Post-money valuation 01
~1.6 US$B [CV005] Diligence report
D360 Bank
Saudi Arabia's first fully-licensed digital bank at a ~US$1.6B post-money valuation
A fast-growing, state-backed Saudi digital bank whose full ~US$1.6B valuation rests on undisclosed unit economics — attractive to watch, premature to underwrite with conviction.
Cover facts
Company profile
D360 Bank is a Riyadh-based, fully-licensed pure-play digital bank and Saudi Arabia's first such institution, established as a closed joint-stock company in February 2022 and launched to the public in early 2025. Backed by PIF-linked public-sector shareholders and Derayah Financial, it offers branchless retail and emerging SME banking through mobile and web, and reached roughly three million customers and SAR 3 billion in deposits by April 2026 before a June 2026 SAR 1.5 billion capital increase set its post-money valuation near SAR 6 billion (~US$1.6 billion).
- Website
- www.d360bank.com
- Founded
- 2022-02-15
- Founders
- Derayah Financial (founding shareholder), Eze Szafir (Ezequiel Szafir Holcman)
- Founding location
- Riyadh, Saudi Arabia
- Headquarters
- Riyadh, Saudi Arabia
- Product
- Branchless digital bank offering current accounts, Sharia-compliant Sanabil savings, mada debit and virtual cards, instant transfers over national payment rails, and an emerging SME-banking line, delivered via iOS, Android and web.
- Customers
- Mass-market Saudi retail customers skewed to youth and the digitally-native, plus an emerging SME segment.
- Business model
- Net profit income from the spread between Sharia-compliant financing assets and deposit profit paid, supplemented by card interchange, payment and FX fees and emerging SME-banking revenue.
- Stage
- Series A (post-money ~US$1.6B)
- Funding status
- June 2026 capital increase of ~SAR 1.5bn (post-money ~SAR 6bn / ~US$1.6bn), led by existing PIF-linked and Derayah shareholders.
Executive summary
Top strengths
- First fully-licensed pure-play digital bank in Saudi Arabia with credible PIF-linked and Derayah backing.
- Exceptionally fast traction: ~3 million customers and ~SAR 3 billion deposits within ~18 months of launch.
- Strong structural tailwinds — young, mobile-first population and Vision 2030 fintech policy support.
- Best-capitalised of the three Saudi digital banks after the June 2026 raise.
Top risks
- No audited financials, margins, retention or capital-adequacy disclosure — valuation underwritten on trust.
- Net-interest-margin compression from premium Sanabil deposit rates and rising credit exposure.
- Intense competition from STC Bank's telecom-scale distribution and well-capitalised incumbents.
- Risk that headline account growth overstates active, primary-relationship usage (dormancy).
Open gaps
- Audited revenue, net income and net interest margin are undisclosed.
- Cohort retention, churn and active-versus-registered user ratios are undisclosed.
- Capital-adequacy ratio, non-performing-financing ratio and deposit-concentration data are undisclosed.
- June 2026 round preference/liquidation terms and internal valuation projections are undisclosed.
Contents
01Company Overview
1.1 Identity, licence and launch
D360 Bank (البنك الرقمي 360) is a Riyadh-headquartered, fully-digital, Sharia-compliant bank and a Saudi joint-stock company. It was established on 15 February 2022 and operates without physical branches, serving customers entirely through its mobile app and web platform. The bank is consistently described as Saudi Arabia's first fully-licensed digital bank to commence full operations, distinguishing it from payment-app neobanks that lack a banking licence. Its regulatory path ran through the Saudi Central Bank (SAMA): after the digital-bank licensing process of 2021-2022, SAMA granted a no-objection to commence banking operations in late December 2024, and the bank launched services to the public in early 2025. D360 is a direct instrument of Saudi Vision 2030's fintech strategy, which set out to license and grow domestic digital banks. The snapshot KPI table and milestone timeline below anchor the identity, licence and launch facts that later chapters treat as ground truth.[CO001, CO002, CO003, CO004, CO005, CO028]
| Metric | Value / status | Date | Confidence | Gap |
|---|---|---|---|---|
| Post-money valuation | ~SAR 6.0bn (~US$1.6bn) | Jun 2026 | Medium | Implied from round, not audited |
| New equity raised | ~SAR 1.5bn | Jun 2026 | High | — |
| Registered capital | SAR 2.92bn (from SAR 2.10bn) | Jun 2026 | High | — |
| Customers | ~3 million | Apr 2026 | Medium | Denominator/active split unclear |
| Customer deposits | ~SAR 3bn | early 2026 | Medium | Unaudited |
| Headcount | Not disclosed | 2026 | Low | No reliable public figure |
| Revenue / net profit | Not disclosed | 2026 | Low | No audited statements public |
| Headquarters | Riyadh, Saudi Arabia | 2026 | High | — |
Values compiled from a June 2026 Tadawul disclosure and press reporting; valuation is round-implied, and revenue/headcount are undisclosed.
[CO010, CO011, CO013, CO014, CO020, CO021]Founding through the June 2026 capital increase.
[CO004, CO020, CO010, CO011]1.2 Leadership, founders and governance
D360 Bank's executive leadership is headed by chief executive officer Eze Szafir (Ezequiel Szafir Holcman), an international digital-banking executive, with Taha A. AlKuwaiz serving as chairman of the board. Public trackers and the bank's ecosystem materials additionally identify a chief technology officer (reported as Sherif Alaa) and other senior operators such as Mai Al-Hamdan, although the private bank does not publish a complete executive roster, so coverage of roles below the CEO and chairman is partial and reported rather than company-confirmed. Governance is closely tied to Derayah Financial, the largest shareholder, whose nominees participate in board oversight. Key-person dependence is meaningful: the CEO is the public face of the franchise and the technology leadership owns the core platform, so any departure would be material. Independent company profiles catalogue the team and funding but do not disclose audited financial statements, a recurring transparency gap for this privately-held institution.[CO006, CO007, CO008, CO009, CO030]
| Person | Role | Background | Functional coverage | Key-person dependency |
|---|---|---|---|---|
| Eze Szafir (Ezequiel Szafir Holcman) | Chief Executive Officer | International digital-banking executive | CEO / strategy | High — public face of the bank |
| Taha A. AlKuwaiz | Chairman | Saudi finance / governance | Board leadership | Medium |
| Sherif Alaa | Chief Technology Officer (reported) | Technology / platform | Product & engineering | High — owns core platform |
| Mai Al-Hamdan | Senior executive (reported) | Saudi banking / operations | Operations | Medium |
| Derayah Financial nominees | Board / shareholder representatives | Investment management | Governance oversight | Medium |
Executive roster compiled from Wikipedia, RocketReach and Derayah materials; roles below CEO/Chairman are reported, not company-confirmed, hence partial coverage.
[CO006, CO007, CO008, CO009]1.3 Funding, ownership and valuation
In June 2026 D360 Bank's shareholders approved a 38.89% capital increase that lifted registered capital from SAR 2,100,000,000 to SAR 2,916,666,670. The increase issued 72,916,667 new shares at SAR 20.57 each, raising roughly SAR 1.5 billion of fresh equity, and separately created about 8.75 million employee-share (ESOP) shares worth close to SAR 87.5 million. Press coverage places the pre-money valuation near SAR 4.5 billion (~US$1.2 billion) and the post-money valuation at approximately SAR 6 billion (~US$1.6 billion), and characterises the round as a Series A to fund lending and expansion. The transaction was disclosed to the market through Derayah Financial's Saudi Exchange (Tadawul) announcement. Derayah Financial is the largest single shareholder, its stake diluting from roughly 20.4% to about 16.35% while it subscribed an additional SAR 100 million; PIF-linked public-sector entities and strategic institutional investors hold the balance. The raise made D360 the largest Saudi digital bank by registered capital. The stakeholder map summarises these holdings and the diligence asks around the still-private full capitalization table.[CO010, CO011, CO012, CO013, CO014, CO015]
| Stakeholder | Role | Control / economic importance | Diligence ask |
|---|---|---|---|
| Derayah Financial | Largest shareholder (via subsidiary) | ~16.35% post-raise; lead economic stake | Confirm exact post-raise percentage and rights |
| PIF-linked public-sector entities | Strategic public shareholders | Public-sector backing / policy alignment | Confirm identity and combined stake |
| Strategic / institutional investors | Minority shareholders | Provide growth capital | Obtain full cap table |
| Employees (ESOP) | Option holders | ~8.75m shares (~SAR 87.5m) | Confirm vesting and dilution terms |
| SAMA (Saudi Central Bank) | Regulator | Licensing and prudential control | Confirm licence conditions |
| Board of directors | Governance | Oversight and strategy | Review independence and composition |
Ownership stakes are reported from press and the Tadawul filing; the full capitalization table is not public, so coverage is partial.
[CO016, CO017, CO018, CO015]Headline maturity and traction indicators.
[CO013, CO011, CO021, CO028]1.4 Scale, model and market context
D360 Bank reported reaching roughly three million customers and about SAR 3 billion in customer deposits by early-to-mid 2026, having earlier announced one million customers within months of launch. Its product suite spans retail personal accounts, the Sanabil savings product, cards and payments, plus digital SME and business banking. Because the bank is branchless, it can channel raised equity into customer acquisition, technology and lending rather than physical distribution, which underpins the growth-to-valuation logic captured in the snapshot-logic figure. The bank sits inside a Vision 2030 fintech mandate anchored by the Public Investment Fund's economic-diversification investment and a Saudi macro backdrop of oil-revenue diversification. The competitive and risk context is not uniformly favourable: the Saudi banking sector remains well-capitalised with highly profitable incumbents, while rating-agency commentary warns that sector growth is slowing as tighter liquidity pressures net interest margins — an adverse signal for a young lender still scaling its balance sheet. The milestone chronology consolidates the dated record used across the report.[CO020, CO021, CO022, CO023, CO024, CO026]
| Date | Event | Type | Amount / valuation / status | Participants | Implication |
|---|---|---|---|---|---|
| Feb 2022 | D360 Bank established as closed joint-stock company | founding | — | Derayah, founding shareholders | Legal formation |
| 2021-2022 | Digital-bank licensing process with SAMA | regulatory | Licence granted | SAMA | Path to operations |
| Dec 2024 | SAMA no-objection to commence operations | regulatory | Approved | SAMA | Cleared to launch |
| Early 2025 | Public launch of services | product | Live | D360 | Market entry |
| 2025 | Reported one million customers within months | scale | ~1m customers | D360 | Rapid acquisition |
| 2025 | Partnerships for payments and remittances | partnership | MoUs | MoneyGram, Mastercard, others | Ecosystem build-out |
| Apr 2026 | Reported ~3 million customers, ~SAR 3bn deposits | scale | ~3m / SAR 3bn | D360 | Scaled traction |
| Jun 2026 | Shareholders approve 38.89% capital increase | financing | ~SAR 1.5bn / SAR 6bn post | Derayah, investors | Largest digital bank by capital |
| Jun 2026 | ESOP share issuance created | governance | ~8.75m shares | D360 | Employee alignment |
| Jun 2026 | Capital increase disclosed via Tadawul | regulatory | Filed | Derayah Financial | Public disclosure |
Single chronology of record for D360 Bank compiled from regulatory notices, the Tadawul filing and press; dates for scale milestones are as reported.
[CO002, CO004, CO005, CO020, CO010, CO031]How identity, capital, product and dependencies connect.
[CO025, CO016, CO023, CO020, CO014]02Market Analysis
2.1 Market boundary and substitutes
D360 Bank operates in the market for Saudi Arabia's retail and SME banking demand delivered through fully-digital channels — deposits, savings, cards, payments and business banking — a subset of the national fintech sector. Included spend covers digital current and savings accounts, card and payment revenue, and SME banking; excluded is branch-based service delivery and non-bank corporate lending. The relevant adjacencies are digital payments and wallets (for example STC Pay), buy-now-pay-later and embedded finance, and the digital channels of incumbent banks. The most important status-quo substitutes D360 must displace are the mobile apps of dominant incumbents such as Al Rajhi and SNB and established payment apps, because most Saudis already hold a bank relationship. The buyer/segment map traces the path from the very large smartphone-owning population into D360's retail, underbanked and SME segments, and finally into deposit, payment and SME-banking revenue. Because incumbents already own the primary banking relationship for most adults, D360's boundary problem is less about creating demand than about redirecting existing flows and capturing the marginal new-to-bank, youth and SME customer, which shapes how the sizing lenses in the next section should be read, sized and underwritten by the market, financials and valuation chapters with appropriate caution and cross-checks.[CM001, CM002, CM015, CM020, CM021]
| Segment / category | Included spend | Excluded spend | Buyer / payer | Relevance to D360 |
|---|---|---|---|---|
| Digital retail banking | Deposits, savings, cards, payments | Branch-based services | Individuals | Core market |
| Digital SME banking | Business accounts, payments, invoicing | Corporate/syndicated lending | SMEs | Core growth market |
| Digital payments / wallets | P2P, merchant, remittance | Cash handling | Consumers, merchants | Adjacency / substitute |
| BNPL & embedded finance | Instalments, embedded credit | Traditional consumer loans | Consumers | Adjacency |
| Incumbent bank digital channels | Existing-bank apps | New-bank acquisition | Existing customers | Substitute / competition |
Market boundary defined by the analyst reports and company product scope; adjacency rows are partly substitutes and partly expansion options.
[CM001, CM002, CM015]Buyer-user-payer relationships and adoption path.
[CM022, CM028, CM018]2.2 Market sizing through multiple lenses
Sizing the opportunity requires multiple lenses because analysts define the market differently. P&S Intelligence sizes the narrow Saudi digital-banking segment at roughly US$122 million in 2026, growing to about US$255 million by 2032 at a ~13% CAGR. Mordor Intelligence sizes the broader Saudi fintech market — which folds in payments, BNPL and embedded finance — at approximately US$3.2 billion in 2026, rising toward US$6 billion by 2031, and Verified Market Research corroborates strong double-digit growth without a transparent methodology. These figures are not directly comparable: the choice of a bank-only versus whole-fintech lens drives the headline number by more than an order of magnitude. A defensible framing therefore treats the national fintech/payments pool as TAM, digital retail and SME banking as SAM, and D360's near-term penetration as SOM. The sizing-lens stack and the estimate-range figure make the divergence explicit and preserve the conflicting estimates rather than collapsing them into one false-precision TAM. A key caveat is that digital-only banking revenue remains small in absolute terms next to incumbent profit pools.[CM003, CM004, CM005, CM006, CM007, CM017]
| Publisher | Year | Geography | Value | CAGR | Methodology | Confidence | Limitation |
|---|---|---|---|---|---|---|---|
| P&S Intelligence | 2026-2032 | Saudi Arabia | US$122m→US$255m | ~13% | Digital-banking market model | Medium | Narrow digital-bank scope |
| Mordor Intelligence | 2026-2031 | Saudi Arabia | US$3.2bn→US$6.1bn | ~13-14% | Whole-fintech market model | Medium | Includes payments/BNPL, not bank-only |
| Verified Market Research | 2026+ | Saudi Arabia | Multi-US$bn | Double-digit | Fintech market forecast | Low | Methodology opaque |
| Vision 2030 target | by 2030 | Saudi Arabia | 525 fintechs | n/a | Policy target | High | Firm count, not revenue |
Estimates use different market definitions (bank-only vs whole-fintech), so headline values are not directly comparable; treat as lenses, not a single TAM.
[CM003, CM004, CM005, CM006, CM007, CM025]Layered view from broad fintech pool to D360's obtainable share.
Layers use different analyst definitions; SOM is illustrative, not a disclosed figure.
[CM003, CM005, CM017]Range of Saudi digital-banking / fintech size estimates (US$m, 2026).
Bounds approximate analyst point estimates ±10%; different market definitions are shown on one US$m axis for scale only.
[CM003, CM004, CM005, CM006]2.3 Demographics, adoption drivers and constraints
The addressable base is structurally attractive. Saudi Arabia has a population of roughly 35-37 million with a median age near 30, near-universal internet use above 90%, and mobile-subscription and smartphone penetration exceeding the population. These conditions lower the cost and friction of acquiring mobile-first banking customers and expand the top of the adoption funnel for every digital bank. Demand is reinforced by policy: Vision 2030's fintech strategy targets 525 fintech firms and a material GDP and jobs contribution by 2030, alongside cashless-payment goals, and the SME segment remains under-served by traditional banks — a distinct expansion market that D360's SME banking directly targets. Growth drivers span youth demographics, high mobile penetration, government policy and rising digital payments. The constraints are equally real: the Saudi banking market is concentrated among a few highly profitable incumbents, customer trust in new banks must be earned, switching propensity is low, and the digital-only revenue pool is small in absolute terms. Price sensitivity and account-dormancy behaviour for new digital banks remain unmeasured in public data, which is why the SOM and account-quality questions are carried forward as diligence gaps. Taken together, the demand side is one of the most favourable in the region while the supply side is unusually competitive, so the investment question is less whether the market grows and more whether a licensed digital challenger can win durable deposit share against entrenched, well-capitalised incumbents rather than merely adding low-balance accounts.[CM008, CM009, CM010, CM011, CM012, CM013]
| Segment | Buyer | User | Payer | Adoption trigger |
|---|---|---|---|---|
| Youth / mass retail | Individual | Individual | Individual | Mobile-first UX, referral |
| Underbanked / new-to-bank | Individual | Individual | Individual | Simple onboarding, inclusion |
| Micro & small SMEs | Owner | Owner/staff | Business | Fast account opening, payments |
| Savers | Individual | Individual | Individual | Sanabil profit rates |
| Remittance senders | Individual | Individual | Individual | Low-cost transfers |
Segment-buyer mapping inferred from D360's product scope and market reports; adoption triggers are analyst/company-indicated, not survey-verified.
[CM011, CM012, CM016, CM022]| Driver / constraint | Direction | Timing | Implication | Diligence ask |
|---|---|---|---|---|
| Youth demographics | Driver | Now | Large mobile-first demand pool | Confirm age-band adoption |
| Smartphone / internet penetration | Driver | Now | Low acquisition friction | Track app-store conversion |
| Vision 2030 policy & cashless push | Driver | 2024-2030 | Policy tailwind, licences | Monitor regulatory pace |
| Under-served SME segment | Driver | Now | Distinct expansion market | Size SME lending demand |
| Incumbent bank dominance | Constraint | Now | High competition for deposits | Assess switching data |
| Customer trust in new banks | Constraint | Now-medium | Slows deposit gathering | Survey trust metrics |
| Small absolute revenue pool | Constraint | Now | Caps digital-only upside | Reconcile sizing lenses |
Directional assessment synthesised from Vision 2030, KPMG and analyst commentary; constraints reflect incumbent strength and trust hurdles.
[CM012, CM013, CM014, CM019, CM026]Smartphone ownership to active banking usage.
Percentages are illustrative adoption-stage proxies derived from penetration data, not a measured D360 funnel.
[CM018, CM020, CM028]03Competitors
3.1 Competitive landscape and peers
D360 Bank competes on two fronts at once. The first is the emerging cohort of licensed pure-play digital banks: SAMA has issued three full digital-banking licences, to D360 Bank, STC Bank and Vision Bank. STC Bank, backed by the Saudi Telecom Company and built on the STC Pay wallet, is the most formidable peer because it inherits an installed base of roughly three million wallet users and nationwide telecom distribution; it received SAMA operating approval and launched in early 2025. Vision Bank is the third and most recent licensee, receiving SAMA no-objection in 2025 and backed by large Saudi family conglomerates with capital around SAR 1.5 billion, but it trails the other two on live presence. The second front is the incumbents — Al Rajhi Bank, among the world's largest Islamic banks, together with Saudi National Bank and Riyad Bank — whose mobile apps already serve tens of millions and whose branch networks, salary relationships and trust remain formidable. Adjacent substitutes include established payment apps such as STC Pay and urpay, which cover transaction use-cases without a full banking licence. Market trackers and Vision 2030 coverage frame the three-bank digital race as a deliberate pillar of financial-sector reform. Against this field D360's distinguishing facts are that it was first to a full pure-play licence and, after its June 2026 capital increase, is the best-capitalised of the three digital entrants — advantages that must be converted into deposit and customer share before licensing exclusivity and product differentiation narrow.[CP001, CP002, CP003, CP004, CP005, CP007]
| Competitor | Category | Scale / funding | Target segment | Differentiation | Limitation |
|---|---|---|---|---|---|
| D360 Bank | Digital bank (peer) | ~SAR 2.9bn capital; ~3m customers | Retail youth + SME | First full licence, Sanabil rates, UX | Young brand, small vs incumbents |
| STC Bank | Digital bank (peer) | STC-backed; ~3m STC Pay base | Retail mass + payments | Telecom distribution, wallet base | Wallet-to-bank conversion unproven |
| Vision Bank | Digital bank (peer) | ~SAR 1.5bn capital; family-backed | Retail + SME | Deep-pocketed conglomerate backing | Latest licence, not yet at scale |
| Al Rajhi Bank | Incumbent | World-leading Islamic bank; huge base | Full-market retail + corporate | Scale, trust, product depth | Legacy cost base, less agile UX |
| SNB / Riyad Bank | Incumbent | Largest Saudi banks by assets | Full-market retail + corporate | Scale, salary relationships | Slower digital-native experience |
Profiles synthesised from regulatory notices, news coverage and company/market sources; capital and customer figures are latest-disclosed approximations.
[CP001, CP002, CP003, CP004, CP007, CP008]Distribution scale (x) versus digital-native product experience (y).
Axis scores are ordinal 0-100 analyst judgements from the described competitive signals, not measured metrics.
[CP009, CP010, CP013, CP014]3.2 Capability, pricing, distribution and trust
On capability, incumbents lead decisively on product depth — full loan, card, wealth and corporate suites — while the digital banks are narrower but sharper on the specific jobs younger and SME customers value: fast digital account opening, fee-light transacting and competitive savings yields. D360 markets Sharia-compliant Sanabil savings products whose profit rates are positioned above what incumbents typically pay, which is the core mechanism by which a digital challenger pulls deposits away from banks encumbered by legacy cost bases. On pricing, the digital banks converge on a low-or-no monthly-fee model with free transfers, though competitors' complete fee tiers are not fully published, so the pricing table flags unknowns rather than inferring them. On go-to-market, the contrast is stark: STC Bank leans on telecom reach and the STC Pay base, incumbents on branch networks and entrenched salary-deposit relationships, and D360 on digital-first marketing to youth and SME segments. On trust and regulatory posture, all three digital banks operate under the same SAMA licence, but incumbents retain the deepest customer confidence and longest track records, a gap that slows deposit gathering for any new entrant. Switching costs — salary direct deposits, standing orders and loan ties — reinforce incumbency, though multi-homing is common: Saudi consumers routinely hold several banking apps and wallets at once, which cuts both ways by lowering the barrier to trying D360 while making primary-relationship capture harder. The capability matrix and positioning map summarise where each player is strong and where D360's youth-and-SME, high-yield, clean-UX wedge is genuinely differentiated versus merely comparable.[CP010, CP011, CP012, CP013, CP014, CP020]
| Buying criterion | D360 | STC Bank | Incumbents (Al Rajhi/SNB) |
|---|---|---|---|
| Digital account opening | Strong | Strong | Improving |
| Savings profit rates | Strong (Sanabil) | Moderate | Moderate |
| SME banking | Developing | Developing | Strong |
| Product breadth (loans/cards/wealth) | Narrow | Narrow | Broad |
| Distribution / reach | Digital-only | Telecom + digital | Branch + digital |
Ordinal capability scoring is evidence-backed but qualitative; cells reflect analyst/company signals, not audited feature audits. Incumbent lead on breadth is well-established.
[CP007, CP010, CP011, CP013]| Provider | Fee model | Savings / profit proposition | Notable inclusions | Unknowns / implication |
|---|---|---|---|---|
| D360 Bank | Low / no monthly fee | Sanabil Sharia-compliant profit rates | Free transfers, cards | Full tier schedule not published |
| STC Bank | Low fee, wallet-linked | Moderate savings features | STC ecosystem integration | Conversion incentives unclear |
| Vision Bank | Not yet public | Not yet public | Launching | Pricing undisclosed pre-scale |
| Al Rajhi / SNB | Tiered account fees | Standard deposit products | Full product suite | Higher fees, broader services |
| Payment apps (STC Pay/urpay) | Transaction-based | Limited / none | P2P, merchant pay | Substitute for transactions only |
Pricing rows compiled from company sites and reviews; competitors' complete fee tiers are not fully disclosed, so unknowns are flagged rather than inferred.
[CP011, CP012, CP020, CP021, CP034]Approximate relative capability breadth score by provider (0-100).
Breadth scores are ordinal analyst estimates spanning product depth, distribution and maturity; not audited counts.
[CP007, CP010, CP011, CP014]3.3 Moats, durability and displacement risk
D360's most cited moats are its first-mover full licence, post-raise capital strength, Sharia-compliant proposition and mobile user experience. Each, however, faces a concrete threat that the moat register makes explicit. The first-mover licence advantage is inherently decaying: as SAMA licenses additional digital banks — STC Bank already live and Vision Bank approved — exclusivity narrows and the advantage must be cashed in as deposit and customer share before parity arrives. Capital strength is real but relative; incumbents' scale and profitability let them subsidise digital investment at a level a young challenger cannot easily match, and they are actively upgrading their own apps to blunt the neobank differentiation gap. The Sanabil savings-rate edge is exposed to rate competition that can compress net interest margin, so durability hinges on whether D360 can sustain attractive yields without eroding profitability. The sharpest risks are commoditization and distribution: neobank propositions across the Gulf look increasingly similar, thinning differentiation and pressuring acquisition economics, while STC Bank's telecom-scale distribution is a direct threat to D360's customer-acquisition cost and pace. These are rated high-severity in the register and drive the diligence asks — benchmark customer-acquisition cost and conversion against STC Bank, verify sustainable margins at higher deposit yields, and track retention, active usage and NPS over time. The unresolved gaps — precise per-bank customer and deposit metrics, competitors' full pricing, and forward incumbent digital budgets — are the data most needed to move these judgements from qualitative to quantified.[CP015, CP016, CP017, CP018, CP019, CP022]
| Moat claim | Threat | Severity | Mitigation / diligence ask |
|---|---|---|---|
| First-mover full licence | More SAMA licences issued | Medium | Convert lead into deposit share before parity |
| Capital strength | Incumbent scale & subsidised digital spend | Medium | Deploy capital into durable acquisition & product |
| Sanabil savings rates | Rate competition compresses margin | Medium | Verify sustainable NIM at higher deposit yields |
| Mobile UX / brand | Neobank commoditization, thin differentiation | High | Track retention, active-usage and NPS over time |
| Youth/SME positioning | STC telecom distribution scale | High | Benchmark CAC and conversion vs STC Bank |
Risk register maps each moat to its primary threat with a diligence ask; severities are analyst judgement grounded in the competitive dynamics described above.
[CP015, CP016, CP017, CP020, CP023, CP031]Compact competitive-durability summary for D360.
KPI values summarise qualitative competitive findings; the numeric rank reflects post-June-2026 capital.
[CP003, CP017, CP019, CP016]04Financials
4.1 Revenue streams and monetization
As a licensed bank rather than a payments startup, D360's economics rest on classic banking mechanics adapted to a digital, Sharia-compliant model. Its primary revenue engine is net profit income — the spread between the return on financing assets and the profit paid to depositors on Sanabil savings products. Around this core sit fee-based streams: card interchange, payment and transfer fees, foreign-exchange margin, and an emerging SME-banking line carrying account, payment and financing fees. The consumer proposition is deliberately fee-light — free or low-fee current accounts paired with competitive savings profit rates — which shifts monetization toward the asset-side spread and interchange rather than account charges. This is the same low-friction pattern digital banks use to acquire price-sensitive, mobile-first customers, and it means revenue quality depends heavily on how profitably the roughly SAR 3 billion deposit base can be deployed. The revenue-model bridge traces the chain from customers to deposits to deployed financing assets to spread and, after deposit cost, to gross profit; fee income enters as a less rate-sensitive supplement. Crucially, while the existence and mechanics of these streams are clear, D360 discloses none of the underlying values — margin, mix, interchange volumes or fee schedules — so the tables flag each as a diligence ask rather than a known quantity. The monetization table similarly captures list versus realized pricing and the unknown discounting and FX-spread economics that a proper review would need to resolve.[CI001, CI002, CI003, CI004, CI005, CI028]
| Stream | Mechanism | Unit | Current value / status | Quality | Diligence ask |
|---|---|---|---|---|---|
| Net profit income | Spread on financing vs deposit profit | % margin | Primary; margin undisclosed | Core, rate-sensitive | Obtain NIM and asset yield |
| Card interchange | Fee per card transaction | bps per txn | Active; volume undisclosed | Recurring, fee-based | Get interchange volumes |
| Payment / transfer fees | Fees on transactions & FX | Per txn | Active; small early base | Fee-based | Get fee schedule & volumes |
| SME banking | Account, payment & financing fees | Per account | Emerging | Developing | Size SME revenue mix |
| Savings (Sanabil) | Deposit gathering (cost, not revenue) | Profit rate paid | ~SAR 3bn deposits | Funding source | Verify deposit cost |
Revenue streams inferred from D360's product scope and Saudi banking economics; specific values are undisclosed and flagged as diligence asks.
[CI001, CI002, CI003, CI009, CI029, CI030]| Item | Model | List vs realized | Discounts / unknowns | Source |
|---|---|---|---|---|
| Current account | Free / low fee | List; realized undisclosed | Promo waivers unknown | Company site |
| Sanabil savings | Profit-rate proposition | Advertised rate | Rate tiers not fully public | Company site |
| Cards | Fee-light, interchange-funded | List | Reward economics unknown | Company / analyst |
| Payments / transfers | Free or low fee | List | FX spread undisclosed | Company site |
| SME banking | Fee-based (emerging) | Not fully public | Pricing undisclosed | Analyst / news |
Monetization compiled from the company site and analyst commentary; realized pricing and discounting are not disclosed, so unknowns are flagged.
[CI003, CI004, CI028, CI029]How customer activity converts into revenue and gross profit.
Bridge is a qualitative mechanism map; node magnitudes beyond deposits/customers are undisclosed.
[CI001, CI002, CI003, CI023]4.2 Traction, cost structure and unit economics
D360's public traction is respectable for its age: roughly three million customers and about SAR 3 billion in deposits reported by April 2026, corroborated across multiple Saudi outlets. Beyond these two figures the private metrics that matter most for underwriting are absent — there is no audited revenue, net income, net interest margin, customer-acquisition cost, payback or cohort-retention disclosure. The cost structure of a digital bank is qualitatively different from an incumbent's: it is dominated by technology, cloud, compliance and customer acquisition rather than branch overhead, which can yield a structural cost-to-serve advantage once scaled but front-loads spend before revenue matures. The unit-economics table therefore reports the two disclosed metrics, an arithmetic implied deposits-per-customer of roughly SAR 1,000 (which itself raises a balance-quality question about whether accounts are primary or low-balance secondary), and explicit nulls for CAC, payback and NIM. The unit-economics bridge is deliberately illustrative: indexing asset yield to 100 and subtracting premium deposit cost, technology and compliance, and acquisition spend shows why an early challenger paying above-market Sanabil rates can run a negative net margin during the land-grab phase. None of these figures are D360-reported; they exist to frame the shape of the problem and the questions diligence must answer, and the deposits-per-customer implication in particular should be verified against average-balance and active-account data.[CI006, CI007, CI008, CI009, CI010, CI035]
| Metric | Value / null | Confidence | Why it matters | Diligence ask |
|---|---|---|---|---|
| Customers | ~3,000,000 | Medium | Scale of base | Confirm active vs registered |
| Deposits | ~SAR 3bn | Medium | Funding & spread base | Verify deposit mix & cost |
| Deposits per customer | ~SAR 1,000 (implied) | Low | Balance quality | Confirm average balances |
| CAC / payback | null | None | Acquisition efficiency | Obtain marketing spend & cohort CAC |
| Net interest margin | null (sector ~2.8-3.0%) | Low | Core profitability driver | Obtain D360-specific NIM |
Values are latest-disclosed or implied; nulls mark undisclosed private metrics. Deposits-per-customer is an arithmetic implication, not a reported figure.
[CI008, CI009, CI014, CI019, CI035]Illustrative early-stage margin build (qualitative, not disclosed).
Illustrative indexed values (asset yield=100) showing why an early challenger paying premium deposit rates can run negative net margin; not D360-reported figures.
[CI014, CI018, CI019, CI027]4.3 Capital adequacy, financing dependency and verdict
The clearest financial facts concern capital. In June 2026 D360 completed an approximately SAR 1.5 billion equity capital increase, lifting paid-up capital to roughly SAR 2.9 billion and setting a post-money valuation near SAR 6 billion (about US$1.6 billion) — a Series-A-style step-up corroborated by the exchange filing and multiple outlets. That capital both strengthens the regulatory base and signals continued financing dependency: like any bank scaling its balance sheet, D360 relies on shareholder equity until net profit income covers its cost base. The capital chapter's chronology is owned by Company Overview; here the financing facts are restated as local claims tied to the filing and news sources. Benchmarks sharpen the picture. Saudi banks earn net interest margins of roughly 2.8-3.0% on very large, low-cost deposit bases and the sector is highly profitable and well-capitalised; a challenger paying premium Sanabil rates to gather deposits faces structurally tighter early margins, and digital banks globally typically absorb several years of losses before profitability. PIF-linked ownership and Vision 2030 policy support provide patient, well-resourced backing that de-risks the financing path, and no material debt or project-finance obligations are disclosed. The verdict is therefore two-sided: capital strength, credible backing and encouraging early traction on one side; on the other, the complete absence of audited financials — revenue, margin, burn and runway — which is the central diligence blocker. Until those private metrics are obtained, revenue quality and the path to profitability cannot be verified, and the capital-adequacy and gaps tables set out exactly what to request.[CI011, CI012, CI013, CI014, CI015, CI016]
| Item | Value / status | Basis | Implication |
|---|---|---|---|
| Cash / capital on hand | ~SAR 2.9bn paid-up capital (post-raise) | Filing / news | Strong regulatory capital base |
| June 2026 new equity | ~SAR 1.5bn | Filing / news | Funds growth & balance-sheet scaling |
| Post-money valuation | ~SAR 6bn (~US$1.6bn) | News / filing | Series-A-style step-up |
| Monthly burn | Undisclosed | — | Runway not computable publicly |
| Runway (months) | Undisclosed | — | Depends on burn & deposit economics |
| Planned use of funds | Financing book, tech, acquisition | News / inferred | Growth-oriented deployment |
| Debt / project finance | None disclosed | Filing / company | Equity-funded to date |
Refers to the Company Overview funding chronology in prose; financing facts here are minted as local Financials claims with their own sources. Burn and runway are undisclosed.
[CI011, CI012, CI013, CI014, CI020, CI022]| Missing private metric | Impact | Exact diligence path |
|---|---|---|
| Audited revenue & net income | Cannot assess revenue quality or losses | Request audited financials / SAMA filings |
| Net interest margin | Core profitability unknown | Obtain asset yields and deposit costs |
| Monthly burn & runway | Financing-dependency horizon unknown | Management accounts & cash-flow statements |
| CAC / payback / cohort retention | Acquisition efficiency unknown | Marketing spend & cohort analytics |
| Revenue mix by stream | Concentration risk unknown | Segment P&L from data room |
Gap table enumerates the private metrics whose absence is the central financial diligence blocker, each with an exact path to close it.
[CI010, CI017, CI018, CI023, CI025]Ranges for key disclosed financial inputs (SAR bn unless noted).
Bounds bracket reported approximations ±10%; disclosed points only, no projections.
[CI008, CI009, CI011, CI012]Where capital is consumed as the balance sheet scales.
Allocation is directional/inferred from typical scaling-bank use of funds, not a disclosed budget.
[CI012, CI013, CI014, CI026]05Product & Technology
5.1 Product, modules and customer workflow
D360 is a branchless, mobile-first bank delivered through iOS, Android and web, and its product is best understood as a set of jobs a Saudi resident can complete entirely in-app. The flagship job is account opening: instead of a branch visit and paperwork, a customer verifies identity through the Kingdom's national digital-identity services (Nafath/Absher) and opens a fully-licensed account in minutes. From there the module set is a conventional retail bank rendered digitally — current accounts, Sharia-compliant Sanabil savings, mada debit and virtual cards with Apple Pay support, and instant local transfers over the SARIE and mada rails — plus an emerging SME-banking line for business accounts and payments. The workflow table maps each customer job to D360's solution and the measurable benefit (minutes versus days to open an account, instant low-fee transfers, immediate card issuance) while being candid about limitations: reliability and verification frictions surface in reviews, savings-rate tiers are not fully public, and card-reward and FX economics are undisclosed. The module-maturity map shows accounts, savings and cards as established while SME banking is still developing, which matches the roadmap emphasis and the traction milestones of roughly three million customers and SAR 3 billion in deposits reached in 2026. In short, the product surface is complete enough to run a primary banking relationship for a mass-retail customer, with SME depth the clearest area still being built out.[CE001, CE002, CE003, CE004, CE008, CE009]
| Module / product line | User | Status / maturity | Differentiation | Diligence gap |
|---|---|---|---|---|
| Current account | Retail | Established | Fast digital onboarding | Active-account share |
| Sanabil savings | Retail savers | Established | Sharia profit rates | Rate sustainability |
| Cards (mada / virtual) | Retail | Established | Fee-light, Apple Pay | Interchange economics |
| Payments / transfers | Retail + SME | Established | Instant SARIE transfers | Volume & FX data |
| SME banking | SMEs | Developing | Digital account & payments | Full scope & timeline |
Module maturity synthesised from the company site, app listings and market coverage; SME scope is the least disclosed.
[CE003, CE008, CE009, CE018, CE028]| User job | Current workflow | D360 solution | Measurable benefit | Limitation |
|---|---|---|---|---|
| Open a bank account | Branch visit, paperwork | In-app KYC via Nafath in minutes | Minutes vs days | Reliability frictions reported |
| Save with returns | Incumbent savings product | Sanabil Sharia profit account | Competitive profit rate | Rate tiers not fully public |
| Pay & transfer | Branch/legacy app | Instant in-app SARIE/mada | Instant, low/no fee | FX/limits undisclosed |
| Get a card | Branch issuance | Instant virtual + mada card | Immediate use, Apple Pay | Rewards economics unclear |
| Bank an SME | Manual business banking | Digital SME account (emerging) | Faster onboarding | Scope still developing |
Use-cases map the customer job to D360's solution and its measurable benefit; limitations reflect review feedback and disclosure gaps.
[CE001, CE002, CE006, CE008, CE016]From app download to active banking.
Workflow reflects the described onboarding and product flow; exact in-app steps may differ.
[CE001, CE002, CE006, CE008]5.2 Architecture, dependencies and reliability
Architecturally D360 follows the modern neobank pattern: a layered stack of in-house mobile and web presentation over a vendor-supplied core-banking engine, integrated to national payment and identity rails and hosted in the cloud. Technographic sources report the core to be the BOS platform from INCAT, a configuration that is efficient and fast to deploy but concentrates operational dependency on a third-party vendor. The integration layer binds D360 to shared national infrastructure — mada for card processing, SARIE for instant transfers, and Nafath/Absher for identity — which is common to every Saudi digital bank and therefore not a source of differentiation, but is a genuine concentration risk: an outage or policy change in any shared rail affects the whole cohort. The critical dependency map lays these out, and the architecture table pairs each layer with its role, dependency and risk, highlighting vendor lock-in and shared-infrastructure exposure as the salient technical concerns. On reliability and support, the public signal is limited to app-store data: the iOS app rates around 3.9 out of 5, solid but not flawless, with reviews citing the reliability, verification and support frictions typical of a young banking app. D360 discloses no uptime, SLA or penetration-test results, so operational resilience cannot be independently verified — a gap the diligence path flags for the data room. Continuous delivery happens through app-store releases rather than hardware or branch rollouts, which speeds iteration but makes app-store review sentiment a meaningful real-time quality gauge.[CE005, CE006, CE007, CE012, CE017, CE027]
| Layer / component | Role | Dependency | Risk |
|---|---|---|---|
| Mobile & web apps | Customer presentation & UX | In-house / app stores | Reliability, review sentiment |
| Core-banking engine (BOS/INCAT) | Accounts, ledger, products | Vendor platform | Vendor lock-in / continuity |
| Payment integration | mada, SARIE transfers | National rails | Shared-infra outages |
| Identity / KYC | Nafath/Absher verification | Government services | Policy/access changes |
| Cloud infrastructure | Hosting, scaling, security | Cloud provider | Concentration, compliance |
Architecture is inferred from technographic sources and the company site; the vendor core-banking layer concentrates the most dependency risk.
[CE005, CE006, CE007, CE012, CE017, CE030]Layered view of D360's operating architecture.
Layer composition is inferred from technographic sources and market norms; internal module boundaries are illustrative.
[CE005, CE006, CE007, CE017]External dependencies underpinning D360's operations.
Dependency graph is inferred from the architecture; most dependencies are shared national infrastructure common to all Saudi digital banks.
[CE007, CE012, CE017, CE030]5.3 Differentiation, trust and safety
D360's differentiation is more commercial and regulatory than deep-technological. Its genuine edges are being first to a full pure-play SAMA licence, a clean and well-rated app experience, and a Sharia-compliant Sanabil savings proposition marketed on competitive profit rates — advantages of positioning, execution and licence rather than proprietary IP, since the core platform is vendor-supplied. The regulatory approval itself is a differentiating asset against unlicensed fintechs, but it is one the other two licensed digital banks also hold, so the moat is narrow. On trust and safety, D360 operates under SAMA prudential regulation with biometric login, encryption and a Sharia governance framework applied to its savings and financing products; the trust table captures these controls alongside their disclosure gaps — capital ratios, Sharia-board composition and penetration-test results are not public. The roadmap table reconstructs the milestone path from the 2024 SAMA no-objection through the early-2025 retail launch and 2026 traction milestones to the planned expansion of SME banking and financing, which is where future differentiation and revenue diversification are expected to come from. The maturity map underscores that the consumer proposition is mature while SME is nascent. Overall the technology story is competent and appropriately outsourced rather than exceptional, and the principal technical diligence items are the undisclosed reliability/SLA metrics, the vendor-platform dependency, and the still-forming SME roadmap and any proprietary data assets.[CE010, CE011, CE013, CE014, CE015, CE016]
| Control / metric | Status | Scope | Gap |
|---|---|---|---|
| SAMA banking licence | Active | Full digital bank | None (licensed) |
| Deposit / prudential regulation | Applies | SAMA framework | Capital ratios undisclosed |
| Biometric login & encryption | In place | App security | Pen-test results undisclosed |
| Sharia governance | In place | Savings & financing | Board composition undisclosed |
| App rating (Apple) | ~3.9/5 | Customer-reported quality | Reliability complaints noted |
Trust and compliance controls compiled from regulatory notices, the company site and app-store data; several assurance details remain undisclosed.
[CE010, CE013, CE014, CE015, CE016]| Stage / date | Feature / milestone | Status | Implication | Source |
|---|---|---|---|---|
| 2024 | SAMA no-objection to operate | Done | Cleared to launch | Regulatory/news |
| Early 2025 | Public retail launch | Done | Live to consumers | Company/news |
| 2025-2026 | Sanabil savings & cards scale | Done/ongoing | Deposit growth | Company/news |
| 2026 | Customer & deposit milestones (~3m, SAR 3bn) | Done | Traction proof | News |
| 2026+ | SME banking & financing expansion | Planned | Revenue diversification | Analyst/news |
Roadmap reconstructed from public milestones; forward items (SME, financing) are directional and not formally disclosed.
[CE010, CE011, CE018, CE021]Approximate maturity score by module (0-100).
Maturity scores are ordinal analyst judgements from product coverage and reviews, not audited metrics.
[CE003, CE018, CE019, CE022]06Customers
6.1 Segmentation and adoption trajectory
D360's customer base is a broad mass-market Saudi retail cohort weighted toward youth and the digitally-native, with an emerging small-business segment layered on top. In segmentation terms the retail customer is simultaneously buyer, user and payer, while SME accounts introduce an owner who plays those roles for a business; use cases span everyday banking, Sanabil savings, cards, transfers and low-cost remittances. The adoption trajectory is the report's single strongest proof point. Within months of its early-2025 public launch D360 reported roughly one million customers, and by April 2026 it reported approximately three million customers and around SAR 3 billion in deposits — close to a threefold increase in about a year and one of the fastest ramps in the regional digital-bank cohort. Importantly, the parallel growth of deposits alongside accounts indicates genuinely funded adoption rather than empty sign-ups. That said, the figures come without denominators: there is no disclosure of the active-versus-registered ratio, the balance distribution, or the churn-adjusted net-add rate, and the arithmetic implied average balance of roughly SAR 1,000 per customer hints that a large share of accounts may be low-balance or secondary rather than primary. Financial-inclusion and digital-payment data confirm a large, reachable addressable pool, but the retail-versus-SME split of D360's own base is not public. The segmentation and trajectory tables therefore pair each disclosed figure with the specific missing denominator a diligence process would need to interpret it.[CU001, CU002, CU003, CU004, CU005, CU006]
| Segment | Buyer / user / payer | Use case | Scale | Revenue / strategic value | Gap |
|---|---|---|---|---|---|
| Youth / mass retail | Individual (all three) | Everyday banking, savings | Majority of ~3m base | Core deposits & interchange | Active-usage share |
| Underbanked / new-to-bank | Individual | Inclusion, simple accounts | Meaningful sub-segment | Strategic (Vision 2030) | Balance quality |
| Savers | Individual | Sanabil profit accounts | Large | Deposit funding | Rate sensitivity |
| Micro & small SMEs | Owner | Business accounts, payments | Emerging | Higher-value future revenue | Split not disclosed |
| Remittance senders | Individual | Low-cost transfers | Sub-segment | Fee income | Volume undisclosed |
Segmentation inferred from product scope, SME coverage and inclusion data; the retail-vs-SME split is not disclosed.
[CU001, CU002, CU014, CU017, CU018]| Metric | Value | Date | Source | Confidence | Missing denominator |
|---|---|---|---|---|---|
| Customers | ~1,000,000 | 2025 | Startup/news | Medium | Active vs registered |
| Customers | ~3,000,000 | Apr 2026 | News | High | Active vs registered |
| Deposits | ~SAR 3bn | Apr 2026 | News | Medium | Balance distribution |
| Deposit / customer (implied) | ~SAR 1,000 | Apr 2026 | Derived | Low | Average balance detail |
| Growth rate | ~3x in ~12 months | 2025-2026 | Derived | Medium | Churn-adjusted net adds |
Trajectory compiled from dated press reporting; denominators (active share, balance distribution, churn) are the missing context.
[CU003, CU004, CU005, CU022, CU031]From download to funded, active, expanded customer.
Funnel percentages are illustrative proxies from app and adoption signals, not a measured D360 funnel.
[CU002, CU009, CU011, CU015]6.2 Named proof, retention and satisfaction
Named, verifiable customer proof is intrinsically limited for a mass-market consumer bank, because its customers are millions of individuals rather than referenceable enterprises. The available proof is accordingly a modest mix: a documented customer case surfaced in a customer-reference source, ecosystem partnerships that extend reach (payments, remittances and card networks), aggregate Sanabil savings uptake, and a sizeable app-store reviewer base. The named-proof table compiles these with each row cross-referenced to at least two independent sources, and the proof matrix makes clear that while production maturity is high, outcome specificity and retention visibility are low — this is case- and reviewer-based evidence, not audited outcomes. Retention is the decisive gap. D360 discloses no churn, dormancy, NRR, GRR or cohort-retention data, so the retention table is largely nulls, and the cohort figure is explicitly illustrative rather than reported. Independent signals fill part of the vacuum but weakly and negatively: the iOS app rates around 3.9 out of 5 and uninstall-tracking sources suggest a meaningful share of downloads do not persist as active users. Taken together these raise a central adverse question — whether headline account growth overstates active, primary-relationship usage. Until D360 provides active-user ratios and cohort retention, the quality of its impressive top-line growth cannot be confirmed, and the customer-journey map's stage-to-stage conversion remains unquantified.[CU007, CU008, CU009, CU010, CU011, CU012]
| Customer / proof | Segment | Deployment / use case | Production vs pilot | Outcome | Limitation |
|---|---|---|---|---|---|
| Documented case (Aetos-referenced) | Retail | Live D360 account usage | Production | Working banking relationship | Single case, limited detail |
| Ecosystem partners (payments/remittance/cards) | Partner | Reach & rails extension | Production | Extended distribution | Not end-customer outcomes |
| Sanabil savings adopters | Retail savers | Profit-bearing savings | Production | Deposit gathering | Aggregate, not named |
| App-store reviewer base | Retail | Everyday app usage | Production | Volume of active reviewers | Mixed sentiment, self-selected |
Named proof is limited for a consumer bank; rows compile the available production evidence with each row cross-referenced to at least two independent sources. Coverage is partial by nature.
[CU007, CU008, CU009, CU026, CU032]| Metric | Value / null | Segment | Confidence | Diligence ask |
|---|---|---|---|---|
| Churn / dormancy | null | Retail | None | Obtain cohort dormancy rates |
| NRR / GRR | null | All | None | Request net revenue retention |
| Active-user share | null | Retail | None | Obtain MAU/registered ratio |
| App rating (Apple) | ~3.9/5 | Retail | Medium | Track trend & complaint themes |
| Uninstall signal | Elevated (proxy) | Retail | Low | Verify against internal analytics |
Retention metrics are almost entirely undisclosed; app-rating and uninstall proxies are weak substitutes and flagged as such.
[CU010, CU011, CU012, CU030]Evidence quality by proof type.
Ordinal quality ratings summarise the modest, non-audited nature of available customer proof.
[CU007, CU008, CU009, CU023]Illustrative retention decay by tenure (percentages, not disclosed).
Retention values are illustrative placeholders (0-100) to frame the analysis; D360 discloses no actual cohort-retention data.
[CU010, CU011, CU012, CU030]6.3 Expansion, concentration and channel dependence
On expansion and concentration, D360's retail base is broad and therefore carries low single-customer concentration risk, which is a genuine strength: no handful of accounts dominates. The expansion logic is land-and-expand within the individual — cross-selling savings, cards and payments to deepen per-customer value — and, prospectively, a step from personal into SME banking that would raise revenue per relationship. The material concentration risks lie elsewhere: acquisition depends heavily on app-store channels, giving the model channel dependence and exposure to rising customer-acquisition costs; reach is extended through ecosystem partnerships that create partner dependence; and the deposit base skews to low balances, which is a funding-stability question. Comparative context matters — D360's growth outpaces most regional neobanks, but STC Bank commands a comparably large base through the STC Pay ecosystem, so scale alone is not a durable moat. Financial-inclusion policy and very high digital-payment penetration continue to expand the addressable pool, and SME-focused coverage frames under-served small businesses as the clearest future growth vector, though SME evidence today is early and thinly documented. The expansion-and-concentration table maps each growth driver to the risk it introduces and the diligence path to size it. The through-line of the chapter is that D360 has won attention and accounts at impressive speed; the open question is the durability and profitability of those relationships, which hinges on retention, active-usage and deposit-quality data that are not yet disclosed.[CU013, CU014, CU015, CU016, CU020, CU021]
| Expansion driver | Concentration risk | Impact | Diligence path |
|---|---|---|---|
| Cross-sell savings/cards/payments | Retail base broad (low) | Deepens per-customer value | Confirm cross-hold rates |
| SME land-and-expand | SME split undisclosed | Higher-value revenue | Size SME cohort & revenue |
| App-store acquisition channel | Channel dependence | Acquisition cost/pace risk | Assess CAC by channel |
| Ecosystem partnerships | Partner dependence | Reach vs reliance | Review partner contracts |
| Deposit-quality mix | Low-balance accounts | Funding stability | Obtain balance distribution |
Expansion drivers paired with the concentration risk they create; the most material unknowns are the SME split and deposit-quality mix.
[CU013, CU014, CU015, CU016, CU020]Segments, adoption surfaces and expansion loops.
Journey stages reflect the described acquisition-to-expansion path; conversion rates between stages are not disclosed.
[CU016, CU017, CU018, CU025]07Risks
7.1 Regulatory and legal risk
D360's single largest risk category is regulatory, because its entire franchise rests on a SAMA banking licence. It is fully prudentially regulated and supervised, which brings capital-adequacy, AML/KYC/CTF, consumer-protection, and — via the Personal Data Protection Law (PDPL) — data-privacy obligations, alongside Sharia-governance requirements for its Sanabil and financing products. Any enforcement action, capital-ratio breach or adverse change to licence conditions would be existential, which is why these entries top the severity-ranked register. Saudi legal and regulatory guides confirm SAMA's active, prescriptive supervision of fintech and digital banking and highlight data-localisation and privacy enforcement as rising compliance costs. A specific competitive-regulatory dynamic sharpens the picture: by licensing STC Bank and, most recently, Vision Bank, SAMA has ended D360's first-mover exclusivity, so the regulatory environment that once conferred scarcity value now enables direct rivals. No public record of material litigation or enforcement against D360 was identified, which is reassuring but not equivalent to a clean confirmed record given limited disclosure. The register is explicitly partial: private compliance posture, capital-adequacy ratios and any confidential regulatory correspondence are not public, so several high-severity rows carry residual exposure that only data-room access can resolve. The dependency map places SAMA at the head of D360's critical relationships, underscoring that regulatory standing is not just a compliance matter but the foundation of the whole investment thesis.[CR002, CR003, CR004, CR005, CR006, CR007]
| Rule / licence / case | Jurisdiction | Status | Likelihood | Severity | Mitigation | Residual exposure | Diligence path |
|---|---|---|---|---|---|---|---|
| SAMA banking licence & conditions | Saudi Arabia | Active | Low | Critical | Compliance, capital buffers | Existential if revoked | Review licence conditions |
| Capital-adequacy / prudential rules | Saudi Arabia | Ongoing | Low | High | Strong paid-up capital | Breach risk if losses mount | Obtain CAR disclosures |
| PDPL data-protection | Saudi Arabia | In force | Medium | High | Privacy program | Fines/enforcement | Review privacy compliance |
| AML/KYC/CTF | Saudi Arabia | In force | Medium | High | KYC via Nafath, monitoring | Enforcement/fines | Review AML controls |
| Sharia-governance compliance | Saudi Arabia | Ongoing | Low | Medium | Sharia board oversight | Product non-compliance | Review Sharia governance |
| Consumer-protection / open banking | Saudi Arabia | Evolving | Medium | Medium | Policy alignment | Cost & conduct risk | Track regulatory updates |
Register ordered by severity; entries drawn from Saudi legal/regulatory guides and SAMA notices. Rows are cross-referenced to at least two independent sources. Coverage is partial as private compliance details are undisclosed.
[CR002, CR003, CR004, CR005, CR006, CR007]7.2 Operational, security and dependency risk
Operationally, D360 is a digital-only bank whose resilience depends on systems it largely does not own. Its core-banking engine is the vendor-supplied BOS/INCAT platform, which is efficient but concentrates continuity and lock-in risk; its transactions ride shared national rails (mada, SARIE) and its onboarding depends on the Nafath/Absher identity services; and its infrastructure sits with a cloud provider. Because these rails are shared across the whole Saudi digital-bank cohort, an outage is a single point of failure that D360 cannot fully control, though it is also not unique to D360. Cybersecurity and account-takeover fraud are the highest-severity operational risks: a digital-only bank is a high-value attack target, and a material breach would damage both balances and trust. The only public quality signal is app-store data — ratings around 3.9/5 and elevated uninstall signals — which hints at reliability and satisfaction frictions but is a weak proxy; uptime, SLA, incident and fraud-loss metrics are all undisclosed. The partner register ranks the vendor core platform, payment rails and capital backing as the most material dependencies. On capital, D360 depends on PIF-linked and Derayah shareholders to fund growth until it is self-sustaining; continued coverage suggests ongoing commitment, but a withdrawal of backing before profitability would be severe. These operational and partner exposures feed directly into the risk-transmission map, where reliability and dependency failures propagate into customer attrition, revenue and, ultimately, valuation.[CR010, CR011, CR012, CR013, CR014, CR015]
| Failure mode | Likelihood | Severity | Mitigation maturity | Residual exposure | Unresolved gap |
|---|---|---|---|---|---|
| Core-platform outage | Low-Med | High | Vendor SLA (assumed) | Service disruption | Uptime/SLA undisclosed |
| Cybersecurity breach / ATO fraud | Medium | Critical | Encryption, biometrics | Loss & trust damage | Incident rates undisclosed |
| App reliability / UX defects | Medium | Medium | Continuous releases | Churn/dormancy | Complaint themes |
| Scaling operations & support | Medium | Medium | Digital-first ops | Service quality dips | Support metrics undisclosed |
| Shared-rail dependency outage | Low | High | National redundancy | Payment disruption | Not D360-controllable |
Ordered by severity; operational risks inferred from the technology model and app signals, with disclosure gaps flagged.
[CR010, CR011, CR012, CR014, CR037]| Dependency | Counterparty | Role | Concentration | Failure scenario | Severity | Mitigation | Residual exposure |
|---|---|---|---|---|---|---|---|
| Core-banking platform | BOS / INCAT | Ledger & products | High | Vendor failure/lock-in | High | SLA, contract | Continuity risk |
| Payment rails | mada / SARIE | Transactions | High | Rail outage | High | National redundancy | Shared with peers |
| Identity | Nafath / Absher | KYC | High | Access change | Medium | Regulatory alignment | Onboarding halt |
| Cloud | Cloud provider | Hosting | Medium | Provider disruption | Medium | Multi-AZ (assumed) | Resilience gap |
| Capital | PIF / Derayah | Financing | Medium | Backing withdrawn | High | Aligned strategy | Financing risk |
Ordered by severity; the vendor core platform, payment rails and capital backing are the most material dependencies.
[CR013, CR014, CR015, CR016, CR039]Critical partners, platforms and financing dependencies.
Dependency graph inferred from the operating model; most are shared national infrastructure.
[CR013, CR014, CR015, CR016]7.3 Financial, people risk and mitigations
Financially, D360 carries the classic scaling-digital-bank risk set: ongoing burn, capital intensity and a multi-year path to profitability. The specific margin risk is that paying premium Sanabil profit rates to gather deposits compresses net interest margin relative to low-cost incumbents, while credit and financing-loss exposure grows as the financing book expands — Fitch and industry analysts characterise sector credit and margin conditions as manageable but tightening. If profitability is delayed, D360 faces financing-dependency and dilution risk at its next round. Crucially, the absence of audited financials — no disclosed revenue, margin, NPL ratio, capital-adequacy ratio or deposit-concentration data — materially elevates diligence risk and prevents independent verification of any of these exposures; that opacity is itself the largest residual uncertainty in the report. People and execution risk centres on key-person dependence on a high-profile CEO and a small senior team, plus intense competition for banking-technology and compliance talent in the Saudi market. Against these, the mitigations are real if unquantified: strong post-raise capital, SAMA oversight, aligned Vision 2030 policy support, committed strategic shareholders, and vendor SLAs. The risk heatmap ranks licence action and cyber/fraud as the highest-impact risks, with margin compression and retention/dormancy as the most likely, and the kill-criteria table ties each to a monitorable trigger — a SAMA sanction, a capital breach, sustained dormancy, a material security incident, or runway falling below twelve months without a profitability path. The investment implication is that D360's upside is real but underwritten on trust; closing the financial and reliability disclosure gaps is the precondition for converting these qualitative risks into quantified ones.[CR001, CR017, CR018, CR019, CR020, CR021]
| Role / function | Dependency or gap | Likelihood | Severity | Mitigation | Diligence path |
|---|---|---|---|---|---|
| CEO / senior leadership | Key-person dependence | Medium | High | Succession, board | Review org depth |
| Technology / engineering | Talent scarcity | Medium | Medium | Vendor + hiring | Assess team retention |
| Risk & compliance | Regulatory expertise | Medium | High | SAMA-mandated functions | Review compliance staffing |
| Customer operations | Support scaling | Medium | Medium | Digital tooling | Assess support KPIs |
Ordered by severity; people risk centres on key-person dependence and compliance-function depth in a young institution.
[CR021, CR022, CR003, CR017]| Risk | Monitorable trigger | Threshold / event | Action implication |
|---|---|---|---|
| Regulatory action | SAMA notice / sanction | Any licence condition/enforcement | Re-underwrite / exit |
| Capital adequacy | CAR trend | Breach of regulatory minimum | Require fresh capital plan |
| Retention/dormancy | Active-user ratio | Sustained dormancy > peers | Reassess growth quality |
| Security/fraud | Incident disclosure | Material breach or fraud loss | Reassess ops & trust |
| Profitability path | Burn vs capital | Runway < 12 months w/o path | Trigger financing/kill review |
Kill criteria tie each top risk to a monitorable trigger and threshold; several depend on disclosures not yet available.
[CR023, CR024, CR025, CR027]Impact (y) versus likelihood (x) for principal risks.
Impact/likelihood scores are ordinal 0-100 analyst judgements, not measured probabilities.
[CR001, CR003, CR011, CR018]How risks flow into revenue, customers, margin, financing and valuation.
Transmission is a qualitative causal map, not a quantified model.
[CR025, CR018, CR020, CR003]08Valuation
8.1 Thesis, anti-thesis and recommendation
D360's investment case is a genuine two-sided one. The thesis is compelling on demand and momentum: a young, digitally-native Saudi market with near-universal mobile use, powerful Vision 2030 policy tailwinds, credible PIF-linked and Derayah backing, first-mover full-licence status, and one of the fastest customer ramps in the regional cohort — roughly three million customers and SAR 3 billion in deposits inside about eighteen months of launch. State backing further supports valuation resilience and exit optionality. The anti-thesis is equally clear: the price rests on trust rather than proof. With no disclosed revenue, margin, retention or capital-adequacy data, the valuation capitalises traction whose quality is unverified, and global neobank multiples have compressed from their 2021 peaks, tempering optimistic comparables. Weighing these, the recommendation is to watch/track with medium confidence and a medium-high risk rating: the business is attractive and the backing is real, but a conviction commitment should await disclosure of the unit economics. The recommendation-logic figure shows how fast traction, undisclosed economics, competitive/margin risk and a full valuation combine into that conditional stance, and the investment-KPI scorecard rates market attractiveness high, customer proof medium, moat durability and unit-economics visibility low, and valuation fair-to-stretched. The thesis/anti-thesis table pairs each argument with the specific evidence that would move it — almost all of which is currently withheld.[CV001, CV002, CV003, CV004, CV014, CV023]
| Recommendation | Confidence | Risk rating | Valuation stance | Decision implication |
|---|---|---|---|---|
| Watch / track | Medium | Medium-High | Stretched-to-fair | Engage, seek disclosure before committing |
| Re-rate up if | — | — | — | Audited financials confirm margin & retention |
| Re-rate down if | — | — | — | Dormancy/margin/competition signals worsen |
Recommendation reflects strong traction offset by undisclosed unit economics; stance is conditional on closing the financial-disclosure gap.
[CV003, CV004, CV014]| Argument | What would change the view |
|---|---|
| Thesis: young market + Vision 2030 + PIF backing | Policy reversal or backing withdrawal |
| Thesis: first-mover licence + fast traction | Share loss to STC Bank / incumbents |
| Anti-thesis: valuation on trust, no financials | Audited financials confirming profitability path |
| Anti-thesis: low-balance, possibly dormant base | Disclosed active-usage & retention data |
| Anti-thesis: margin squeezed by Sanabil rates | Evidence of sustainable net interest margin |
Balanced thesis/anti-thesis with the specific evidence that would move each argument; most hinge on disclosure.
[CV001, CV002, CV014, CV017, CV018]Chain from scale/proof/risks/valuation to recommendation.
Logic chain is qualitative; the recommendation weighs traction against undisclosed economics.
[CV003, CV014, CV017, CV018]IC-ready scoring across the diligence dimensions.
Ordinal IC scores synthesise the report's chapter findings.
[CV001, CV003, CV004, CV014]8.2 Valuation context and comparables
The June 2026 capital increase is the anchor. D360 raised roughly SAR 1.5 billion of new equity on a pre-money of about SAR 4.5 billion, setting a post-money valuation near SAR 6 billion (~US$1.6 billion) — a Series-A-style step-up corroborated by the Tadawul filing and multiple outlets. Two features temper how much weight to give this mark. First, it was set through a shareholder capital increase rather than an arm's-length external round, so it reflects insider conviction more than market price discovery, and entry discipline is correspondingly limited. Second, the implied multiples must be judged against comparables: at ~US$1.6 billion over about three million customers the value-per-customer is roughly US$530, and against ~SAR 3 billion (~US$800 million) of deposits the price-to-deposits multiple is about 2x. Benchmarked to global neobanks, that per-customer figure sits inside the range — broadly at or below Nubank's, below Revolut's more monetised base, and roughly in line with Monzo's — but is high for a bank that has not disclosed revenue or profitability, especially as sector multiples have normalised downward. Regional MENA-neobank data is too sparse for a clean read, and Saudi incumbent price-to-book levels provide only a loose floor. The comparable-valuation table lays these out with each row cross-referenced to at least two sources and flags that private-round terms and consistent MENA data are not public. The net conclusion is that the multiples are defensible but not cheap, and are only justified if D360 converts its low-balance accounts into engaged, profitable relationships.[CV005, CV006, CV007, CV008, CV009, CV010]
| Comparable | Metric | Multiple / valuation / status | Relevance | Limitation |
|---|---|---|---|---|
| D360 Bank | Value / customer | ~US$530 (~US$1.6bn / ~3m) | Subject | Pre-revenue disclosure |
| Nubank | Value / customer | Large-cap; broadly ≤ D360/customer | Scaled profitable neobank | Different market, monetised |
| Revolut | Value / customer | ~US$45bn+; higher/customer | Global neobank leader | Larger, more monetised base |
| Monzo | Value / customer | ~£4-5bn; broadly in-line | UK challenger | Discloses revenue |
| Regional / MENA neobanks | Price / deposits | Emerging; sparse data | Closest geography | Thin disclosure |
| D360 Bank | Price / deposits | ~2x (~US$1.6bn / ~US$800m) | Subject | Deposit quality unknown |
Comparables span global leaders and regional peers; each row is cross-referenced to at least two independent sources. Coverage is partial because private-round and MENA data are sparse and definitions differ.
[CV008, CV009, CV010, CV011, CV012, CV013]Illustrative valuation sensitivity to key drivers (index, base=100).
Indexed illustrative sensitivities (base=100), not a disclosed model output.
[CV016, CV017, CV018, CV025]8.3 Scenarios, triggers and diligence asks
The scenario framework makes the conditionality explicit. The bull case sees D360 scaling to multi-billion-dollar value by monetising deposits and expanding into SME banking while retention holds; it is supported by Vision 2030 and market-growth forecasts but constrained by the ultimate revenue-pool ceiling. The base case — the most likely on current evidence — treats the ~US$1.6 billion mark as full but justifiable, with a gradual re-rate as disclosure improves. The bear case sees overvaluation and down-round risk if dormancy, margin compression from premium Sanabil rates, or share loss to STC Bank and incumbents materialise. The valuation-return range spans roughly US$1.0 billion in the bear case to US$3+ billion in the bull, and the sensitivity figure shows value is most exposed to margin and active-retention assumptions. The thesis-break table ties each downside to a monitorable trigger — a licence action, a capital-adequacy breach, mass dormancy, persistent negative spread, or sustained customer decline — with a clear action implication. Plausible exits include an eventual Tadawul IPO, a strategic sale, or continued PIF-anchored ownership. The final-diligence-asks table specifies exactly what would convert this watch stance into conviction: audited financials, net interest margin, cohort retention and active-usage ratios, capital-adequacy disclosure, and the preference/liquidation terms from the June 2026 round. Until those arrive, D360 is a high-potential, well-backed franchise carrying a full valuation underwritten on trust — attractive to watch, premature to underwrite with conviction.[CV015, CV016, CV017, CV018, CV020, CV021]
| Scenario | Key assumptions | Valuation / return logic | Key risks | Probability signal |
|---|---|---|---|---|
| Bull | SME + deposit monetisation, retention holds | Scales to multi-US$bn value | Execution, competition | Lower |
| Base | Steady growth, valuation full but fair | Holds ~US$1.6bn, gradual re-rate | Margin, dormancy | Higher |
| Bear | Dormancy, margin squeeze, share loss | Overvalued, down-round risk | Competition, disclosure | Meaningful |
Scenarios use explicit assumptions; probability signals are qualitative given absent projections. Base case is most likely on current evidence.
[CV015, CV016, CV017, CV018]| Trigger | Threshold | Transmission to thesis | Action implication |
|---|---|---|---|
| Regulatory/licence action | Any SAMA sanction | Franchise value impaired | Exit / re-underwrite |
| Capital-adequacy breach | Below regulatory minimum | Solvency & dilution | Require capital plan |
| Mass dormancy | Active ratio well below peers | Growth quality collapses | Cut valuation |
| Margin failure | Persistent negative spread | No profitability path | Down-round risk |
| Share loss to STC/incumbents | Sustained customer decline | Monetisation undermined | Reassess thesis |
Each trigger maps a monitorable threshold to its transmission into the thesis and the resulting action.
[CV017, CV020, CV018, CV002]| Topic | Missing evidence | Why it matters | Diligence path |
|---|---|---|---|
| Audited financials | Revenue, net income, margin | Verifies revenue quality | Data-room financials |
| Net interest margin | Asset yields, deposit cost | Core profitability | Management schedules |
| Retention/active usage | Cohort retention, MAU ratio | Growth-quality proof | Product analytics |
| Capital adequacy | CAR, buffers | Solvency & prudential risk | SAMA filings |
| Preference terms | Liquidation stack, dilution | Net returns | Round documents |
The diligence asks are the exact evidence needed to convert the watch stance into a conviction call.
[CV021, CV014, CV018, CV019]Bull/base/bear valuation range (US$bn).
Ranges are scenario-based analyst estimates anchored on the ~US$1.6bn mark, not disclosed projections.
[CV015, CV016, CV017]Disclaimer
This report is an evidence-based diligence synthesis compiled from public sources as of 2026-07-15. D360 Bank is a private institution with limited public disclosure; financial and unit-economics conclusions rely on inference from disclosed traction, regulatory filings and sector benchmarks, not audited statements. Nothing herein is investment advice.
Evidence index
| ID | Statement | Confidence | Sources |
|---|---|---|---|
| CO001 | D360 Bank is a Saudi joint-stock company headquartered in Riyadh operating as a fully-digital, branchless, Sharia-compliant bank. | High | SO001, SO002 |
| CO002 | D360 Bank was established on 15 February 2022 as a closed joint-stock company. | Medium | SO002, SO013 |
| CO003 | D360 Bank is positioned as Saudi Arabia's first fully-licensed digital bank to commence full operations. | High | SO005, SO004, SO017 |
| CO004 | The Saudi Central Bank (SAMA) granted D360 Bank a no-objection to commence banking operations in late December 2024. | High | SO003, SO004 |
| CO005 | D360 Bank launched its services to the public in early 2025. | Medium | SO005, SO017 |
| CO006 | Eze Szafir (Ezequiel Szafir Holcman) serves as chief executive officer of D360 Bank. | Medium | SO002, SO012 |
| CO007 | Taha A. AlKuwaiz chairs D360 Bank's board of directors. | Medium | SO002, SO012 |
| CO008 | D360 Bank's leadership includes co-founders and executives such as a chief technology officer and other functional heads. | Low | SO012, SO013, SO014 |
| CO009 | Derayah Financial acts through its subsidiary as a founding leadership and governance stakeholder in D360 Bank. | Medium | SO015, SO016, SO006 |
| CO010 | In June 2026 D360 Bank's shareholders approved a capital increase of 38.89% of registered capital. | High | SO011, SO006, SO010 |
| CO011 | The capital increase raised registered capital from SAR 2,100,000,000 to SAR 2,916,666,670. | High | SO011, SO007 |
| CO012 | The June 2026 round issued 72,916,667 new shares at SAR 20.57 per share, totalling roughly SAR 1.5 billion. | High | SO011, SO008 |
| CO013 | The capital increase priced D360 Bank at a pre-money valuation of about SAR 4.5 billion (~US$1.2 billion). | Medium | SO009, SO008 |
| CO014 | The round set D360 Bank's post-money valuation at approximately SAR 6 billion (~US$1.6 billion). | Medium | SO009, SO007, SO008 |
| CO015 | The transaction also created about 8,750,000 employee-share (ESOP) shares valued near SAR 87.5 million. | Medium | SO011 |
| CO016 | The 2026 capital increase is characterised as part of a Series A financing to fund lending and expansion. | Medium | SO009, SO008 |
| CO017 | Derayah Financial is the largest single shareholder in D360 Bank, with its stake diluting from roughly 20.4% to about 16.35% after the raise. | Medium | SO006, SO010, SO011 |
| CO018 | Public Investment Fund (PIF)-linked public-sector entities are among D360 Bank's principal shareholders. | Low | SO005, SO019 |
| CO019 | Derayah Financial subscribed an additional SAR 100 million in the June 2026 capital increase. | Medium | SO006, SO010 |
| CO020 | After the capital increase D360 Bank became the largest Saudi digital bank by registered capital. | Medium | SO007, SO008 |
| CO021 | D360 Bank reported reaching roughly three million customers by April 2026. | Medium | SO009, SO008 |
| CO022 | D360 Bank reported accumulating around SAR 3 billion in customer deposits by early 2026. | Medium | SO009, SO008 |
| CO023 | D360 Bank offers retail personal accounts, the Sanabil savings product, cards and payments to individuals. | Medium | SO001 |
| CO024 | D360 Bank offers digital SME and business banking including accounts and payments. | Medium | SO001, SO008 |
| CO025 | D360's branchless model lets it deploy raised equity into customer acquisition and lending rather than physical distribution. | Medium | SO009, SO001 |
| CO026 | D360 Bank is a direct output of Saudi Arabia's Vision 2030 fintech strategy to license digital banks. | High | SO018, SO017 |
| CO027 | The Public Investment Fund anchors Vision 2030 economic-diversification investment that underpins the fintech push. | Medium | SO019, SO018 |
| CO028 | Saudi banking-sector growth is slowing as tighter liquidity pressures net interest margins, an adverse backdrop for new lenders. | Medium | SO025 |
| CO029 | D360 Bank operates without physical branches, relying entirely on its mobile app and web platform. | Medium | SO001, SO002 |
| CO030 | The Saudi banking sector remains well-capitalised with strong incumbent profitability, framing the competitive backdrop for D360. | Medium | SO023, SO020 |
| CO031 | Independent company trackers list D360 Bank's funding and team but do not disclose audited financial statements. | Low | SO013, SO012 |
| CO032 | The June 2026 capital increase was disclosed to the market through Derayah Financial's Saudi Exchange (Tadawul) announcement. | High | SO011, SO010 |
| CO033 | Macro backdrop: Saudi Arabia is diversifying its economy away from oil, supporting financial-sector expansion. | Medium | SO021, SO022 |
| CO034 | D360's reported valuation and customer figures are current as of the June 2026 disclosures preceding the July 2026 run date. | Medium | SO009, SO011 |
| CO035 | No audited revenue or net-profit figure for D360 Bank is available in public sources as of the run date. | Low | |
| CO036 | The complete post-raise shareholder register beyond Derayah and PIF-linked entities is not fully public. | Low | |
| CO037 | D360 Bank's exact employee headcount is not consistently disclosed across public sources. | Low | |
| CO038 | No public evidence of material leadership departures or governance disputes at D360 Bank was identified. | Low | |
| CO039 | D360 Bank's identity as a Sharia-compliant bank differentiates its product framing from conventional neobanks. | Low | SO001, SO002 |
| CO040 | D360 Bank's founding, licensing, launch and financing milestones form a continuous 2022-2026 chronology of record. | Medium | SO002, SO003, SO011 |
| CM001 | D360's market is Saudi Arabia's retail and SME banking demand served through fully-digital channels, a subset of the national fintech sector. | Medium | SM002, SM010 |
| CM002 | Included spend covers digital deposits, savings, cards, payments and SME banking; excluded is branch-based and non-bank lending. | Low | SM002, SM015 |
| CM003 | Saudi Arabia's digital-banking market is estimated at roughly US$122 million in 2026. | Medium | SM001 |
| CM004 | The Saudi digital-banking market is forecast to reach about US$255 million by 2032, a CAGR near 13%. | Medium | SM001 |
| CM005 | Saudi Arabia's broader fintech market is estimated around US$3.2 billion in 2026. | Medium | SM002 |
| CM006 | The Saudi fintech market is projected to reach roughly US$6 billion by 2031. | Medium | SM002, SM004 |
| CM007 | Independent market-size estimates for Saudi fintech and digital banking diverge materially in scope and methodology. | Medium | SM001, SM002, SM004 |
| CM008 | Saudi Arabia's population is approximately 35-37 million people. | Medium | SM005, SM007 |
| CM009 | The median age in Saudi Arabia is around 29-30 years. | Medium | SM005, SM007 |
| CM010 | Internet penetration in Saudi Arabia is near-universal at above 90% of the population. | High | SM006, SM007 |
| CM011 | Smartphone and mobile-subscription penetration in Saudi Arabia exceeds 90%, with mobile subscriptions above population. | High | SM008, SM006 |
| CM012 | The addressable market spans retail individuals (mass and youth), SMEs, and the underbanked. | Medium | SM002, SM010 |
| CM013 | Structural growth drivers include youth demographics, high mobile penetration, government policy and cashless targets. | Medium | SM010, SM006, SM011 |
| CM014 | Adoption constraints include entrenched incumbent banks, customer trust in new entrants, and low switching propensity. | Medium | SM014, SM011 |
| CM015 | Vision 2030's fintech strategy targets 525 fintech firms and a substantial GDP and jobs contribution by 2030. | High | SM010, SM011 |
| CM016 | Status-quo substitutes include incumbent-bank mobile apps and established payment apps such as STC Pay. | Medium | SM014, SM019 |
| CM017 | The SME segment is under-served by traditional banks, opening a distinct addressable opportunity for digital banks. | Medium | SM011, SM021 |
| CM018 | A defensible framing sets TAM as the national digital-payments/fintech pool, SAM as digital retail+SME banking, and SOM as D360's near-term share. | Low | SM002, SM001 |
| CM019 | Youth demographics plus high smartphone penetration lower the cost and friction of acquiring mobile-first banking customers. | Medium | SM006, SM008 |
| CM020 | Saudi Arabia's banking market is concentrated among a handful of large incumbents that dominate deposits. | Medium | SM014, SM011 |
| CM021 | Digital payments and cashless-society targets are a core adjacency expanding the addressable digital-finance market. | Medium | SM011, SM010 |
| CM022 | A large and rising share of Saudi transactions is already conducted through digital and card-based channels. | Medium | SM006, SM011 |
| CM023 | The adoption path runs from smartphone ownership to app download, account opening, funding and active transacting. | Low | SM006, SM015 |
| CM024 | Market-size figures cited are 2026-vintage analyst estimates, current as of the run date. | Medium | SM001, SM002 |
| CM025 | The fintech sector's GDP- and jobs-contribution targets frame policy-driven demand growth through 2030. | Medium | SM010, SM011 |
| CM026 | P&S Intelligence's digital-banking figure is narrower than Mordor's whole-fintech estimate, so lens choice drives the headline number. | Medium | SM001, SM002 |
| CM027 | Digital-banking revenue in Saudi Arabia is small in absolute terms relative to incumbent bank profit pools. | Medium | SM001, SM014 |
| CM028 | The young, digitally-native population is a demand tailwind but also raises expectations for product quality and UX. | Low | SM007, SM006 |
| CM029 | Rising internet and mobile use expands the top of the adoption funnel for all digital banks, not just D360. | Medium | SM006, SM008 |
| CM030 | Verified Market Research offers a further Saudi fintech forecast that broadly corroborates strong double-digit growth. | Low | SM004 |
| CM031 | Growth-driver iSpectra analysis highlights BNPL, embedded finance and open banking as expanding fintech adjacencies. | Low | SM003 |
| CM032 | Cross-checking demographic sources shows small discrepancies in population and age figures across publishers. | Medium | SM005, SM007 |
| CM033 | D360's realistic near-term obtainable share of the digital-banking market is not quantified in public sources. | Low | |
| CM034 | No source isolates the revenue pool attributable specifically to digital-only banking versus incumbents' digital channels. | Low | |
| CM035 | Price sensitivity of Saudi retail and SME customers when switching banks is not established in public data. | Low | |
| CM036 | Dormancy or churn rates for newly-opened Saudi digital-bank accounts are not publicly disclosed. | Low | |
| CM037 | ispectra and KPMG both frame Vision 2030 as the dominant policy catalyst for fintech demand. | Low | SM003, SM011 |
| CP001 | Saudi Arabia's competitive field for D360 spans three licensed pure-play digital banks plus incumbents, payment apps and adjacencies. | High | SP021, SP006, SP010 |
| CP002 | The other licensed pure-play digital banks in Saudi Arabia are STC Bank and Vision Bank. | High | SP001, SP006 |
| CP003 | SAMA has licensed three digital banks in Saudi Arabia: D360 Bank, STC Bank and Vision Bank. | High | SP021, SP006, SP008 |
| CP004 | STC Bank is backed by the Saudi Telecom Company and grew out of the STC Pay wallet business. | High | SP001, SP009 |
| CP005 | STC Bank benefits from an installed STC Pay base of roughly three million users and nationwide telecom distribution. | Medium | SP001, SP003 |
| CP006 | STC Bank received SAMA approval to commence digital-banking operations, launching in early 2025. | Medium | SP001, SP003 |
| CP007 | Vision Bank is the third licensed Saudi digital bank, receiving SAMA no-objection in 2025. | High | SP006, SP008 |
| CP008 | Vision Bank is backed by large Saudi family conglomerates and capitalised at around SAR 1.5 billion. | Medium | SP006, SP007 |
| CP009 | Incumbents dominating Saudi retail banking include Al Rajhi Bank, Saudi National Bank and Riyad Bank. | Medium | SP010, SP015 |
| CP010 | Al Rajhi Bank is among the world's largest Islamic banks with a very large installed digital-app user base. | Medium | SP010, SP014 |
| CP011 | Incumbent banks lead on product depth and full-service capability while digital entrants lead on savings profit rates and low fees. | Medium | SP010, SP011 |
| CP012 | D360 markets Sharia-compliant Sanabil savings products offering competitive profit rates versus incumbents. | Medium | SP011 |
| CP013 | Digital banks compete primarily on higher savings profit rates, zero/low fees, and mobile-first onboarding. | Low | SP011, SP005 |
| CP014 | STC Bank's distribution rests on telecom reach and the STC Pay base, whereas incumbents rely on branch networks and salary relationships. | Medium | SP001, SP010 |
| CP015 | All three digital banks are SAMA-licensed, but incumbents retain the deepest customer trust and longest track records. | Medium | SP010, SP015 |
| CP016 | Switching costs in Saudi banking arise from salary-account direct deposits, standing orders and loan relationships. | Low | SP010, SP015 |
| CP017 | Multi-homing is common: Saudi consumers frequently hold accounts and apps across several banks and wallets simultaneously. | Low | SP015, SP005 |
| CP018 | STC Bank and incumbents hold distribution and partner-access advantages that a standalone digital challenger lacks. | Medium | SP001, SP010 |
| CP019 | D360's most cited moats are its first-mover full licence, capital strength, Sharia-compliant proposition and mobile UX. | Medium | SP011, SP021 |
| CP020 | After the June 2026 capital increase D360 is the best-capitalised of the three Saudi digital banks. | Medium | SP024, SP006 |
| CP021 | The first-mover licence advantage erodes as SAMA licenses additional digital banks, narrowing exclusivity. | Medium | SP006, SP008 |
| CP022 | Thin differentiation among neobanks creates commoditization risk that can compress pricing and acquisition economics. | Low | SP005, SP010 |
| CP023 | STC Bank's telecom-scale distribution is a direct threat to D360's customer-acquisition cost and pace. | Medium | SP001, SP003 |
| CP024 | Incumbents are investing heavily in their own digital channels, blunting the neobank differentiation gap. | Medium | SP014, SP010 |
| CP025 | D360 differentiates on being Saudi Arabia's first fully-licensed pure-play digital bank with a clean, fee-light app. | Medium | SP011, SP021 |
| CP026 | Higher savings profit rates win deposits by offering yield incumbents are slow to match on legacy cost bases. | Low | SP011, SP005 |
| CP027 | The competitive picture is a 2026-current snapshot reflecting the most recent licences and launches. | Medium | SP006, SP001 |
| CP028 | STC Bank was recognised among the best digital banks in the Kingdom in industry reviews. | Low | SP004, SP005 |
| CP029 | Vision Bank's later regulatory approval means it trails D360 and STC Bank on live-market presence. | Low | SP006, SP007 |
| CP030 | Tracxn and market trackers classify D360, STC Bank and Vision Bank as the leading Saudi neobank cohort. | Low | SP013, SP003 |
| CP031 | Established payment apps such as STC Pay and urpay act as partial substitutes for digital-bank transaction features. | Low | SP009, SP003 |
| CP032 | Incumbents' scale and profitability let them subsidise digital investment that a young challenger cannot easily match. | Low | SP010, SP015 |
| CP033 | D360's youth-and-SME positioning targets segments where incumbents have historically under-served customers. | Low | SP023, SP015 |
| CP034 | Exact live customer counts and deposit bases for each digital bank are inconsistently disclosed across sources. | Low | |
| CP035 | Competitors' full pricing tiers and any hidden fees are not comprehensively published. | Low | |
| CP036 | Forward incumbent digital-investment budgets versus D360's are not disclosed, limiting moat-durability forecasting. | Low | |
| CP037 | Pooling public trackers shows the three-bank digital cohort is real but their operating metrics remain sparsely reported. | Low | SP013, SP016 |
| CP038 | Maaal and Enterprise coverage frames the digital-bank race as a strategic pillar of Vision 2030 financial-sector reform. | Low | SP017, SP016 |
| CI001 | D360's core revenue engine is net profit income from Sharia-compliant financing assets funded by customer deposits. | Medium | SI018, SI024 |
| CI002 | Secondary revenue streams for a digital bank include card interchange, payment fees, FX and SME-banking fees. | Low | SI018, SI021 |
| CI003 | D360 pays profit on Sanabil savings deposits and earns a spread by deploying funds into financing assets. | Medium | SI018, SI024 |
| CI004 | D360's consumer pricing is fee-light, positioning free/low-fee accounts against competitive savings profit rates. | Medium | SI018 |
| CI005 | D360's go-to-market is digital-first, acquiring customers via app stores, marketing and referral rather than branches. | Low | SI018, SI014 |
| CI006 | Digital-bank cost structure is dominated by technology, cloud, compliance and customer-acquisition spend rather than branch overhead. | Low | SI021, SI022 |
| CI007 | Low branch overhead can give digital banks a structural cost-to-serve advantage once scaled. | Low | SI021, SI019 |
| CI008 | D360 reported approximately three million customers by April 2026. | High | SI003, SI014 |
| CI009 | D360 reported around SAR 3 billion in customer deposits by April 2026. | High | SI003, SI015 |
| CI010 | D360's audited income statement, margins, burn and runway are not publicly disclosed. | Medium | SI010, SI018 |
| CI011 | D360 completed an approximately SAR 1.5 billion equity capital increase in June 2026. | High | SI010, SI001 |
| CI012 | The June 2026 raise set D360's post-money valuation at about SAR 6 billion (~US$1.6 billion). | High | SI001, SI010 |
| CI013 | The capital increase lifted D360's paid-up capital, strengthening its regulatory capital base for growth. | Medium | SI010, SI013 |
| CI014 | Planned use of the new funds is scaling the financing book, technology, and customer acquisition. | Low | SI001, SI013 |
| CI015 | Saudi banks earn net interest / profit margins of roughly 2.8-3.0%, a benchmark for D360's asset yield. | High | SI024, SI009 |
| CI016 | The Saudi banking sector is highly profitable and well-capitalised overall. | Medium | SI024, SI004 |
| CI017 | D360's current profitability and path to break-even are not publicly disclosed. | Low | |
| CI018 | D360's monthly burn rate and cash runway are not publicly disclosed. | Low | |
| CI019 | Paying premium Sanabil profit rates to attract deposits structurally compresses a challenger's early net interest margin. | Medium | SI024, SI009 |
| CI020 | As a scaling bank, D360 remains dependent on shareholder capital until it reaches self-funding profitability. | Medium | SI010, SI001 |
| CI021 | The traction and capital figures are 2026-vintage, current as of the run date. | Medium | SI001, SI003 |
| CI022 | D360's ~SAR 2.9bn post-raise capital makes it the best-capitalised of Saudi's three digital banks. | Low | SI010, SI025 |
| CI023 | Undisclosed financials create material revenue-quality and margin-verification risk for underwriting. | Medium | SI010, SI024 |
| CI024 | Deposit growth converts into revenue only when deployed into yielding financing assets at a positive spread. | Medium | SI024, SI018 |
| CI025 | Audited revenue, net income and ARR for D360 are not available in public sources. | Low | |
| CI026 | No public disclosure indicates material debt or project-finance obligations beyond equity capital. | Low | SI010, SI018 |
| CI027 | Digital banks globally typically incur losses for several years before reaching profitability at scale. | Medium | SI009, SI019 |
| CI028 | Rapid deposit gathering without matched profitable asset deployment can widen early losses. | Low | SI024, SI009 |
| CI029 | Card interchange and payment fees provide fee income that is less rate-sensitive than net profit income. | Low | SI021, SI018 |
| CI030 | SME banking is an emerging monetization avenue with fee and financing potential for D360. | Low | SI014, SI021 |
| CI031 | Worldbank and macro data show a large, high-income deposit base supporting Saudi banking economics. | Medium | SI011, SI023 |
| CI032 | PIF-linked ownership provides D360 with patient, well-resourced backing for continued financing rounds. | Low | SI012, SI013 |
| CI033 | Vision 2030 policy support underpins the strategic rationale for continued shareholder investment in digital banks. | Low | SI026, SI012 |
| CI034 | Multiple Saudi outlets corroborate the ~SAR 1.5bn raise and SAR 6bn valuation, improving confidence in the headline capital facts. | Medium | SI001, SI002, SI017 |
| CI035 | CAC, payback and channel economics for D360 are not quantified in any public source. | Low | |
| CI036 | Analyst market data frames early Saudi digital-bank economics as growth-first, profitability-later. | Low | SI004, SI019 |
| CE001 | D360 is a branchless digital bank delivered through iOS, Android and web applications. | High | SE009, SE003 |
| CE002 | Customers open a licensed account in minutes via digital identity verification without visiting a branch. | Medium | SE009, SE008 |
| CE003 | D360's module set spans current accounts, Sanabil savings, cards, payments/transfers and emerging SME banking. | Medium | SE009, SE006 |
| CE004 | The D360 app is available on the Apple App Store and Google Play. | Medium | SE003, SE002 |
| CE005 | D360 runs on a cloud-hosted modern core-banking platform reported to be the BOS system from INCAT. | Medium | SE001, SE005 |
| CE006 | D360's stack is layered: mobile/web presentation, core-banking engine, payment/identity integration and cloud infrastructure. | Low | SE001, SE009 |
| CE007 | Onboarding uses the Kingdom's national digital-identity services (Nafath/Absher) for remote KYC. | Low | SE009, SE016 |
| CE008 | D360 integrates with national payment rails including mada and the SARIE instant-transfer system. | Low | SE009, SE014 |
| CE009 | D360 offers mada debit and virtual cards plus Sharia-compliant Sanabil savings accounts. | Medium | SE006, SE009 |
| CE010 | D360 is a fully-licensed bank operating under SAMA prudential regulation and supervision. | High | SE019, SE009 |
| CE011 | D360's roadmap emphasises expanding SME banking and adding financing products over time. | Low | SE011, SE014 |
| CE012 | D360's differentiation is its first pure-play licence, clean app UX and Sharia savings, not proprietary deep tech. | Medium | SE009, SE019 |
| CE013 | D360's core-banking platform is vendor-supplied, creating efficiency but also platform dependency. | Medium | SE001, SE005 |
| CE014 | Security controls include biometric login, encryption and SAMA-mandated prudential safeguards. | Low | SE009, SE019 |
| CE015 | Sharia governance applies to D360's Sanabil savings and financing products. | Medium | SE006, SE009 |
| CE016 | The D360 iOS app holds a rating of roughly 3.9 out of 5 on the Apple App Store. | Medium | SE003, SE008 |
| CE017 | App-store reviews cite occasional reliability, verification and support frictions typical of a young banking app. | Low | SE008, SE003 |
| CE018 | Reliance on a vendor core-banking platform and national rails concentrates operational dependency risk. | Medium | SE001, SE005 |
| CE019 | Product modules vary in maturity: accounts, savings and cards are established while SME banking is developing. | Low | SE009, SE011 |
| CE020 | Third-party app-analytics trackers report meaningful download and engagement volumes for D360. | Low | SE004, SE011 |
| CE021 | The product and technology facts are 2026-current, reflecting the latest app releases and disclosures. | Medium | SE003, SE009 |
| CE022 | Mobile-first, branchless delivery on a cloud core reduces cost-to-serve versus branch-based incumbents. | Low | SE014, SE001 |
| CE023 | D360 competes on a faster, cleaner onboarding and UX than legacy incumbent apps. | Low | SE008, SE013 |
| CE024 | D360's disclosed uptime, SLA and reliability metrics are not publicly available. | Low | |
| CE025 | The full scope and timeline of D360's SME-banking module is not fully disclosed. | Low | |
| CE026 | Any proprietary IP or data assets held by D360 beyond configuration of vendor platforms are not disclosed. | Low | |
| CE027 | LeadIQ and technographic sources corroborate D360's use of third-party banking-technology vendors. | Low | SE005, SE001 |
| CE028 | Sanabil savings is D360's signature product, marketed on competitive Sharia-compliant profit rates. | Medium | SE006 |
| CE029 | Emirates/regional coverage frames D360 as a technology-led entrant in Gulf digital banking. | Low | SE007, SE018 |
| CE030 | National shared infrastructure (mada, SARIE, Nafath) is a common dependency for all Saudi digital banks, not unique to D360. | Low | SE016, SE014 |
| CE031 | Vision 2030's open-banking and payments push shapes the integration surface D360 must support. | Low | SE015, SE014 |
| CE032 | Google Play listing corroborates active Android distribution and ongoing app updates. | Low | SE002 |
| CE033 | D360's technology posture mirrors global neobank patterns: vendor core plus in-house app and data layer. | Low | SE001, SE011 |
| CE034 | Deployment is continuous via app-store releases rather than branch or hardware rollouts. | Low | SE003, SE002 |
| CE035 | Regulatory approvals (the SAMA licence) are themselves a differentiating asset versus unlicensed fintechs. | Medium | SE019, SE009 |
| CU001 | D360's customer base is a mass-market Saudi retail cohort skewed to youth, plus an emerging SME segment. | Medium | SU024, SU025 |
| CU002 | For retail customers the buyer, user and payer are the same individual; for SME accounts the owner plays those roles. | Low | SU009, SU003 |
| CU003 | D360 reported roughly one million customers within months of its early-2025 launch. | Medium | SU024, SU014 |
| CU004 | D360 reported approximately three million customers by April 2026. | High | SU003, SU014 |
| CU005 | D360 reported around SAR 3 billion in customer deposits by April 2026. | Medium | SU003, SU004 |
| CU006 | D360's customer ramp is among the fastest for regional digital banks in its cohort. | Low | SU014, SU015 |
| CU007 | A documented customer case exists evidencing production use of D360's services. | Low | SU001, SU014 |
| CU008 | Named, verifiable customer proof is limited because a consumer bank's customers are individuals, not referenceable enterprises. | Medium | SU001, SU002 |
| CU009 | Customer proof is a mix of a documented case, ecosystem partnerships and app-store reviewer feedback rather than enterprise references. | Low | SU001, SU022 |
| CU010 | D360 discloses no churn, dormancy, NRR or cohort-retention metrics publicly. | Low | |
| CU011 | Independent review and uninstall-tracking signals flag reliability and satisfaction frictions typical of fast-scaling apps. | Low | SU002, SU018 |
| CU012 | Rapid account growth may overstate active, primary-relationship usage without disclosed engagement data. | Medium | SU002, SU022 |
| CU013 | Uninstall-tracking sources indicate a meaningful share of downloads do not persist as active users. | Low | SU002 |
| CU014 | Expansion within the base runs through cross-sell of savings, cards and payments to existing account holders. | Low | SU020, SU009 |
| CU015 | Retail customer concentration is low given a broad multi-million base, but SME concentration is unknown. | Low | SU003, SU025 |
| CU016 | The model depends heavily on app-store distribution channels for acquisition. | Low | SU022, SU021 |
| CU017 | D360's growth outpaces most regional neobanks though STC Bank has a comparably large base via STC Pay. | Low | SU014, SU015 |
| CU018 | Saudi Arabia has high account ownership and a shrinking-but-present underbanked share per inclusion data. | High | SU006, SU011 |
| CU019 | The retail-versus-SME split of D360's base is not publicly disclosed. | Low | |
| CU020 | Customer figures are 2026-vintage and current as of the run date. | Medium | SU003, SU014 |
| CU021 | Converting a new account to a primary relationship requires salary deposit, repeat transacting and savings balances. | Low | SU025, SU009 |
| CU022 | Repeat engagement is driven by Sanabil savings, everyday transfers and card usage. | Low | SU020, SU009 |
| CU023 | Implied average deposit per customer is roughly SAR 1,000, suggesting many low-balance or secondary accounts. | Low | SU003, SU004 |
| CU024 | Reference quality of available proof is modest: case-based and reviewer-based rather than audited outcomes. | Low | SU001, SU002 |
| CU025 | SME customer evidence is early-stage and less documented than retail traction. | Low | SU003, SU024 |
| CU026 | Financial-inclusion policy and digital-payment adoption expand D360's addressable customer pool. | Medium | SU006, SU007 |
| CU027 | Ecosystem partnerships (payments, remittances, card networks) extend D360's customer reach. | Low | SU014, SU009 |
| CU028 | Statista and DataReportal data show very high digital-payment penetration underpinning demand. | Medium | SU007, SU011 |
| CU029 | SME-focused coverage frames under-served small businesses as a growth pool for D360. | Low | SU003, SU004 |
| CU030 | No public NRR/GRR or renewal metric exists for D360's base. | Low | |
| CU031 | App-store reviewer volumes provide a proxy customer-satisfaction signal in the absence of NPS disclosure. | Low | SU022, SU021 |
| CU032 | Deposit growth to SAR 3bn alongside ~3m customers evidences real, funded adoption rather than sign-ups alone. | Medium | SU003, SU004 |
| CU033 | Aetos customer-proof material documents at least one concrete production use-case of D360. | Low | SU001 |
| CU034 | SmartResearch and market trackers corroborate D360's rapid customer accumulation narrative. | Low | SU005, SU015 |
| CU035 | Gulf regional coverage positions D360 as a leading Saudi consumer-adoption story. | Low | SU008, SU017 |
| CU036 | Emerging SME banking gives a land-and-expand path from personal to business relationships. | Low | SU003, SU024 |
| CR001 | D360's severity-ranked top risks are regulatory dependence, margin/competitive pressure, and unverified operating quality. | Medium | SR009, SR014 |
| CR002 | D360 operates under a SAMA banking licence and full prudential regulation and supervision. | High | SR014, SR012 |
| CR003 | Any SAMA enforcement action, capital-ratio breach or licence-condition change is an existential risk for D360. | Medium | SR014, SR001 |
| CR004 | Saudi Arabia's Personal Data Protection Law (PDPL) imposes data-privacy obligations on D360's processing. | High | SR001, SR002 |
| CR005 | AML, KYC and counter-terrorist-financing obligations apply to D360 as a licensed bank. | Medium | SR002, SR003 |
| CR006 | Sharia-compliance governance is a distinct regulatory-quality risk for D360's Sanabil and financing products. | Low | SR003, SR012 |
| CR007 | Consumer-protection and emerging open-banking rules add compliance obligations for Saudi digital banks. | Low | SR005, SR002 |
| CR008 | No public record of material litigation or enforcement action against D360 was identified. | Low | SR001, SR003 |
| CR009 | SAMA's licensing of STC Bank and Vision Bank raises D360's competitive-regulatory risk by ending exclusivity. | High | SR016, SR015 |
| CR010 | Operational risk concentrates in platform reliability, cybersecurity and scaling a digital-only operation. | Medium | SR030, SR009 |
| CR011 | Digital-only banks are high-value targets for cyberattacks and account-takeover fraud. | Low | SR008, SR009 |
| CR012 | App-store ratings around 3.9/5 and elevated uninstall signals point to reliability and satisfaction frictions. | Low | SR024, SR032 |
| CR013 | Reliance on the BOS/INCAT vendor core-banking platform creates lock-in and continuity risk. | Medium | SR030, SR031 |
| CR014 | Shared national rails (mada, SARIE, Nafath) are a single point of failure common to all Saudi digital banks. | Low | SR029, SR005 |
| CR015 | Cloud-infrastructure concentration adds resilience and compliance risk if the provider fails or is disrupted. | Low | SR030, SR008 |
| CR016 | D360 depends on PIF-linked and Derayah shareholders for continued capital until self-funding. | Medium | SR028, SR011 |
| CR017 | Financial-model risks include ongoing burn, capital intensity and delayed profitability typical of scaling digital banks. | High | SR010, SR009 |
| CR018 | Paying premium Sanabil deposit rates compresses net interest margin relative to low-cost incumbents. | Medium | SR009, SR010 |
| CR019 | Credit and financing-loss exposure rises as D360 grows its Sharia-compliant financing book. | Medium | SR009, SR021 |
| CR020 | If profitability is delayed, D360 faces financing-dependency and dilution risk at the next capital round. | Medium | SR010, SR011 |
| CR021 | Key-person dependence centres on a high-profile CEO and a small senior leadership team. | Low | SR026, SR013 |
| CR022 | Talent competition for banking-technology and compliance staff is intense in the Saudi market. | Low | SR019, SR008 |
| CR023 | Mitigations include strong capital buffers, SAMA oversight, vendor SLAs and diversified acquisition channels. | Low | SR011, SR014 |
| CR024 | Thesis-break triggers include a licence action, capital breach, mass dormancy, or a major security/fraud incident. | Low | SR009, SR001 |
| CR025 | Risks transmit into valuation via customer growth, retention, margin and regulatory standing. | Medium | SR009, SR010 |
| CR026 | The risk picture is a 2026-current assessment reflecting the latest licences, capital and app signals. | Medium | SR016, SR013 |
| CR027 | The absence of audited financials materially elevates diligence risk and prevents margin/loss verification. | Medium | SR011, SR009 |
| CR028 | D360's specific capital-adequacy ratio and regulatory buffer are not publicly disclosed. | Low | |
| CR029 | D360's actual fraud-loss and cybersecurity-incident rates are not publicly disclosed. | Low | |
| CR030 | The contractual terms and exit options for the core-banking vendor are not public. | Low | |
| CR031 | D360's non-performing-financing ratio is not publicly disclosed. | Low | |
| CR032 | The concentration and stability of D360's deposit funding is not publicly disclosed. | Low | |
| CR033 | Fitch and industry analysts frame Saudi digital-bank credit and margin conditions as manageable but tightening. | Medium | SR009, SR010 |
| CR034 | Regulatory guides confirm SAMA's active, prescriptive supervision of fintech and digital banking. | Medium | SR001, SR002 |
| CR035 | Legal analysis highlights data-localisation and privacy enforcement as rising compliance costs. | Low | SR003, SR001 |
| CR036 | Second SAMA no-objection/order notices confirm an evolving regulatory perimeter for digital banks. | Low | SR006, SR007 |
| CR037 | Rapid deposit growth without disclosed active-usage data is itself a model risk if accounts are dormant. | Low | SR024, SR010 |
| CR038 | Vision 2030 policy support partially mitigates regulatory risk by aligning D360 with state objectives. | Low | SR025, SR028 |
| CR039 | Competitive intensity from STC Bank and incumbents pressures both pricing and customer-acquisition cost. | Low | SR023, SR022 |
| CR040 | Maaal and Enterprise coverage indicates continued shareholder commitment as a mitigating financing signal. | Low | SR027, SR013 |
| CR041 | Arab News banking coverage notes incumbents' digital investment intensifying competitive risk. | Low | SR017, SR022 |
| CR042 | Tracxn risk-tracking classifies D360 among high-growth but pre-profit digital banks. | Low | SR018, SR010 |
| CV001 | The investment thesis rests on Saudi demand, Vision 2030 tailwinds, PIF/Derayah backing, first-mover licence and fast traction. | Medium | SV027, SV029 |
| CV002 | The anti-thesis is that the valuation relies on trust rather than disclosed unit economics. | Medium | SV016, SV002 |
| CV003 | The evidence supports a watch/track recommendation with medium confidence and a medium-high risk rating. | Medium | SV016, SV010 |
| CV004 | The appropriate valuation stance is stretched-to-fair given undisclosed financials. | Medium | SV002, SV016 |
| CV005 | D360's June 2026 capital increase set a post-money valuation of about SAR 6 billion (~US$1.6 billion). | High | SV009, SV018 |
| CV006 | The June 2026 round raised roughly SAR 1.5 billion of new equity on a pre-money of about SAR 4.5 billion. | High | SV009, SV018 |
| CV007 | The valuation was set via a shareholder capital increase rather than an arm's-length external round. | Medium | SV009, SV012 |
| CV008 | At ~US$1.6bn over ~3m customers, D360's implied valuation is roughly US$530 per customer. | Medium | SV009, SV010 |
| CV009 | At ~US$1.6bn over ~SAR 3bn (~US$800m) deposits, the implied price-to-deposits multiple is roughly 2x. | Medium | SV009, SV018 |
| CV010 | Nubank trades at a very large valuation with value-per-customer broadly comparable to or below D360's. | Low | SV002, SV001 |
| CV011 | Revolut's 2024-2026 valuations imply a value-per-customer above D360's on a larger, more monetised base. | Low | SV004, SV006 |
| CV012 | Monzo's valuation implies value-per-customer broadly in line with D360's but with disclosed revenue. | Low | SV003, SV006 |
| CV013 | Neobank valuation multiples commonly use price-to-deposits, price-per-customer and price-to-revenue. | Medium | SV001, SV002 |
| CV014 | Public evidence only partially supports the price because revenue, margin and retention are undisclosed. | Medium | SV016, SV002 |
| CV015 | The bull case sees D360 scaling to multi-billion-dollar value via SME expansion and deposit monetisation. | Low | SV021, SV023 |
| CV016 | The base case treats the current ~US$1.6bn mark as full but justifiable given traction and backing. | Low | SV010, SV001 |
| CV017 | The bear case sees overvaluation if dormancy, margin compression or share loss to STC/incumbents materialise. | Medium | SV002, SV016 |
| CV018 | Valuation is highly sensitive to net interest margin and active-customer retention assumptions. | Medium | SV016, SV001 |
| CV019 | Dilution and any preference overhang from the June 2026 round affect net returns to earlier holders. | Low | SV009, SV014 |
| CV020 | Thesis-break triggers include a licence action, capital breach, mass dormancy or failed monetisation. | Low | SV016, SV028 |
| CV021 | Final diligence asks centre on audited financials, NIM, retention, capital adequacy and preference terms. | Medium | SV016, SV009 |
| CV022 | Plausible exits include an eventual IPO on Tadawul, a strategic sale, or continued PIF-anchored ownership. | Low | SV027, SV009 |
| CV023 | State/PIF backing supports valuation resilience and provides patient capital and exit optionality. | Medium | SV027, SV010 |
| CV024 | The valuation evidence is 2026-current, anchored to the June 2026 capital-increase disclosure. | Medium | SV009, SV018 |
| CV025 | For a pre-revenue-disclosure bank, customer and deposit growth are the primary valuation drivers. | Low | SV001, SV015 |
| CV026 | Saudi banking-sector valuations (price-to-book of large incumbents) frame a floor context for D360's multiple. | Low | SV007, SV008 |
| CV027 | D360's revenue and price-to-revenue multiple cannot be computed from public data. | Low | |
| CV028 | The preference terms and liquidation stack from the June 2026 round are not public. | Low | |
| CV029 | The internal projections underpinning the SAR 6bn valuation are not public. | Low | |
| CV030 | A realistic target return and hold period cannot be set without financials and preference terms. | Low | |
| CV031 | Global neobank multiples have compressed from 2021 peaks, tempering optimistic comparables for D360. | Medium | SV002, SV006 |
| CV032 | AI2Work and fintech commentary corroborate elevated but normalising private neobank valuations. | Low | SV005, SV001 |
| CV033 | D360's per-customer value sits within the global neobank range but is high for its pre-profit stage. | Low | SV002, SV001 |
| CV034 | Vision 2030 and market-growth forecasts support the demand side of the bull case. | Low | SV029, SV023 |
| CV035 | Enterprise and AGBI coverage corroborate the headline round size and valuation step-up. | Medium | SV010, SV018 |
| CV036 | Startupr and Sharikat coverage frame D360's raise as a milestone financing for Saudi fintech. | Low | SV011, SV013 |
| CV037 | Competition from STC Bank pressures the monetisation assumptions in the base and bear cases. | Low | SV025, SV026 |
| CV038 | P&S and Mordor market forecasts bound the revenue-pool ceiling that limits ultimate upside. | Low | SV022, SV023 |
| CV039 | Arab News banking coverage situates D360 within a well-capitalised, competitive sector context. | Low | SV020, SV008 |
| CV040 | AlvarezMarsal-type sector analysis frames Saudi bank profitability as supportive of long-run value. | Low | SV017, SV007 |