals even if the establishment possesses a high Saudization ratio.

Regulatory Genesis: The Contract Authentication Initiative (برنامج توثيق العقود)

Historically, private sector employment contracts in Saudi Arabia existed on arbitrary paper forms stored in corporate filing cabinets. This fragmented system enabled rampant labor market violations:

Employers registered Saudi citizens in GOSI without their knowledge or consent (Fictitious Saudization / السعودة الوهمية).
Expatriate contracts contained terms that differed wildly from actual workplace arrangements.
Labor courts were overwhelmed with contractual disputes regarding notice periods, wage splits, and probation terms.

To eliminate these vulnerabilities, MHRSD promulgated Ministerial Decision No. 42210, mandating the digital creation, authentication, and centralized archiving of 100% of private sector employment contracts on the Qiwa Platform:

Core Statutory Mandates of the Qiwa Contract Program

Mandatory protections enforced by MHRSD & Saudi Labor Law

1
Universal Digital CoverageApplies strictly to all full-time, part-time, flexible, and remote employees (both Saudi nationals and expatriates).
2
Direct Link to Nitaqat WeightsIntegrates the Qiwa contract engine directly into the Developed Nitaqat calculation algorithm. An unauthenticated worker is legally invisible to the nationalization score.
3
Employee Self-AuthenticationA contract is legally void in the ministry's database until the employee personally validates the terms using dual-factor authentication through the National Single Sign-On (Nafath).
4
Automatic Labor PortabilityExpatriates lacking an authenticated digital contract on Qiwa are legally exempted from employer consent requirements under Article 81 of the Saudi Labor Law.

The Mathematical Mechanism: How Unauthenticated Contracts Cause Sudden Drops

Corporate HR directors are often shocked to discover their company has dropped from High Green to Red overnight, despite having hired and paid five new Saudi professionals.

The culprit is the Digital Authentication Disqualification Engine:

Code|Technical Specification / Reference
Verified Schema
┌────────────────────────────────────────────────────────────────────────┐
│               THE UNAUTHENTICATED CONTRACT DISQUALIFICATION            │
└────────────────────────────────────────────────────────────────────────┘

The Two-Tier Mathematical Penalty:

When an establishment onboards a Saudi national:

1The Temporary Onboarding Buffer: During the initial statutory onboarding window (typically up to 30 calendar days from GOSI registration), Qiwa grants provisional Nitaqat credit to give HR time to draft and authenticate the electronic contract.
2The Sudden Drop Cliff: The moment that grace window elapses without the employee clicking "Accept" on Qiwa:

Numerator Impact: The Saudi employee’s counting weight drops from 1.0 point to 0.0 points*.

Denominator Impact: The employee remains logged in the system denominator as 1.0 active worker*.

Code|Technical Specification / Reference
Verified Schema
┌────────────────────────────────────────────────────────────────────────┐
│               MATHEMATICAL PROOF OF SUDDEN NITAQAT DROP                │
└────────────────────────────────────────────────────────────────────────┘
  Scenario: Logistics Fleet Management LLC (50 Total Headcount)
  Headcount: 10 Saudis (earning SAR 5,000 each) + 40 Expatriates
  Sector Minimum Green Threshold: 18.00%
  ────────────────────────────────────────────────────────────────────────
  CASE A: ALL CONTRACTS AUTHENTICATED ON QIWA
  Numerator (Saudi Points): 10 × 1.0 = 10.0 Points
  Denominator (Total Headcount): 10 + 40 = 50.0 Points
  Saudization Percentage: (10.0 ÷ 50.0) × 100 = 20.00%
  COMPLIANCE STATUS: HIGH GREEN (Safe, Healthy Buffer)
  ────────────────────────────────────────────────────────────────────────
  CASE B: 3 SAUDI DRIVERS FAIL TO ACCEPT CONTRACTS ON QIWA
  Disqualified Workers: 3 Saudis drop to 0.0 Points
  Numerator (Saudi Points): (7 × 1.0) + (3 × 0.0) = 7.0 Points
  Denominator (Total Headcount): 7 + 3 + 40 = 50.0 Points
  Saudization Percentage: (7.0 ÷ 50.0) × 100 = 14.00%
  COMPLIANCE STATUS: RED NITAQAT (Total Operational Paralysis!)

The Critical Lesson:

In Case B, the company did not fire anyone. They paid all 10 Saudis SAR 5,000 on time through Mudad WPS. They paid full GOSI contributions. Yet, because three drivers failed to complete a two-minute smartphone verification on Qiwa, the company plummeted 6.0 percentage points straight into Red Nitaqat!

The Contract Authentication Lifecycle & Statutory Deadlines

To prevent compliance drops, human resources teams must understand the exact lifecycle of an electronic employment contract on Qiwa:

Phase 1Day 1

Contract Initiation

HR drafts unified digital contract on Qiwa Business

Phase 2Instant

Digital Transmission

Qiwa sends automated SMS challenge to employee

Phase 3Days 1 to 10

Employee Verification Window

Worker reviews terms and authenticates via Nafath

Phase 4Day 11 (00:01 KSA)

Automatic Expiration

If unaccepted, contract status transitions to 'Expired'

Phase 5Day 30

Compliance Grace End

MHRSD algorithm strips worker from Nitaqat numerator

Phase 6Day 31

Red Demotion

Establishment suffers immediate tier drop and service freeze

The 10-Day Acceptance Window Explained:

When HR clicks Submit Contract on Qiwa Business, the contract transitions to Pending Employee Approval (بانتظار موافقة الموظف).
An official SMS notification containing a direct secure link is transmitted to the employee’s Absher-registered mobile number.
The employee has exactly 10 calendar days to log into Qiwa Individuals and take action:

Accept (قبول): Contract becomes Authenticated (موثق)* immediately. Full Nitaqat credit is secured.

Reject (رفض):* Employee inputs the reason for rejection (e.g., salary mismatch, job title discrepancy). The contract is canceled, returning to HR for amendment.

Ignore / No Action: After 10 days, the request automatically lapses and status changes to Expired / Unauthenticated (منتهي / غير موثق)*.

The Dual Vulnerability: Expatriate Contract Authentication Risks

While unauthenticated Saudi contracts destroy your Saudization numerator, unauthenticated expatriate contracts create an equally catastrophic vulnerability: the immediate loss of foreign staff to competitors.

Code|Technical Specification / Reference
Verified Schema
┌────────────────────────────────────────────────────────────────────────┐
│               EXPATRIATE CONTRACT AUTHENTICATION MATRIX                │
└────────────────────────────────────────────────────────────────────────┘
Compliance State on QiwaEmployer Legal ProtectionEmployee Legal MobilityGovernment Services Status
Contract Fully AuthenticatedEmployer is fully protected by contractual notice period (60–90 days).Employee cannot transfer sponsorship without employer digital consent.Work permits, Iqamas, and profession changes process normally.
Contract Unauthenticated / ExpiredZERO LEGAL PROTECTIONEmployee can transfer to any competitor IMMEDIATELY without consent!MHRSD freezes new work visas and blocks establishment services.

The Hostile Transfer Loophole on Qiwa:

Under Qiwa labor mobility regulations, an expatriate employee whose digital contract is not authenticated within the statutory deadline is legally classified as an "Uncontracted Worker".

If that employee receives a job offer from a competing company on Qiwa:

1The employee clicks Accept Offer.
2Qiwa's automated compliance engine checks the current employer's contract registry.
3Finding no active authenticated contract, the system bypasses current employer consent entirely.
4The employee’s sponsorship and residency transfer to the competitor within 10 minutes, leaving the original employer with zero legal recourse and total loss of recruitment capital.

The Establishment-Wide Authentication Rate (نسبة التوثيق)

Beyond individual worker disqualifications, MHRSD monitors an establishment-wide metric known as the Contract Authentication Rate (نسبة توثيق عقود المنشأة):

Code|Technical Specification / Reference
Verified Schema
Contract Authentication Rate (%) = (Total Authenticated Contracts ÷ Total Active Employees in GOSI) × 100

Progressive Compliance Milestones:

MHRSD has phased in mandatory compliance thresholds across all private sector enterprises:

Code|Technical Specification / Reference
Verified Schema
┌────────────────────────────────────────────────────────────────────────┐
│                   MANDATORY CONTRACT AUTHENTICATION TARGETS            │
└────────────────────────────────────────────────────────────────────────┘
  Target 1: 50% Compliance ──► Target 2: 80% Compliance ──► Target 3: 100% COMPLIANCE
The 100% Compliance Target: In 2026, every commercial establishment in Saudi Arabia is required to maintain a 100% Contract Authentication Rate.
Systemic Punitive Actions for Sub-Threshold Entities:

If an establishment's authentication rate drops below required benchmarks:

Freeze on Work Visa Issuance:* All new foreign visa requests are locked on Qiwa.

Block on Inward Transfers:* The company cannot accept new employees from inside the Kingdom.

Work Permit Renewal Lock: Even if the company sits comfortably in Platinum Nitaqat*, MHRSD algorithms will block the renewal of work permits until the backlog of unauthenticated contracts is resolved.

Step-by-Step UI Guide: Auditing and Authenticating Contracts on Qiwa

Corporate human resources managers must establish a routine protocol to audit unauthenticated contracts on Qiwa Business (`qiwa.sa`):

Step 12 minutes

Sign In

Authenticate into qiwa.sa via National Single Sign-On (Nafath)

Step 2Instant

Workspace Selection

Select target Commercial Registration (CR) file

Step 31 minute

Access Contract Hub

Go to 'Electronic Services' -> 'Contract Management'

Step 42 minutes

Audit Status Tabs

Filter by 'Pending Approval', 'Expired', and 'Unauthenticated'

Step 55 minutes

Identify Disqualified Staff

Cross-reference unauthenticated Saudis against GOSI active register

Step 610 minutes

Re-Initiate Contracts

Re-send electronic contracts to all unauthenticated workers

Step 7Active Follow-up

Employee Mobile Tracking

Coordinate with workers to complete Nafath acceptance immediately

Detailed Screen Workflow for Employers:

1Access the Contract Management Module:

Log in to Qiwa Business ──> Select your establishment ──> Navigate to Electronic Services (الخدمات الإلكترونية) ──> Contract Management (إدارة العقود).

2Inspect the Compliance Gauge:

The primary dashboard displays your live Contract Authentication Rate Percentage (نسبة توثيق العقود):

* Total Workforce in GOSI: e.g., 85.

* Authenticated Contracts: e.g., 72.

* Unauthenticated / Pending: e.g., 13 (84.7% Compliance Rate - AT RISK!).

3Filter At-Risk Employees:

Click on the Pending Employee Approval (بانتظار موافقة الموظف) tab to view contracts currently within the 10-day window.

4Identify Expired Contracts:

Click on Expired Requests (طلبات منتهية). These represent workers whose 10-day window elapsed.

5Re-Initiate Expired Contracts:

Click on the action menu next to the worker’s name and select Re-send Contract (إعادة إرسال العقد). This resets the 10-day counter and triggers an immediate new SMS to the worker's smartphone.

Step-by-Step UI Guide: How Employees Authenticate on Qiwa Individuals

HR departments must educate their workforce on how to complete the authentication process. Many Saudi employees—particularly field workers, drivers, and junior technicians—fail to accept contracts simply because they do not know how to navigate the portal.

Step 11 minute

Portal Access

Open qiwa.sa and select 'Qiwa Individuals'

Step 22 minutes

Nafath Single Sign-On

Sign in using personal National ID and Absher credentials

Step 3Instant

Notification Banner

Click on 'New Employment Contract Pending Your Approval'

Step 43 minutes

Contract Inspection

Review Basic Salary, Housing, Job Title, and Notice Period

Step 51 minute

Digital Ratification

Click 'Accept Contract' and authenticate SMS OTP

Step 6Instant

Instant Compliance Sync

Status updates to 'Authenticated' across Qiwa and GOSI

The Employee Verification Steps:

1The employee navigates to https://qiwa.sa on their mobile smartphone and selects Qiwa Individual (قوى أفراد).
2Select Sign in via National Single Sign-On (نفاذ). Enter National ID and verify the challenge code on the Nafath app.
3Upon entering the home dashboard, an alert badge appears:

`"You have 1 contract request pending your approval from [Company Name]."`

4Click View Contract Details (عرض تفاصيل العقد).
5The employee reviews:

Job Title & Profession (المهنة)*.

Basic Salary & Housing Allowance (الأجر الأساسي وبدل السكن)*.

Working Hours & Probation Period (ساعات العمل وفترة التجربة)*.

Notice Period (مهلة الإشعار)*.

6The employee scrolls to the bottom and clicks Accept (قبول).
7A final SMS verification code is sent by Absher. Upon entry, the contract transitions to Authenticated (موثق). Full Nitaqat counting weight is restored to the employer’s account within 24 to 48 hours.

Real-World Corporate Case Studies

Case Study 1: The Logistics Fleet’s Phantom Band Collapse

Enterprise: Last-Mile Courier & Logistics Company in Riyadh (120 employees: 85 expatriate drivers, 35 Saudi operational staff).

The Setup: The company maintained a 29.16% Saudization ratio (35 ÷ 120), comfortably securing High Green (Sector threshold was 22.0%).

The Crisis:

In November, HR enrolled 15 new Saudi warehouse associates in GOSI and issued their digital contracts on Qiwa Business.
However, HR never followed up with the workers to ensure they logged into Qiwa Individuals to accept the contracts.
The 10-day acceptance window expired for all 15 workers. After the 30-day onboarding grace window closed, Qiwa’s algorithm stripped all 15 associates from the Nitaqat numerator.
Effective Saudi points collapsed from 35.0 to 20.0 points.
Saudization percentage plunged from 29.16% to 16.66%, dropping the company straight into Red Nitaqat!
Qiwa immediately froze work permit renewals, preventing HR from renewing the Iqamas of 25 expatriate fleet mechanics.

The Resolution:

1Management discovered the disaster during an emergency audit of the Qiwa Nitaqat Indicator.
2HR convened an emergency meeting with all 15 warehouse associates, provided mobile Wi-Fi tablets, and walked every worker through the Nafath login and contract acceptance process.
3Within 48 hours, all 15 contracts transitioned to Authenticated.
4Total points were restored to 35.0, lifting the company immediately back to High Green and unfreezing work permit renewals.

Case Study 2: The Engineering Firm’s Unauthenticated Expatriate Poaching Disaster

Enterprise: Civil Engineering Consultancy in Khobar (45 employees).

The Blunder: The consultancy hired a senior expatriate Tunnel Design Specialist from Dubai on a high-value salary. When onboarding the engineer in KSA, HR registered him in GOSI and processed his initial Iqama, but delayed creating his digital contract on Qiwa due to administrative oversight.

The Consequence:

Six months into employment, the specialist grew dissatisfied with project management.
A competing engineering firm operating in Platinum Nitaqat identified that the engineer had no authenticated contract recorded on Qiwa.
The competitor extended a formal electronic job offer on Qiwa.
Because the specialist had no authenticated contract with the current employer, Qiwa bypassed employer consent entirely.
The specialist accepted the offer on his phone at 10:00 AM; by 10:15 AM, his sponsorship was transferred to the competitor.
The original firm lost its primary technical authority on a SAR 40 million municipal project, with zero legal ability to enforce notice periods or non-compete covenants.

Strategic Governance: The 100% Contract Authentication Protocol

To eliminate the existential risk of unauthenticated contract penalties, corporate leadership must implement this mandatory operational workflow:

Code|Technical Specification / Reference
Verified Schema
┌────────────────────────────────────────────────────────────────────────┐
│               THE 100% CONTRACT AUTHENTICATION GOVERNANCE PROTOCOL     │
└────────────────────────────────────────────────────────────────────────┘
Step 1Day 0

Offer Execution

Finalize internal commercial offer letter and obtain physical signature

Step 2Day 1

Qiwa Contract Draft

Draft digital contract on Qiwa Business BEFORE enrolling in GOSI

Step 3Day 1

Onboarding Verification

Mandate that employee accepts contract via Nafath during Day 1 orientation

Step 4Day 2

GOSI Enrollment

Enroll worker in GOSI Taminaty Business ONLY after Qiwa shows 'Authenticated'

Step 5Monthly

Mudad WPS Parity

Ensure Basic and Housing in Mudad payroll match Qiwa contract to the penny

Step 6Weekly

Weekly Dashboard Audit

Review Qiwa Contract Management console every Monday morning

The Three Golden Rules of Contract Compliance:

1Never Enroll in GOSI Before Creating the Qiwa Contract: Align your onboarding sequence. Initiate the Qiwa contract first, guide the employee through Nafath acceptance on their first day of work, and only then register the employee in GOSI.
2Establish a 72-Hour Internal Acceptance SLA: Enforce an internal HR standard requiring all new hires to accept their Qiwa contract within 72 hours of issuance, well before the 10-day statutory window expires.
3Audit the Qiwa Contract Tab Every Monday Morning: Make inspecting the Pending Approval and Expired Requests tabs a mandatory weekly KPI for your HR operations team.

Frequently Asked Questions (FAQ)

What happens to an establishment’s Nitaqat score if a Saudi contract is unauthenticated?

If a Saudi employee's contract is not authenticated on Qiwa within the statutory window, they receive 0.0 points in the Nitaqat numerator. However, they remain counted as 1.0 worker in the denominator, actively dragging down the company's Saudization percentage and potentially causing an immediate drop into Low Green or Red.

How long does an employee have to accept a digital contract on Qiwa?

An employee has exactly 10 calendar days from the date the contract is submitted by the employer to log into Qiwa Individuals via Nafath and accept or reject the contract.

What happens if an expatriate employee's contract is not authenticated on Qiwa?

If an expatriate's contract remains unauthenticated, the employer loses all statutory labor protections. Under Qiwa regulations, the foreign employee gains the immediate legal right to transfer sponsorship to another employer without current employer consent or notice periods.

Can an employer force an employee to accept a contract on Qiwa?

No. The contract must be authenticated personally by the employee through the National Single Sign-On (Nafath) using dual-factor authentication. If an employee rejects the contract due to inaccurate terms, HR must amend the financial or job specifications on Qiwa and re-submit.

Does an unauthenticated contract affect work permit renewals?

Yes. In addition to individual worker point disqualifications, establishments whose overall Contract Authentication Rate falls below MHRSD compliance thresholds face an automated freeze on Work Permit Renewals (رخص العمل) across their entire expatriate workforce.