Cloud Migration Kuwait Salmiya — multi-cloud

Data residency

CITRA's cloud computing regulatory framework classifies data into tiers, and data classified in the higher tiers (Tier 3 and Tier 4) may not be stored outside Kuwait; providers must notify data owners before transferring personal data abroad and report unauthorised access to CITRA within 24 hours.

What shapes cloud procurement here

Buying is concentrated in government entities and the oil and gas sector, so major cloud engagements typically run as formal public tenders through the Central Agency for Public Tenders, with long cycles and a requirement in practice for a Kuwaiti commercial agent or local partner. CITRA's tiered data classification pushes sensitive workloads to in-country hosting, and because no hyperscaler has a generally available region in Kuwait yet, residency-bound workloads land in local data centres while the rest runs from UAE, Bahrain or Saudi regions. Government tender documents and contracts are in Arabic while technical delivery is usually in English, and Kuwait currently levies no VAT, so pricing is quoted gross of consumption tax.

Sector regulators