DIFC asset management licence

An asset management licence is not a single product with a fixed specification. It is DFSA authorisation for a defined set of regulated activities, and the DFSA is precise about what a licence does: authorisation is given in the form of a licence, issued electronically, which specifies the type of Financial Services that can be conducted[DFSA — Authorisation].

Read that carefully, because it shapes the whole exercise. Your permissions are explicit and finite. Managing assets on a discretionary basis, advising on financial products, arranging deals in investments and managing a collective investment fund are separate regulated activities. You are authorised for what you applied for and nothing beyond it, and widening the scope later is a variation application rather than a business decision.

So the first piece of work is not the application. It is deciding, precisely, what the firm will do — for whom, with whose money, and on whose authority. Scope it slightly wider than day one requires so you have room to grow, and no wider, because every permission carries obligations.

The DFSA states the trigger in its own words:

In an asset management context that captures discretionary portfolio managers, fund managers, wealth managers with investment discretion, and firms advising on or arranging investments. DIFC groups these within its wealth and asset management sector, which spans wealth management, asset management, fund management, private equity, hedge funds and venture capital firms[DIFC — Financial Firms].

The borderline cases are where people get it wrong. Watch for:

• “We only manage family money.”A genuine single-family office managing the family’s own wealth is generally established as a non-financial private company. The moment third-party money enters, the analysis changes. See family offices.
• “We only introduce clients.” Arranging can itself be a regulated activity. Introducing is not automatically outside the perimeter.
• “We only advise, we don’t hold money.” Advising on financial products is a regulated activity in its own right; custody is a separate question.
• “We’re a technology platform.” If the platform arranges deals or manages money, the code does not change the classification. See FinTech licensing.

Get a view on the perimeter before you commit to a structure or a timeline. Discovering you are regulated after incorporating is the most expensive sequencing error available in this jurisdiction.

Scale matters here more than in most sectors, because asset management runs on counterparties — administrators, custodians, auditors, prime brokers, placement agents and allocators. DIFC publishes where it stands[DIFC — H1 2026 results]:

592 wealth and asset management firms, including the region’s highest concentration of hedge funds, within a regulated population of 1,134 firms that grew 16 per cent year-on-year[DIFC — H1 2026 results]. Alongside them sit 327 banking and capital markets firms[DIFC — H1 2026 results] — the counterparties an asset manager actually needs.

The practical consequence for you is that the supporting infrastructure already exists. Fund administrators who have done DFSA work before, auditors who know the rulebook, and lawyers who have taken firms through authorisation. In a thinner jurisdiction you would be paying someone to learn on your file.

For fund managers specifically, the DFSA sets out what you must demonstrate to obtain a licence[DFSA — Collective Investment Funds]:

• Adequate systems and controls to manage the type of fund you propose to establish; and
• That the individuals performing certain functions within the firm — such as board members, senior management and key control functions including compliance and anti-money laundering — meet the relevant suitability and integrity criteria.

Notice what is at the heart of both limbs: this is a judgement about competence and character, not a documentation exercise. The DFSA is deciding whether your firm can be trusted to manage other people’s money, and it is assessing the people who will do it.

“Adequate systems and controls” is proportionate rather than absolute — it is explicitly tied to the type of fund you propose to establish[DFSA — Collective Investment Funds]. A single closed-ended private equity fund with ten institutional investors does not need the operational infrastructure of a daily-dealing multi-strategy platform. The regulator expects the controls to fit the risk, and applications that over-engineer are as unconvincing as those that under-engineer.

In practice, the substance of your application is a regulatory business plan: what you will do, for whom, how you will control the risks, who will hold the key roles, and what capital stands behind it. It is a different document from an investor pitch deck, and using one as the other is immediately obvious to a regulator.

If there is one thing to take from this page, it is that DFSA authorisation is a people-first process. The individuals performing board, senior management and key control functions such as compliance and anti-money laundering must meet suitability and integrity criteria[DFSA — Collective Investment Funds].

The consequences are practical and are routinely underestimated.

• You need real people, named, before you apply. A compliance officer and a money-laundering reporting officer are not post-approval hires. Their fitness and propriety is part of what is being assessed.
• They need relevant experience. A compliance officer who has never worked in a regulated firm is a weakness in the application, whatever their other qualities.
• They need genuine capacity. The regulator is assessing whether these functions will actually be performed, not whether the boxes are filled.
• Their history will be examined. Prior regulatory action, disciplinary matters or an unexplained gap will come up. Disclose it, with context, rather than hoping it goes unnoticed.

Build hiring into the project timeline from the outset. Firms that plan a launch date and then start looking for a compliance officer discover that the good ones are in demand and the available ones are available for a reason. This is also where the DIFC ecosystem earns its premium: there is a genuine pool of people here who have done these roles in a DFSA-regulated firm before.

Before committing to authorisation, establish whether you need it. Many established managers do not, and license unnecessarily.

A Fund Manager from an acceptable jurisdiction may establish and manage a Domestic Fund domiciled in the DIFC without having to obtain a DFSA licence, provided it is a body corporate; manages the fund from a jurisdiction included in the DFSA’s Recognised Jurisdictions List or assessed by the DFSA as providing an adequate level of regulation; subjects itself to the DIFC Laws and Courts; appoints a DFSA-licensed Fund Administrator or Trustee to act as its local agent for regulatory processes and investor-relation functions; and the fund is not a Credit Fund[DFSA — Collective Investment Funds].

For a manager already regulated in London, Singapore, Luxembourg or a comparable centre, this is often the correct answer. You get a DIFC-domiciled fund under DIFC law with DIFC Courts jurisdiction — which is what regional investors frequently want — without building a regulated firm in the Centre.

The honest trade-offs. You are submitting to DIFC Laws and Courts, which is a real legal commitment. You are dependent on your appointed administrator or trustee, who is doing regulated work as your local agent. You do not get a DFSA licence, which some institutional allocators specifically look for. And it does not help if your ambition is a genuine regional operating presence with a team on the ground.

Where the answer is licensing, license. Where it is not, the External Fund Manager route saves a great deal of time and cost. See fund formation for how it fits together.

These are separate exercises and conflating them causes real planning errors.

The licence authorises the manager. It is a substantial application, assessed on systems, controls, capital and people, measured in months.

The fund is separately established and notified. The DFSA aims to complete the notification process within five days for an Exempt Fund and two days for a Qualified Investor Fund[DFSA — Collective Investment Funds].

Those short windows attract a lot of attention, and they are genuine — but they describe the fund notification, not the authorisation of the manager behind it. A manager who reads “two days” as the time to bring a first fund to market from nothing has misread it by a wide margin.

The upside of the separation is real, though: once authorised, launching additional funds is comparatively fast. The heavy work is done once, at the manager level. See Qualified Investor Funds, Exempt Funds and fund types.

1. Define the regulated activities precisely. Your licence will specify them[DFSA — Authorisation], so this determines the whole application.
2. Test whether the External Fund Manager route works instead[DFSA — Collective Investment Funds]. Do this before spending anything on authorisation.
3. Identify the individuals for board, senior management, compliance and MLRO. Start recruitment now, not later.
4. Build the regulatory business plan — activities, clients, risks, controls, governance, financial projections and capital.
5. Document systems and controls proportionate to the type of fund or mandate proposed[DFSA — Collective Investment Funds].
6. Incorporate the DIFC entity through the Registrar of Companies[DIFC Registrar of Companies], running incorporation in parallel with the DFSA application rather than before it. See company registration.
7. Submit and engage. Expect substantive questions and answer them quickly and consistently.
8. Meet the conditions attached to in-principle approval, then take up the licence.

Months, not weeks — and the variance between firms is larger than most expect. The honest drivers:

• Whether your key people are already identified and available. The single biggest factor, and the one most often left late.
• The quality of the regulatory business plan. A vague plan generates rounds of questions; a precise one does not.
• Complexity of the proposition. A conventional discretionary mandate is a well-trodden path. A novel structure or asset class invites more scrutiny.
• Your responsiveness. Largely within your control, and it shows.

Two scheduling points. Run incorporation in parallel with authorisation, never after it. And do not commit to investors, launch dates or office leases on an assumed approval date — the regulator sets that timetable, not you.

The DFSA publishes its fees, including fees for fund managers and funds[DFSA — Collective Investment Funds], and DIFC publishes incorporation and licence fees in the Registrar of Companies Table of Fees[DIFC — Handbooks & Fees]. Price from those, not from an article.

Budget across five lines, and note that only the first is one-off:

• DFSA application fees for the permissions sought.
• Regulatory capital — dependent on your prudential category and permissions, so assessed rather than assumed.
• People — compliance and MLRO salaries, in-house or outsourced. Usually the largest recurring line.
• Premises in the Centre, sized to your visa requirement. See office space.
• Ongoing regulatory — annual supervision fees, audit, and the cost of the reporting the DFSA requires.

The viability test for a new manager is the recurring cost against realistic assets under management and fee rates. A regulated firm has a cost floor that does not fall when fundraising is slower than planned. See formation costs.

On tax: DIFC sits within the UAE free zone framework, so whether the entity is a Qualifying Free Zone Person earning Qualifying Income is a federal question requiring advice on your actual structure[UAE Ministry of Finance]. See corporate tax.

Authorisation is the beginning of a supervisory relationship, not the end of a process. The DFSA states that once you have been granted a licence it will supervise on an ongoing basis your activities relating to the funds you manage[DFSA — Collective Investment Funds].

In practice that means:

• Regular regulatory reporting on prescribed forms and timetables.
• Maintaining capital continuously, not just at the point of approval.
• A functioning compliance and AML framework — monitoring, training, reporting, and a compliance officer with genuine authority.
• Notifying material changes — new controllers, changes to authorised individuals, changes to the business model.
• Annual audit and the associated filings. See audit requirements.
• Annual licence renewal with the Registrar, due within thirty days of expiry[DIFC Registrar of Companies].

Firms that treat compliance as an ongoing operational function do fine. Firms that treat it as a hurdle already cleared are the ones that end up in difficulty, and it is usually visible long before anything formal happens.

One cultural observation worth more than any checklist. The firms that have the easiest relationship with the DFSA are the ones that tell it things early — a control that failed, a departure from the business plan, a key person leaving — rather than waiting to be asked. Regulators are considerably more forgiving of a problem disclosed than of the same problem discovered, and that asymmetry is worth building into how the firm operates from the first week.

• Not testing the External Fund Manager route first. Established managers license unnecessarily more often than you would expect[DFSA — Collective Investment Funds].
• Leaving compliance and MLRO hiring until after approval. Their fitness is part of the application[DFSA — Collective Investment Funds].
• Submitting a pitch deck as a regulatory business plan. Different audience, different document, immediately obvious.
• Scoping permissions too narrowly. The licence specifies what you may do[DFSA — Authorisation]; widening it later is a variation application.
• Confusing the two-day QIF notification with time-to-launch. That window is the fund, not the manager[DFSA — Collective Investment Funds].
• Incorporating first and applying afterwards. Run them in parallel.
• Underestimating the recurring cost base. A regulated firm has a floor that does not fall with slower fundraising.
• Assuming a foreign licence carries across. It does not passport in, though it may support the External Fund Manager route[DFSA — Collective Investment Funds].