How do banks in Saudi Arabia add omnichannel, video and AI to Cisco Finesse under SAMA rules?
SAMA’s Cyber Security Framework says Saudi banks need SAMA’s approval for public or hybrid cloud and should, in principle, use only cloud services located in the Kingdom; in-house systems fall outside that rule. Upstream Works runs omnichannel, video, knowledge and AI on-premise inside Cisco Finesse today; Totalix for Cisco follows on-premise in January 2027.
The routes compared
| Route | Where customer data lives | What agents get | Availability |
|---|---|---|---|
| Cisco Finesse on UCCE or PCCE, extended with gadgets | The bank’s own data center | Voice, plus whatever gadgets and custom integrations add | Now |
| Move to Webex Contact Center | Cisco’s cloud, so SAMA’s cloud approval and in-Kingdom rule apply first | Voice, chat, email and social on Webex | Now |
| Upstream Works on-premise with Finesse (current release) | The bank’s own data center | Chat, email, SMS and messaging, AgentNow video, UW Knowledge & Assist and UWXP AI assist, beside Cisco voice | Now |
| Totalix for Cisco, Dedicated or Partner Hosted | A single-tenant instance, or the cloud of the partner who delivers it | Every channel in one timeline, AI assist and knowledge | 1 December 2026 |
| Totalix for Cisco On-Premise | The bank’s own data center or private cloud | Every channel in one timeline, AI assist and knowledge | January 2027 |
SAMA rules from the SAMA Cyber Security Framework v1.0 (May 2017, section 3.4.3), the SAMA Rules on Outsourcing, SAMA’s 2015 circular on banking information confidentiality and the SAMACares complaint service levels; PDPL dates as summarized by Clyde & Co (February 2025); Upstream Works facts from the product team, 26 October 2026. This is not legal advice: confirm your obligations with counsel.
When it fits
A bank or other SAMA-regulated institution that runs Cisco UCCE or PCCE with Finesse and wants chat, messaging, video, knowledge and AI assist for its agents, with customer conversations kept in its own data center and Arabic in every channel.
When it doesn’t
A bank that is replacing Cisco altogether (see Totalix Complete), or one that already holds SAMA’s approval for a cloud contact center hosted in the Kingdom.
How Totalix does it
Upstream Works integrates natively with Cisco Finesse on UCCE, PCCE and WCCE. Agents keep Finesse and Cisco routing, and gain chat, email, SMS and messaging, AgentNow live video, UW Knowledge & Assist and UWXP AI assist in the same desktop, all running on-premise today on the current release, with no training on the bank’s data. Totalix for Cisco brings every channel into one timeline on one code base: Dedicated Hosted and Partner Hosted from 1 December 2026, On-Premise from January 2027. Totalix ships in 37+ languages including Arabic, with right-to-left layouts and real-time translation of Arabic voice as well as text.
Totalix for Cisco → · Banks in Egypt: Cisco Finesse on-premise → · Gulf government data residency → · Financial Services & Banking → · AgentNow live video → · Arabic and right-to-left support →
Questions buyers ask
Can a Saudi bank run its contact center in the public cloud?
Only with SAMA’s approval. Section 3.4.3 of SAMA’s Cyber Security Framework requires approval before using public or hybrid cloud, and says that in principle only cloud services located in Saudi Arabia should be used. The rule doesn’t apply to private, in-house cloud. Confirm your case with counsel.
Does outsourcing the contact center need SAMA’s approval?
Material outsourcing needs a written no objection from SAMA, and so does outsourcing to a provider outside the Kingdom, where the bank must also explain why the work can’t be done in Saudi Arabia (SAMA Rules on Outsourcing).
Can bank staff share customer information?
No. A 2015 SAMA circular bars banks from giving customers’ financial or banking information to any party, local or foreign, unless SAMA has issued a no objection. Chat transcripts, call recordings and video sessions hold that information, which is why many banks keep them in-house.
How quickly must Saudi banks answer complaints?
Within five working days of receiving a complaint directly from a customer, under SAMA’s SAMACares service levels, and within two working days when SAMA marks a complaint as high importance. Seeing every channel of a complaint in one timeline helps the team answer inside that window.
Does Saudi Arabia’s data protection law matter too?
Yes. The Personal Data Protection Law has been enforceable since 14 September 2024, and transfers of personal data outside the Kingdom need safeguards under its Data Transfer Regulations, amended in September 2024. Check with counsel how it sits alongside SAMA’s rules for your bank.
Can video, knowledge and AI stay on-premise too?
Yes. AgentNow live video, UW Knowledge & Assist and UWXP, the AI layer, run on-premise with Cisco Finesse today, with no training on the bank’s data.
Is Arabic supported?
Yes. Totalix ships in 37+ languages including Arabic, with right-to-left layouts and real-time translation of Arabic voice as well as text.
Do you work with Cisco in Saudi Arabia?
Yes. Upstream Works works directly with Cisco in Saudi Arabia and in Egypt, as well as with Cisco partners, so the Finesse integration is delivered alongside the bank’s existing Cisco estate.