Two myths shape almost every guide to starting a hosting or data center business in Dubai, and both send founders down the wrong path. The first is that you need a TDRA telecom licence. For a pure data center, colocation, cloud or managed-hosting business, you do not. TDRA licenses public telecom operators and regulated activities like spectrum, satellite and submarine cables. Hosting a server, renting rack space or reselling cloud is an ordinary ICT activity, licensed by DET or a free zone [1]. The second myth is that "cloud company" is one business. It is two radically different ones, and confusing them wrecks a budget.
The real distinction is asset-light versus asset-heavy. An asset-light hosting reseller, managed-services or SaaS firm needs little more than an ICT trade licence and an office, and can start for tens of thousands of dirhams. An asset-heavy facility operator, which owns the building, the megawatts of power and the cooling, is a real-estate-plus-power-plus-capital project running into the tens or hundreds of millions. Most new entrants do not build; they lease colocation and resell managed services. Knowing which one you are is the whole plan.
This guide covers the TDRA reality, the two business models, the data-residency rules that actually drive demand, ownership, and the two tax points that catch hosting firms, the VAT one is genuinely subtle. Since 2013, our team has set up technology and trading companies across the UAE, so the traps here come from real files. This is a guide, not legal or tax advice on your specific licence.
Do you need a TDRA licence to run a hosting company?
No, not for the hosting itself, and this is the single most misunderstood point. TDRA regulates telecommunications, the public networks and services run by operators like e& and du, plus regulated activities such as satellite services, spectrum use and landing submarine cables [1]. Renting servers, colocation, cloud and managed hosting are not regulated telecom activities. They are licensed as ordinary ICT or commercial activities through DET or a free zone.
Where TDRA can still touch a hosting business is narrower than guides imply, and it is worth being precise:
- .ae domain registration. If you act as a domain registrar for .ae domains, you need TDRA accreditation. Providers who advertise as "TDRA-accredited" usually mean this, not a telecom operating licence.
- Government or classified data. Handling sensitive government data can trigger extra approvals under the UAE's sovereign-cloud and data-classification policies.
- Providing public connectivity. If you go beyond hosting and start selling public telecom-style connectivity or IP transit as a carrier, you cross into TDRA territory and should take legal advice.
Common Mistake: Believing you must get a TDRA telecom licence to start a web hosting or data center company. You do not, and chasing one wastes time on an approval that does not apply to your model. If a source tells you hosting needs a telecom licence, treat the rest of its advice with caution.
Asset-light or asset-heavy: which business are you setting up?
Two very different projects hide behind "cloud company," and naming yours first avoids budgeting for the wrong one.
- Asset-light: reseller, managed hosting, SaaS or cloud consultancy. You resell or manage infrastructure you do not own, often white-label cPanel or WHM hosting or managed cloud on top of a hyperscaler. The requirement is essentially an ICT trade licence and an office. Capital is minimal, and this is the realistic path for the large majority of founders.
- Asset-heavy: data center or colocation facility operator. You own or operate the building, the power and the cooling. This triggers a heavy stack of approvals and enormous capital, and it is a real-estate and power project as much as a licensing one.
Many operators bridge the two: they lease colocation from an established facility and resell managed services on top, keeping the business asset-light while offering data-center-grade hosting. Decide your model before you sign anything, because the cost and approval paths barely overlap.
What does an actual data center facility require?
A serious approval stack and serious capital, which is why most people do not build one. If you genuinely operate a facility rather than reselling, plan for [5]:
- DEWA high-load power. Data centers are extreme power draws, needing a dedicated substation and a DEWA load approval, which is often the binding constraint and a long-lead item.
- Dubai Civil Defence. Fire-safety design approval and clean-agent, gas-based fire suppression for the server halls, because water is unsuitable around live equipment.
- Dubai Municipality. Building, structural and environmental approvals, including hazardous-material handling for generator fuel.
- Uptime Institute Tier certification. Tier III or IV is a commercial standard, not a government licence, but enterprise and government tenants effectively demand it, with Tier III requiring concurrently maintainable, N+1 redundant infrastructure.
Real Talk: The facility path is not a licence question; it is a capital project. Land, megawatts of power, cooling, redundancy and Tier certification run into the tens or hundreds of millions of dirhams, and the power connection alone can set your timeline. Unless you are funded for that, the sensible route is asset-light: lease colocation, resell managed hosting, and let someone else carry the concrete and the substation. Get your model scoped before you commit→
What actually drives demand: data residency
The real regulator behind this business is not telecom law, it is data-protection and data-residency law, and understanding it is your sales pitch. Demand for UAE hosting comes from rules that require certain data to physically stay in the country.
- The federal Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, in force since January 2022 and overseen by the UAE Data Office, is mainly a cross-border-transfer regime rather than a blanket "keep everything in the UAE" mandate. Note that its executive regulations were still pending as of early 2025, so do not assume full enforcement detail is settled [2].
- Sector residency rules are what force data in-country. Banking and payment data must be stored in the UAE under Central Bank rules, health data must stay in the UAE under the health-ICT law, and classified government data must sit on UAE-resident, approved infrastructure [3].
- Free-zone financial regimes are separate: DIFC has its own Data Protection Law No. 5 of 2020 and ADGM its Data Protection Regulations 2021, both aligned to global standards [4].
This is exactly why the hyperscalers localised, with Microsoft and G42, AWS and Oracle all building UAE regions. For your customers, the question is "where must my data live," and a UAE-resident hosting offering is the answer. Our free zone versus mainland guide covers the structure choices around it.
What licence and free zone should you use?
An ICT or hosting activity, and for asset-light firms, a tech free zone. On the mainland, DET licenses activities such as data center services, web hosting and cloud computing, mapping to the data-processing and hosting activity code. In the free zones, the natural homes for hosting and IT are the tech clusters: Dubai Internet City, the region's largest ICT hub, Dubai Silicon Oasis under the integrated economic zones authority, and Dubai South, which lists the cloud and data-hosting licence explicitly. All give 100% foreign ownership.
The split follows the model. Asset-light hosting, cloud and managed-services firms suit a tech free zone: licence, office and full ownership. A genuine facility developer needs land and high-load power, so the choice narrows to zones with tech-park land and power capacity, or a mainland and industrial-land arrangement. Confirm the exact activity name and code on the DET list, as naming varies.
Can a foreigner own a hosting company, and is it 100%?
Yes. 100% foreign ownership is available on the mainland for these ICT activities under Federal Decree-Law No. 32 of 2021, and by default in the free zones [7]. Hosting and cloud are not on the strategic-impact restricted list, so full ownership is the norm. You do not need an Emirati partner to own a hosting or data center company.
Is hosting subject to VAT, and can you zero-rate foreign clients?
Yes to VAT at 5%, but zero-rating foreign clients has a real trap, and this is the tax point most guides get wrong. Hosting and cloud services to UAE customers are standard-rated at 5%. Services to a client genuinely outside the country can be zero-rated as an export of services, except for the electronic-services rule [6].
Here is the catch: cloud and hosting are electronic services with special place-of-supply rules. A VAT amendment effective 15 November 2024 blocks zero-rating for electronic services used or enjoyed inside the UAE, even when the customer is non-resident [6]. So "just zero-rate everything for foreign clients" is wrong for hosting. If the service is consumed in the UAE, it is 5% regardless of where the client sits. Our VAT registration and compliance guide covers the mechanics.
Does a hosting company get the free-zone 0% corporate tax rate?
No. IT, cloud, web hosting and data-center services are not Qualifying Activities under Ministerial Decision No. 229 of 2025, so a free-zone hosting company's income is taxed at the standard 9%, not 0%, even inside a tech free zone [7]. There is a theory that a data-center-as-infrastructure operator might qualify some other way, but there is no clear basis for it in the rules, so the safe reading is 9%, and any qualifying angle should be tested with a tax adviser rather than assumed.
For everyone the standard regime applies: 0% on the first AED 375,000 of profit and 9% above, with Small Business Relief while revenue stays at or below AED 3 million, for periods up to the end of December 2026. Our corporate tax filing guide covers the conditions.
What does it cost, and is it worth it?
Cost depends entirely on which business you are building. Here is a realistic 2026 picture in AED.
| Model | Typical first-year all-in (AED) |
|---|---|
| Asset-light reseller, SaaS or managed hosting (licence, flexi-desk, 1 to 2 visas) | 15,000 to 30,000 |
| Managed hosting with a small office and team | 40,000 to 100,000+ |
| Physical data center or colocation facility | Tens to hundreds of millions |
The market case is exceptional. The UAE cloud market is on a steep multi-year growth curve, the colocation market is growing at over 25% a year, and AI-driven demand has brought enormous investment, from the Stargate UAE complex to Microsoft's multi-billion-dollar commitment with G42 and du's hyperscale pact with Microsoft [8]. For an asset-light reseller, break-even can come at just a handful of clients, with recurring white-label hosting margins that are healthy when priced well. The winners compete on data-residency, reliability and managed-service depth, and the smart entry is asset-light, resell and grow, not build a facility on day one.
Real Client Stories
The founder chasing a licence that did not apply. A client spent weeks trying to obtain a "TDRA hosting licence" his research insisted he needed. Hosting is not a regulated telecom activity, so no such licence applied to his managed-hosting business. We set him up on an ICT free-zone licence and he launched in a fraction of the time. The myth had cost him a month.
The reseller who nearly built a data center. A client planned to build a small facility to offer hosting, on the assumption that hosting means owning servers in a room. We showed him the asset-light path: lease colocation from an established data center and resell managed services. He reached the same offering for a tiny fraction of the capital. Building was never the requirement.
The zero-rated invoices that were not. A client billed overseas clients at 0% for cloud hosting, assuming export zero-rating. Because the services were electronic and used in the UAE, the 15 November 2024 rule made them standard-rated at 5%. Correcting it avoided an exposure on his returns. For e-services, where the service is enjoyed, not just where the client sits, decides the rate.
Set up your Dubai hosting or data center company the right way
Hosting rewards operators who pick the right model and understand that data residency, not telecom law, is the driver, and it frustrates those who chase the wrong licence or over-build. Since 2013, BusinessDubai.ae has completed 700+ company registrations across the UAE, including technology companies. We will help you choose asset-light or facility and the right structure, license the correct ICT or hosting activity in a tech free zone or on the mainland, plan for data-residency positioning and any government-data approvals, and get the VAT and corporate tax treatment right, all with clear itemised pricing. Talk to a setup expert→ for a plan built around your model. Our free zone versus mainland guide covers the structure choice, and post-setup services covers ongoing compliance and renewals.
Frequently Asked Questions
Do I need TDRA approval to start a web hosting company in the UAE?
No. TDRA regulates public telecom operators and activities like spectrum, satellite and submarine cables. Web hosting, colocation, cloud and managed hosting are ordinary ICT activities licensed by DET or a free zone, not telecom services [1].
When does TDRA licensing actually apply?
When you provide public telecom services, run a public network, sell public connectivity or IP transit as a carrier, use spectrum, or land a submarine cable. Acting as a .ae domain registrar needs TDRA accreditation, which is different from a telecom operating licence [1].
What license do I need to operate a data center in Dubai?
An ICT or data-center-services trade licence from DET or a free zone, plus, for an actual facility, DEWA high-load power, Civil Defence fire approvals, Dubai Municipality building and environmental approvals, and commercially, Uptime Tier certification [5].
What is the difference between a data center and a cloud hosting company?
A data center owns and operates the physical facility, power and cooling, an asset-heavy capital project. A cloud or managed-hosting company can be asset-light, reselling or managing infrastructure it does not own with just an ICT licence and an office.
How much does it cost to start a cloud hosting company in Dubai?
An asset-light reseller, SaaS or managed-hosting firm can start for roughly AED 15,000 to 30,000 all-in in the first year. A managed-hosting operation with an office runs higher, and a physical data center facility runs into the tens to hundreds of millions.
Can a free zone company sell cloud services to mainland UAE clients?
Yes, cloud and hosting are typically delivered remotely, but confirm the activity scope and whether any mainland-facing restriction applies to your free-zone licence. Recent reforms have widened free-zone to mainland access, but treat the detail as evolving.
Is 100% foreign ownership allowed for a hosting company?
Yes. ICT, cloud and hosting activities allow 100% foreign ownership on the mainland under Federal Decree-Law No. 32 of 2021, and by default in the free zones. No Emirati partner is required [7].
Do I have to host customer data inside the UAE?
It depends on the data. The general data-protection law is mainly a cross-border-transfer regime, but banking and payment data, health data, and classified government data must be stored in the UAE under sector rules. This residency demand is what drives local hosting [2][3].
Which free zone is best for a cloud or hosting company?
Dubai Internet City is the region's largest ICT hub, Dubai Silicon Oasis suits tech and facility campuses with land and power, and Dubai South lists the cloud and data-hosting licence. All give 100% ownership. Choose by whether you are asset-light or building a facility.
What is activity code 6311.01?
It is the data-processing, hosting and related-activities classification that a cloud or web-hosting licence commonly maps to. Confirm the exact DET activity name and code, as the naming can differ from the ISIC code.
What certifications does a UAE data center need?
For an actual facility, Uptime Institute Tier III or IV is the commercial standard tenants expect, alongside security and compliance certifications like ISO 27001 and SOC 2. These are industry standards, not government licences, but enterprise clients demand them [5].
Is hosting subject to VAT in the UAE?
Yes, at 5% for UAE customers. Services to a genuinely foreign client can be zero-rated as an export, but for electronic services like hosting, the 15 November 2024 rule denies zero-rating where the service is used or enjoyed in the UAE, even for a non-resident client [6].
Can I zero-rate cloud services for overseas clients?
Not automatically. Cloud and hosting are electronic services, so zero-rating is blocked where the service is used or enjoyed inside the UAE, regardless of where the client is based. Where the service is consumed decides the rate [6].
Does a hosting company get the free-zone 0% corporate tax rate?
No. IT, cloud, web hosting and data-center services are not Qualifying Activities under Ministerial Decision No. 229 of 2025, so a free-zone hosting company is taxed at the standard 9%, not 0% [7].
How profitable is a reseller hosting business in the UAE?
It can be strong. White-label and reseller hosting is recurring revenue with healthy margins when priced well, and break-even can come at just a handful of clients because the capital and infrastructure cost is minimal.
Do I need a physical office to get a cloud computing licence?
Not necessarily for an asset-light free-zone firm, where a flexi-desk is often enough for one or two visas. A larger team or a mainland licence needs a physical office with Ejari. A facility, of course, needs the building itself.
What is the National Cloud Security Policy?
It is part of the UAE's sovereign-cloud and data-classification framework requiring sensitive government data to sit on UAE-resident, approved infrastructure. It matters if you intend to serve government clients, adding approval requirements beyond an ordinary licence.
How long does it take to set up a hosting company in Dubai?
An asset-light ICT licence can be issued in days to a couple of weeks. A facility is a multi-year project because of land, power and construction. The licence is quick; the infrastructure, if you build it, is not.
Do I need a data center to sell cloud hosting?
No. Most hosting companies lease colocation or build on a hyperscaler and resell or manage the service. Owning a facility is a separate, capital-heavy business. Asset-light hosting needs no data center of your own.
Who are the customers for a UAE hosting company?
Enterprises needing UAE data residency, government entities, regional businesses using the UAE as a low-latency hub for the Middle East and Africa, and SMEs and agencies buying from the reseller layer. Data-residency demand is the core driver [8].
Is the UAE data center market growing?
Strongly. The cloud market is on a steep multi-year curve and colocation is growing at over 25% a year, driven by AI demand and major investment from the Stargate complex, Microsoft and G42, and du's Microsoft pact [8].
References
[1] TDRA regulates public telecommunications operators and regulated activities (spectrum, satellite, submarine cables, public telecom services) under Federal Law by Decree No. 3 of 2003; hosting, colocation and cloud are ordinary ICT activities, not telecom services. TDRA Licensing
[2] Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and the UAE Data Office, mainly a cross-border-transfer regime, with executive regulations pending as of early 2025. DLA Piper Data Protection, UAE
[3] Sector data-residency rules requiring in-UAE storage of banking and payment data (Central Bank), health data (health-ICT law), and classified government data (sovereign-cloud policy). DLA Piper Data Protection, UAE
[4] DIFC Data Protection Law No. 5 of 2020 and ADGM Data Protection Regulations 2021 for financial free-zone entities. DIFC and ADGM
[5] Physical data-center facility approvals: DEWA high-load power, Dubai Civil Defence clean-agent fire suppression, Dubai Municipality building and environmental approvals, and Uptime Institute Tier III and IV certification as a commercial standard. Uptime Institute Tier Certification
[6] VAT standard-rating of hosting at 5% and the electronic-services place-of-supply rule: an amendment effective 15 November 2024 denies export zero-rating for e-services used or enjoyed in the UAE, even for non-resident customers. FTA export of services
[7] Ministerial Decision No. 229 of 2025 on Qualifying Activities (IT, cloud, web hosting and data-center services are not Qualifying Activities), and Federal Decree-Law No. 32 of 2021 allowing 100% foreign ownership. PwC analysis and u.ae
[8] UAE cloud and colocation market size and growth, hyperscaler investment (Stargate UAE, Microsoft and G42, du and Microsoft). Mordor Intelligence UAE cloud and Arizton UAE colocation
