AI Automation
Agency, Dubai.
Dubai is the Middle East's leading technology and financial hub, home to the DIFC, DAFZA, and a government AI strategy targeting 25% of services automated by 2031. The UAE PDPL and DHA regulations govern AI deployments in healthcare and financial services — a compliance environment that rewards careful engineering.
The DIFC has a dedicated regulation for autonomous systems, plus a certification route and a sandbox. Very few jurisdictions do.
Regulation 10 of the DIFC Data Protection Law, introduced in late 2023, deals specifically with personal data processed by autonomous and semi-autonomous systems. It requires controllers to give data subjects additional information and recognises a right to object to processing in the context of profiling and automated decision-making. This is a named rule about the kind of system we build, not a general privacy law stretched to cover it.
The DIFC Commissioner of Data Protection administers it directly: publishing guidance, reviewing high-risk processing notifications, certifying AI systems, and running the Regulation 10 Accelerator sandbox. For a business inside the DIFC that is an advantage rather than a burden, because there is a defined route to demonstrating a system is compliant instead of an opinion letter.
Outside the DIFC, the federal position applies. The UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, requires full compliance by 1 January 2027, which makes 2026 the year to get data mapping, retention and impact assessments in order rather than the year to start.
Who you answer to here
- DIFC Commissioner of Data Protection
- Administers Regulation 10, certifies AI systems, runs the Accelerator sandbox
- UAE Federal PDPL
- Federal Decree-Law No. 45 of 2021; full compliance by 1 January 2027
- Dubai Health Authority
- Health data and clinical systems in the emirate
- CBUAE
- Financial services supervision
Sources
- 01DIFC Data Protection Law and Regulations, Dubai International Financial Centre
Six industries.
One engineering team.
Healthcare
Clinical admin, patient flow, and compliance automation.
UAE PDPL, DHA Health Data Law (Dubai), DOH regulations (Abu Dhabi), and SDAIA health AI guidelines (Saudi Arabia) apply to all patient data processing.
- Appointment scheduling and patient reminders
- Clinical documentation and records processing
- Referral routing and prior authorisation
Fintech
KYC, AML, reconciliation, and regulatory reporting.
CBUAE AI in Finance guidelines, DFSA Technology Risk rules (Dubai), ADGM Data Protection Regulations, and SAMA Cybersecurity Framework for financial sector AI.
- KYC/AML onboarding and ongoing monitoring
- Transaction reconciliation and exception handling
- Regulatory reporting and audit trail generation
Legal
Document review, client intake, and billing automation.
UAE Federal Decree-Law No. 45 of 2021 (PDPL), DIFC Law No. 5 of 2020, and ADGM Data Protection Regulations 2021 govern legal sector data processing.
- Contract review and clause extraction
- Client intake and matter management automation
- Billing, time capture, and accounts receivable
Manufacturing
Predictive maintenance, quality control, and supply chain.
UAE PDPL, ESMA quality and conformity requirements, SASO product safety standards (Saudi Arabia), and ISO 9001/45001.
- Predictive maintenance and asset health monitoring
- Quality control inspection and defect classification
- Supply chain and inventory optimisation
Education
Admissions, student support, and administrative automation.
UAE PDPL, KHDA regulations (Dubai), DOE guidelines (Abu Dhabi), and TVTC standards (Saudi Arabia) govern student data and automated decision-making.
- Admissions processing and applicant scoring
- Student support routing and early intervention alerts
- Administrative reporting and compliance documentation
E-commerce
Inventory, pricing, fulfilment, and customer service automation.
UAE PDPL, UAE Consumer Protection Law No. 15 of 2020, CBUAE payment regulations, and Saudi e-commerce law govern online retail AI.
- Inventory forecasting and replenishment automation
- Dynamic pricing and margin optimisation
- Customer service triage and returns processing
Brief, engineer, ship.
Brief
Tell us what you are trying to stop doing manually. One hour, no deck required.
Week 1Engineer
We map the process, confirm the compliance requirements, and build it to a fixed spec.
Weeks 2–8Ship
You go live with a compliant, auditable automation. We stay alongside for support and iteration.
Week 8+