IT AMC · Riyadh

IT annual maintenance contracts (AMC) in Riyadh

An IT AMC from Cre8 IT (Create IT) looks after your helpdesk, devices, network, servers, Microsoft 365 and cyber security for a fixed monthly rate, with 24/7 emergency support and an office in Olaya, Riyadh.

What is an IT AMC?

One contract for all of your everyday IT

An IT annual maintenance contract (AMC) is an agreement with an IT company to look after your systems for a fixed fee, instead of paying for each call-out. Our flexible AMCs come with 24/7 emergency support at a fixed monthly rate tailored to your requirements, frequency and budget.

Our engineers take proactive responsibility for your network, hardware and software, connected devices, virus removal, backups and recovery, and contingency planning. If something does go wrong, a qualified technician resolves it in person or remotely through our helpdesk phone line and ticketing system.

What an AMC can cover

What is included

What a Cre8 IT AMC covers

Every AMC is tailored to your organisation. These are the areas our contracts usually cover.

Helpdesk and service desk

Reach us by phone or through our ticketing system. Every request and incident is logged, tracked and reported through our ITSM service desk.

Proactive maintenance

We watch and maintain your systems and apply updates, so problems are fixed before they slow your team down.

Devices, network and servers

Laptops, desktops, network, servers and connected devices, kept updated and working as one set-up.

Microsoft 365 and Citrix

User accounts, Teams, SharePoint and licences managed by a certified Microsoft Partner, plus support for Citrix environments.

Office systems

IP phones, access control and the office network, looked after by the same team as the rest of your IT.

Managed cyber security

EDR and antivirus, endpoint security posture management, identity threat detection and response, a SIEM and security awareness training for your staff.

Security we can include

Managed cyber security

Security included, not bolted on

Many of the IT problems organisations face today start as security problems: a phishing email, a stolen password or an unpatched laptop. Our AMCs can include a full managed security stack, run by the same team that runs your IT.

If SAMA’s Cyber Security Framework, the CMA’s guidelines or the NCA’s ECC apply to you, the same service produces the records reviewers ask for. See IT for firms in KAFD and our guide to choosing an IT provider in Saudi Arabia.

How it works

From first review to day-to-day support

1. Review

We review your current IT, devices and security, and agree what your AMC should cover.

2. Set up

We document your set-up, fix anything urgent and put our monitoring and security tools in place.

3. Support

A remote helpdesk for everyday issues, with scheduled on-site visits or a dedicated on-site engineer if you need one.

4. Review again

Regular reviews of tickets, risks and upcoming changes, so your IT keeps up as your organisation grows.

Why Cre8 IT

An AMC partner on the ground in Riyadh

Our own information security management system is certified to ISO 27001:2022, and we can share our certificate and scope as part of your due diligence.

Our Riyadh office is at Olaya Towers. For a CMA-licensed financial firm in Riyadh, we set up a new office from the server and network to laptops, IP phones and access control, and we now manage the whole office under an AMC, including Citrix, Microsoft 365 and office security.

Our credentials

ISO 27001:2022

Information security management

ISO 9001

Quality management

Microsoft Partner

Certified partner
Guides

Guides for Saudi organisations

Sourced to the regulator’s own text, dated and written by a named specialist.
SAMA

SAMA Cyber Security Framework: what Saudi financial institutions need to evidence

Who the SAMA Cyber Security Framework applies to, its four domains, the maturity level SAMA expects and the IT evidence a member organisation keeps.
3 min read · Reviewed 20 September 2026
PDPL

Saudi PDPL: an IT checklist for the Personal Data Protection Law

What the Saudi PDPL means for IT: enforced since September 2024, the 72-hour breach notice to SDAIA, the penalties and the technical measures needed.
4 min read · Reviewed 20 September 2026
CMA

CMA Cybersecurity Guidelines: what capital market institutions need to evidence

Who the CMA’s Cybersecurity Guidelines apply to, their four domains, the Head of Cybersecurity rule, cloud and outsourcing limits, incident reporting and the IT evidence to keep.
5 min read · Reviewed 30 September 2026
Incident reporting

Reporting a cyber incident in Saudi Arabia: who to tell and how fast

Who a Saudi organisation must tell after a cyber incident (SAMA, the CMA, the NCA and SDAIA), how fast, and what to prepare now.

7 min read · Reviewed 30 September 2026

FAQ

IT AMC questions

What is an IT AMC?

An IT annual maintenance contract is an agreement with an IT company to support and maintain your IT for a fixed fee over the year, instead of paying per call-out. A Cre8 IT AMC covers your helpdesk, devices, network, servers and Microsoft 365, and can include managed cyber security.

Do you provide on-site IT support in Riyadh?

Yes. Our Riyadh office is at Building 3074, Level 29, Tower B, Olaya Towers, Prince Mohammed Bin Abdulaziz Road. Depending on your AMC, you get remote helpdesk support, scheduled on-site visits for the duration you choose, or a full-time engineer embedded in your team.

How much does an IT AMC cost in Riyadh?

It depends on the number of users, devices and sites, how much on-site time you need and whether managed cyber security is included. We charge a fixed monthly rate tailored to your requirements, so tell us about your organisation and we will send you a free estimate.

Is emergency support included?

Yes. Our AMCs come with 24/7 emergency support, so you can reach us when something breaks outside office hours.

Can an AMC include cyber security?

Yes. We can include endpoint detection and response (EDR) and antivirus, endpoint security posture management, identity threat detection and response, a SIEM and cyber security awareness training, run by the same team that supports your IT.

Does using Cre8 IT make us compliant?

No provider can. You remain responsible for your obligations. We run and evidence the technical controls, help you prepare for reviews, and expect you to assess us as you would any provider.

Get a free IT AMC estimate

Tell us how many people and devices you have and how you work, and we will propose an AMC that fits.