To become a Saudi Aramco supplier, a Saudi-based company registers on Aramco's e-Marketplace platform and submits government documents (CR, Zakat, VAT, GOSI, Chamber of Commerce and others) plus Aramco-specific requirements, including a bank reference letter, ownership profile, authorized signatory letter and a Cybersecurity Compliance Certificate (CCC). Registration makes you eligible for business but does not guarantee contracts.
Who can register?
Aramco accepts suppliers of materials, manufactured goods and services. The registration route depends on where your company is based:
- Saudi Arabia: register through Aramco's e-Marketplace platform (In-Kingdom).
- GCC and Middle East (UAE, Bahrain, Kuwait, Oman, Qatar and others): a separate e-Marketplace route.
- Other international suppliers: through the relevant Aramco affiliate, such as Aramco Americas, Aramco Europe or Aramco Asia.
Government documents you need
For Saudi-based suppliers, Aramco lists these government documents:
- Commercial Registration (CR) certificate
- Industrial licence (for manufacturers)
- Investment licence (if applicable)
- Zakat certificate and VAT certificate
- GOSI certificate
- Civil Defense licence
- Chamber of Commerce membership
- Contractor classification (for service providers)
Aramco-specific requirements
- Acknowledgement of the Supplier Code of Conduct
- Bank reference letter
- Company ownership profile
- Authorized signatory letter
- Jadeer certificate (SMEs only)
- Cybersecurity Compliance Certificate (CCC)
The Cybersecurity Compliance Certificate (CCC)
The CCC shows that your company meets Aramco's Third Party Cybersecurity Standard. The process is:
- Register in the e-Marketplace and complete the classification templates.
- Select an Aramco-authorized audit firm.
- Complete the compliance assessment and verification.
- Submit the issued certificate through the e-Marketplace.
- Renew before expiry: the certificate is valid for two years.
Most classifications receive a CCC through remote verification. Companies classified as Critical Data Processors need a CCC+ with an on-site assessment.
IKTVA and local value
Aramco's IKTVA (In-Kingdom Total Value Add) programme rewards suppliers that create local value through local manufacturing, Saudi employment and in-Kingdom spending. A stronger IKTVA contribution can improve how competitive you are once registered.
Step-by-step summary
- Make sure you have a registered legal entity in Saudi Arabia (with a MISA investment registration if foreign-owned).
- Collect and check all government certificates. Make sure none are close to expiry.
- Prepare Aramco-specific documents and your company profile.
- Obtain your CCC from an authorized audit firm.
- Register on the e-Marketplace, select your categories and submit.
- Answer questionnaires and clarifications promptly until approval.
Common reasons for delays
- Expired or inconsistent certificates (for example, a CR activity that doesn't match the categories applied for)
- Missing CCC or wrong classification
- Incomplete ownership or signatory documents
- Slow responses to buyer clarifications
How Luba helps
Luba Global Ventures prepares your document pack, coordinates your CCC, registers you on the e-Marketplace and follows up until approval. We also register companies with SABIC, Ma’aden, NEOM, SEC and other major buyers.
Requirements can change. Always confirm current rules with the official authority or our team before applying.
