Cloud Migration Services in Saudi Arabia, Egypt & UAE

Moving to the cloud is no longer a question of whether, but of what to move, where to host it and how to switch over without stopping invoicing, payroll or patient care. Superior Business Solutions (SBS) runs cloud migration projects for organisations in Saudi Arabia, Egypt and the UAE, with a focus on the systems that are hardest to move safely: ERP platforms and hospital information systems. If you are still weighing the model itself, our guides to cloud ERP and cloud versus on-premise ERP set out the trade-offs.

Our cloud migration approach

• Assessment: an inventory of applications, databases, interfaces and licences, a dependency map and a decision per workload (rehost, replatform, refactor, replace with SaaS, retain or retire) backed by a cost comparison.
• Landing zone: the foundation built before anything moves: identity and access, network segmentation and private connectivity, encryption and key management, logging and monitoring, backup, and cost tags and budgets.
• Migration waves: low-risk workloads first to prove the patterns, then ERP and integrations, and finally clinical or other critical systems, each wave with its own test and acceptance plan.
• Cutover: rehearsed runbooks, a data freeze, reconciliation of balances, stock and open documents, explicit rollback criteria and a hypercare period.
• Optimisation: rightsizing, reserved capacity where usage is predictable, storage tiering and a monthly cost report that keeps the cloud bill explainable.

ERP and hospital workloads need special handling

For Odoo, the choice is between Odoo Online (standard apps and Studio, no custom code), Odoo.sh (Odoo-managed hosting that supports custom modules) and self-hosting on infrastructure you control. The first two run Odoo Enterprise, so Community users moving there change edition too, and a migration is often combined with a version upgrade that needs planning as a project in its own right. For Microsoft Dynamics, moving from older on-premises versions to Dynamics 365 is an upgrade or re-implementation path rather than a server move. Zoho applications are already SaaS, so the work is data migration, integration and access design. Hospital systems add their own constraints: PACS archives are large and image retrieval is bandwidth-sensitive, laboratory analysers connect through on-site middleware, HL7 and FHIR interfaces must be re-pointed and re-tested, and downtime procedures have to be agreed with clinical leadership before any weekend cutover. Hybrid designs that keep latency-sensitive components on site are common, and often right.

Saudi Arabia: in-Kingdom hosting, NCA controls and ZATCA continuity

The Kingdom now has real in-country options. Oracle Cloud Infrastructure runs regions in Jeddah and Riyadh, Google Cloud operates a Dammam region sold locally through its reseller CNTXT, Microsoft and AWS are bringing their first Saudi regions online in late 2026, and Odoo's own cloud serves Middle East customers from a hosting zone in Dammam. Service availability still differs by region, so we check every service a design depends on. Government entities, critical national infrastructure operators and their suppliers must also meet the National Cybersecurity Authority's Essential Cybersecurity Controls and Cloud Cybersecurity Controls (CCC-2:2024), which include data localisation requirements; see our NCA ECC compliance service. The PDPL permits personal data transfers outside the Kingdom only under the conditions in its regulations, and the CST Cloud Computing Regulatory Framework governs the cloud providers themselves. Finally, protect your ZATCA Phase 2 integration: each e-invoice generation unit's cryptographic stamp identifier, invoice counter and hash chain must carry over cleanly, or new units must be onboarded before go-live.

Egypt: Law 151/2020, limited local regions and ETA signing

Egypt's Personal Data Protection Law (Law 151 of 2020) became fully operational once its Executive Regulations were issued in late 2025, so transfers of personal data outside the country must now meet its conditions, including a licence or permit from the Personal Data Protection Center where required. That matters because in-country public cloud capacity is thinner than in the Gulf: Huawei Cloud opened a Cairo region in 2024, but many hosting options Egyptian companies use, including Odoo's regional zone in Saudi Arabia and the Gulf and European regions of the large hyperscalers, sit outside the country. Health and financial data are classed as sensitive, and regulated sectors such as banking carry additional requirements. The most common technical trap is e-invoicing: ETA documents must be signed electronically, usually with a USB token or an e-seal, so a cloud-hosted ERP needs a properly designed signing service rather than a token plugged into an old office server. Point-of-sale e-receipts add a connectivity requirement at every branch. In our Odoo implementations for Egyptian companies, these integrations are part of the migration plan, not an afterthought.

UAE: health data localisation, emirate-level rules and e-invoicing

The UAE has mature in-country infrastructure. Microsoft Azure, AWS and Oracle all run UAE regions alongside local sovereign-cloud providers, and Zoho now hosts new UAE accounts in-country, so data residency is achievable for most workloads. For healthcare it is mandatory: Article 13 of Federal Law No. 2 of 2019 on ICT in health fields generally requires health data to be stored and processed inside the UAE, with exceptions limited to those set by ministerial resolution. Abu Dhabi providers also need ADHICS-aligned controls, Dubai providers follow DHA requirements, and connections to Malaffi, NABIDH or Riayati and to eClaimLink or Shafafiya must be re-established and tested from the new environment before cutover. Outside healthcare, the federal PDPL (Decree-Law 45/2021) governs personal data, with DIFC and ADGM applying their own regimes, and the ERP's connection to your Accredited Service Provider for Peppol-based e-invoicing, phasing in from 2026, belongs in the wave plan. Our cybersecurity services in the UAE cover the control side.

How SBS delivers

A dedicated SBS team runs the programme end to end: assessment and business case, landing-zone design, wave planning, data migration and reconciliation, interface re-testing, cutover and hypercare. Target platforms are chosen per workload (Odoo Online or Odoo.sh, Microsoft Azure, AWS, Google Cloud, Oracle Cloud Infrastructure or a hybrid design) rather than by vendor preference, and security follows a shared-responsibility model in which your obligations are written down, not assumed. After go-live, managed IT services can take over monitoring, patching, backup testing and cost reviews. More than 14 years of ERP and healthcare IT delivery in the region means we know where migrations usually break: integrations, e-invoicing, reporting and user access.

What drives cloud migration cost

• The number of workloads, their dependencies and how many need re-platforming rather than a lift-and-shift.
• Compute and storage sizing, especially imaging archives and database growth, and whether capacity can be reserved.
• Licensing: bring-your-own versus licence-included options for operating systems and databases, and SaaS subscriptions that replace servers.
• Connectivity and data transfer: private links, VPNs and data egress charges.
• Resilience targets: backup retention, a disaster recovery site and whether it must also be in-country.
• Migration effort: testing, rehearsals, parallel running and the months of paying for old and new environments together.
• Ongoing operations: monitoring, security tooling and managed services, plus currency exposure where services are priced in foreign currency.

How to choose a cloud migration partner

• Ask for a workload-by-workload plan with dependencies and rollback criteria, not a single big-bang date.
• Confirm the target region, and every service in it, against your data residency obligations.
• Check experience with your ERP's e-invoicing integration in each country you operate in.
• For hospitals, require tested downtime procedures and regression testing of HL7, PACS and health information exchange links.
• Make sure security controls map to the frameworks you are audited against.
• Insist on cost visibility from day one: tagging, budgets and a monthly report.

Frequently asked questions

How much does a cloud migration cost?

There is no fixed price: cost depends on the number of workloads and dependencies, how many need re-platforming, compute and storage sizing, licensing, connectivity, resilience targets and the testing and parallel-running effort. The assessment phase produces a workload-by-workload plan and a cost comparison between staying put and moving, so the decision rests on your own numbers.

Can we keep our data inside Saudi Arabia when we move to the cloud?

Yes. Oracle Cloud Infrastructure (Jeddah and Riyadh) and Google Cloud (Dammam) already run in-Kingdom regions, Microsoft and AWS are bringing Saudi regions online in late 2026, and Odoo's cloud has a Dammam hosting zone. Service availability differs by region and NCA and PDPL obligations still apply, so each design is checked service by service.

Can UAE patient data be hosted on a public cloud?

Yes, provided it stays in the UAE: Federal Law No. 2 of 2019 generally requires health data to be stored and processed in the country, with limited exceptions set by ministerial resolution. Azure, AWS and Oracle all operate UAE regions, and Abu Dhabi providers must also meet the DoH's ADHICS standard.

Should we move Odoo to Odoo Online, Odoo.sh or our own cloud server?

Odoo Online suits companies on standard apps without custom code, while Odoo.sh suits those with custom modules who want Odoo to manage hosting; both run Odoo Enterprise. Self-hosting on a cloud provider gives full control over location, integrations and maintenance windows, at the cost of running the platform yourself or through a managed service.

Will our ZATCA or ETA e-invoicing keep working after the migration?

It will if it is planned as part of cutover. In Saudi Arabia each e-invoice generation unit's cryptographic stamp, counter and hash chain must continue or new units be onboarded; in Egypt the signing token or e-seal needs a signing service the cloud ERP can reach; in the UAE the connection to your Accredited Service Provider must be re-tested.

How long does an ERP cloud migration take?

A single, well-understood ERP instance can move in one planned cutover after a few rehearsals, while programmes that include integrations, reporting and clinical systems run in waves over several months. The assessment sets a realistic timeline for your own estate.