Comply

What do we owe, and to whom?

Compliance is proof, not paperwork. Meet the rules of regulators, customers and auditors, and know where your suppliers stand.

ServiceThe question it answers

Comply

Which rules apply to us?

Regulatory Compliance

Work out which laws and standards apply to you, and build the controls they require.

Who it is for

Organizations entering a new market, facing a new rule or answering to a regulator or customer for the first time.

What you get

A list of the rules that apply, with the source for each, including UAE sector rules such as the Central Bank, DFSA, ADGM FSRA, ADHICS, DHA and DESC where they reach you
Gaps between the rules and your controls
A plan to close them in a sensible order
Evidence you can show

How we start

We agree your business, markets and data, then map the rules that apply. Your counsel confirms the legal reading.

Not included

Legal advice. We work with your counsel and do not replace them.

Often paired with

Comply

Are we handling personal data lawfully?

Meet the UAE Personal Data Protection Law and the free-zone data regimes, from records of processing to impact assessments and breach routes.

Who it is for

Organizations that hold personal data of customers, patients, students, guests or staff, and need to show how they protect it.

What you get

A map of the personal data you hold, where it flows and who touches it
Which regime applies to each activity: the federal PDPL, ADGM, DIFC or a sector rule
Records of processing, impact assessments for high-risk activities and a breach routine
Security measures tested against the law’s requirement to protect personal data

How we start

We agree your entities, locations and data types, then map which regime applies to each. Your counsel confirms the legal reading.

Not included

Legal advice or the role of data protection officer. We work with your counsel.

Often paired with

Regulatory Compliance Data Security Breach Response