Clinic AI in Riyadh, what private clinics and health systems should know in 2026

The private care market in Riyadh

The General Authority for Statistics counted 499 hospitals in the Kingdom in 2023, and Riyadh Region led every region with 109.⁷ The same publication, built on Ministry of Health data, counted 113,300 medical doctors, or 33.6 per 10,000 people, of whom 64,813 were non-Saudi.⁷

The Kingdom's population reached an estimated 35.3 million in mid-2024, and 44.4% of residents were non-Saudi.⁸ A Riyadh clinic therefore serves Saudi families and a large expatriate population, often with insurance in the middle. NPHIES, the national platform, connects patients, healthcare providers and insurers, and governs the exchange of health transactions between them.⁹

The Health Sector Transformation Program under Vision 2030 sets a target of a unified digital medical record for 100% of the population.¹⁰ Clinics that keep signed, structured notes are ready for that record.

The rules a Riyadh clinic works under

The Personal Data Protection Law was issued on 16 September 2021 by Royal Decree M/19 and amended by Royal Decree M/148.¹² Article 1 defines health data as any personal data on a person's physical, mental or psychological health or the health services they receive, and lists it among sensitive data.²

Article 23 requires the regulations to limit access to health data, including medical files, to the fewest employees possible and only as far as care requires, and to restrict processing to the fewest staff who deliver care or insurance programmes.² Article 29 allows a controller to transfer personal data outside the Kingdom only for listed purposes, and only where the transfer does not harm national security and the destination offers protection no lower than the law's.²

Under Article 2, the law also reaches any entity outside the Kingdom that processes data on people living in it, and SDAIA receives every complaint under the law, according to its own guidance.³ SDAIA's National Data Governance Platform also offers controllers a self-assessment of how their AI models meet its AI ethics principles.⁴

Clinical work sits with the Ministry of Health, which publishes the sector's regulations on its portal, and with the Saudi Commission for Health Specialties, which reports about 802,800 registered health practitioners and offers a public check on whether a registration is valid.⁵⁶

wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Riyadh. For a Riyadh clinic, records stay in the Kingdom, each role sees only what its work needs, and the doctor signs every note.

The languages Riyadh patients write in

Arabic leads, and the mix behind it follows the Kingdom's residents. GASTAT estimated 19.6 million Saudi citizens and about 15.7 million non-Saudi residents in mid-2024.⁸ The doctors are just as varied, with 64,813 of 113,300 in 2023 holding another nationality.⁷

wai works in any language and is built for Arabic-first care.¹¹ Each reply is drafted in the language the patient wrote in, and a member of the team approves it before it is sent. Bring last month's real enquiries to the demo and watch each one run.

What a demo shows in Riyadh

The demo opens on a WhatsApp message in Arabic, sent at 11pm, from a mother asking whether her son can see the paediatrician on Thursday after school. wai reads it in the family's thread, checks the doctor's busy times in Google Calendar, Outlook or Apple Calendar, and drafts an Arabic reply offering two open afternoon slots. The coordinator approves it at 8am.

The booking link takes the deposit the clinic sets, and the family receives a confirmation, a receipt and an intake questionnaire. The mother gets a wai Profile for her son's letters and results, with permissions she can revoke.

On Thursday the doctor tells the family the scribe is on, then reads the drafted note, edits it and signs. Codes come from the signed note, and the claim is prepared for the insurer for the team to check and send on through NPHIES.⁹ Every draft, approval and signature is logged and exportable.

For health systems, government and insurers in the Kingdom

A hospital group, a payer or a government programme can commission a system built on wai for one defined care pathway, with records hosted in the Kingdom and the rights to its data, configuration and models written into the contract. The work starts with a pathway and the measures agreed with clinicians, as the organisations page sets out, and fits the Program's goal of one digital record for every resident.¹⁰

Where to start

First, list every place patient data lives today and ask each vendor in writing where every copy is stored, and on what Article 29 ground any copy leaves the Kingdom.² Second, map which roles open medical files, so access matches Article 23.²

Third, add a line to intake telling patients an AI scribe drafts the note and the doctor signs it, using the consent form template as a base. Fourth, count last month's enquiries by channel, hour and language, so the demo runs on the Arabic WhatsApp messages the clinic really received.

Frequently asked questions