English translation published by the NBR in its bilingual Regulations file (marked unofficial). The Arabic text published in the Official Gazette remains the legal reference in the event of any discrepancy.
Electronic records are permitted where they can be easily accessed and extracted on NBR request, supporting documents remain available electronically or on paper, and records are protected from tampering. The NBR may review the computer system for compliance.
Finance, accounting, IT, archives and cloud-system providers.
Data existing somewhere in the cloud is not enough. It must remain extractable, readable and linked to evidence, with permissions, change history and tested backups protecting it from loss or manipulation.
Current text
Electronic retention test
- 1
Export a complete period without one-person dependency.
- 2
Keep documents linked to entries.
- 3
Restrict unauthorised changes.
- 4
Log changes and test backup restoration.
- 5
Keep formats readable for the full period.
- 6
Prepare a system description for NBR review.
Connected provisions
Regulations — Article (101)
Required recordsArticle 101 says what to keep; this Article governs electronic method.
Open connected ArticleRegulations — Article (103)
Retention periodsElectronic access must survive each applicable period.
Open connected ArticleOfficial guides and tools
Connected Madar tools
Legacy software no longer opens
A business keeps data in software that stops working after an upgrade and can produce only scattered screenshots. Technical existence is insufficient where records cannot be extracted, read and reviewed; restoration must be tested before retiring a system.
Questions to help you apply it
- Can a full period be exported?
- Documents linked?
- Who can edit?
- Change log?
- Backup restored in a test?