Guide · For IT managers and engineers

SMS gateway hardware or an SMS provider: what Saudi businesses should know

SMS gateway hardware, such as a GSM modem, a SIM-based appliance or a phone running gateway software, sends text messages from the mobile number of the SIM card inside it. For messages to customers in Saudi Arabia that is a problem: CST's regulations say promotional SMS may not be sent from a mobile number, and senders must not contract to buy and send bulk SMS with providers CST has not authorised. Business SMS under your registered sender name goes through an authorised provider. Interkey holds CST's permit to provide short message services (SMS). Its Digital Connect platform can also take traffic from an SMS server you already run.

In short

  • Hardware gateway: sends from a SIM's mobile number; you maintain the devices and SIM plans.
  • Saudi rules: no promotional SMS from a mobile number; bulk SMS through providers CST has authorised; operators filter bulk SMS without an approved sender name.
  • Provider: your messages show your registered sender name, with a delivery receipt for each message.
  • Already run an SMS server? Connect it to Digital Connect over REST, SMPP or SOAP.
  • Permit: Interkey holds CST's permit to provide short message services (SMS).

What SMS gateway hardware is

"SMS gateway hardware" covers several set-ups that send SMS directly over a mobile network from your own premises:

What SMS gateway hardware is
Set-upHow it sendsTypical use
GSM or USB modemA SIM card in a modem attached to a computer or serverAlerts from one system to a small group
SIM-based applianceA dedicated box with one or more SIM cards and a web interfaceIT and facility alerts inside an organisation
Phone running gateway softwareAn ordinary smartphone that sends messages its software receivesTests and small projects
On-premise SMS server softwareSoftware on your server that queues messages and sends them through SIM hardware or through a provider connectionOrganisations that want to keep message handling in-house

In every hardware case, the message leaves from the SIM's mobile number. The recipient sees a phone number, not your company name.

What the Saudi rules mean for a SIM-based gateway

These points come from CST's regulations for SMS anti-spam (version 3, October 2022, Decision 493/1444):

What the Saudi rules mean for a SIM-based gateway
RuleWhat it saysClause
No promotional SMS from a mobile numberA sender may not send promotional SMS from a mobile phone number.4.6.9
Mobile contractsOperators include a condition in the end-user service contract that the mobile number is not used for promotional purposes.4.4.11
Authorised providers onlySenders must not contract to buy and send bulk SMS with providers CST has not authorised.4.6.3
Sender namesA sender name is the name through which bulk SMS are sent. Sender names are registered with the operators through CST's central bulk-SMS system.2.15, 4.3.1
FilteringOperators filter out bulk SMS with an unauthorised sender name, and the bulk SMS e-system CST may require operators to run blocks bulk SMS without an approved sender name or approved template.4.4.3, 4.2.5
One-time passwordsAn OTP message must say why the code was sent.4.6.2

Read the current text on cst.gov.sa: CST's regulations for SMS anti-spam. This guide is not legal advice; check your own use with your compliance team.

Hardware gateway vs an SMS provider

Hardware gateway vs an SMS provider
SMS gateway hardwareDigital Connect
What recipients seeThe SIM's mobile numberYour registered sender name
Promotional messagesNot allowed from a mobile numberUnder a promotional sender name with the "-AD" suffix, within CST's rules
OTP and service messagesFrom a mobile number customers may not recogniseUnder your service sender name
Delivery resultsWhatever the device or software logsA delivery receipt for each message, and reports you can export
Access controlDepends on how you secure the deviceTwo-factor sign-in, admin and user levels, API access from whitelisted IP addresses or a VPN
Account protectionYou monitor SIM usage yourselfFraud protection, country blocking and spending limits
What you maintainDevices, SIM cards, SIM plans, power and spare partsYour integration and your contact lists
How you payHardware plus SIM plansA quote based on volume and traffic type

If you already run an on-premise SMS server

You do not have to replace software that already queues messages for your business systems. Point its outbound connection at an authorised provider instead of SIM hardware:

  1. Choose the interface. Digital Connect supports REST APIs for application traffic, SMPP for sustained high-volume SMS, and SOAP where an existing business system needs it. See SMPP vs REST SMS API.
  2. Whitelist your server. Access is limited to whitelisted IP addresses or a VPN connection.
  3. Register your sender names. Interkey registers them with the operators through CST's central bulk-SMS system during onboarding.
  4. Approve your templates. Message templates are approved by your team and by Interkey before use.
  5. Keep promotional campaigns on the web platform. CST's regulations tell senders not to send promotional campaign messages from their own systems to the SMS provider's systems (clause 4.6.5). Use your server for OTP and service messages.
  6. Test, then switch. Send test traffic, check the delivery receipts, then move live traffic.

Questions to answer before you buy a gateway device

  • Will any message promote a product, service or offer?
  • Should customers see your company name rather than a phone number?
  • Do you send one-time passwords to customers?
  • Do you need a delivery record for each message, for audit or support?
  • Who will replace SIM cards, renew SIM plans and keep the device running?
  • Who checks that the set-up meets CST's regulations?

If you answered yes to the first question, CST's regulations rule out sending those messages from a SIM's mobile number. If you answered yes to any of the next three, an authorised SMS provider is the better fit.

Questions IT teams ask

Can we send bulk SMS to customers from a SIM card in Saudi Arabia?

CST's regulations say promotional SMS may not be sent from a mobile number, and mobile contracts include a condition that the number is not used for promotional purposes. For other message types, check your use with your compliance team. Business messages under a registered sender name go through a provider CST has authorised.

Does Interkey sell SMS gateway devices or server software?

No. Digital Connect is a business SMS platform that your team uses from a browser and your systems reach through an API.

Can we keep our existing SMS server?

Digital Connect supports REST, SMPP and SOAP. Tell us which software you run and we will confirm the connection method during onboarding.

Who registers our sender name?

Interkey registers it with the operators through CST's central bulk-SMS system during onboarding.

How is Digital Connect priced?

By quote, based on volume and traffic type. OTP traffic and marketing traffic are priced differently.

Is Digital Connect right for very small volumes?

If you send only a few hundred messages a month, or almost all your recipients are outside Saudi Arabia, Digital Connect is not a good fit.

Talk to us about your setup

Tell us what you send today, whether through a device, a server or another provider, which messages go to customers, and roughly how many a month. We will suggest the connection method and the onboarding steps.