mada
madaSaudi Arabia’s national payment network, owned by the Saudi Central Bank (SAMA) since 1990. mada cards are co-badged with Visa or Mastercard — domestic transactions route over mada, cross-border over the international scheme.
PAL4IT provides ready-made integrations with payment gateways, government authorities, digital wallets and a wide range of systems and platforms — keeping data flowing smoothly across every system, automating processes and reducing manual work.
The transaction starts at the point of sale, in the online store, or on a customer’s record in the CRM.
It passes through the integration layer: data validated, translated into the receiving system’s format, and retried automatically on any outage.
And it lands where it belongs — collected on a card, financed into instalments, cleared as a tax invoice, or delivered to the customer as a notification.
Connect your POS or online store to the payment methods most used in the Kingdom, so every transaction flows automatically into accounting, bank settlements reconcile themselves, and fees are booked without a single manual entry.
Saudi Arabia’s national payment network, owned by the Saudi Central Bank (SAMA) since 1990. mada cards are co-badged with Visa or Mastercard — domestic transactions route over mada, cross-border over the international scheme.
The international co-badge on mada cards, handling cross-border purchases, visitor cards and currency conversion. In 2025 Visa moved its acceptance platform onto local cloud in the Kingdom, in line with SAMA’s hosting requirements.
The second international co-badge on mada cards. Mastercard began on-soil gateway operations in the Kingdom in 2024 and is SAMA-certified for the new e-commerce interface — local routing, tokenization and direct mada integration.
Live in Saudi Arabia since February 2019, working with mada, Visa and Mastercard. Customers pay in one tap from Apple Wallet without entering card details — and with no extra merchant fee over the underlying rate.
Pay later, or split the bill into four instalments. Operated in the Kingdom by Tabby Financing Company, SAMA-licensed since November 2025 — its KSA plans carry no interest and no late fees, and are Shariah-certified.
Turn on installment payments right inside your system to lift order completion — with no manual processing.
Interest-free instalments across up to six payments, under a SAMA permit to conduct BNPL granted in May 2023. Founded in 2022 and integrated with the major Saudi store platforms.
The finance arm wholly owned by Al Rajhi Bank, with SAR 2bn capital, SAMA-licensed since 2020 and authorised for BNPL in 2024. Suited to higher-value purchases on longer plans than typical pay-later.
The buy-now-pay-later service of NEO, the digital-banking brand owned by Saudi National Bank (SNB). Two to twelve interest-free instalments; the merchant is paid within seven days while NEO carries the default risk.
A payment service provider licensed by Saudi Payments (licence PSP013) that turns a credit-card purchase into an interest-free bank instalment plan at checkout — the bank extends the credit. It also supports direct mada, Visa and Mastercard payments.
The conversation with a customer, the demo meeting, the ad campaign, the branch pin on the map, the field team’s movements — things that usually live outside your systems in separate apps. Connecting them keeps the whole trail on the customer’s own record: nothing copied by hand, nothing stranded on a staff phone.
Send invoices, order notifications and collection reminders through approved WhatsApp templates, and reply from inside your CRM — so the conversation stays attached to the customer’s record instead of a staff phone.
Schedule customer meetings from inside the system: a Teams link is generated automatically and reaches both sides, and the meeting stays attached to the customer’s record and their request — so the demo slot, its notes and its files sit together instead of scattering across calendar and email.
Connect Facebook and Instagram campaigns to your CRM: a Lead Ads submission arrives as an opportunity ready to work, stored alongside the campaign it came from — instead of exporting a file from Ads Manager and re-keying it every morning.
Show branches, warehouses and customer addresses on a map inside the system, with the location captured as coordinates the moment the address is created rather than typed by hand. The same map carries CRM PAL’s field-team tracking: staff locations and movement during working hours, tied to the customer or the task — so territory coverage is measured rather than taken from a report written at the end of the day.
E-invoicing and medicine tracking aren’t features — the law mandates them, and their requirements change with every new decision from the authority. Both are built into PAL4IT’s systems and maintained centrally, so compliance never becomes a separate technical project on your desk.
Issue e-invoices automatically, with no extra systems required.
Integration with the RSD platform for tracking human medicines and recording their movement, from goods-in at the warehouse through to dispatch — with a full audit trail for inspection, and batches and expiry dates tied to stock movement itself. The SFDA launched the platform’s second version (RSD 2.0) during 2024.
Phase 2 applies in successive waves by revenue size, with ZATCA notifying each business well ahead of its date. Waves 1 to 19 covered the higher bands and their deadlines have passed. With the rollout now reaching Wave 24 — its threshold SAR 375,000, the same as the mandatory VAT-registration threshold — effectively every mandatorily-registered business is in scope. No new wave had been announced as of 20 July 2026.
| Wave | Taxable-revenue threshold | Integration deadline |
|---|---|---|
| Wave 20 | over SAR 1.5Mfor 2022 or 2023 | 31 Oct 2025 |
| Wave 21 | over SAR 1.25Mfor 2022, 2023 or 2024 | 30 Nov 2025 |
| Wave 22 | over SAR 1Mfor 2022, 2023 or 2024 | 31 Dec 2025 |
| Wave 23 | over SAR 750Kfor 2022, 2023 or 2024 | 31 Mar 2026 |
| Wave 24 | over SAR 375Kfor 2022, 2023 or 2024 | 30 Jun 2026 |
Four ordered steps — each depends on the one before it, and none is skipped.
We pin down which authorities and providers to connect, the operations that will flow through them, and the expected volume.
We obtain the API credentials and certificates from the authority or provider and set up your sandbox.
We wire the service up in a sandbox and test every case — including failures, refunds and outages.
Live operation with monitoring and automatic retries, and an immediate alert on any failure.
We build custom API integrations with the systems and services your organization relies on — talk to our team to scope your need and estimate the timeline.