UAE · DIFC · ADGM

Audit ready by design

Meet UAE regulatory expectations with confidence. A compliance infrastructure designed to be inspection-ready - built into your systems, data, and workflows from day one.

Why UAE firms choose us
Scalable compliance
A platform that adapts as regulatory expectations accelerate.
Unified journeys
Onboarding and screening through a single orchestration layer.
Regulator ready
ISO and DIATF certified data integrity and audit-ready reporting.

Three regulators. One platform.

The UAE's compliance framework is governed by multiple authorities, each with distinct AML rulebooks and enforcement approaches. Our platform maps to all of them.

CBUAE

Central Bank of the UAE

Mainland banks, exchange houses, insurers, payment service providers

Core framework Federal Decree-Law No. 10 of 2025
CDD approach Risk-based with mandatory STR filing via goAML
Enforcement AED 339M+ in fines issued (2025)

DFSA

Dubai Financial Services Authority

DIFC-regulated firms including financial services, wealth managers, and VASPs

AML rulebook DIFC AML, CTF & Sanctions Rulebook
CDD approach No transaction threshold - CDD on all clients
Focus areas Unannounced inspections on crypto and wealth firms

FSRA

ADGM Financial Services Regulatory Authority

ADGM-based financial services, fund managers, and digital asset firms

CDD model Three-tier: simplified, standard, and enhanced
Crypto focus Blockchain analytics expected for VASP compliance
EDD triggers High-risk jurisdictions, PEPs, complex structures

2026 FATF Mutual Evaluation

Following the UAE's removal from the FATF grey list in February 2024, the upcoming 2026 mutual evaluation is driving intensified enforcement. Regulators are shifting from policy development to active supervision - with unannounced inspections, record fines, and licence revocations across all sectors.

Core capabilities for audit-ready operations

Built for the specific compliance demands of DIFC, ADGM, and mainland UAE.

Open orchestration

Connect your preferred ID, AML, and data providers without lock-in.

Risk screening

Risk-based AML controls with clear, auditable decision logs.

Continuous monitoring

Automated screening and periodic compliance reviews.

UBO workflows

Capture and review structured ownership data across jurisdictions.

Six capabilities powering audit readiness

Workflow builder

Design compliant, no-code workflows with built-in governance, approvals, and oversight.

Screening engine

Automate AML, sanctions, and PEP checks across all client journeys.

Risk scoring

Apply dynamic, rule-based scoring across client types and risk profiles.

Jurisdiction logic

Deliver compliant questionnaires tailored to DIFC, ADGM, and mainland.

Audit reporting

Generate inspection-ready evidence with full activity logs and decision trails.

Integrations hub

Connect IDV, AML, PEPs and sanctions, adverse media, and internal systems.

Why UAE firms trust us

Audit trail
Permanent logs ready for inspection.
Cross-jurisdictional
Scale across DIFC, ADGM, and mainland.
Proven adoption
Used by UAE law firms and CSPs.
Global standards
ISO certified controls and governance.

What UAE regulators expect from you

Whether you're supervised by CBUAE, DFSA, or FSRA, these are the operational requirements your firm must meet to remain compliant and audit-ready.

01

Risk-based CDD

Classify customers and transactions by risk. Apply proportionate due diligence - simplified for low-risk, enhanced for PEPs, complex structures, and high-risk jurisdictions.

All regulators
02

UBO identification

Identify ultimate beneficial owners controlling 25%+ of any entity. The UAE keeps UBO data private (unlike UK PSC registers), making independent verification essential.

Federal law
03

Ongoing monitoring

Continuous screening against sanctions lists, PEP databases, and adverse media. Periodic reviews aligned to client risk profile and regulatory changes.

All regulators
04

STR filing via goAML

Suspicious transaction reports must be filed through the UAE FIU's goAML platform. Cash transactions above AED 55,000 require mandatory reporting for DNFBPs.

Federal law
05

Record retention

Maintain transaction records and client files for a minimum of five years. Full audit trails must be available for regulatory inspection at any time.

All regulators
06

Institutional risk assessment

Conduct and document a business-wide risk assessment. Map vulnerabilities across client types, jurisdictions, products, and delivery channels.

CBUAE best practice

How we address each requirement

Every regulatory obligation maps directly to a platform capability - no gaps, no workarounds.

Risk-based CDD
Jurisdiction logic engine delivers tiered questionnaires based on client type, risk profile, and regulatory zone (DIFC / ADGM / mainland).
UBO identification
Structured UBO capture workflows with ownership percentage tracking, nationality verification, and PEP screening at every level.
Ongoing monitoring
Continuous screening engine runs automated checks against global sanctions, PEP lists, and adverse media sources - with alert-driven review queues.
STR readiness
Full audit trail with timestamped evidence, decision logs, and exportable reports aligned to goAML narrative requirements.
Record retention
Immutable record storage with configurable retention policies. Every check, decision, and document permanently logged and searchable.
Risk assessment
Dynamic risk scoring with rule-based models that adapt to your client base, jurisdictional exposure, and product types.

Built for UAE compliance teams

Law firms & CSPs

Standardise client onboarding, CDD, and matter-level compliance for DIFC and ADGM practices.

Banks & financial services

Enterprise-grade KYC and AML with risk-tiered CDD, PEP screening, and ongoing portfolio monitoring.

Corporate service providers

Manage complex ownership structures, UBO verification, and regulatory filings across free zones and mainland.

Virtual asset providers

Travel rule compliance, wallet verification, and blockchain-aware KYC for VARA, FSRA, and SCA-licensed entities.

Real estate & DPMS

Cash transaction reporting, client verification, and AML compliance for designated non-financial businesses.

Auditors & accountants

Supplemental guidance compliance, risk indicator monitoring, and sectoral red flag detection.

Make audit readiness a competitive advantage

Book a demo tailored to UAE, DIFC, and ADGM compliance environments.