Start an AI Company in the UAE: Licence Options Compared, Activity Codes and Data Rules (2026)

In short: As of October 2026, the UAE has no single federal AI licence; an AI company is an ordinary company whose licence carries an AI activity. Dubai mainland uses activities 7220010 (AI development) and 7020039 (AI consultancy). DIFC’s AI Licence and ADGM’s tech start-up licence each cost USD 1,500 a year, and DMCC’s AI Centre lists seven AI activities.

To start an AI company in the UAE, choose the authority first and the AI activity second. On the Dubai mainland, use Artificial Intelligence Developing Services (7220010) if you build models or AI products and Innovation & Artificial Intelligence Research & Consultancies (7020039) if you advise on AI. In the free zones, DIFC offers an AI Licence subsidised at USD 1,500 a year, DMCC offers seven AI activities through its AI Centre, and ADGM offers a USD 1,500 tech start-up licence to Hub71-approved start-ups. Then plan for the data protection law that applies where you are licensed, and for any sector regulator your product touches, such as finance or health.

This guide is for founders who want to build or sell artificial intelligence from the UAE: model developers, AI agent and automation studios, AI consultancies, and software companies adding AI to what they already sell. It compares the licence routes, sets out the data rules that matter for AI in plain English, and flags the products that need a second approval. Activity codes come from Invest in Dubai’s official activity register; licence details come from DIFC, DMCC and ADGM; data rules come from the UAE Legislation portal, the DIFC Commissioner of Data Protection and ADGM. Everything was checked on 15 October 2026. If your product is ordinary software with some AI features, our software and IT company setup guide covers the general tech route; this page is the AI-specific playbook.

Is there a special AI licence in the UAE?

There is no single federal AI licence in the UAE: an AI company holds an ordinary business licence that carries an AI activity, and only DIFC sells a licence actually named the AI Licence. In the UAE a business licence is issued by a licensing authority: the Department of Economy and Tourism (DET) on the Dubai mainland, or a free zone authority such as DIFC, DMCC, ADGM or Dubai Silicon Oasis. What makes a company an “AI company” is the activity written on that licence.

Several authorities now market AI-specific offers. DIFC goes furthest with a licence it names the AI Licence, but it is still a DIFC commercial licence with an AI focus, not a national permit that lets you operate anywhere. Two practical consequences follow:

• The activity limits what you may sell. Choose the one that matches your real product, not the one with the best marketing.
• An AI activity does not replace sector approvals. If your AI gives investment advice, reads medical records or runs a telecom service, the regulator for that sector still applies.

The UAE government has also published a national AI strategy (launched in October 2017, according to the government portal u.ae) and the UAE Charter for the Development and Use of Artificial Intelligence, which sets 12 priorities such as safety, algorithmic bias, data privacy, transparency and human oversight. These are policy documents. They guide how AI should be built and used, but neither one is a licence you apply for.

Which AI activities can you put on a Dubai mainland licence?

The main AI activities on a Dubai mainland licence are Artificial Intelligence Developing Services (7220010) and Innovation & Artificial Intelligence Research & Consultancies (7020039), with Robotics & Smart Machines Trading (4741018) for hardware, according to the Invest in Dubai activity register. We searched Invest in Dubai’s business activity register for “artificial intelligence” on 15 October 2026. These are the AI-related activities it returned. The licence counts are the register’s own figures for the previous 12 months.

All four are marked as open to foreign ownership. As a rule of thumb:

• You build models, AI apps or agents: start with 7220010.
• You advise companies on AI strategy, adoption or training: 7020039 fits. Our consultancy business guide explains how consultancy activities are licensed.
• You sell robots or AI hardware: add a trading activity such as 4741018, because a service activity does not let you trade goods.
• You are a holding company for AI ventures: 6499023 is an investment activity, not a way to deliver AI services yourself.

The activity also decides the licence type and any external approval. Our Dubai mainland licence types guide explains how activities and approvals fit together, and the initial approval guide covers the first DET step.

Which free zones have AI licences or AI centres?

The UAE free zones with AI-specific offers are DIFC (AI Licence and Innovation Licence, USD 1,500 a year each), DMCC (an AI Centre with seven AI activities) and ADGM (a USD 1,500 tech start-up licence for Hub71-approved start-ups). To compare every zone, not only the AI offers, see our Dubai free zones list. These are the AI routes we could confirm on the authorities’ own pages on 15 October 2026. Fees are shown only where the authority publishes them.

DMCC’s seven core AI activities are AI developing services; development and training of AI language models; autonomous AI agents and systems; management and operation of AI robotic systems; robotics and smart machines trading; cloud service and data centre providers; and innovation, AI research and consultancy. DMCC says they can be combined with crypto, gaming and general tech activities such as blockchain development or cybersecurity consultancy.

On scale, DIFC reported on 11 November 2025 that the Dubai AI Campus hosted more than 200 AI companies and that 315 entities were registered under its AI Licence. For zone-by-zone detail, read our guides to DIFC, DMCC, Dubai Silicon Oasis, Dubai Internet City and ADGM.

Mainland or free zone: which suits an AI company?

A Dubai mainland licence usually suits an AI company whose clients are UAE businesses, and a tech free zone usually suits an AI product sold mainly abroad. The right choice depends on who pays you and where the work happens, not on which zone has the strongest AI branding.

A free zone company that later wants mainland clients may need an extra permit or a branch; our start a business in the UAE route map explains the options. On tax, DIFC states it is a qualifying free zone under the UAE Corporate Tax Law, where qualifying income can be taxed at 0%, but whether AI income qualifies depends on the Cabinet and Ministry of Finance decisions on qualifying activities. Register for corporate tax either way; see our corporate tax registration guide.

What does UAE data protection law require from an AI company?

UAE data protection law requires an AI company to have a lawful ground for personal data, to offer a human review of automated decisions on request and to assess high-risk processing, under Federal Decree-Law No. 45 of 2021 or the DIFC or ADGM rules. For most AI businesses, data law is the biggest ongoing obligation, and which law applies depends on where you are licensed. Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (in force since 2 January 2022, regulated by the UAE Data Office) says in Article 2 that it does not apply to companies in free zones that have their own personal data protection legislation. That is why DIFC and ADGM companies follow their zone’s law instead.

The federal rules that matter most for AI

• Automated decisions (Article 18). A person may object to decisions made by automated processing, including profiling, especially where the decision has a legal effect or harms them. The exceptions are where the automated processing is agreed in their contract, required by another law, or consented to in advance. Even then, the controller must review an automated decision with a human on request.
• Impact assessment (Article 21). Before high-risk processing with new technologies, the controller must assess the impact. It is mandatory for systematic, comprehensive automated evaluation of people, including profiling, with legal or serious effects, and for large volumes of sensitive data.
• Data protection officer (Article 10). Required where processing is high risk because of new technologies or data volume, or involves profiling and automated processing of sensitive data. The officer can be an employee or someone authorised by you, inside or outside the UAE.
• Sending data abroad (Articles 22 and 23). Personal data may go to a country with adequate data protection law approved by the Data Office, or under the conditions in Article 23, such as a contract that imposes the law’s protections or the person’s explicit consent. Hosting models or customer data on overseas cloud servers is a cross-border transfer.
• Exclusions (Article 2). Government data, health data and banking or credit data that have their own laws are outside this decree-law, so AI built on those data types follows the sector law.

DIFC describes Regulation 10 as its rule for personal data processed through AI systems. It lists Eversheds Sutherland, Middle East Privacy and White Label Consultancy as accredited certification bodies, and Standard Chartered Bank for its own internal systems only. Whichever regime applies, write down where your training and customer data is stored, who can see it and which country it goes to before you sign your first client.

Which AI products need an extra approval?

AI products in financial services, health, telecoms and government supply need an extra approval on top of the trade licence, because a trade licence only lets you carry on the activity written on it. These areas bring in another regulator on top:

• Financial services. AI that gives investment advice, manages money or handles payments is a regulated financial activity. In DIFC the DFSA licenses and regulates it; onshore the Central Bank or the federal securities regulator may be involved. Our crypto business licence guide covers virtual asset regulators.
• Health. AI that diagnoses, triages or handles patient records falls under health regulators and the federal health data law above.
• Telecoms. Running telecom or connectivity services needs the TDRA, as our software guide explains.
• Selling to government. Government buyers usually need supplier registration before they can pay you.

If none of these apply, a standard AI activity and sound data practice are usually all you need.

How do you set up an AI company, step by step?

Setting up an AI company in the UAE takes eight steps: define the product, choose the authority, pick the activities, get the trade name and initial approval, arrange space, obtain the licence and establishment card, apply for visas, then register for tax and data duties.

Can AI specialists get a Golden Visa?

AI specialists can get a 10-year Golden Visa through GDRFA Dubai’s talented people service, but only with a nomination, so it is not an automatic route. GDRFA Dubai’s Golden Residence service for talented people lists “talents in the field of digital technology” as a category. The file needs a passport copy and a nomination letter from the Emirates Council for Artificial Intelligence and Digital Transactions, and GDRFA says the nomination is not final approval. The permit is valid for 10 years.

GDRFA lists these fees for that service: AED 1,100 residence permit fee, AED 10 Knowledge Dirham, AED 10 Innovation Dirham, AED 500 inside-the-country fee and AED 20 delivery. Separately, the UAE’s National Program for Coders, managed by the Artificial Intelligence Office, says it aims to grant Golden Visas to 100,000 of the world’s best coders. Our Golden Visa nomination guide explains how nominations work, and the eligibility criteria guide covers the other routes, such as investors and entrepreneurs.

Setting up from the UK, USA, Canada, Australia or New Zealand

Many AI founders start before they move. DIFC’s in-principle approval and DMCC’s AI Centre application start online, and mainland files can be handled for you under a power of attorney. Plan for three things you cannot do remotely or quickly:

• Biometrics and medicals. You must be in the UAE for the residence visa medical test and Emirates ID biometrics.
• Attestation. Documents issued abroad, such as degrees or a foreign parent company’s papers, usually need attestation before UAE authorities accept them.
• Time zones and signatures. Approvals often need a quick reply or a signature; agree who signs on the company’s behalf while you are away.

If you already hold a UAE visa and will be abroad for a long time while you set up, read our re-entry permit guide so your residence does not lapse.

What does it cost to start an AI company?

Starting an AI company in the UAE costs from USD 1,500 a year in licence fees in DIFC or ADGM, before space, visas and government services, while DMCC and Dubai mainland costs depend on the package, activities and office. Only figures the authorities publish are shown. Each route has other costs (space, visas, government services) that depend on your set-up.

Illustrative scenarios (examples, not real cases)

These examples show how the rules above point to a route. They are not client stories and not quotes.

Common mistakes AI founders make

• Choosing a consultancy activity for a product company. If you sell software or models, 7020039 alone may not cover it.
• Treating the AI Licence as a financial licence. DIFC’s AI and Innovation licences are commercial licences; regulated finance needs the DFSA.
• Applying to ADGM as a service firm. The incentivised tech start-up licence is not open to technology service providers.
• Ignoring where data goes. Overseas model hosting is a cross-border transfer under UAE law.
• No human in the loop. Under the federal law, people can ask for a human review of automated decisions.
• Selling hardware on a service licence. Robots and devices need a trading activity.
• Assuming free zone income is tax-free. Check whether your income is qualifying before you plan on 0%.

Frequently asked questions