Built specifically for GCC regulations โ Saudi Arabia, UAE, Qatar, and beyond.
ZATCA, Nitaqat, GOSI, and labor law โ all enforced automatically across KSA, UAE, and 4 other GCC countries.
Track VAT filings, Zakat calculations, and stay ahead of ZATCA & FTA requirements with automated reminders.
Monitor employee contracts, iqama renewals, and labor law compliance with real-time alerts.
Track Saudization (Nitaqat) and Emiratization quotas with live dashboards and gap analysis.
GOSI 9%+9% for Saudi nationals. MOL/QIWA/MOHRE/NAFIS API integration with real API calls when credentials configured.
Reusable onboarding and offboarding templates with interactive step-by-step completion and real-time progress tracking.
Never miss a compliance deadline with intelligent monitoring and prioritized alert system.
Departments, allowances, overtime, salary advances, disciplinary actions, assets, expenses, HR letters, public holidays, and final settlement โ all in one platform.
Calculate gross-to-net for every employee: basic + allowances + overtime โ GOSI โ advances. Download WPS SIF files for bank submission. Branded payslip PDFs per employee per month.
Company-defined allowance types. KSA law: housing >= 25% basic. Overtime declaration with legal multipliers feeds payroll automatically.
Record every promotion, increment, or adjustment. Generates a branded promotion letter PDF with dual signature blocks.
Full lifecycle: purchase to assign to repair to return to sell to dispose. Every action is timestamped. Employee asset requests with approval workflow.
Employee expense claims with line items by category. Approve claims, mark as paid. Category breakdown: travel, meals, accommodation, office.
Self-service letter requests: salary certificate, employment letter, NOC, experience letter. HR generates branded PDF, employee downloads when ready.
Calculate all end-of-service entitlements in one step. EOSB + unused leave + notice pay minus advances. KSA/UAE formula applied automatically.
Performance reviews, contract lifecycle (KSA 3-renewal rule), time & attendance, grievance management, PDPL data requests, employee surveys, and recruitment ATS.
Annual/semi-annual/quarterly cycles. Auto-generate review stubs for all active employees. Self-assessment + manager review + goals with weights.
Shift management (Sun-Thu or Mon-Fri). Daily attendance records with clock-in/out. Worked hours, overtime hours, monthly summary report.
Post jobs, track applicants through pipeline: Applied to Screening to Interview to Offer to Hired. Schedule interviews, record outcomes. Nationalization flag for quota tracking.
Fixed-term vs unlimited contracts. KSA: 3 fixed-term renewals auto-convert to unlimited (Art. 37). Full renewal history with PDF letters.
Formal employee complaint handling. Anonymous or named, 6 categories, priority levels. 10-day response SLA (KSA/UAE law). Full resolution workflow.
Handle employee data subject requests: access, correction, deletion, portability. 30-day deadline tracking with overdue flagging. JSON data export.
Build engagement surveys (eNPS, pulse, exit interview). Rating, yes/no, text question types. Anonymous option. Results with averages and bar charts.
Monthly 7-column visual calendar showing all approved leaves per day. Public holiday overlay. Navigate months. Team availability at a glance.
Departments as proper entities with manager, cost center, parent-child hierarchy. Visual org chart showing all department relationships and headcounts.
Self-hosted single-tenant deployment, AES-256 field encryption, PDPL/DPL compliance, full audit trail, CSP headers, HMAC webhook signing, and SSRF protection โ all enforced at the infrastructure level.
Iqama, passport, IBAN, document content, ZATCA credentials, and gov portal credentials encrypted at field level before storage.
Strict CSP: per-request script nonces, frame-ancestors: none, blocked inline scripts. All headers enforced on every response.
Data subject request module with 30-day SLA. Access, correction, deletion, portability rights. JSON data export. KSA PDPL + UAE DPL aligned.
Google Authenticator / Authy. Replay-attack prevention via last-used-at timestamp. Available for all users, enforceable per role.
Every create/update/delete/login with user identity, IP, browser, old/new values. Read-only from portal. Retained for compliance.
Your data never co-mingles with another company. Deploy on your own infrastructure or private cloud. Zero data sent to external servers.
Cross-cutting capabilities available across all modules โ from AI to API to multi-channel alerts.
Join companies using Iltizam to automate compliance and HR operations across the GCC.
Start Free Trial