On this page
Every NAHCON-licensed operator has been through a post-season audit, and most have been through one where the auditor asked for something the operator could not find. The pattern is consistent enough across seasons that the evidence list has stopped being a mystery, even if NAHCON has never formally published it.
The pilgrim ledger reconciliation
The audit always opens here. Every pilgrim your operation accepted should reconcile across four systems: the NAHCON central registry, your internal pilgrim management system, the Saudi-side Nusuk batch, and your bank statements. If a pilgrim appears in three but not the fourth, the auditor flags it and asks you to reconstruct what happened.
Operators that pass this section cleanly run a weekly reconciliation throughout the season, with a written sign-off from the operations lead. Operators that fail it ran no reconciliation at all and try to assemble one after the audit notice arrives.
The financial trail tied to pilgrims, not packages
NAHCON reads the financial records as a function of pilgrim outcomes. Every naira spent must trace to a pilgrim record, a package allocation, or a documented overhead category. Operators that file financials by package category alone — without the underlying pilgrim allocation — get a request for resubmission.
The pattern that survives audit is a chart of accounts where every transaction has a pilgrim or batch reference where applicable. Lump-sum costs are allowed but must carry a separate justification memo.
The incident and grievance log
Every recorded incident — a lost pilgrim, a hotel reassignment, a medical evacuation, a refund dispute — should appear in a single incident log filed inside thirty days of occurrence. The auditor cross-references the log against complaint records held by NAHCON directly. Mismatches surface immediately.
The bar here is real-time filing. Auditors are practised at distinguishing logs that were maintained throughout the season from logs that were reconstructed in the two weeks before the audit. Reconstructed logs typically lose ten to fifteen per cent of incidents that NAHCON has independent record of.
The accommodation and transport ledger
Auditors want to see room assignments by night and bus assignments by leg. Both ledgers should be at the pilgrim level, not the group level. If a pilgrim was reassigned mid-season because of a medical need or a complaint, the change should appear in the ledger with a reason code.
This ledger is the single most common point where pilgrim-side complaints meet operator records. If a pilgrim complained that they were moved from a graded hotel to a lower-rated one and your ledger does not show the move, the operator loses the dispute by default.
Licensing, insurance, and sub-contractor records
NAHCON cares about the chain. If you used a ground handler in Madinah, a transport sub-contractor for the Mina rotation, or a catering partner, they each need a documented licence, an active insurance certificate, and a contract that survives the audit cycle. Operators that handle this with verbal agreements lose the chain and absorb the regulatory exposure themselves.
The medical clearance and post-Hajj health log
Pre-season medical clearance should sit in the pilgrim file. Any clearance issued by an authority other than your medical lead must reference that authority. Post-Hajj health events — anyone who returned with a notifiable condition — go in a separate log that NAHCON cross-references against federal health surveillance data.
Pilgrim feedback and post-season survey
Operators are expected to run a structured post-season survey with a defined sample. Auditors want the questionnaire, the sample frame, the response rate, and the action items it generated. Missing any of the four marks the section incomplete.
Staff training and competency records
Anyone on the ground in Saudi Arabia who carried operator responsibility must have a training record on file. The record covers safeguarding, basic first aid, Saudi cultural orientation, and any operator-specific procedure. The records do not need to be elaborate, but they must be dated before the season started.
The board-level minute on Hajj operations
Every operator with a corporate board is expected to have at least one board minute per season that documents the directors' review of Hajj operations. The minute names the operations lead, records any reported incidents, and resolves on actions for the next season. Operators that miss this artefact tend to discover the requirement only during the audit itself.
Field note
The audit room is usually calm until someone asks for the one document that lives in a WhatsApp thread. A compliant archive is not glamorous, but it lets the team answer with a link instead of a memory.
What to do next
- Pull the policy owner, operations lead, and data owner into one review and agree which register is authoritative.
- Write down the evidence that proves each control was followed, then attach it to the pilgrim or operator record.
- Run a dry audit before the season opens so exceptions are visible while there is still time to fix them.