Set Up a Data Center or Cloud Hosting Company in Dubai, UAE: TDRA, Data Residency & Tax (2026)

Two myths shape almost every guide to starting a hosting or data center business in Dubai, and both send founders down the wrong path. The first is that you need a TDRA telecom licence. For a pure data center, colocation, cloud or managed-hosting business, you do not. TDRA licenses public telecom operators and regulated activities like spectrum, satellite and submarine cables. Hosting a server, renting rack space or reselling cloud is an ordinary ICT activity, licensed by DET or a free zone [1]. The second myth is that "cloud company" is one business. It is two radically different ones, and confusing them wrecks a budget.

The real distinction is asset-light versus asset-heavy. An asset-light hosting reseller, managed-services or SaaS firm needs little more than an ICT trade licence and an office, and can start for tens of thousands of dirhams. An asset-heavy facility operator, which owns the building, the megawatts of power and the cooling, is a real-estate-plus-power-plus-capital project running into the tens or hundreds of millions. Most new entrants do not build; they lease colocation and resell managed services. Knowing which one you are is the whole plan.

This guide covers the TDRA reality, the two business models, the data-residency rules that actually drive demand, ownership, and the two tax points that catch hosting firms, the VAT one is genuinely subtle. Since 2013, our team has set up technology and trading companies across the UAE, so the traps here come from real files. This is a guide, not legal or tax advice on your specific licence.

Do you need a TDRA licence to run a hosting company?

No, not for the hosting itself, and this is the single most misunderstood point. TDRA regulates telecommunications, the public networks and services run by operators like e& and du, plus regulated activities such as satellite services, spectrum use and landing submarine cables [1]. Renting servers, colocation, cloud and managed hosting are not regulated telecom activities. They are licensed as ordinary ICT or commercial activities through DET or a free zone.

Where TDRA can still touch a hosting business is narrower than guides imply, and it is worth being precise:

• .ae domain registration. If you act as a domain registrar for.ae domains, you need TDRA accreditation. Providers who advertise as "TDRA-accredited" usually mean this, not a telecom operating licence.
• Government or classified data. Handling sensitive government data can trigger extra approvals under the UAE's sovereign-cloud and data-classification policies.
• Providing public connectivity. If you go beyond hosting and start selling public telecom-style connectivity or IP transit as a carrier, you cross into TDRA territory and should take legal advice.

Common Mistake: Believing you must get a TDRA telecom licence to start a web hosting or data center company. You do not, and chasing one wastes time on an approval that does not apply to your model. If a source tells you hosting needs a telecom licence, treat the rest of its advice with caution.

Asset-light or asset-heavy: which business are you setting up?

Two very different projects hide behind "cloud company," and naming yours first avoids budgeting for the wrong one.

• Asset-light: reseller, managed hosting, SaaS or cloud consultancy. You resell or manage infrastructure you do not own, often white-label cPanel or WHM hosting or managed cloud on top of a hyperscaler. The requirement is essentially an ICT trade licence and an office. Capital is minimal, and this is the realistic path for the large majority of founders.
• Asset-heavy: data center or colocation facility operator. You own or operate the building, the power and the cooling. This triggers a heavy stack of approvals and enormous capital, and it is a real-estate and power project as much as a licensing one.

Many operators bridge the two: they lease colocation from an established facility and resell managed services on top, keeping the business asset-light while offering data-center-grade hosting. Decide your model before you sign anything, because the cost and approval paths barely overlap.

What does an actual data center facility require?

A serious approval stack and serious capital, which is why most people do not build one. If you genuinely operate a facility rather than reselling, plan for [5]:

• DEWA high-load power. Data centers are extreme power draws, needing a dedicated substation and a DEWA load approval, which is often the binding constraint and a long-lead item.
• Dubai Civil Defence. Fire-safety design approval and clean-agent, gas-based fire suppression for the server halls, because water is unsuitable around live equipment.
• Dubai Municipality. Building, structural and environmental approvals, including hazardous-material handling for generator fuel.
• Uptime Institute Tier certification. Tier III or IV is a commercial standard, not a government licence, but enterprise and government tenants effectively demand it, with Tier III requiring concurrently maintainable, N+1 redundant infrastructure.

Real Talk: The facility path is not a licence question; it is a capital project. Land, megawatts of power, cooling, redundancy and Tier certification run into the tens or hundreds of millions of dirhams, and the power connection alone can set your timeline. Unless you are funded for that, the sensible route is asset-light: lease colocation, resell managed hosting, and let someone else carry the concrete and the substation. Get your model scoped before you commit→

What actually drives demand: data residency

The real regulator behind this business is not telecom law, it is data-protection and data-residency law, and understanding it is your sales pitch. Demand for UAE hosting comes from rules that require certain data to physically stay in the country.

• The federal Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, in force since January 2022 and overseen by the UAE Data Office, is mainly a cross-border-transfer regime rather than a blanket "keep everything in the UAE" mandate. Note that its executive regulations were still pending as of early 2025, so do not assume full enforcement detail is settled [2].
• Sector residency rules are what force data in-country. Banking and payment data must be stored in the UAE under Central Bank rules, health data must stay in the UAE under the health-ICT law, and classified government data must sit on UAE-resident, approved infrastructure [3].
• Free-zone financial regimes are separate: DIFC has its own Data Protection Law No. 5 of 2020 and ADGM its Data Protection Regulations 2021, both aligned to global standards [4].

This is exactly why the hyperscalers localised, with Microsoft and G42, AWS and Oracle all building UAE regions. For your customers, the question is "where must my data live," and a UAE-resident hosting offering is the answer. Our free zone versus mainland guide covers the structure choices around it.

What licence and free zone should you use?

An ICT or hosting activity, and for asset-light firms, a tech free zone. On the mainland, DET licenses activities such as data center services, web hosting and cloud computing, mapping to the data-processing and hosting activity code. In the free zones, the natural homes for hosting and IT are the tech clusters: Dubai Internet City, the region's largest ICT hub, Dubai Silicon Oasis under the integrated economic zones authority, and Dubai South, which lists the cloud and data-hosting licence explicitly. All give 100% foreign ownership.

The split follows the model. Asset-light hosting, cloud and managed-services firms suit a tech free zone: licence, office and full ownership. A tech or industrial free zone is usually the right home for a data center or colocation operator selling to regional and international clients, because it gives 100% foreign ownership, purpose-built plots with real power allocations and a customs framework built for imported equipment, and our free zone company setup page walks through that route. If your target buyer is instead a UAE government department or an onshore enterprise buying managed IT and hosting directly, you will generally need an onshore licence to contract and invoice them without a distributor, and our mainland company setup page covers the DET route those tenders expect. A genuine facility developer needs land and high-load power, so the choice narrows to zones with tech-park land and power capacity, or a mainland and industrial-land arrangement, and for a heavy-industrial campus measured in megawatts rather than desks it is worth comparing a purpose-built industrial zone of the kind covered in our KEZAD free zone guide. Confirm the exact activity name and code on the DET list, as naming varies.

Can a foreigner own a hosting company, and is it 100%?

Yes. 100% foreign ownership is available on the mainland for these ICT activities under Federal Decree-Law No. 32 of 2021, and by default in the free zones [7]. Hosting and cloud are not on the strategic-impact restricted list, so full ownership is the norm. You do not need an Emirati partner to own a hosting or data center company.

What is worth deciding at licensing rather than later is how many adjacent activities sit on the same entity, because hosting rarely sells alone. A hosting operator that also runs security operations for its tenants is doing the work covered in our cybersecurity company guide, one that builds applications on its own platform overlaps with our software development company guide, and one advising enterprises on which workloads can legally move onshore is effectively an AI and tech consultancy. Adding a second or third activity to the licence at formation costs a few thousand dirhams; discovering you cannot invoice for it later costs a second company.

Is hosting subject to VAT, and can you zero-rate foreign clients?

Yes to VAT at 5%, but zero-rating foreign clients has a real trap, and this is the tax point most guides get wrong. Hosting and cloud services to UAE customers are standard-rated at 5%. Services to a client genuinely outside the country can be zero-rated as an export of services, except for the electronic-services rule [6].

Here is the catch: cloud and hosting are electronic services with special place-of-supply rules. A VAT amendment effective 15 November 2024 blocks zero-rating for electronic services used or enjoyed inside the UAE, even when the customer is non-resident [6]. So "just zero-rate everything for foreign clients" is wrong for hosting. If the service is consumed in the UAE, it is 5% regardless of where the client sits. Our VAT registration and compliance guide covers the mechanics.

Does a hosting company get the free-zone 0% corporate tax rate?

No. IT, cloud, web hosting and data-center services are not Qualifying Activities under Ministerial Decision No. 229 of 2025, so a free-zone hosting company's income is taxed at the standard 9%, not 0%, even inside a tech free zone [7]. There is a theory that a data-center-as-infrastructure operator might qualify some other way, but there is no clear basis for it in the rules, so the safe reading is 9%, and any qualifying angle should be tested with a tax adviser rather than assumed.

For everyone the standard regime applies: 0% on the first AED 375,000 of profit and 9% above, with Small Business Relief while revenue stays at or below AED 3 million, for periods up to the end of December 2029. Our corporate tax filing guide covers the conditions.

What does it cost, and is it worth it?

Cost depends entirely on which business you are building. Here is a realistic 2026 picture in AED.

The market case is exceptional. The UAE cloud market is on a steep multi-year growth curve, the colocation market is growing at over 25% a year, and AI-driven demand has brought enormous investment, from the Stargate UAE complex to Microsoft's multi-billion-dollar commitment with G42 and du's hyperscale pact with Microsoft [8]. For an asset-light reseller, break-even can come at just a handful of clients, with recurring white-label hosting margins that are healthy when priced well. The winners compete on data-residency, reliability and managed-service depth, and the smart entry is asset-light, resell and grow, not build a facility on day one.

Is a data center business profitable in Dubai?

It can be, but profitability depends on which layer you occupy. A reseller or managed-hosting business turns a profit within months on modest capital. A physical facility is an infrastructure investment that pays back over a decade, funded upfront in land, megawatts and cooling. The demand is genuine; the timeline is the risk.

The demand drivers are unusually well aligned right now, and they are not speculative. AI training and inference workloads have pushed rack densities and power draw far beyond what traditional enterprise hosting needed, and the UAE has attracted serious capital on the back of it, including the Stargate UAE complex, Microsoft's multi-billion-dollar commitment with G42 and du's hyperscale pact with Microsoft [8]. Underneath the AI story sits a steadier one: sector residency rules force banking and payment data, health data and classified government data to be stored inside the UAE, which means a bank or a hospital cannot simply put the workload in Frankfurt and be done with it [3]. Dubai's position on the subsea cable routes between Europe, Asia and Africa gives it genuinely low latency to three continents from one location, which is why regional businesses use it as a hub rather than a local market. Add the hyperscalers building out UAE regions and government digital programmes moving public services onto approved local infrastructure, and the pipeline of workloads looking for UAE floor space is real.

The honest counterweight is that all of that demand meets a very expensive supply side. Capital cost is measured per megawatt of IT load, not per square metre, and a serious facility runs into the tens or hundreds of millions of dirhams before a single client is billed. Power availability, not land, is usually the binding constraint, because a DEWA high-load connection with a dedicated substation is a long-lead item you cannot accelerate with money alone. Cooling in a climate that spends months above 40 degrees is a permanent efficiency penalty compared with a facility in a cold country, and it shows up in the electricity bill every month for the life of the building. And the fill curve is slow: halls are commissioned in phases and take quarters to years to reach the utilisation where the economics work. A half-empty facility still pays for its full power connection, its full cooling plant and its full compliance stack.

The customer column is what decides your structure more than the capital column does. If your buyers are UAE government departments and onshore enterprises signing managed IT and hosting contracts directly, an onshore entity is what lets you bid and invoice without a local partner in the middle, which is the route our mainland company setup page covers. If your buyers are regional and international, a tech or industrial free zone is usually cleaner and cheaper.

Based on our experience, the founders who make money in this sector in their first three years are almost never the ones who built. They lease colocation in an established Tier III facility, sell managed hosting and compliance-grade UAE residency on top, and build a customer book. The ones who build come to it later, with anchor tenants already signed, because a facility with a signed pre-let is a financeable asset and a facility with a hopeful business plan is not.

What documents and steps does it take to start a data center company?

A trade licence, a site with power, and a stack of approvals that runs in parallel with construction. The company paperwork takes weeks. The DEWA high-load connection, the Civil Defence fire-suppression sign-off and the Tier certification take quarters, and the power connection is almost always the item that sets your opening date.

For an asset-light hosting business, the document list stops at the first three bullets below. For an actual facility, all of it applies.

• Shareholder documents: passport copies and photographs for every shareholder and manager, plus proof of address and, for corporate shareholders, attested incorporation documents and a board resolution.
• Trade name and initial approval: a reserved trade name and either free-zone initial approval or DET initial approval for the data center services, web hosting or cloud computing activity.
• Memorandum of Association: the MOA for the entity, along with the manager's appointment documents.
• Premises: an industrial land lease or a facility lease, with an Ejari on the mainland or the free-zone lease agreement, sized and zoned for the power load you intend to draw.
• Telecom-related approvals: TDRA accreditation where you register.ae domains, and TDRA engagement where any part of the offering crosses into public connectivity or carrier services. Ordinary hosting and colocation do not need a TDRA telecom licence [1].
• DEWA high-load power application: the load study and connection application for a dedicated substation, submitted as early as possible because it gates everything downstream [5].
• Civil Defence approval: fire-safety design approval and a completion certificate, with clean-agent gas-based suppression specified for the server halls rather than water [5].
• Environmental approval: Dubai Municipality building, structural and environmental approvals, including hazardous-material handling for the diesel stored for standby generators [5].
• Security clearances: background and facility security requirements where you intend to host government or classified workloads under the sovereign-cloud and data-classification framework.
• Tier certification: Uptime Institute Tier III or Tier IV certification of design and, ideally, of the constructed facility. It is a commercial standard rather than a government licence, but enterprise and government tenants treat it as a precondition [5].

The timeline is where the two models separate completely, and where founders lose the most money by sequencing badly.

Pro Tip: File the DEWA load application before you finalise the design, not after. Everything else on that table can be compressed with money and more people; the power connection cannot, and a facility that is built and cannot be energised is the most expensive mistake available in this business. Talk to a setup expert→

What are the ongoing costs and compliance for a data center?

Power, overwhelmingly. Electricity is the dominant line in a data center's operating budget, and in UAE summer heat the cooling load that comes with it is not a rounding error. On top of that sit licence renewals, Tier and ISO recertification, PDPL data-protection duties, security requirements, insurance and the standard tax filings.

Start with the power bill, because it is the number that decides whether the business works. A facility pays for the IT load its tenants draw plus everything spent cooling that load, and the ratio between the two is what the industry measures as power usage effectiveness. In a Gulf climate the cooling side of that ratio is structurally worse than in Northern Europe, which is why operators here invest heavily in efficient chilled-water plant, hot and cold aisle containment and, increasingly, liquid cooling for high-density AI racks. That capital spend is not vanity; it directly reduces the monthly DEWA bill for the next fifteen years. Generator fuel, maintenance contracts on the UPS and chiller plant, battery replacement cycles and spare parts inventory all sit alongside it.

The compliance calendar is steadier but relentless. The trade licence and the lease renew annually, Civil Defence approvals and fire-system servicing are recurring items, and the Uptime Institute Tier certification and any ISO 27001 or SOC 2 attestations require surveillance audits and periodic recertification rather than a one-time badge. Under the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, you carry data-protection obligations of your own as a processor for your tenants, including cross-border-transfer controls, breach handling and, depending on scale and sensitivity, a data protection officer, with the caveat that the executive regulations were still pending as of early 2025 [2]. Sector residency rules layer on top for banking, health and government workloads, and a tenant will audit you against them [3]. Cybersecurity requirements, physical access control, CCTV retention and incident reporting are contractual obligations to tenants as much as regulatory ones. Property, plant, business-interruption and cyber-liability insurance are all standard for a facility of this value.

On tax, the company registers for corporate tax and files annually, paying 0% on taxable income up to AED 375,000 and 9% above, and it registers for VAT once taxable supplies pass the threshold, charging 5% on hosting and colocation supplied to UAE customers and applying the electronic-services rule carefully to non-resident clients [6][7]. The UBO register has to be kept current and notified when shareholding changes, and Economic Substance filings apply for the financial years the regime covered. This renewal, filing, audit and certification load is exactly the ongoing work our post-setup services handle, so the entity stays licensed and compliant while you concentrate on utilisation and uptime.

Quick Math: A single 100 kW rack row running continuously draws roughly 876,000 kWh a year before you cool it, and cooling in this climate can add a further 40 to 60 percent on top of the IT load. That is why a facility signs power-linked contracts with tenants rather than flat monthly rates, and why an operator who underprices power pass-through has effectively agreed to subsidise its own customers for the length of the lease.

Can you open a corporate bank account for a data center company?

Yes, but not remotely and not quickly. UAE banks do not open corporate accounts fully online for a project like this, so plan for in-person know-your-customer meetings, and expect a capital-heavy build to attract detailed source-of-funds questions long before the first rack is powered.

The practical sequence is licence first, then the account. The bank runs full know-your-customer checks on every shareholder and ultimate beneficial owner, reviews the activity and the expected turnover, and will want the licence, the MOA, the tenancy or lease and passports in hand at the meeting. A shareholder or manager who cannot travel to the UAE will hold the file up, because at least one authorised signatory has to appear in person. Expect a maintained minimum balance and, for a new entity with no trading history, a few weeks rather than a few days.

Capital intensity is what makes a data center file different from an ordinary trading company. When a new company opens an account and then receives tens of millions of dirhams for land, plant and equipment, the compliance team will ask where that money came from and will keep asking until the answer is documented. Prepare a funding plan before you walk in: audited statements or bank references for the funding entities, signed shareholder or investor agreements, any facility or term-sheet documentation from lenders, the equipment supplier contracts, and a schedule showing the drawdown against the build programme. A file that explains the money in advance clears far faster than one that answers questions reactively. For an asset-light hosting reseller none of this applies with the same force, and the account opening looks like any other small ICT company.

Real Client Stories

The founder chasing a licence that did not apply. A client spent weeks trying to obtain a "TDRA hosting licence" his research insisted he needed. Hosting is not a regulated telecom activity, so no such licence applied to his managed-hosting business. We set him up on an ICT free-zone licence and he launched in a fraction of the time. The myth had cost him a month.

The reseller who nearly built a data center. A client planned to build a small facility to offer hosting, on the assumption that hosting means owning servers in a room. We showed him the asset-light path: lease colocation from an established data center and resell managed services. He reached the same offering for a tiny fraction of the capital. Building was never the requirement.

The zero-rated invoices that were not. A client billed overseas clients at 0% for cloud hosting, assuming export zero-rating. Because the services were electronic and used in the UAE, the 15 November 2024 rule made them standard-rated at 5%. Correcting it avoided an exposure on his returns. For e-services, where the service is enjoyed, not just where the client sits, decides the rate.

Set up your Dubai hosting or data center company the right way

Hosting rewards operators who pick the right model and understand that data residency, not telecom law, is the driver, and it frustrates those who chase the wrong licence or over-build. Since 2013, BusinessDubai.ae has completed 700+ company registrations across the UAE, including technology companies. We will help you choose asset-light or facility and the right structure, license the correct ICT or hosting activity in a tech free zone or on the mainland, plan for data-residency positioning and any government-data approvals, and get the VAT and corporate tax treatment right, all with clear itemised pricing. Talk to a setup expert→ for a plan built around your model. Our free zone versus mainland guide covers the structure choice, and post-setup services covers ongoing compliance and renewals.

Frequently Asked Questions

Do I need TDRA approval to start a web hosting company in the UAE?

No. TDRA regulates public telecom operators and activities like spectrum, satellite and submarine cables. Web hosting, colocation, cloud and managed hosting are ordinary ICT activities licensed by DET or a free zone, not telecom services [1].

When does TDRA licensing actually apply?

When you provide public telecom services, run a public network, sell public connectivity or IP transit as a carrier, use spectrum, or land a submarine cable. Acting as a.ae domain registrar needs TDRA accreditation, which is different from a telecom operating licence [1].

What license do I need to operate a data center in Dubai?

An ICT or data-center-services trade licence from DET or a free zone, plus, for an actual facility, DEWA high-load power, Civil Defence fire approvals, Dubai Municipality building and environmental approvals, and commercially, Uptime Tier certification [5].

What is the difference between a data center and a cloud hosting company?

A data center owns and operates the physical facility, power and cooling, an asset-heavy capital project. A cloud or managed-hosting company can be asset-light, reselling or managing infrastructure it does not own with just an ICT licence and an office.

How much does it cost to start a cloud hosting company in Dubai?

An asset-light reseller, SaaS or managed-hosting firm can start for roughly AED 15,000 to 30,000 all-in in the first year. A managed-hosting operation with an office runs higher, and a physical data center facility runs into the tens to hundreds of millions.

Can a free zone company sell cloud services to mainland UAE clients?

Yes, cloud and hosting are typically delivered remotely, but confirm the activity scope and whether any mainland-facing restriction applies to your free-zone licence. Recent reforms have widened free-zone to mainland access, but treat the detail as evolving.

Is 100% foreign ownership allowed for a hosting company?

Yes. ICT, cloud and hosting activities allow 100% foreign ownership on the mainland under Federal Decree-Law No. 32 of 2021, and by default in the free zones. No Emirati partner is required [7].

Do I have to host customer data inside the UAE?

It depends on the data. The general data-protection law is mainly a cross-border-transfer regime, but banking and payment data, health data, and classified government data must be stored in the UAE under sector rules. This residency demand is what drives local hosting [2][3].

Which free zone is best for a cloud or hosting company?

Dubai Internet City is the region's largest ICT hub, Dubai Silicon Oasis suits tech and facility campuses with land and power, and Dubai South lists the cloud and data-hosting licence. All give 100% ownership. Choose by whether you are asset-light or building a facility.

What is activity code 6311.01?

It is the data-processing, hosting and related-activities classification that a cloud or web-hosting licence commonly maps to. Confirm the exact DET activity name and code, as the naming can differ from the ISIC code.

What certifications does a UAE data center need?

For an actual facility, Uptime Institute Tier III or IV is the commercial standard tenants expect, alongside security and compliance certifications like ISO 27001 and SOC 2. These are industry standards, not government licences, but enterprise clients demand them [5].

Is hosting subject to VAT in the UAE?

Yes, at 5% for UAE customers. Services to a genuinely foreign client can be zero-rated as an export, but for electronic services like hosting, the 15 November 2024 rule denies zero-rating where the service is used or enjoyed in the UAE, even for a non-resident client [6].

Can I zero-rate cloud services for overseas clients?

Not automatically. Cloud and hosting are electronic services, so zero-rating is blocked where the service is used or enjoyed inside the UAE, regardless of where the client is based. Where the service is consumed decides the rate [6].

Does a hosting company get the free-zone 0% corporate tax rate?

No. IT, cloud, web hosting and data-center services are not Qualifying Activities under Ministerial Decision No. 229 of 2025, so a free-zone hosting company is taxed at the standard 9%, not 0% [7].

How profitable is a reseller hosting business in the UAE?

It can be strong. White-label and reseller hosting is recurring revenue with healthy margins when priced well, and break-even can come at just a handful of clients because the capital and infrastructure cost is minimal.

Do I need a physical office to get a cloud computing licence?

Not necessarily for an asset-light free-zone firm, where a flexi-desk is often enough for one or two visas. A larger team or a mainland licence needs a physical office with Ejari. A facility, of course, needs the building itself.

What is the National Cloud Security Policy?

It is part of the UAE's sovereign-cloud and data-classification framework requiring sensitive government data to sit on UAE-resident, approved infrastructure. It matters if you intend to serve government clients, adding approval requirements beyond an ordinary licence.

How long does it take to set up a hosting company in Dubai?

An asset-light ICT licence can be issued in days to a couple of weeks. A facility is a multi-year project because of land, power and construction. The licence is quick; the infrastructure, if you build it, is not.

Do I need a data center to sell cloud hosting?

No. Most hosting companies lease colocation or build on a hyperscaler and resell or manage the service. Owning a facility is a separate, capital-heavy business. Asset-light hosting needs no data center of your own.

Who are the customers for a UAE hosting company?

Enterprises needing UAE data residency, government entities, regional businesses using the UAE as a low-latency hub for the Middle East and Africa, and SMEs and agencies buying from the reseller layer. Data-residency demand is the core driver [8].

Is the UAE data center market growing?

Strongly. The cloud market is on a steep multi-year curve and colocation is growing at over 25% a year, driven by AI demand and major investment from the Stargate complex, Microsoft and G42, and du's Microsoft pact [8].

What is the minimum realistic capital to start in this sector?

For an asset-light managed hosting or reseller business, roughly AED 15,000 to 30,000 all-in for the first year covers the licence, a flexi-desk and one or two visas. For a physical facility there is no meaningful minimum: cost scales with megawatts of IT load and runs into the tens or hundreds of millions of dirhams before the first tenant is billed.

How long does a DEWA high-load power connection take for a data center?

It is the long pole in the whole project. A dedicated substation and high-load connection is measured in many months and can run well beyond a year depending on the site, the requested load and the existing network capacity. File the load application before finalising the design, because it cannot be compressed the way construction and fit-out can [5].

What Tier certification does a data center in Dubai need?

Tier III is the practical commercial floor for enterprise and government tenants, requiring concurrently maintainable, N+1 redundant infrastructure so maintenance does not take the facility down. Tier IV adds fault tolerance for the most critical workloads. Uptime Institute Tier certification is a commercial standard, not a government licence, but tenants treat it as a precondition [5].

What does the UAE PDPL require of a hosting or data center operator?

Federal Decree-Law No. 45 of 2021 is mainly a cross-border-transfer regime rather than a blanket localisation mandate, and as a processor for your tenants you carry obligations on transfers, security, breach handling and, depending on scale, a data protection officer. Sector rules for banking, health and classified government data are what actually force storage inside the UAE. Executive regulations were still pending as of early 2025 [2][3].

Should I lease colocation or build my own data center?

Lease, in almost every case, unless you already have anchor tenants signed and the capital in place. Leasing colocation in an established Tier III facility gives you data-center-grade hosting to sell within weeks instead of years, with no substation, no cooling plant and no certification programme. Building is a financeable proposition once you have a pre-let, and a very expensive one before that.

How do data centers handle cooling in UAE heat?

With chilled-water plant, hot and cold aisle containment to stop air mixing, and increasingly liquid or direct-to-chip cooling for high-density AI racks. Cooling is a structurally larger share of the power bill here than in colder climates, so efficient plant is a capital decision that lowers the DEWA bill every month for the life of the building rather than a nice-to-have.

Can I resell hyperscaler capacity instead of building anything?

Yes, and it is the most common route in. You build managed services, migration, security and compliance-grade UAE residency on top of an existing hyperscaler region or a leased colocation footprint, needing only an ICT trade licence and an office. Margins come from the managed layer, not from the underlying capacity, so the offering has to be more than a resold invoice.

Is an edge or micro data center a cheaper way in?

It is a genuine middle route. An edge facility measured in hundreds of kilowatts rather than megawatts costs low millions of dirhams instead of tens or hundreds, reaches revenue in roughly nine to eighteen months, and serves telcos, content delivery networks and latency-sensitive local applications. The approval stack is the same in kind, power, Civil Defence and environmental, just smaller in scale.

References

[1] TDRA regulates public telecommunications operators and regulated activities (spectrum, satellite, submarine cables, public telecom services) under Federal Law by Decree No. 3 of 2003; hosting, colocation and cloud are ordinary ICT activities, not telecom services. TDRA Licensing

[2] Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and the UAE Data Office, mainly a cross-border-transfer regime, with executive regulations pending as of early 2025. DLA Piper Data Protection, UAE

[3] Sector data-residency rules requiring in-UAE storage of banking and payment data (Central Bank), health data (health-ICT law), and classified government data (sovereign-cloud policy). DLA Piper Data Protection, UAE

[4] DIFC Data Protection Law No. 5 of 2020 and ADGM Data Protection Regulations 2021 for financial free-zone entities. DIFC and ADGM

[5] Physical data-center facility approvals: DEWA high-load power, Dubai Civil Defence clean-agent fire suppression, Dubai Municipality building and environmental approvals, and Uptime Institute Tier III and IV certification as a commercial standard. Uptime Institute Tier Certification

[6] VAT standard-rating of hosting at 5% and the electronic-services place-of-supply rule: an amendment effective 15 November 2024 denies export zero-rating for e-services used or enjoyed in the UAE, even for non-resident customers. FTA export of services

[7] Ministerial Decision No. 229 of 2025 on Qualifying Activities (IT, cloud, web hosting and data-center services are not Qualifying Activities), and Federal Decree-Law No. 32 of 2021 allowing 100% foreign ownership. PwC analysis and u.ae

[8] UAE cloud and colocation market size and growth, hyperscaler investment (Stargate UAE, Microsoft and G42, du and Microsoft). Mordor Intelligence UAE cloud and Arizton UAE colocation