DIFC business setup

The Dubai International Financial Centre is not an ordinary free zone. It is a jurisdiction: it has its own common-law legislation, its own independent courts, and its own financial regulator. When you set up here you are not merely renting an address in Dubai — you are placing your company inside a legal system that international banks, investors and counterparties already understand.

That has a practical consequence for how setup works. There are two authorities you may deal with, and knowing which applies to you determines almost everything about cost and timeline. The Registrar of Companies incorporates and licenses every entity. The DFSA separately authorises anyone carrying on a regulated financial service. Most businesses deal only with the Registrar. Financial firms deal with both.

The sequence itself is straightforward: choose the activity, choose the structure, file, get an address, then visas and banking. What makes setups go wrong is rarely the filing — it is choosing the wrong structure for what the business actually needs to do, or arriving with documents that do not stand up to compliance review.

This guide covers the whole path, including the sequence: what to do in what order, and what to start before the previous step has finished. If you want the mechanics of incorporation specifically, see DIFC company registration.

One piece of context before the detail. In the first half of 2026 DIFC passed 10,000 active registered companies for the first time in its history, having added 2,318 in twelve months — organic growth of 30 per cent[DIFC — H1 2026 results]. You are not joining a jurisdiction that is trying to establish itself.

DIFC groups activity into four categories, and publishes a separate setup handbook for financial entities, funds, retail entities and non-financial entities[DIFC — Handbooks & Fees]. Your category is the first fork in the road: it decides your licence, your regulator, and the order of magnitude of your costs.

Category tells you which licence. Structure tells you what kind of legal entity holds it. DIFC publishes setup checklists for a wide range: private and public companies, general, limited and limited liability partnerships, recognised companies (branches) and partnerships, protected cell companies, variable capital companies, foundations, family offices, non-profit incorporated organisations and SPVs[DIFC — Handbooks & Fees].

In practice the decision comes down to a single question: are you going to operate, or hold?

If you will trade, invoice clients and employ people, you need an operating entity — a private company in most cases, or an LLP for a partner-led professional firm, or a branch if an established parent is extending into the Centre.

If you will hold assets rather than trade, you want a light vehicle: a Prescribed Company or SPV for ring-fencing and holding, a holding company for group ownership, or a Foundation where succession and asset protection are the point. These are dramatically cheaper — but they come with a hard restriction covered below.

This is the question that determines whether your setup takes weeks or months, and whether it costs thousands or a great deal more.

The DFSA — the Dubai Financial Services Authority — is the independent regulator of financial services in the DIFC. It authorises firms, supervises them, maintains the Rulebook, and enforces conduct and prudential standards. DIFC is explicit about the division of responsibility:

You need DFSA authorisation if you...

• Accept deposits or provide credit — see banking
• Manage client portfolios or funds — see asset management and fund manager licences
• Underwrite or intermediate insurance — see insurance
• Provide payment or money services — see payment services
• Advise on, arrange or deal in investments
• Provide virtual-asset services — see crypto and virtual assets

You do not need DFSA authorisation if you...

• Provide consultancy, legal, accounting or other professional services
• Hold assets passively through an SPV, holding company or Foundation
• Sell technology to financial firms without handling client money
• Operate a retail or leisure business inside the district

For early-stage regulated fintechs there is a middle path: the DFSA’s Innovation Testing Licence, a sandbox that lets you test a live product under restricted conditions before committing to full authorisation.

Five stages, in this order. The first is the one worth spending time on; the rest are execution.

The five stages overlap. The people who finish quickly are the ones who start the slow things early, not the ones who work harder on the fast things. None of these needs to wait for the step before it:

• Source-of-funds evidence — start on day one. Compliance is not asking for a bank statement; it is asking where the money came from, and for the documents that show it: the sale agreement, the years of payslips, the probate grant, the exit statement. It is the longest lead time in the process.
• Name reservation— alongside document preparation, checked against DIFC’s naming policy[DIFC — Handbooks & Fees]. The recurring rejection is a name implying a regulated activity the entity is not authorised to conduct.
• Office search — alongside filing, not after licensing. See office space.
• DFSA authorisation — alongside incorporation, always. Running it afterwards means paying for an entity that cannot trade while the regulator works through the regulatory business plan, the fit-and-proper assessment of your authorised individuals and capital confirmation.
• Bank conversations — as early as a bank will take the meeting.
• Legalising and attesting foreign documents — this involves third parties in other countries and cannot be accelerated at the end.

One thing should not run in parallel. Do not commit to a lease, a hire or a client launch date on the assumption that banking will complete on schedule. It is the one dependency genuinely outside your control.

Who does what

• You — the decisions nobody can make for you (what the business does, who owns it, who will be resident) and the raw material: identity documents, corporate records and the source-of-funds evidence. How fast you produce it is the largest single influence on your timeline.
• Your adviser and the licensed provider — translating your commercial intention into the right category, structure and activity wording, pulling the correct checklist, preparing the constitution and resolutions, filing, and sequencing the workstreams so the slow ones start first. A good adviser should also tell you when DIFC is the wrong answer.
• The Registrar of Companies — advises on, receives, reviews and processes applications, and issues the certificate and commercial licence[DIFC Registrar of Companies]. DIFC’s guidance is that the first point of contact is the DIFC Authority’s Business Development Department, whose relationship managers assist through the process[DIFC Registrar of Companies].
• The DFSA, only if engaged — authorises Financial Services firms and registers DNFBPs[DFSA — Authorisation], on its own timetable.
• The bank — independent of all of the above. It runs its own onboarding, asks for source-of-funds evidence again in its own format, and can decline a perfectly licensed entity.

Compliance review is where setups stall. Assume every document will be read properly.

For each shareholder and director

• Passport copy (and UAE visa / Emirates ID if resident)
• Proof of address — a recent utility bill or bank statement
• CV or professional profile for directors and key individuals
• KYC and source-of-funds evidence

For the company

• The proposed name, which must comply with DIFC’s naming policy[DIFC — Handbooks & Fees]
• A precise description of the intended business activity
• The chosen legal structure and share capital
• A business plan — and a regulatory business plan if DFSA-regulated
• A registered DIFC address

If a company is a shareholder

• Certificate of incorporation and constitutional documents
• Certificate of good standing
• Registers of directors and shareholders
• A board resolution approving the DIFC entity

You will also need to identify your ultimate beneficial owners — DIFC maintains UBO regulations and publishes guidance on exempt entities[DIFC — Handbooks & Fees]. Full detail is in our documents checklist.

Pre-flight check

If you can tick these before filing, the rest is administration: the activity written in regulatory language; the DFSA position settled (authorisation, DNFBP registration or neither); the structure chosen on liability, not cost; the official DIFC checklist for that structure; identity and address evidence for every shareholder; corporate owners documented through to the UBOs; source of funds evidenced, not asserted; the name checked against the naming policy; the address confirmed; standard articles unless there is a reason not to; resolutions correctly executed; and banking conversations already started.

Most people reading this do not live in Dubai, and the guidance written for those who do skips the questions that actually matter when you are somewhere else. So, directly:

You do not need to live in the UAE, and you do not need a residence visa, to own a DIFC company. Ownership and residence are separate. A DIFC entity may be established for one or more persons, whether natural persons or body corporates[DIFC Registrar of Companies], and 100% foreign ownership applies with no local sponsor and no Emirati shareholder — see foreign ownership. A residence visa is something the company can later sponsor for you. It is not a precondition of owning it.

What you can do from your desk, and what needs you in the UAE

• Remotely: choosing the structure, reserving the name, preparing and executing most incorporation documents, filing with the Registrar, and arranging a registered address through a corporate service provider. Much of a DFSA application runs remotely too[DFSA — Authorisation].
• Usually in person: opening the corporate bank account. Most banks want to meet signatories face to face — see DIFC bank accounts.
• Always in person: completing a residence visa. The medical fitness test and Emirates ID biometrics cannot be done from abroad[ICP]. Once someone enters on their entry permit, the residency procedures should be completed within one month[UAE Gov — Preparing to work].

The sensible plan is therefore one trip, properly sequenced: everything possible done remotely first, then a single visit with the bank meeting and the visa medical booked in the same week. Two half-prepared trips cost more than one well-planned one, and the second is usually caused by starting the paperwork late rather than by any rule.

• Before you fly: entity incorporated, licence issued, establishment card obtained, bank application submitted and the entry permit in hand. A bank will not open an account for an entity that does not yet exist, and nobody can be sponsored before the establishment card.
• During the visit: the bank meeting and the medical and biometrics, ideally in the same week[ICP].
• The clock you are inside: the entry permit is valid for two months from issue[UAE Gov — Preparing to work], so book the trip once it is issued. In DIFC the employer applies for each step, which for a founder means you.

Attestation is the part that sets your timeline

Documents issued outside the UAE generally need to be notarised and then legalised before the Registrar will accept them, and apostille arrangements apply for some jurisdictions rather than all. Which route applies depends on where the document was issued, so confirm it for your own country before couriering anything.

This matters more than founders expect because it is the one part of setup you cannot speed up by being organised — it sits with third parties in another country. Two related traps: certificates of good standing have validity windows and can go stale while the rest of your file is assembled, and documents in another language need translation by a translator the authority accepts. Start this first, not last. The detail is in our documents checklist.

Where a corporate shareholder slows things down

If the DIFC entity will be owned by a company rather than by you personally, expect the ownership chain to be the long pole. Every layer needs its own constitutional documents, good standing evidence and legalisation, and compliance has to be able to see through to the ultimate beneficial owners. A three-layer holding structure across three countries is not unusual and is not a problem — it is simply three times the attestation work, and it should be started on day one.

One case is different enough to call out on its own: a family office or Foundation that already exists abroad does not need to go through fresh incorporation at all if the origin jurisdiction allows outward continuation. See relocating a family office to DIFC for when continuing a structure in is the right route instead of building a new one.

Every DIFC entity needs a registered address inside the Centre. This is not optional, and it is directly connected to how many people you can sponsor.

Your options run from a flexi-desk in a licensed business centre, to a serviced office, to dedicated space in a DIFC building. Light holding vehicles have a fourth option: DIFC notes that an SPV can use its own office, a co-working desk, space shared with a DIFC affiliate, or an appointed Corporate Service Provider[DIFC — SPVs / Prescribed Companies] — and that a Prescribed Company must appoint a CSP unless it qualifies as an Exempt Prescribed Company.

The link to visas is the part people underestimate. Broadly, more dedicated space supports a larger visa quota. If you plan to hire, size the office for the team you intend to have in eighteen months, not the team you have on day one — upgrading later is disruptive and usually more expensive than taking the right space at the start.

Once licensed, you obtain an establishment card — the registration with immigration that makes your company a sponsor — and then process each residence visa through entry permit, status change, medical and Emirates ID to an electronic residence visa. Owners take an investor or partner visa; staff take employment visas. Eligible investors and entrepreneurs may also qualify for the 10-year Golden Visa.

We will be straight about this, because most sites are not: DIFC does not publish a single headline price for setting up an operating company, and neither do we. What DIFC does publish is its own registrar fees, in client handbooks that are the same for every applicant. Those are below, and they are the only figures we state.

What DIFC publishes

Everything else is set out in the Registrar of Companies Table of Fees, alongside the entity checklists and handbooks[DIFC — Handbooks & Fees].

Those are not the whole budget. Office space, visas and a provider’s fee sit on top, and the next section lists every line.

The honest summary is that a light holding vehicle is genuinely inexpensive, an operating company is a meaningful but manageable commitment, and a DFSA-regulated firm is a serious investment. Our cost guide breaks each line down and marks clearly which figures are published and which are not.

A first-year budget has more lines than the DIFC fee table, and they arrive in a different order than most people expect. List every component below, put a figure against each one as it is confirmed, and add them up yourself. We do not publish a total: the largest lines depend on your office, your headcount and your provider.

“0% tax” is the phrase everyone repeats about DIFC, and it is true with an important qualification. DIFC states that its free zone is a qualified free zone for the purposes of the UAE Corporate Tax Law[DIFC — Establish a Business], and the UAE Ministry of Finance is precise about what that means:

Two words carry the weight: conditions and Qualifying Income. The 0% rate is not automatic and it does not apply to everything you earn. Corporate Tax is governed by Federal Decree-Law No. (47) of 2022, applying to financial years beginning on or after 1 June 2023, with a standard rate of 9% on taxable income above AED 375,000[UAE Ministry of Finance].

Separately, VAT applies at 5%, with registration mandatory once taxable supplies exceed AED 375,000 and voluntary registration available above AED 187,500[Federal Tax Authority]. DIFC has Designated Zone status for VAT purposes for certain supplies of goods, but that is not a general exemption for services.

If you are not resident in the UAE, read this part twice

Everything above is the UAE side of your tax position. It is not the whole of it, and the half that gets left out is the half that causes trouble.

Note how the Ministry defines who is caught: UAE companies and other juridical persons incorporated or effectively managed and controlled in the UAE[UAE Ministry of Finance]. Incorporation is one route in. Management and control is the other — and that second test is not unique to the UAE. Many tax systems use a comparable one, which means a company incorporated in DIFC but genuinely run from a kitchen table in another country may be treated as tax-resident there, by that country, regardless of where it was registered.

We are not going to tell you what your own country’s rule is — that depends on your jurisdiction, any treaty between it and the UAE, and your personal circumstances, and anyone who answers it confidently without asking where you live is guessing. What we will say plainly is that the question exists and it is the one most often skipped. A DIFC licence is not, by itself, a change in where you are taxed.

Two practical consequences. First, if the 0% rate is part of why you are doing this, the substance behind the entity — where decisions are actually taken, by whom, and whether that is evidenced — is not administrative tidiness, it is the position itself. Second, take advice in your home country as well as here, and do it before you incorporate rather than at the first filing deadline. Restructuring after the fact is expensive and sometimes not possible.

The practical takeaway: structure with tax in mind from the beginning, register when required, keep proper records, and take advice on whether your income actually qualifies. Our corporate tax guide covers the conditions in detail.

There is no single answer, but there is a reliable pattern.

• Light holding vehicles (SPV, Prescribed Company, Foundation) — the fastest route, often a matter of weeks once documents are clean.
• Non-regulated operating companies — a few weeks for incorporation, then additional time for the establishment card, visas and banking.
• DFSA-regulated firms — several months, because authorisation is a substantive review of your business plan, people, capital and compliance rather than a filing.

Three variables move your date more than anything else:

1. Document readiness — the one you fully control, and the one that most often causes delay.
2. Whether the DFSA is involved — a step change, not an increment. Authorisation needs a regulatory business plan, systems and controls, capital and the fit-and-proper assessment of the individuals holding the compliance and money-laundering reporting functions[DFSA — Authorisation], so plan their hiring as part of the timeline rather than after it.
3. Ownership complexity — a single individual shareholder clears compliance faster than a five-layer structure across three jurisdictions.

The causes of delay are boringly consistent, and almost none of them is the Registrar: source of funds asserted rather than evidenced; an activity description rewritten mid-application; discovering late that the DFSA is involved; foreign documents legalised too late; ownership chains that stop short of the real beneficial owners; a name that implies regulated activity; and review queries that wait because nobody owns them. The bank account is usually the last step and frequently the longest — see opening a DIFC bank account for what banks actually want. A full breakdown sits in our timeline guide.

Setup is the beginning of an obligation, not the end of a task. A DIFC entity is a regulated corporate citizen and has to be maintained. Budget for this at the outset — the annual running cost is what people forget when comparing jurisdictions.

• Annual licence renewal. Your commercial licence is renewed each year, along with your registered address and filings. Miss it and you risk penalties and loss of good standing — see licence renewal.
• Accounts and audit. You must keep proper books, and most entities prepare and file audited financial statements annually. See accounting and audit requirements.
• Tax registration and filing. Corporate tax registration and returns apply even where the 0% rate does, and VAT registration is mandatory above the threshold.
• Beneficial ownership.UBO records must be maintained and kept current under DIFC’s UBO regulations[DIFC — Handbooks & Fees].
• Data protection. DIFC has its own Data Protection Law, with registration and an annual fee where applicable — see data protection.
• Employment obligations. DIFC has its own Employment Law, including the DEWS workplace savings scheme in place of end-of-service gratuity. See employment law and DEWS.
• Visa renewals. Residence visas and establishment cards run on their own cycles and need managing alongside the licence.

None of this is onerous for a well-run business, but it is real work with real cost. Firms that treat DIFC as “incorporate and forget” are the ones that end up with penalties, a lapsed licence or a bank relationship under review.

The mistakes we see most

• Choosing a holding vehicle then trying to trade with it. An SPV cannot carry on commercial activity or employ anyone[DIFC — SPVs / Prescribed Companies]. Discovering this after incorporation means starting again.
• Misclassifying a regulated activity. Assuming you do not need the DFSA when you do is the most expensive error available in this jurisdiction.
• Under-sizing the office. Your visa quota follows your space. Taking a flexi-desk then hiring five people forces an early, disruptive move.
• Treating “0% tax” as automatic. It depends on conditions and on your income qualifying — and registration and filing obligations still apply.
• Leaving banking to the end without preparing. Unclear source of funds and complex offshore ownership are the main causes of delay and refusal.

When DIFC is the wrong choice

We would rather tell you this now than after you have paid for it.

• You need to sell directly into the UAE domestic market. A DIFC entity operates within the free zone; reaching onshore customers means a distributor or a mainland branch. See DIFC vs mainland.
• You are running a cost-sensitive general trading business. A general free zone will almost certainly be cheaper — see DIFC vs other free zones and DIFC vs DMCC.
• You need nothing that DIFC uniquely offers. If common law, independent courts, financial regulation and international credibility are not relevant to your business, you are paying a premium for reputation you will not use.

For the balanced view, read is DIFC worth it?