Logo
Contact

CASE STUDY

SAMA Compliant Cloud Foundation — Banking & Government (KSA)

A leading Saudi digital bank, working with a government entity, needed to move regulated workloads to AWS without risking non-compliance with SAMA Cloud Computing Regulatory Framework or NCA controls. 

How We Built A SAMA Ready Cloud Foundation In KSA

The client was under pressure from both business and regulators. The business wanted to launch new digital products and government services in weeks. Regulators expected every system to follow SAMA CCRF and NCA requirements for access control, logging and data residency.

Multiple teams had already created ad hoc AWS accounts. Each one looked different, used different security settings and had no single source of truth for logs or permissions. Every audit meant a scramble for screenshots and manual evidence.

Algo worked with the bank, the government program team and their security office to turn this into a standard platform. We translated SAMA CCRF requirements into concrete AWS controls, then automated them in a reusable landing zone. Now every new account inherits the right guardrails, and the security team can show auditors what is happening in near real time.

Client Type: Digital bank delivering services for a government program

Key Drivers: SAMA CCRF compliance; NCA control alignment; Faster time to production

Scope: Core banking integration; Customer facing portals; Shared analytics workloads

Scope

  • Order processing,
  • Returns triage
  • Customer follow-ups
  • Inventory alerts

Goal

  • Reduce manual workload
  • Speed fulfillment
  • Improve CX while keeping MENA compliance

60%

Reduction in
manual audit

100%

Regulated workloads

3 Weeks

From design to sign off

The Challenge

Move faster on cloud without ever falling out of line with SAMA and NCA.

The internal team knew SAMA CCRF and NCA at a policy level, but not how each clause should map to specific AWS services or configurations.

There was no unified identity model, no clear separation of duties and no simple way to see which workloads were in scope for SAMA and NCA.

Every review meant weeks of manual exports, screenshots and ad hoc explanations.

Our approach — simple, measurable, MENA-ready

AlgoCAS designed a focused, low-risk delivery plan

Assess

Map existing order flows, exceptions, and integration points (ERP, WMS, payment gateway).

Iterate

Tune triggers, fallback rules, and multi-language templates for Arabic/English dialects.

Pilot

Deploy Amrny on a subset — e.g., late-hour order confirmations and refund triage — to measure impact.

Built for scale

Roll out to full order lifecycle with observability and FinOps controls.

Revolutionize Your Workflow with Amrny

Amrny transforms your business by automating tasks 24/7 with cutting-edge AI. Say goodbye to delays and hello to efficiency, tailored for MENA’s unique needs. Start experiencing instant task execution today.

Trust Amrny for Unmatched Reliability

With Amrny, expect consistent, secure performance every time. Built on AWS and Informatica, it ensures compliance while cutting costs—perfect for MENA enterprises seeking dependable automation.

Our approach — simple, measurable, MENA-ready

AlgoCAS designed a focused, low-risk delivery plan

L

Assess

We ran focused workshops with security, infrastructure and application teams. Together we mapped SAMA CCRF and NCA requirements to AWS capabilities. The output was a clear control matrix that showed what must be enforced, what must be monitored and what remains process driven.
L

Design & Build

Using that matrix, we designed a multi account AWS landing zone with AWS Organizations, Control Tower and Service Control Policies. We enforced identity federation, encryption, logging and region controls as defaults, all codified in Terraform.
L

Prove & Handover

We validated the design with security testing, simulated incidents and dry run audit checks. We then handed over Terraform modules, runbooks and training so the internal platform team could operate and extend the landing zone without losing compliance.

Empower Your Team with Amrny’s AI Power

Amrny equips your team with smart tools to work smarter, not harder. From setup to success, our support unlocks new potential, driving growth across KSA, UAE, and Egypt.nnIt ensures compliance while cutting costs—perfect for MENA enterprises seeking dependable automation.

Implementation Milestones

From first workshop to SAMA aligned landing zone in three focused sprints.

Week 1

Discovery, control mapping and target architecture. Agree on account structure, regions and identity model.

Week 2

Deploy core landing zone with Terraform. Enable federation, logging, encryption and baseline monitoring.

Week 3

Onboard first critical workloads. Run simulated incidents and an internal mock audit, then fine tune alerts and reports.

Ready to unlock your cloud potential?

Talk to our architects. Get a free, no-obligation plan for your next 90 days.

Book a 30-Minute Session
Contact Sales

CASE STUDIES

Real Results, Real Impact

Discover how we’ve transformed MENA businesses with AWS (and Informatica where applicable).

SAMA Compliant Cloud Foundation — Banking & Government (KSA)

Delivered a secure multi-account AWS landing zone aligned to SAMA and NCA with encryption, centralized logging, and least-privilege IAM.

Group Analytics Lakehouse — Real Estate & Property Dev. (UAE)

Built a governed data lakehouse with automated pipelines from ERP, CRM and external sources.

AI Document Intelligence for Claims — Healthcare (KSA)

Automated classification and data extraction from PDFs and scans with human-in-the-loop review.