DIFC Company Setup: Licences, Process, Timelines and Requirements (2026 Guide)

Setting up a company in the DIFC is not one process but several, and the single most expensive mistake we see is people preparing for the wrong one. A holding company and a fund manager both end up with a DIFC licence, yet one journey takes two weeks and the other can take the better part of a year. This guide maps the whole territory: which path you are on, every licence and legal structure available, the process step by step, the documents, the realistic timelines, and what life looks like after incorporation.

What Is the DIFC?

The Dubai International Financial Centre is a financial free zone established in 2004 in the heart of Dubai, operating under its own civil and commercial legal system based on English common law. It has its own courts, its own companies legislation and its own independent financial regulator, the Dubai Financial Services Authority (DFSA). The Centre is home to several thousand registered firms spanning banking, asset management, professional services, technology and family wealth structures, making it the leading financial hub in the Middle East, Africa and South Asia region. For international founders and institutions, the attraction is a familiar legal environment inside one of the world's most connected cities.

Regulated or Non-Regulated: Which Path Are You On?

Before licence types, legal structures or document checklists, answer this question, because it determines everything else: the timeline, the capital, the paperwork and the people you will need. Three questions settle it.

First: will your business conduct financial services in or from the DIFC? Managing assets, advising on investments, arranging deals, dealing in investments, accepting deposits, providing credit, insurance, custody, money services. If yes, you are on the regulated path.

Second: are you certain? The perimeter is defined by the DIFC Regulatory Law and the DFSA rulebook, and it does not always sit where instinct puts it. Building software for banks is not a financial service; introducing clients to an asset manager for a fee can be. If your activity is anywhere near the line, get the classification resolved in writing before you commit to a structure. Over-classifying buys you regulation you do not need; under-classifying buys you enforcement risk.

Third: if you are not conducting financial services, what are you? A professional services firm, a regional headquarters, a technology venture, a holding structure or a family vehicle. All of these follow the non-regulated path through the DIFC Registrar of Companies: no DFSA authorisation, no regulatory business plan, no approved individuals. It is the difference between a filing exercise measured in weeks and an authorisation process measured in months.

Everything that follows is organised around this fork. Keep your answer in mind as you read.

DIFC Licence Types

Financial services licences are issued by the DFSA and organised into prudential categories according to activity and risk. The table below shows the categories most applicants encounter, with base capital as set by the DFSA rulebook and indicative end-to-end timelines from our own files.

Expected regulatory capital is frequently set above these base figures once the DFSA assesses the business, particularly where expenditure-based requirements bite. Our DIFC fund manager licence guide covers the Category 3C route, including the venture capital manager reliefs, in much more depth.

Non-financial commercial licence. The workhorse of the non-regulated family: consultancies, law and accounting practices, marketing agencies, recruitment firms, regional corporate offices, technology companies and standard holding entities. Issued by the Registrar with no DFSA involvement.

Innovation Licence. A subsidised commercial licence for technology and innovation ventures, paired with flexible co-working options in the DIFC Innovation Hub. It suits start-ups, fintech builders not yet conducting regulated activities, and AI and platform businesses that want a DIFC address without a full office commitment.

Venture studio licence. A framework for venture builders operating multiple early-stage projects under one umbrella, formalising a model that previously required a separate entity per venture.

Prescribed Companies and SPVs. Passive holding vehicles for assets, shares and investments, with reduced requirements and the fastest incorporation in the Centre. Our prescribed company handbook covers eligibility and uses in detail.

Foundations. Ownerless entities for succession planning, wealth protection and philanthropy, governed by a charter and by-laws rather than shareholders.

Legal Structures in DIFC

The licence tells you what you may do; the legal structure determines what you are. The DIFC Companies Law and related legislation offer a full menu.

Company Limited by Shares (Ltd). The default and by far the most common choice. Best for operating businesses, regulated firms and any venture that may take investment, since share classes and transfers work the way international investors expect.

Limited Liability Company (LLC). Membership interests rather than shares. Best for closely held joint ventures and professional firms that want partnership-style economics inside a corporate wrapper.

Limited Liability Partnership (LLP). Best for professional services partnerships (law, accountancy, consultancy) where partners want flow-through governance with limited liability.

Limited Partnership (LP) with a General Partner (GP). Best for investment funds and private capital structures, where the GP manages and limited partners invest passively.

Branch (Recognised Company). Not a separate legal person but a registered presence of an existing foreign or UAE entity. Best for established groups that want a DIFC operating presence without a new subsidiary, including foreign regulated firms extending into the Centre.

Representative Office. A narrow, DFSA-licensed marketing presence for foreign financial institutions. Best for banks and managers testing the region before committing to a full licence.

Continued (redomiciled) company. The DIFC permits inbound continuation, so an existing company from a jurisdiction that allows outbound redomiciliation can migrate into the DIFC preserving its legal personality, history and contracts. Best for offshore holding companies (BVI, Cayman and similar) relocating to a substance-friendly jurisdiction.

The Setup Process Step by Step

The two paths diverge here, so we set them out separately.

Non-regulated setup: five steps

1. Structure and name. Confirm the activity fits the non-regulated perimeter, choose the legal form, reserve the name and prepare the incorporation pack, including the standard or bespoke articles.
2. Apply to the DIFC. Submit the application through the DIFC portal with KYC on all shareholders, directors and ultimate beneficial owners. The Registrar reviews and reverts with any queries.
3. Secure the registered address. Sign for a co-working desk, Innovation Hub membership or office lease, which is a precondition to licence issuance for operating entities.
4. Receive licence and incorporate. The Registrar issues the certificate of incorporation and commercial licence, usually together.
5. Activate operations. Apply for the establishment card, sponsor visas, register for corporate tax and open the bank account. In practice this final step takes longer than the four before it combined.

The steps are sequential on paper but not in practice. We start the bank account conversation and any document attestation at step one, because both run on their own clocks and neither cares about your launch date. Handled in parallel, a clean non-regulated setup lands comfortably inside the ranges given later in this guide.

DFSA-regulated setup: eight steps

1. Business plan and structuring. Define the regulated activities, the category, the legal structure, the capital model and the key individuals. Weak foundations here surface as expensive DFSA queries later.
2. DFSA introductory meeting. Present the proposition to the regulator before filing. This meeting is not a formality: it calibrates expectations on both sides and often reshapes the application.
3. Submit the application. File the regulatory business plan, financial projections, compliance and AML frameworks, and the forms for each authorised individual (Senior Executive Officer, Finance Officer, Compliance Officer, MLRO).
4. Review and in-principle approval. The DFSA reviews, raises rounds of questions and, once satisfied, issues an in-principle approval letter setting out the conditions to be met before authorisation.
5. Incorporate with the Registrar. With the in-principle letter in hand, incorporate the legal entity through the DIFC Registrar of Companies.
6. Deposit capital and open the account. Open the corporate bank account and inject the required regulatory capital, evidencing it to the DFSA.
7. Take the office lease. Sign the lease and demonstrate the operational infrastructure described in the application, including systems and staff arrangements.
8. Licence issuance. The DFSA confirms the conditions are satisfied and issues the Financial Services Permission. Only now may the firm conduct regulated business.

Documents You Will Need

Individual shareholders and directors:

• Passport copy for every shareholder, director and authorised signatory
• Proof of residential address, typically a utility bill or bank statement no more than three months old
• CV for directors and, on the regulated path, for every authorised individual
• UAE entry stamp or visa copy where already in the country

Corporate shareholders:

• Certificate of incorporation and current commercial licence or equivalent
• Constitutional documents (memorandum and articles or equivalent)
• Register of directors and register of members
• Board resolution approving the DIFC establishment and appointing signatories
• Ownership structure chart tracing through to the ultimate beneficial owners

One quirk worth planning for: corporate documents from many jurisdictions must be notarised and then attested by the UAE embassy in the country of origin before the DIFC or the banks will accept them. Attestation routinely takes two to four weeks and sits on the critical path more often than any other single item, so start it on day one.

Additional for regulated applicants:

• Regulatory Business Plan describing activities, clients, products and risk appetite
• Three-year financial projections with capital adequacy calculations
• Compliance manual, AML/CTF policies and risk framework
• Details and KYC for every controller holding more than 5% of the firm

Realistic Timelines by Entity Type

Published timelines describe the happy path. The table below reflects what we actually see end to end, from engagement to an operating entity.

What actually drives delays is rarely the DIFC itself. On the regulated path, it is the rhythm of DFSA review rounds: each set of regulator questions and each revision of the business plan adds weeks, and applications with unresolved structural questions attract more rounds. On every path, embassy attestation of corporate documents and bank KYC are the two workstreams most likely to stretch. A well-prepared application with clean documents, a settled structure and named individuals moves through at the fast end of every range above; an application assembled reactively does not.

Office Requirements and Visa Quotas

Every DIFC entity needs a registered address in the Centre, and the choice of premises drives visa capacity.

Co-working and the Innovation Hub. Innovation Licence holders and lean teams typically start with a flexi desk or dedicated desk in the DIFC Innovation Hub or a licensed business centre. A flexi desk arrangement generally supports around two employment visas, which is enough for a founder team but not a scaling one.

Fitted and shell-and-core offices. Growing firms lease conventional space in the DIFC's commercial buildings. Visa quota is linked to floor area at roughly one visa per nine square metres, so a 90 square metre office supports around ten visas. Regulated firms are expected to have premises consistent with the scale described in their DFSA application.

Once the lease is signed, the entity applies for its establishment card with the DIFC Government Services Office, which is the gateway to sponsoring employment visas. Budget two to three weeks for the card and the first visa cycle, and note that directors and shareholders can be sponsored as well as employees.

Choose premises for the team you will have in twelve months, not the team you have today. Moving from a flexi desk to a fitted office mid-year means amending the lease, the establishment card and the visa quota in sequence, and the administrative drag is out of all proportion to the space involved. Holding vehicles are the exception: a Prescribed Company can use the registered address of a qualifying provider and needs no premises or visas at all.

Opening a Corporate Bank Account

Banking deserves more attention than it usually gets in setup planning, because it is the workstream most likely to embarrass a timeline.

UAE banks apply full KYC to DIFC entities: certificate of incorporation, licence, constitutional documents, an ownership chart to the ultimate beneficial owners, passports and proof of address for signatories and major shareholders, and a credible description of expected activity, counterparties and flows. Banks want to understand where money will come from and where it will go, and vague answers generate long silences. Entities with layered international ownership should expect enhanced due diligence and prepare the chart and supporting documents before the first meeting, not after the first query.

In practice, account opening takes five to ten weeks from a complete application. Holding structures and newly formed entities with no trading history sit at the longer end; operating businesses with clear counterparties move faster.

For regulated firms, banking is a formal step in the authorisation sequence: regulatory capital must be deposited and evidenced to the DFSA before the licence is issued, so the account cannot be left to the end. Banks also apply additional questioning to regulated applicants (client money arrangements, the source of the capital injection, the in-principle letter itself), which is why we open the banking conversation as soon as in-principle approval looks likely rather than after it lands. Our UAE corporate banking guide covers bank selection and preparation in detail.

Tax and Ongoing Compliance

Corporate tax. UAE corporate tax applies at 9%, but DIFC entities qualifying as a Qualifying Free Zone Person (QFZP) pay 0% on their qualifying income. The conditions matter and are frequently misunderstood. Broadly, the entity must maintain adequate substance in the free zone, earn qualifying income (which includes most transactions with other free zone persons and specified activities such as holding shares and securities, fund management and treasury services, but excludes income from certain excluded activities), comply with transfer pricing rules, and keep non-qualifying revenue within the de minimis threshold of 5% of total revenue or AED 5 million, whichever is lower. Breach the conditions and the entity loses QFZP status for the year and a further four years. Every DIFC entity registers for corporate tax with the Federal Tax Authority regardless of whether it expects to pay at 0%. Our guide to Qualifying Free Zone Person status in the DIFC works through the conditions with examples.

VAT. Registration is required once taxable supplies exceed the mandatory threshold; many DIFC service businesses with UAE customers register early. QFZP status has no bearing on VAT, a point that surprises founders every year: a company paying 0% corporate tax on qualifying income can still be fully within the VAT net for its UAE supplies.

Annual obligations. Most active DIFC entities file audited financial statements annually, renew the licence, maintain registers and confirm beneficial ownership under the UBO regime. Entities conducting relevant activities also assess their position under the economic substance framework, although UAE corporate tax has absorbed much of its practical weight.

DFSA ongoing obligations. Regulated firms live with continuing supervision: periodic prudential returns, capital adequacy maintenance, annual compliance and AML reporting, and prompt notification of material changes. Every authorised firm must maintain its mandatory appointments, including a Senior Executive Officer resident in the UAE, a Compliance Officer and a Money Laundering Reporting Officer, with smaller firms often outsourcing the compliance function to approved providers.

Why Work with a DIFC Specialist

The DIFC publishes its rules, and a determined founder can navigate them alone. The value of a specialist is not access but judgement: knowing which structure survives contact with the corporate tax rules, what the DFSA will actually ask in the introductory meeting, which documents to attest before they are requested, and how to sequence banking so capital lands when the regulator expects it. Atlas Corporate Services is based in the DIFC and works on these setups daily, from two-week Prescribed Companies to multi-month DFSA authorisations, alongside the comparison work that often precedes them; our DIFC vs ADGM analysis and fund setup guides exist because clients ask those questions first. If you are weighing a DIFC company setup, a short structuring conversation before anything is filed is the cheapest insurance available.