Hissa Case Study

A regulated fractional real estate investment platform for Saudi Arabia.

Hissa is a white-label case study for a confidential Saudi fractional property investment product. AppWorx built the platform around Absher identity verification, ZATCA Phase 2 e-invoicing, Wafi off-plan data, SPV ownership, escrow workflows, Sharia compliance, and an Arabic-first investor experience.

The Client

The Client

The platform name and proprietary business information are protected under NDA. The name Hissa, Arabic for share, is a white-label designation used only to present the engineering work without exposing confidential commercial details. AbdulAziz Al Shimemry has given AppWorx full permission to share his name and company in connection with this case study.

AbdulAziz Al Shimemry, CEO of Al Shimemry Group, is a Saudi investment professional with a financial markets background and a track record in institutional real estate. The opportunity was precise: premium Saudi property assets were inaccessible to retail investors below the SAR 800K single-unit entry threshold, informal syndication remained legally fragile, and REIT instruments offered no direct asset control.

The product mapped directly to Vision 2030 priorities: deepening capital markets, formalizing informal investment behavior, activating real estate as an investment vehicle, and expanding access to property-backed opportunities through a regulated digital platform.

MarketSaudi Arabia (KSA)
PlatformWeb, iOS, Android
OngoingCDC active, Phase 3 and 4 in scoping
The Challenge

This was not a listings website with payments bolted on.

It was a regulated financial product with a digital delivery layer. The compliance surface area was so specific to Saudi Arabia that most agencies would need months of research before they could write defensible architecture.

01

Saudi regulatory environment, four compliance layers, none optional

The platform operates at the intersection of real estate regulation, financial regulation, tax compliance, and national identity infrastructure. A gap in any one layer is not a UX issue, it is a platform that cannot legally operate.

ZATCA Phase 2 requires cryptographic invoice signing and Fatoora clearance. Absher identity validation depends on the National Information Center approved partner channel. Wafi, RERA, Ejar, CMA posture, and Escrow Law 2023 all shaped the architecture before the first table was designed.

02

The ownership precision problem

Fractional real estate means a single property can have hundreds of investors, each holding percentage interests expressed to multiple decimal places. Those positions shift with every secondary-market transfer.

Standard floating-point arithmetic cannot be used for financial ownership records. The ownership layer had to preserve correctness across issuance, secondary transfer, distribution calculation, and capital events, with every cap table remaining legally defensible.

03

The concurrent share purchase problem

During a property launch, multiple investors can attempt to purchase the final available shares simultaneously. Without application-level locking, two investors can read the same availability and both succeed, overselling the offering.

In a regulated investment product, overselling is a legal problem. Excess shares are either void, which triggers refund and trust issues, or enforced, which means the SPV issued more than 100% of the asset. Neither outcome is acceptable.

04

The distribution calculation problem

Rental income distributions are not a simple division by share count. Investors enter at different times, transfer shares mid-period, and may be affected by capital events, vacancies, service charges, and refurbishment costs.

The system needed pro-rata calculations that are auditable to the transaction level and consistent regardless of transfer processing order. Even tiny rounding errors would compound across hundreds of investors and multiple distribution periods.

05

The secondary market liquidity problem

Fractional property shares are an illiquid asset class. A property may see no secondary trades for weeks, then a burst of activity around a distribution event or market movement.

The marketplace needed irregular-lot matching, partial fills, CMA-aware lock-up enforcement, and defensible valuation during zero-trade periods instead of a standard continuous order book copied from liquid markets.

06

The escrow state machine

Under KSA Escrow Law 2023, off-plan properties require project escrow accounts with defined release conditions. For fractional investment, funds remain in escrow until subscription thresholds and regulatory approval conditions are satisfied.

Conditions arrive asynchronously and out of sequence. The system had to model compound states, partial satisfaction, milestone releases, automatic refund paths, timeouts, and an immutable history for every transition.

07

The SPV capital waterfall

Each property is held through an SPV under Saudi Companies Law. Rental yield and capital gains flow through a defined capital waterfall before reaching investors.

Platform fees, preferred returns, and pro-rata shareholder distributions must process in the legally correct sequence. A payout that applies the sequence incorrectly can violate the SPV operating agreement even when the total distributed amount is correct.

What We Built

A regulated investment platform, not a prototype.

Hissa was built as bounded platform modules. Each module owns its domain, data, and interface with adjacent modules. The compliance layer is embedded in the write path of every financial operation.

Core Hissa Platform Modules

01 - Onboarding

Investor Onboarding & Identity Infrastructure

The entry point for every investor, built around Saudi national ID and Iqama validation, Absher identity confirmation, KYC/AML checks, and CMA accreditation tiering.

  • Absher identity validation through the NIC-approved partner channel
  • KYC and AML screening against verified identity records, not self-reported data
  • Retail and qualified investor tiering with investment limit enforcement
  • Risk classification records stored with a reconstructable audit trail
02 - Ownership

The Fractional Ownership Engine

The core financial infrastructure for share issuance, exact ownership ledgers, Redis-protected purchase reservation, SPV structure, and append-only cap table events.

  • Property-level share issuance with fixed offering economics
  • SQL DECIMAL(28,10) precision for ownership, distributions, and transfers
  • Redis-based distributed locking for high-demand launches
  • SPV cap table, documentation vault, financial ledger, and lifecycle status
  • Append-only cap table events for every purchase, transfer, and distribution
03 - Distributions

The Pro-Rata Distribution Engine

Distribution runs calculate each investor entitlement from exact share position, holding period, mid-period transfers, and the SPV capital waterfall. Every run produces an immutable record that can be reconstructed from cap table history.

04 - Tax

ZATCA Phase 2 Compliance Engine

Every share purchase, distribution receipt, and platform fee charge generates a ZATCA-compliant e-invoice with cryptographic signing, Fatoora clearance, QR stamp storage, retry handling, and operator escalation for clearance failures.

05 - Sharia

Sharia Contract & Fatwa Layer

Musharakah and Mudarabah contract structures, fatwa document management, board approval workflows, and profit distribution ratios are modeled as enforceable data, not cosmetic compliance copy.

06 - Marketplace

Secondary Marketplace

A per-property order book supports seller asks, buyer bids, partial fills, lock-up enforcement per acquisition lot, periodic price-time matching, zero-trade valuation, and atomic cap table transfers.

07 - Escrow

Escrow State Machine

Each offering has an escrow workflow with subscription thresholds, regulatory approval gates, construction milestone releases, refund states, immutable transition records, and precondition checks before every state change.

08 - Investor UX

Investor Dashboard

Investors see total invested capital, current estimated portfolio value, unrealized gain and loss, distributions, lock-up expiry, ROI analytics, document center access, and Zakat calculation inputs.

09 - Property Data

Property Listings & Wafi Integration

Listings carry due diligence, developer profiles, Wafi registration, escrow account data, completion percentage, NOC status, RERA/Ejar rental hooks, and Vision 2030 project tagging.

10 - Operations

Admin & Compliance Portal

Operators manage property onboarding, due diligence, developer verification, Sharia board submission, SPV lifecycle, distribution approvals, CMA reporting exports, and tamper-evident audit trail exports.

11 - Localization

Arabic-First UI Architecture

The investor-facing product was designed Arabic-RTL first, with English secondary. Layouts, forms, tables, document templates, mobile flows, push notifications, and WhatsApp communications all support Arabic-first usage.

Technical Architecture

The System Architecture

The architecture was designed around exact financial arithmetic, Saudi compliance integrations, append-only auditability, and modular domains that can expand into new Gulf jurisdictions without rewriting the core engine.

  • Backend: .NET 9 clean architecture with Domain, Application, Infrastructure, and API layers. CQRS separates write commands from read models, while ownership, distribution, and escrow operate as isolated domain contexts in a modular monolith.
  • Database: PostgreSQL with SQL DECIMAL(28,10) for all financial arithmetic. The cap table is append-only, current state is derived, and escrow state is stored separately from immutable transition events.
  • Payment processing: SAR-denominated processing through a Saudi-licensed gateway with Mada, STC Pay, Apple Pay, and SADAD support. Payment confirmation drives share reservation conversion, cap table updates, escrow deposit, and invoice generation.
  • ZATCA service: Invoice generation, cryptographic signing, Fatoora API submission, clearance stamp extraction, immutable document storage, and operator exception queues for clearance failures.
  • Absher integration: Identity assertion through the NIC-approved partner channel, with the verified identity record stored as the investor profile anchor for downstream KYC and AML checks.
  • Mobile: React Native app with offline read support for portfolio, documents, and property listings. Write operations require connectivity and surface clear pending-state indicators.
  • Data residency: Production deployment on AWS Riyadh region for compute, with Azure KSA region for cryptographic key residency. Personal investor and financial data remain inside Saudi infrastructure.
  • Immutable audit ledger: Cap table events, distribution runs, escrow transitions, invoice clearances, and accreditation decisions write to an append-only ledger as part of the committing transaction.
The Outcome

Hissa launched as a complete, compliant investment platform.

KSASaudi-region infrastructure with investor data, financial records, and cryptographic material kept in-country
100%Compliance layers shipped at launch, ZATCA, Absher, Wafi, CMA posture, escrow, and Sharia workflows
Phase 3+Continuous Development Contract active for mobile completion, Wafi sync, and Gulf expansion modules

Hissa covers the full investor lifecycle: Absher-verified onboarding, fractional share acquisition, Sharia-compliant distributions, ZATCA-cleared transaction documents, escrow-controlled funds, and secondary market exit.

The platform is a digital-native, CMA-aware, Sharia-compliant fractional property investment product with a genuine secondary market, not an informal syndication tool repackaged as software.

AppWorx continues to develop the platform under a Continuous Development Contract, with mobile completion, Wafi data sync, and Gulf expansion layers in active scoping.

Why This Project Matters as Proof

This is the proof point Gulf founders ask for.

Serious founders building regulated digital products in Saudi Arabia are not asking whether a team can build an app. They are asking whether the team understands Wafi, ZATCA Phase 2, Absher, CMA posture, escrow complexity, Sharia structures, and Arabic-first product delivery.

The architecture from prior Gulf real estate, GovTech, and Arabic-first product work transferred directly into Hissa. AppWorx scoped the compliance surfaces before delivery, not after they became expensive surprises.

Because Listings, Ownership Engine, Marketplace, Payments, and Compliance were built as isolated modules, future UAE, Qatar, and Bahrain jurisdiction layers can be added without rewriting the core engine.

"The complexity that filters out other agencies is the reason AppWorx wins this category."
Client Testimonial

Hissa Testimonial

We had spoken to three other agencies before AppWorx, and every one of them quoted on the surface without understanding what they were actually being asked to build. Absher, Wafi, ZATCA Phase 2, CMA posture, Sharia compliance — this isn't a feature checklist, it's a regulatory minefield, and most teams don't know that until they're six months in and stuck. AppWorx understood the compliance architecture before we'd finished the first call. What they delivered wasn't just a working platform — it was a platform I could put in front of regulators and Sharia board members without flinching. The ownership ledger is exact to the decimal. The audit trail holds up. That's not common in this industry, and it's the reason we're still building with them today.

AAAbdulAziz Al ShimemryCEO - Al Shimemry Group

Building a regulated product in Saudi Arabia?

Tell us what you are building. We will tell you honestly whether we are the right team, and if we are, we will show you exactly how we would approach the compliance, architecture, and delivery.

AppWorx

Complex products, delivered right, from the first time, within deadline, & by a team that speaks your language.

© 2026 AppWorx. All Rights Reserved.Built with skill, order, & discipline. That's how complex software gets delivered.