Do you work on site in Kuwait?

Yes. Our engineers work at customer sites in Kuwait and remotely from Dubai, and most engagements combine the two. Every engagement is contracted with Mamluk LLC-FZ, which is registered in Meydan Free Zone, Dubai.

Can the Bahriya Kubernetes Engine run inside Kuwait?

Yes. BKE is installed on the customer's own servers, in the customer's own data centre, so the cluster and the data it holds stay wherever that hardware is. The requirements for each node are published in full.

BKE is licensed at a flat annual fee per cluster, whatever the number of nodes, cores or memory. The figure and a worked example are on the BKE pricing page , and a 14-day trial can be started from the Mamluk console without a sales call.

Do we still have to keep sensitive data in Kuwait?

The general requirement that came from CITRA's data classification policy was repealed in February 2024. Sector rules, such as those of the Central Bank of Kuwait for banks, and the terms of your own licences may still impose one, and should be confirmed with your regulator. A platform on your own hardware in Kuwait meets any such requirement without further work.

Kuwait

Kubernetes and enterprise architecture in Kuwait.

We work with organisations in Kuwait at their own sites and remotely from Dubai. Kuwait's rules on cloud and cybersecurity have changed substantially since 2024, and a platform decision made before then may rest on requirements that no longer apply.

Begin an engagement About BKE

The market

Rules that have changed recently.

Kuwait's cloud regulation is set by the Communication and Information Technology Regulatory Authority. Its cloud computing regulatory framework was accompanied by a data classification policy that required sensitive data to be held in Kuwait; that policy was repealed in February 2024.

Cybersecurity regulation has moved in the other direction. The National Cyber Security Center issued national basic cybersecurity controls in April 2026 for government entities and critical private-sector organisations, with a period to comply, and the Central Bank of Kuwait issued a new cyber and operational resilience framework for banks in December 2025.

An organisation reviewing its platform against these changes is choosing between operating models more than between locations. BKE on its own hardware, with our support or our managed service, keeps both the location and the control evidence in its own hands.

What we do in Kuwait

Five services and one distribution, delivered on site and remotely.

Our engineers work at customer sites in Kuwait and remotely from Dubai. Every engagement is contracted with Mamluk LLC-FZ, and the same engineers deliver every service below.

Enterprise Architecture as a Service

A senior architect on call, paid for by the day.

Kubernetes Consulting

Strategy, architecture and platform design for Kubernetes done properly.

Kubernetes Development

Custom operators, charts, controllers and the long maintenance tail.

Kubernetes Support

A Kubernetes support contract with named engineers and a defined response time.

Managed Kubernetes on Premise

A fully managed Kubernetes practice running inside your own data centre, on BKE.

Bahriya Kubernetes Engine

The only enterprise Kubernetes distribution developed and supported from within the GCC.

Regulatory context

The frameworks that shape where workloads run.

These are the frameworks most relevant to where a workload runs in Kuwait.

Cloud Computing Regulatory Framework Communication and Information Technology Regulatory Authority: Governs cloud service providers licensed in Kuwait and their users. The data classification policy that accompanied it, and which required sensitive data to be held in Kuwait, was repealed in February 2024.
Data Privacy Protection Regulation Communication and Information Technology Regulatory Authority: Issued in 2024 and applicable to licensed telecommunications and information technology providers. Kuwait has no general data protection law that applies to every organisation.
National Basic Cybersecurity Controls National Cyber Security Center: Issued in April 2026 for government, security and military bodies and for critical private-sector organisations, which have a transition period in which to comply. They are a mandatory control baseline rather than a rule on the location of data.
Cyber and Operational Resilience Framework Central Bank of Kuwait: Issued in December 2025 for local banks and financial institutions, replacing the Bank's earlier cybersecurity framework. It covers the use of cloud and other emerging technologies.

This summary is provided as context and is not legal advice. Which frameworks apply to an organisation depends on its sector, its licences and the data it holds, and should be confirmed with its regulator and its own counsel. Mamluk does not claim certification against any framework listed here.

Questions

Common questions from organisations in Kuwait.

Do you work on site in Kuwait?: Yes. Our engineers work at customer sites in Kuwait and remotely from Dubai, and most engagements combine the two. Every engagement is contracted with Mamluk LLC-FZ, which is registered in Meydan Free Zone, Dubai.
Can the Bahriya Kubernetes Engine run inside Kuwait?: Yes. BKE is installed on the customer's own servers, in the customer's own data centre, so the cluster and the data it holds stay wherever that hardware is. The requirements for each node are published in full.
How is BKE priced?: BKE is licensed at a flat annual fee per cluster, whatever the number of nodes, cores or memory. The figure and a worked example are on the BKE pricing page, and a 14-day trial can be started from the Mamluk console without a sales call.
Do we still have to keep sensitive data in Kuwait?: The general requirement that came from CITRA's data classification policy was repealed in February 2024. Sector rules, such as those of the Central Bank of Kuwait for banks, and the terms of your own licences may still impose one, and should be confirmed with your regulator. A platform on your own hardware in Kuwait meets any such requirement without further work.