Updated August 2026. The United Arab Emirates has firmly established itself as the Middle East and North Africa’s foremost cloud computing and data center destination. Driven by sovereign infrastructure mandates, a robust federal regulatory framework, and more than AED 15 billion in annual cloud spending, the UAE now hosts hyperscale regions from every major global cloud operator. Whether you are establishing a Tier III data center, launching a SaaS platform targeting UAE government clients, or co-locating servers in Abu Dhabi’s sovereign cloud ecosystem, this guide explains the exact licensing pathway, applicable authorities, costs, and compliance obligations for 2026.
- TDRA (Telecommunications and Digital Government Regulatory Authority) is the federal licensing authority for data center operators and cloud service providers.
- Khazna Data Centers is mandated for all UAE federal government cloud workloads from 2025, backed by Mubadala and ADQ.
- G42 (Group 42) is Abu Dhabi’s approved hyperscale cloud provider; Microsoft invested USD 1.5 billion in G42 in 2024.
- DEWA Digital (D-CLOUD) serves Dubai Smart City data workloads from its Al Quoz Energy Park campus.
- Dubai Internet City (DIC) free zone license costs AED 20,000–40,000/year; houses AWS, Azure, Google Cloud, and Oracle Cloud UAE offices.
- UAE PDPL (Federal Decree-Law 45/2021) imposes data localization obligations on cloud providers processing UAE residents’ health, financial, and government data.
- Capital required: AED 2 million to AED 50 million+ to build or operate a meaningful UAE data center or cloud service.
TDRA: The Federal Licensing Authority for UAE Cloud and Data Center Operators
The Telecommunications and Digital Government Regulatory Authority (TDRA) operates under UAE Telecommunications Law — Federal Law No. 3 of 2003, as amended — and is the supreme regulatory body for cloud infrastructure, data center operations, and ICT service providers in the UAE. TDRA issues two principal license categories relevant to cloud and data center businesses:
- Type I License (International Data Gateway): Required for operators connecting UAE networks to international internet exchange points or managing international data transit. Applicable fees: AED 500,000 to AED 2 million in upfront gateway/spectrum charges, with annual regulatory fees. Processing timeline: 3–6 months including technical review by TDRA’s Spectrum Management division.
- Type II License (Local ISP / Data Services): For operators providing UAE-based data center colocation, managed hosting, cloud IaaS, or PaaS. Annual license fee: AED 50,000 to AED 250,000 depending on service scope and customer base. Processing timeline: 4–8 weeks for standard applications.
TDRA also administers the UAE Information Assurance Framework (UAE-IAF), which mandates ISO 27001 certification combined with UAE-specific security controls — including data sovereignty standards, UAE-local key management, and incident response protocols — for any cloud provider serving UAE government entities. A cloud provider without UAE-IAF certification is structurally ineligible for any federal or emirate government ICT contract regardless of commercial terms. UAE-IAF audit costs range from AED 50,000 to AED 150,000 through a TDRA-approved certification body (Deloitte UAE, PwC UAE, and BSI UAE are the principal approved assessors as of 2026). Annual certification renewal costs AED 25,000 to AED 75,000.
For foreign cloud operators establishing a UAE legal entity, TDRA registration must be paired with either a free zone license or a mainland DED license. The standard structure for an international cloud provider entering UAE is: Dubai Internet City free zone license (AED 20,000–40,000/year) + TDRA Type II registration + UAE-IAF certification for government-facing services.
Khazna Data Centers: UAE Sovereign Cloud Infrastructure
Khazna Data Centers is the UAE’s largest sovereign cloud provider, majority-owned by Mubadala Investment Company and ADQ (Abu Dhabi Developmental Holding Company). Established in 2021 and headquartered in Abu Dhabi, Khazna operates Tier III and Tier IV certified data centers across Abu Dhabi (AD-1 and AD-2 campuses in Al Ain, with a combined capacity of 48MW) and a Dubai colocation facility in Dubai Industrial City.
Since 2025, UAE Cabinet Resolution mandates that all UAE federal government cloud workloads that cannot be justified for offshore hosting must migrate to Khazna Cloud — Khazna’s IaaS and PaaS platform — or to a TDRA-certified sovereign-equivalent provider. Federal ministries procuring cloud services from any provider other than Khazna for sensitive or classified data must first obtain TDRA approval and a TDRA-IAF compliance waiver. This mandate has generated AED 800 million or more in committed government cloud contracts for Khazna through 2028.
For private-sector cloud operators seeking UAE colocation: Khazna’s commercial pricing begins at AED 18,000 per full rack unit (42U) per month at its Abu Dhabi campus, with power density options reaching 30 kW per rack. Khazna connects directly to UAE Internet Exchange (UAE IX) for low-latency peering. Khazna Cloud IaaS compute for government-grade isolated tenancy starts at AED 500 per virtual CPU per month. These prices make Khazna competitive with Equinix ME1 Dubai for high-security workloads.
G42 and the Abu Dhabi Government Cloud Ecosystem
Group 42 (G42), backed by H.E. Sheikh Tahnoon bin Zayed Al Nahyan and with assets under management exceeding USD 30 billion across technology and AI infrastructure, is Abu Dhabi’s flagship AI and cloud infrastructure conglomerate. The Abu Dhabi General Secretariat of the Executive Council (Abu Dhabi GSEC) has approved G42 as the preferred hyperscale cloud partner for Abu Dhabi government entities, working alongside Khazna for federal classification-level workloads.
In April 2024, Microsoft Corporation announced a USD 1.5 billion strategic investment in G42 — equivalent to approximately AED 5.5 billion — covering Azure cloud capacity expansion into Abu Dhabi, AI model deployment on G42’s sovereign infrastructure, and joint government cloud offerings. This partnership enables Abu Dhabi government entities to consume Microsoft Azure services through G42’s UAE-sovereign hosting environment, satisfying both UAE PDPL data localization requirements and Abu Dhabi GSEC compliance mandates simultaneously.
G42 deployed the Cerebras CS-2 AI supercomputer in Abu Dhabi — the first CS-2 installation in the MENA region — enabling high-performance compute for large language model training and scientific AI workloads. G42’s OpenAI partnership (announced 2023) facilitates UAE-hosted access to GPT-4 and GPT-4o APIs for enterprises that must retain UAE data residency — a critical requirement for UAE financial institutions under CBUAE cloud rules and UAE healthcare providers under MOHAP data classification standards.
For cloud companies seeking integration with UAE government AI procurement, a formal G42 partnership agreement typically requires a minimum AED 2 million annual commitment for enterprise-scale engagements. G42’s Cloud Partner Programme offers tiered partnership for resellers and managed service providers.
DEWA Digital: Dubai’s Smart City Cloud Platform
Dubai Electricity and Water Authority (DEWA) established DEWA Digital as its cloud computing and data services subsidiary, co-located at the Mohammed bin Rashid Al Maktoum Solar Park and its Al Quoz Energy Park campus in Dubai. DEWA D-CLOUD delivers Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) targeting Dubai Government entities and smart city platform operators, certified to Dubai Government data classification standards governed by the Dubai Digital Authority (DDA).
DEWA’s solar-powered data center facilities achieve a Power Usage Effectiveness (PUE) ratio of approximately 1.35 — among the lowest in the MENA region — making DEWA Digital a compelling choice for sustainability-committed cloud tenants. D-CLOUD IaaS compute pricing starts at AED 350 per vCPU per month for standard tenancy, with reserved capacity discounts available for multi-year commitments.
For companies targeting Dubai Smart City contracts — spanning smart transportation, smart buildings, environmental AI, and municipal data platforms — DDA vendor registration approval combined with a D-CLOUD hosting agreement materially improves tender scoring. DDA vendor registration is free but requires ISO 27001 certification plus a valid UAE commercial license with an ICT or cloud computing trade license activity.
Dubai Internet City and Free Zone Options for Cloud Companies
Dubai Internet City (DIC) — managed by TECOM Group and fully owned by Dubai Holding — is the preferred free zone for cloud platform companies, SaaS providers, and international cloud operators establishing UAE regional headquarters. DIC hosts the Middle East regional offices of AWS (Amazon Web Services — launched UAE Region 2022), Microsoft Azure (UAE North and UAE Central — launched 2019), Google Cloud Platform (UAE Region — launched 2022), and Oracle Cloud Infrastructure (UAE East — launched 2022).
DIC free zone license costs AED 20,000 to AED 40,000 per year depending on office type (flexi-desk, shared office, or dedicated office) and visa allocation (typically 1–3 visas for the base license package). DIC licenses offer 100% foreign ownership, zero corporate income tax for the initial 50-year license period (renewable), zero currency restrictions, and full profit repatriation rights. Cloud companies in DIC can directly interconnect to UAE IX, Equinix ME1, and Etisalat’s national data center backbone.
Additional free zones suitable for cloud and data center companies in 2026:
- twofour54 (Abu Dhabi Media Zone Authority): License AED 15,000–25,000/year; located adjacent to Masdar City with renewable energy access; strong IP protection framework for SaaS and cloud software products.
- Masdar City Free Zone: License AED 12,000–25,000/year; 100% renewable energy-powered campus; access to low-PUE colocation facilities; well-suited for green cloud operators and sustainability-certified workloads.
- ADGM (Abu Dhabi Global Market): English common law jurisdiction on Al Maryah Island; license AED 25,000–50,000/year; preferred structure for cloud holding companies, data center investment vehicles, and entities seeking DIFC/ADGM cross-border regulatory recognition.
UAE National Data Center Strategy and Sovereign Cloud Roadmap to 2030
The UAE National Data Center Strategy, overseen by TDRA and the UAE Ministry of Cabinet Affairs and the Future, targets consolidation of all UAE federal government data into sovereign UAE-hosted data centers — principally Khazna, G42, and DEWA Digital — by 2030. The Strategy defines a three-tier classification system: (1) Unclassified data that may reside on internationally operated UAE-region cloud infrastructure (Azure UAE, AWS UAE, Google Cloud UAE); (2) Confidential data that must reside on UAE-IAF-certified sovereign cloud (Khazna, G42); and (3) Secret/Top-Secret data that must reside on air-gapped UAE government-operated data centers with no external cloud connectivity.
For private-sector cloud companies serving UAE government: the practical implication is that technology stacks must support data classification tagging and selective workload placement across these three tiers. Cloud providers offering a verifiable “data residency guarantee” — typically backed by an SLA with contractual UAE data center commitments and TDRA oversight — command a 20–35% price premium over undifferentiated cloud services in government tenders.
UAE PDPL (Data Protection Law) Compliance for Cloud Providers
Federal Decree-Law No. 45 of 2021 — the UAE Personal Data Protection Law (PDPL) — enforced by TDRA’s Data Protection Division, imposes obligations on all cloud providers processing UAE residents’ personal data. Key PDPL requirements for cloud operators include data localization mandates (health data under MOHAP, financial data under CBUAE, and government-classified data must be stored in UAE-hosted infrastructure), mandatory Data Processing Agreements (DPAs) with all UAE enterprise customers (legal review cost: AED 5,000–15,000 per DPA through a UAE-qualified law firm), and cross-border data transfer restrictions (transfers to non-whitelisted jurisdictions require TDRA approval or an adequacy decision). UAE has active data transfer framework negotiations with the EU as of mid-2026.
Breach notification under PDPL requires cloud providers to notify TDRA within 72 hours of a confirmed personal data breach affecting UAE residents. Failure to notify on time: administrative fine up to AED 5 million. Intentional breach or failure to implement required safeguards: fine up to AED 20 million and potential criminal referral for senior executives.
UAE Cloud Company Setup: Cost Comparison by License Type and Zone
| License Type / Zone | Annual Cost (AED) | Best Use Case | TDRA Required |
|---|---|---|---|
| Dubai Internet City (DIC) | AED 20,000–40,000 | SaaS, cloud resellers, international cloud HQ | Yes (Type II for hosting) |
| Masdar City Free Zone | AED 12,000–25,000 | Green cloud, sustainability-certified operators | Yes (Type II) |
| twofour54 (Abu Dhabi) | AED 15,000–25,000 | Media cloud, IP-heavy SaaS products | Yes (Type II) |
| ADGM (Abu Dhabi) | AED 25,000–50,000 | Cloud holding companies, data center investment | Optional |
| DED Mainland (Dubai/AD) | AED 15,000–30,000 | Local managed cloud, government ICT contracts | Yes (Type II) |
| KIZAD (Abu Dhabi) Industrial | AED 10,000–30,000 + land lease (AED 30–100/sqm/yr) | Physical data center builds, hyperscale campuses | Yes (Type I or II) |
Frequently Asked Questions
Does a cloud SaaS company in UAE need a TDRA license?
A SaaS company that delivers software over the internet without operating UAE-based network infrastructure — servers, colocation, or international gateways — does not require a TDRA Type I or Type II license. However, if the SaaS company self-hosts on UAE-based servers or provides any form of colocation or managed hosting services, a TDRA Type II data services registration becomes mandatory. Additionally, all SaaS companies targeting UAE government clients must complete UAE-IAF certification regardless of their TDRA registration status — this is a procurement prerequisite enforced by all UAE federal and emirate government tender processes.
What is the UAE-IAF and why does it matter for cloud providers?
The UAE Information Assurance Framework (UAE-IAF) is a mandatory security certification issued by TDRA for cloud and ICT providers seeking UAE government contracts. Based on ISO 27001 with additional UAE-specific controls covering data sovereignty, UAE-local encryption key management, and mandatory incident reporting to TDRA, it functions as the UAE government’s supplier qualification gate for cloud services. A cloud provider without UAE-IAF certification is structurally ineligible for any UAE government procurement regardless of price or technical capability. The certification process costs AED 50,000–150,000 for an initial full assessment and requires 3–9 months end-to-end including gap remediation.
Can a foreign investor set up a 100% foreign-owned cloud company in UAE?
Yes. Since the UAE Companies Law reform under Federal Decree-Law No. 32 of 2021, 100% foreign ownership is permitted for mainland UAE companies across most technology activities including cloud computing, data center services, and software development — without requiring a UAE national partner or service agent. Free zone entities (DIC, ADGM, twofour54, Masdar City) have always offered 100% foreign ownership. A TDRA Type II license can be held by a 100% foreign-owned UAE mainland or free zone entity without restriction.
What is Khazna Data Centers and is using it mandatory for private companies?
Khazna Data Centers is the UAE sovereign cloud provider backed by Mubadala and ADQ, operating Tier III and Tier IV data centers in Abu Dhabi and Dubai. Since 2025, UAE Cabinet Resolution requires all federal government entities to use Khazna (or a TDRA-certified equivalent) for sensitive and classified cloud workloads. This mandate applies to government agencies — not to private sector companies. Private sector businesses may freely use AWS UAE, Azure UAE, Google Cloud UAE, G42, DEWA Digital, or any other certified provider. However, private companies holding UAE government contracts may be contractually required to host government data on Khazna or an equivalently certified sovereign platform per the terms of those government contracts.
How much capital is required to start a cloud company in the UAE in 2026?
A cloud SaaS startup with a Dubai Internet City license, 5 staff, and a virtual or flexi-desk office requires approximately AED 500,000 to AED 1.5 million for Year 1, covering the license (AED 20,000–40,000), visa and establishment card costs (AED 5,000–10,000 per person), office rent (AED 50,000–200,000/year), staff salaries, and working capital. A colocation or managed cloud operator leasing rack space in an existing UAE data center needs AED 2 million to AED 10 million. Building and owning a Tier III data center facility in Abu Dhabi or Dubai requires AED 50 million to AED 500 million+ depending on capacity, with hyperscale campuses exceeding AED 2 billion in total investment.