Your client's concern is completly normal , depending on his feid ( health , finance, cybersecurity), and you have multiple solutions depending on your budget
STC Cloud: This is Saudi Telecom’s own cloud provider with data centers in Riyadh. It’s fully Saudi-based, offers Arabic-English support, and aligns well with local regulations and government APIs. Good for public sector and regulated industries where data residency really matters.
Oracle Cloud: Oracle has a dedicated cloud region in Riyadh. It supports big enterprise workloads and complies with Saudi data laws like ZATCA.
Microsoft Azure: Azure runs a data center region in Jeddah, so you get low latency plus compliance with Saudi hosting rules.
Make sure that while you're provisioning the infrastructure to select the right datacenter