Skip to content
Mohla

Your documents and data, handled with care

How Mohla keeps your files private, who can see them, and how our team works with government platforms for you. Everything on this page describes how the Mohla platform works today.

At a glance

Six questions a careful investor asks

Choose a topic to read the detail.

Your documents

Every passport, power of attorney or company record you upload goes into your Mohla account, not into a chat thread.

  • Files are kept in private storage and are never public. Each upload and each download uses its own link, which expires after five minutes.
  • We accept PDF, JPEG and PNG files only, and check what each file really contains, not just its name, before keeping it.
  • Every time a document is opened or downloaded, it is recorded: who, and when.
  • Your documents remain yours. We use them only to deliver your services and meet our legal obligations.

Who can see your documents

Access is checked on every request, by role.

  • In your company: the Owner and HR colleagues can view and upload documents. Finance and View only colleagues cannot open them.
  • At Mohla: the case manager assigned to your case, and Mohla’s managers. Support staff see only files attached to a conversation they handle; our finance team sees only payment receipts.
  • Outside partners we engage for one task, such as a certified translator, get time-limited access to only the files that task needs.
  • Passport and iqama numbers are masked on Mohla’s screens. Showing one in full is a separate step, and it is recorded.

A history you can follow

Nothing changes quietly.

  • Every change to your cases, documents, company details, invoices and users is written to a security log: who did it, what changed, and when.
  • Entries can only be added to this log. The database itself stops anyone from editing or deleting one.
  • Your case shows its own history: when it opened, each step completed, and each document requested, uploaded, approved or sent back.

Your account

Only you, and the colleagues you choose, get in.

  • You sign up with your email and confirm it with a 6-digit code. Sign-ups that are never confirmed are deleted after 24 hours.
  • Passwords must be at least 10 characters. They are stored only as a secure hash, so no one at Mohla can read yours.
  • After 10 failed sign-in attempts, the account is locked for 15 minutes.
  • A sign-in lasts at most 30 days; then you sign in again.
  • Every Mohla team member and partner uses two-step sign-in: their password, then a code sent to their email.

Colleagues and roles

The Owner invites colleagues by email (the invitation is valid for 7 days) and chooses each one’s role. Every role change is recorded, and no one can change their own role.

  • Owner

    Everything: invites and removes colleagues, sets roles, accepts quotes and pays.

  • HR

    Employees, iqamas, licences, documents and renewals. No invoices or quote decisions.

  • Finance

    Quotes, invoices, payments and receipts. No documents or employee data; ID numbers hidden.

  • View only

    Overview, case status and the compliance calendar. Nothing to download or change; ID numbers masked.

How we work with government platforms

Mohla has no direct connection to government platforms. Our team works on each authority’s platform by hand.

  • Your case manager files and follows each step on the authority’s own platform, then records it in your case so you can see it.
  • We act with the documents and authorisations you give us, such as a power of attorney you sign and, where required, attest.
  • The Mohla platform has no place for your government-platform passwords and does not store them.
  • Licences, registrations and residencies are decided by the competent authority. We prepare your file carefully but cannot guarantee an outcome.

Mohla is an independent Saudi company. We are not a government body, and we are not affiliated with, endorsed by, or an official partner of any authority.

Your data and your rights

Our Privacy Policy sets out what we collect and why. In short:

  • Under the Personal Data Protection Law (PDPL) you can ask how your data is used, get a copy of it, correct it, and have it deleted when the law no longer requires us to keep it. Where we rely on your consent, you can withdraw it.
  • We keep case files and documents for up to 10 years, and invoices for the period tax law sets. Deleting your data removes every stored version of your files.
  • We do not sell personal data or use it for advertising. This website has no forms and no tracking or advertising cookies.
  • To make a request, email hello@mohla.co or use the support page in the platform. You can also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
Read the Privacy PolicyRead the Terms of Service

Report a security concern

If you think someone has used your account, or you have found a security weakness on our website or platform, email us straight away. Tell us what you saw and when.

Please never send passwords or full ID numbers by email.

Email: hello@mohla.co

Start your Saudi file today

One account and one team for your company, your residency and every date that follows.

Get startedWhatsApp us
  • A written quote before any work
  • Government fees at cost, never marked up
  • Arabic and English, start to finish
  1. 1Create your accountOnline, from anywhere.
  2. 2Answer a few questionsAbout you and what you need.
  3. 3Receive a written quoteNothing starts until you accept it.