Correspondence management system for companies: incoming, outgoing and archiving

A correspondence management system registers every incoming and outgoing letter with a unique number and date, routes it to the person who must act, tracks the deadline, keeps the signed copy with its attachments, and archives it so it can be found and proven later. For Saudi companies, it should also meet the retention and electronic-record rules that apply.

This guide is for administration managers, executive offices and company secretaries who handle formal letters to and from government entities, banks, contractors and clients. It explains what the system should do, when email and shared folders stop being enough, and which Saudi rules shape archiving. The rules were read on the Bureau of Experts, ZATCA and ISO pages on 14 October 2026. It is general information, not legal advice; for a specific case, check the official text or ask a licensed advisor.

What a correspondence management system does

Correspondence management, often called administrative communications in Saudi offices, is the formal side of a company's mail: the letters that create obligations, answer requests or carry decisions. A system for it does six jobs:

• Registry: one register of incoming and outgoing letters, each with its own number and date.
• Capture: scanning paper letters and saving email or portal letters with their attachments.
• Routing: sending each incoming letter to the department that must act, with instructions and a deadline.
• Drafting and approval: templates, review by the right people and signature before a letter leaves.
• Follow-up: reminders, escalation and a view of what is overdue.
• Archive: classification, retention periods and search, so a letter from years ago can be found in seconds.

Email does some of this, and a document management system does some more. The difference is the register: a correspondence system treats each letter as a numbered transaction with a sender, an owner, a deadline and a history, not just a file in a folder.

Email, a document system or a dedicated correspondence system?

The right level depends on volume, on how many people touch each letter, and on how often you need to prove what was sent or received.

A simple test: if you cannot answer "who has this letter now, and when is the reply due?" within a minute, the current setup has outgrown its tools.

Incoming correspondence: from the front desk to a closed file

Incoming letters arrive by hand, by post, by email and through government and bank portals. A good process gives all of them the same path.

1. Register on arrival. Record the incoming number, the date received in Hijri and Gregorian, the sender, the sender's own reference number and date, the subject, the number of attachments, the channel and the confidentiality level.
2. Capture the content. Scan paper letters to searchable PDF and keep the original filed under the same number. Arabic scans need checking: our guide to Arabic OCR for scanned documents explains why numbers and dates come out wrong and how to catch it.
3. Route. Refer the letter to the responsible department with an instruction ("for action", "for information", "for opinion") and a due date; copy others for information only.
4. Follow up. The system reminds the owner before the due date, escalates when it passes, and passes the task to a named delegate during leave.
5. Reply and close. Link the reply to the incoming number, so either can be found from the other, and close the item with a short note.
6. File. Assign the classification and retention period before the item disappears from anyone's task list.

Outgoing letters: numbering, approval and signature

An outgoing letter is a commitment, so the system should make the approval path visible. Start from approved templates with the letterhead and standard closing, route the draft to reviewers in a fixed order, and give the outgoing number only when the letter is signed, not when the draft is opened.

Electronic signature is now normal for many letters. Under the Electronic Transactions Law, electronic transactions, records and signatures are binding, and their validity cannot be denied only because they are electronic, provided they meet the law's conditions [1]. An electronic record counts as an original when technical means confirm the integrity of its content from the moment it was finalised [1], and it is accepted as evidence when it meets that requirement [1]. The law does not apply to personal status matters or to issuing title deeds for real estate dispositions, unless the responsible authority allows electronic handling [1].

For each letter sent, record the channel (hand delivery, courier, email or portal), the date, and the proof of delivery: a signed receipt, a courier record or a portal confirmation.

Illustrative example: a numbering scheme for a 60-person company

Illustrative example. A contracting company in Dammam with four departments sets these rules in its correspondence system.

Three rules make the scheme work. The system, not a person, assigns the next number. A cancelled number is never reused; it stays in the register marked "cancelled" with the reason. And every record stores both the Hijri and the Gregorian date, because government letters often cite Hijri dates while contracts and invoices may use Gregorian.

Archiving and retention: what Saudi rules say

Archiving is where a correspondence system earns its cost. Several Saudi rules set how long records must be kept and in what form.

Commercial Books Law. A trader must keep a true copy of all correspondence and documents relating to its business, both sent and received, filed in an orderly way [2]. The trader must keep the books, the correspondence and those documents for at least ten years [2]. The law was issued by Royal Decree M/61 dated 17/12/1409H and was listed as in force when we checked [2].

Electronic Transactions Law. When any law requires a document or information to be kept, keeping it as an electronic record satisfies that requirement if three conditions are met: the record is kept in the form in which it was created, sent or received, or in a form that proves its content is identical; it remains accessible for later use; and it is kept with the information identifying its originator and recipient and the date and time it was sent and received [1]. A correspondence system should therefore keep metadata, not only the scanned image.

VAT records. Invoices, books, records and accounting documents must be kept for at least six years from the end of the tax period they relate to, in Arabic, and in the Kingdom, physically or electronically through access from a point in the Kingdom [3]. Electronic storage must include controls that prevent tampering and allow records to be produced on request [3].

Personal data. Letters often contain ID numbers, salaries or medical details. The Personal Data Protection Law requires personal data to be destroyed once the purpose of collecting it ends, unless a law requires keeping it for a set period, in which case it is destroyed after that period or the end of the purpose, whichever is longer [4].

Government archives (NCAR). The Documents and Archives Law applies to the documents of ministries and other government bodies; it requires a unified classification plan, retention periods and rules for which records may be destroyed [5]. The National Center for Archives and Records puts that law into effect, prepares its regulations and supervises the destruction of records [6]. Private companies are not the bodies it governs, but its method is a sound model, and letters you send to a government entity become part of that entity's records. Keep its reference numbers on your side.

For the concepts behind all of this, ISO 15489-1:2016, reviewed and confirmed in 2021, sets out principles for records, metadata, records systems, policies and controls, for any type of organisation [7]. It is a useful checklist when a vendor says its product "supports archiving".

How to tell whether your correspondence process works

Four figures, taken from the register each month, show whether the system is doing its job:

• Overdue rate: the share of incoming letters still open after their due date. If it rises, routing or delegation is failing.
• Average reply time: days from registration to the linked reply, by department. Long times often point to an approval chain with too many steps.
• Retrieval time: how long it takes to produce last year's letter with its attachments and proof of delivery. In a working archive this takes minutes, not days.
• Unfiled items: closed letters with no classification or retention period. These are the ones that will be lost, or kept longer than they should be.

Review them in the same meeting as your other operational figures, and fix the process before blaming the software.

Features to check in a correspondence management system

Use this list when you compare products or brief a developer:

1. Arabic first: right-to-left screens, Arabic search that handles different letter forms, and both Hijri and Gregorian dates.
2. Numbering rules: automatic numbers by type and department, no reuse of cancelled numbers.
3. Capture: scanning with barcode or QR labels on paper originals, and saving letters from email with attachments.
4. Routing: referral with instructions, due dates, copies for information and automatic escalation.
5. Delegation: named substitutes during leave, with their actions recorded under their own names.
6. Templates and approvals: letterhead templates and approval chains by letter type.
7. Signature: electronic signature, or a controlled process for scanning wet-signed letters.
8. Permissions: access by department and confidentiality level, including for the archive.
9. Audit trail: who viewed, changed, routed or signed each item, and when.
10. Retention: retention periods by classification, legal holds for disputes, and a destruction log.
11. Integration: links to email, HR, contracts or ERP records where letters belong.
12. Exit: export of letters, attachments and metadata in open formats if you change systems.

Common mistakes in managing company correspondence

• Numbering by hand in a spreadsheet, which leads to duplicates and gaps nobody can explain.
• Keeping only the scan, without the sender, dates and delivery proof that the Electronic Transactions Law asks to be kept with an electronic record [1].
• Final letters left in personal inboxes, which disappear when an employee leaves.
• No retention rule, so the company either keeps everything forever, including personal data it should have destroyed [4], or deletes business letters it must keep for ten years [2].
• Unchecked scanning, with unreadable stamps, missing pages or wrong dates.
• Letters that can be edited after signature, which weakens their value as proof.

Your next step

Take the last 30 days of formal letters and count them: incoming and outgoing, by department and by channel. Note how many missed their reply date and how long it took to find an old letter when someone asked. Those numbers tell you whether a register and clear rules are enough, or whether you need a correspondence management system with routing and retention built in. If you need one connected to your HR, contracts or ERP, our guide to custom software development in Saudi Arabia explains when to buy and when to build. You can read about O AI, a software and AI company in Al Khobar, on our home page.