AI for private clinics in Jeddah, 2026 guide

Key points

The Jeddah health region had 3,971,816 residents in 2022, and 2,110,317 of them, 53.1%, were non-Saudi.¹
In 2023 Jeddah's private sector ran 27 hospitals with 2,830 beds and 646 medical complexes.¹
Under Article 13 of the PDPL, a clinic tells each patient at collection whether their data will be processed or sent outside the Kingdom.²
Article 22 asks for an impact assessment of any product or service offered to the public, and Article 20 for breach notice to the regulator, both filed through SDAIA's platform.²³
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.

Summary

In a Jeddah clinic, AI can draft notes and patient messages under Saudi Arabia's Personal Data Protection Law, provided patients are told at collection how their data is used and where it is processed. SDAIA receives impact assessments and breach notices, insurance claims move through NPHIES, and more than half of the health region's residents are non-Saudi.

Families booked in Arabic before they wake, and insured visits ready to claim the morning after. In Jeddah that runs under the Personal Data Protection Law and the national insurance exchange.

Part of the JCI hub, with the framework explained, a readiness checklist and 8 guides.

See it in your clinicThirty minutes on your own patients and doctors.

Request a demo

646

private medical complexes in the Jeddah health region in 2023, alongside 27 private hospitals ¹

53.1%

of the Jeddah health region's 3,971,816 residents were non-Saudi in 2022 ¹

6.52 million

external Umrah performers in Q1 2025, 82.2% of them arriving by air ⁶

In fifteen minutes, watch an Arabic email sent near midnight become two adjacent bookings and an insurer claim built from a signed note.

Request a demo See pricing

The rules at a glance for a Jeddah clinic using AI
Body or rule	What it requires	What to ask	How wai meets it
PDPL Articles 12 and 13	A privacy policy and a notice at collection, including any processing outside the Kingdom	Does our intake wording name where records are processed	Records hosted in the clinic's own country, subprocessors named with 30 days notice
PDPL Article 22, filed with SDAIA	An impact assessment for products or services offered to the public	Can the supplier describe each AI step for our assessment	AI drafts only, every draft and approval written to an exportable event log
PDPL Article 20, filed with SDAIA	Notice to the regulator of a leak or unlawful access, and to patients where harm could follow	Who tells us first if something goes wrong	AES-256 at rest, TLS 1.3 in transit, and the clinic hears of any incident from us first
NPHIES	Insured health transactions exchanged through the national platform	How does a signed note become a claim	Built to connect to NPHIES, codes drawn from notes and claims prepared for insurers

The private care market in Jeddah

The Ministry of Health's 2023 Statistical Yearbook counts 3,971,816 residents in the Jeddah health region in 2022, of whom 1,861,499 were Saudi and 2,110,317 non-Saudi.¹ In 2023 the region's private sector had 27 hospitals with 2,830 beds, 646 medical complexes and 35 laboratories.¹

Pilgrims add demand on top of residents. GASTAT counted 6,523,630 external Umrah performers in the first quarter of 2025, 82.2% of them arriving through airports, and 1,506,576 of the 1,673,230 pilgrims at Hajj 1446H came from outside the Kingdom.⁶⁷

The rules a clinic in Jeddah works under

Saudi Arabia's Personal Data Protection Law counts health data as sensitive data.² Article 12 requires the clinic to publish a privacy policy that patients can read when their data is collected, and Article 13 lists what each patient must be told at that moment, including whether the data will be disclosed, transferred or processed outside the Kingdom.²

Two further duties land on a clinic that adopts a new tool. Article 22 calls for an assessment of the effects of processing for any product or service offered to the public, and Article 20 requires the controller to notify the competent authority of any leak or unlawful access, and the patient where harm could follow.² SDAIA's National Data Governance Platform takes both the privacy impact assessment and the breach notification online.³

Each clinician practises under registration with the Saudi Commission for Health Specialties.⁵ Insured visits are claimed through NPHIES, the national gateway for health transactions between providers and insurers.⁴ wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Jeddah. wai is built to connect to NPHIES. We set up your clinic's connection with you.

The languages patients write in

More than half the health region's residents hold another citizenship, so the same inbox carries Saudi families and residents from many countries.¹

wai works in any language and is built for Arabic-first care. A family writing in Arabic and a resident writing in English each get a reply drafted in their own language, approved by a person at the clinic.⁹

What a demo shows in Jeddah

A Saudi family in Al Rawdah emails in Arabic at 23:30 asking for an internal medicine appointment for a grandfather and a dermatology visit for his daughter. wai checks both doctors' busy times in Google Calendar, Outlook or Apple Calendar, finds adjacent open slots the next evening and prepares one Arabic reply that sounds like the clinic, which the receptionist approves after Fajr. A missed call from an Umrah visitor's hotel that night waits in the morning queue as a drafted text message.

During the consultation wai drafts the note, following the conversation as it moves between Arabic and English, and the internist edits and signs it. The team then has the codes from that signed note and a prepared insurer claim to check before it goes. Each message, draft, approval and signature sits in an event log the clinic can export.⁸

For health systems, insurers and government in Saudi Arabia

Health clusters, hospital groups and insurers in the Makkah region can commission a system on wai for a single pathway, such as care for visiting pilgrims, with the data and exit terms set in the contract. How that work is scoped is on the organisations page.

Where to start

First, check that your privacy policy and intake wording cover each Article 13 point, including where data is processed. Second, run the Article 22 impact assessment for the AI tools you plan to use and file it through SDAIA's platform. Third, confirm your NPHIES onboarding as a provider and keep each clinician's SCFHS registration on file.

Then pull a month of enquiries, marking the Ramadan evenings and Umrah peaks, and run them through a fifteen-minute demo. The claim denials guide shows what to measure on the insurance side. Pricing is published on the pricing page.

Bring a month of the clinic's real enquiries, Ramadan nights included, and see how each reply is drafted and approved.

Request a demo See pricing

Frequently asked questions

What must a Jeddah clinic tell patients about their data?

Article 13 of the PDPL lists the points to give at collection, including the purpose, who will receive the data and whether it will be processed outside the Kingdom.²

Does adopting an AI tool need an impact assessment?

Article 22 requires an assessment of the effects of processing for any product or service offered to the public, and SDAIA's platform accepts privacy impact assessments online.²³

What happens if patient data leaks?

Article 20 requires the clinic to notify the competent authority, and the patient where the leak could harm them.² SDAIA runs the breach notification service.³

How do insured visits get claimed?

Through NPHIES, which insurers and providers use to exchange health transactions.⁴ wai prepares the claim from the signed note for the team to check.

Does wai work in Arabic?

wai works in any language and is built for Arabic-first care.⁹

Where are our records hosted?

wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.⁸

Sources

Jeddah families booked before breakfast, claims ready the day after each visit.

Fifteen minutes with a clinician who uses wai daily, on your own diary and calendars. We reply within one working day.

Partner with us

See it on your own patients, then build it with us

Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.

Request a demo Partner with us

See what wai does between the visits

Clinic AI in Jeddah in 2026, privacy notices, impact assessments and NPHIES claims