Table of Contents
Frequently Asked Questions
What is activity code 6311.97 and what services does it cover
Activity code 6311.97 — Cloud Service & Datacenters Providers is the official UAE commercial activity classification for businesses operating in cloud infrastructure and datacenter services. It covers a broad range of operations under a single licence.
Permitted services include Infrastructure as a Service (IaaS), Platform as a Service (PaaS), SaaS hosting environments, colocation, managed cloud, and disaster recovery solutions. The scope accommodates both asset-heavy datacenter operators and leaner businesses reselling or white-labelling third-party infrastructure.
This flexibility makes it suitable for a wide range of business models, from startups entering the market through reseller arrangements to established operators building physical datacenter capacity in the UAE.
How large is the UAE cloud services market and what is driving its growth
The UAE cloud computing market is on a strong upward trajectory. According to IMARC Group, the market is projected to grow at a compound annual growth rate (CAGR) exceeding 17% through 2028, making it one of the faster-growing cloud markets globally.
Key demand drivers include public sector digitalisation, enterprise cloud migration, and sovereign data requirements. Dubai's D33 Economic Agenda and the Digital Dubai strategy mandate cloud-first approaches for government entities, creating sustained institutional demand that is not aspirational but structurally enforced.
Additional growth comes from regional spillover across the GCC, including Saudi Arabia and Egypt, giving Dubai-based operators a natural cross-border commercial opportunity. Hyperscalers including Microsoft Azure, AWS, Google Cloud, and Oracle have all established UAE cloud regions, signalling the market's long-term strategic importance.
Who are the primary customers for a cloud and datacenter business in Dubai
The business model under activity code 6311.97 is almost exclusively B2B. Primary customers include enterprises, government entities, SMEs, and regulated-sector businesses — particularly those in fintech and healthtech that face strict data residency obligations.
UAE data sovereignty requirements mean that regulated industries cannot route workloads offshore; they need locally licensed providers with UAE-based infrastructure or contractual guarantees. This creates a captive, compliance-driven demand base for licensed cloud providers operating in Dubai.
Smaller operators often enter the market through reseller arrangements and white-label managed services, which allow revenue generation without immediate capital expenditure on physical infrastructure, making the market accessible at multiple investment levels.
Which regulatory authority oversees cloud and datacenter businesses in the UAE
The Telecommunications and Digital Government Regulatory Authority (TDRA) is the primary regulatory body governing digital infrastructure, cloud licensing, and data governance frameworks across the UAE. Any business operating under activity code 6311.97 falls within its oversight remit.
Beyond TDRA, providers serving regulated sectors must comply with additional sector-specific layers. The Central Bank of the UAE publishes cloud outsourcing guidance for financial institutions, and the Dubai Health Authority (DHA) sets data handling requirements for healthcare clients.
These layered regulatory requirements mean that enterprise clients in regulated industries will typically demand contractual data processing agreements and compliance documentation before onboarding a cloud provider.
What does the UAE Personal Data Protection Law mean for cloud providers
Federal Decree-Law No. 45 of 2021 — the UAE Personal Data Protection Law (PDPL) — imposes legal obligations on any entity that processes personal data, which explicitly includes cloud providers storing or transmitting data on behalf of clients.
Compliance is not optional. Cloud and datacenter businesses must implement appropriate data handling, storage, and transmission safeguards. Enterprise clients operating in regulated sectors will require formal data processing agreements (DPAs) as a precondition to onboarding, making PDPL compliance a commercial necessity as well as a legal one.
Providers should seek qualified legal counsel to ensure their service agreements, infrastructure configurations, and subprocessor arrangements align with the PDPL's requirements before launching commercial operations.
What role do hyperscalers like AWS and Microsoft Azure play in the Dubai cloud market
Global hyperscalers have made significant commitments to the UAE market. Microsoft Azure, AWS, Google Cloud, and Oracle have all established dedicated UAE cloud regions, with multiple datacenter campuses announced across Dubai and Abu Dhabi.
Rather than purely competing with local providers, hyperscaler presence validates and expands the market. Many businesses operating under activity code 6311.97 build managed service or reseller models on top of hyperscaler infrastructure, offering localised support, compliance expertise, and contractual data residency guarantees that global providers cannot always deliver directly.
The hyperscaler ecosystem also creates partnership and integration opportunities for smaller cloud businesses, particularly those serving regulated clients who need a locally accountable intermediary between their workloads and global infrastructure.
Can a cloud services business in Dubai operate through a free zone licence
Yes. Free zone licences, including those issued by Meydan Free Zone, permit B2B trading and service provision under activity code 6311.97. Meydan Free Zone is specifically referenced as a structured setup pathway for cloud and datacenter businesses in Dubai.
Free zone structures offer advantages including 100% foreign ownership, streamlined incorporation processes, and a defined regulatory environment. They are well-suited to businesses targeting enterprise, government, and SME clients on a B2B basis, which aligns with the primary customer profile for cloud services.
It is important to confirm the specific permitted activities and any mainland trading restrictions with the free zone authority during the setup process, particularly if the business intends to serve UAE mainland government entities directly.
What are the typical business models for entering the Dubai cloud and datacenter market
There are two broad entry models. Asset-heavy operators invest in physical datacenter infrastructure — servers, colocation facilities, network capacity — and generate revenue through direct infrastructure provision, colocation leasing, and managed hosting contracts.
Leaner managed service models are a common entry point for smaller operators. These businesses resell or white-label third-party infrastructure — often from hyperscalers — while adding value through localised support, compliance management, and tailored service agreements. This approach allows revenue generation without immediate capital expenditure on physical infrastructure.
Both models are accommodated under activity code 6311.97. The right choice depends on available capital, target customer segments, and whether the business is positioning for data-residency-sensitive regulated clients or broader enterprise and SME markets.
How to Start a Cloud Service and Datacenter Business in Dubai
Dubai is building one of the most connected digital economies in the region. Demand for cloud infrastructure and data hosting is growing fast. This guide covers the license you need, how to choose your setup, and what compliance looks like on the ground.
What This License Covers
Cloud services and datacenter hosting sit under several activity codes in Dubai. The right code depends on what you actually do. Picking the wrong one limits what you can sell.
The main codes cover cloud computing services, data hosting, and managed IT. Cloud computing lets you sell storage, processing, and software delivery to clients. Data hosting covers running servers and housing client data. Managed IT lets you run a client's systems on their behalf.
Each code has a boundary. A data hosting license does not automatically cover telecoms-adjacent services. If you carry data across networks, the Telecommunications and Digital Government Regulatory Authority (TDRA) may require a separate approval. Check the exact scope before you apply.
TDRA sets the rules for digital infrastructure in the UAE. Any service touching connectivity, data transmission, or cloud delivery needs to sit within its framework. This is not optional and it is not slow to enforce.
- Cloud computing services: storage, processing, software delivery
- Data hosting: server management and client data storage
- Managed IT services: running client systems remotely
- Internet and connectivity-adjacent services: need TDRA review
Who Your Clients Will Be
Government bodies are the largest buyers of cloud and hosting services in Dubai. They run formal tenders. They want you on an approved vendor list before they sign anything. Contracts are long once you are in.
Banks and large firms are the next tier. They have strict rules about where their data sits. Many need local data residency, which means your servers must be physically inside the UAE. This is a real advantage if you operate a local datacenter.
Small firms are badly served by the big IT groups, who charge too much for them. There is a real market here for managed cloud at a workable price point. These clients move fast and do not run long tenders.
Regional firms also use Dubai as a data hub for GCC operations. They need a UAE-based entity to hold the contract and a local point of contact. A free zone setup works well for this client type.
- Government bodies: long contracts, formal tenders, vendor registration needed
- Banks and large firms: strict data residency rules
- Small businesses: fast-moving, underserved by large IT firms
- Regional GCC firms: use Dubai as a central data hub
Mainland vs Free Zone Setup
This is the biggest choice you will make when setting up. Let your clients decide it, not the price.
A mainland license from DET lets you work directly with UAE government bodies. You can bid on public tenders and sign contracts with any local client. You need a physical office. Ownership rules have relaxed, but some activities still carry conditions. Check with DET before you apply.
A free zone setup through Meydan Free Zone gives you 100% foreign ownership and a fast setup process. You can use a flexi-desk instead of a full office. This keeps costs low in the early stage. The trade-off is that you mainly serve international clients or other free zone firms directly.
| Factor | Mainland (DET) | Free Zone (Meydan Free Zone) |
|---|---|---|
| Client access | Open UAE market, including government | Mainly international clients |
| Ownership | Up to 100% for most activities | 100% foreign ownership |
| Office | Physical office required | Flexi-desk options available |
| Data residency | Easier to meet local residency rules | Depends on server location |
| Setup speed | Longer process | Faster, simpler steps |
Data residency rules matter here. If your clients need their data stored inside the UAE, your servers must be physically local. Your legal structure does not fix this on its own. You need to confirm where your infrastructure sits.
If your clients are mostly overseas or regional, a free zone is the cleaner choice. If you are targeting UAE government contracts, go mainland.
Free Business Setup Cost Calculator
Calculate NowHow to Set Up Step by Step
The process is direct. Most steps can run in parallel once you have your activity code confirmed.
- Step 1, book your trade name: Use the DET portal for mainland or the Meydan Free Zone portal for a free zone setup.
- Step 2, pick your activity code: Confirm the exact code covers what you plan to sell before you go further.
- Step 3, apply for your license: Submit your application with the required paperwork and pay the license fee.
- Step 4, check TDRA rules: If your service touches data transmission or connectivity, get TDRA approval before you start.
- Step 5, set up your office: A flexi-desk works for free zone; mainland needs a physical address.
- Step 6, apply for visas: Your visa allocation depends on your office type and license category.
- Step 7, open a bank account: Get your license and Emirates ID first. Banks need both before they proceed.
A free zone setup at Meydan Free Zone typically takes a few working days for the license. Bank account opening adds time. Budget 2 to 4 weeks for the full process. You can also start a business remotely if you are not yet in the UAE.
License costs vary by activity and office type. Use the cost calculator to get a figure before you commit.
Compliance and Market Opportunity
The UAE has a federal data protection law. It sets rules on how you collect, store, and process personal data. If you host client data, you are a data processor under this law. You need written agreements with your clients that spell out your duties.
TDRA oversees cloud and connectivity services. Some cloud activities need a TDRA license on top of your trade license. The rules depend on whether you own the network layer or just use it. Get clarity on this early. Breaking the rules here carries real fines.
Dubai's D33 economic agenda sets a target to double the size of the digital economy by 2033. Public sector cloud spending is a direct result of this. Government bodies are moving workloads off legacy systems. That creates real demand for local cloud and hosting firms.
The UAE cloud market is growing steadily. Mordor Intelligence and IMARC Group both track strong annual growth figures for the region. The drivers are clear: a growing population, a large financial sector, and a government that spends on technology.
- UAE data protection law covers storage and processing of personal data
- TDRA approval may be needed for connectivity-adjacent cloud services
- D33 agenda targets doubling the digital economy by 2033
- Government cloud migration is creating new contract opportunities
- Regional demand from GCC firms using Dubai as a data hub
Corporate tax is now in place at 9% for profits above AED 375,000. Free zone firms can qualify for a 0% rate on qualifying income if they meet the substance rules. Check with the Federal Tax Authority (FTA) to confirm your position before you start trading.
VAT applies at 5% to most services. Cloud and hosting services sold to UAE-based clients are taxable. Services exported to overseas clients may qualify for zero-rating. Keep clean records from day one. You will need them for both VAT and corporate tax.
Conclusion
Cloud and datacenter services are high-demand work in Dubai. The market is real and it is growing. But it is also regulated. Get your activity code right, confirm your TDRA position, and choose your structure based on who you plan to sell to.
Once you are properly licensed and compliant, the long-term contract potential is strong. Government bodies, banks, and regional firms all need local partners they can trust.
Ready to Launch Your Business in Dubai?
Let's Connect
