Corporate Governance Advisory

The level of mandated formal governance scales with the entity type. Public joint stock companies are subject to detailed SCA-mandated governance rules under the Commercial Companies Law. DIFC/ADGM-regulated entities face DFSA/FSRA governance requirements specific to their licence category. A standard mainland LLC or free zone company has lighter statutory governance obligations under its constitutional documents and the Companies Law's general director-duty provisions, but this does not mean governance is optional in practice — a well-run private company still needs documented decision-making, related-party controls, and clear signing authority to function safely and to withstand a bank, auditor, or investor's scrutiny.

The Memorandum/Articles of Association (MOA/AOA) is the company's public constitutional document, filed with DED or the relevant free zone authority, governing the company generally and binding on all shareholders and, in many respects, third parties. A shareholders' agreement (SHA) is a private contract between specific shareholders that can add rights and obligations not reflected in the AoA — pre-emption rights, drag-along/tag-along provisions, deadlock resolution, and reserved matters requiring unanimous or supermajority consent. Where the two conflict on matters within the company's constitutional framework, the registered AoA generally takes precedence, which is why PNPC drafts or reviews the SHA and AoA together rather than in isolation.

Under Federal Decree-Law No. 47 of 2022, related-party transactions must generally be conducted and priced on an arm's-length basis, and certain related-party and connected-person transactions require specific disclosure. A related-party transaction that is governance-approved but not properly priced (or vice versa) creates exposure on both fronts. We draft related-party policies that combine the governance-approval step (who signs off, at what authority level) with a documented, arm's-length pricing rationale, so the two requirements are satisfied together rather than as disconnected exercises handled by different teams.

QFZP status can preserve the 0% Corporate Tax rate on qualifying income for an eligible free zone entity, but it depends partly on the entity maintaining adequate substance within the UAE — genuine decision-making, staffing, and operating expenditure connected to the qualifying activity, not merely a licence held on paper. A governance framework that demonstrates the board or equivalent management body actually meets, deliberates, and makes and minutes decisions within the UAE is part of the evidence base that supports a QFZP position; a framework that cannot show this is a live risk if the position is later reviewed.

A DIFC entity regulated by the DFSA, or an ADGM entity regulated by the FSRA, is subject to the relevant authority's rulebook on top of the underlying DIFC/ADGM companies regulations — this typically includes controller-approval requirements for significant shareholding changes, senior management function accountability, systems-and-controls documentation, and specific board composition or fitness-and-propriety expectations depending on the licence category. A standard (non-regulated) free zone company such as a DMCC or IFZA trading entity is not subject to these financial-services-specific requirements, though good governance practice remains valuable regardless.

A family constitution is a broader document than a shareholders' agreement — it typically addresses not just shareholding mechanics but the family's shared values, the criteria for family members entering employment or ownership, the process for resolving family disagreements, and the long-term vision for the business across generations, alongside the more legally binding governance and succession terms that are often mirrored into a formal shareholders' agreement or trust structure for enforceability. The constitution sets the family's shared expectations; the shareholders' agreement (and, where used, an underlying trust or holding structure) gives those expectations legal effect.

A delegation-of-authority (DOA) matrix sets out, by role and transaction type, the value threshold up to which a given individual or committee can approve a decision — a department head might approve expenditure up to a defined limit, a CEO up to a higher limit, and anything above that requiring board approval. It is cross-referenced against the company's bank mandates and signing-authority instructions so the two are consistent, and it is the practical document staff and banks actually use day to day, rather than the board charter itself.

Yes, and this is one of the more commonly under-appreciated governance gaps. Even where a small company's Companies Law obligations for formal meetings are light, contemporaneous minutes and resolutions are frequently the evidence a bank, auditor, or Corporate Tax reviewer relies on to confirm that a decision was properly authorised and that genuine decision-making occurred within the UAE. Reconstructing minutes after the fact — which auditors and reviewers can generally identify — is far weaker evidence than a contemporaneous record.

In the absence of specific provisions, a deceased shareholder's shares typically pass through the applicable succession process — which, for UAE-situs shares, depends on whether a UAE-recognised will exists — before the resulting heir(s) can exercise voting rights, and this process can take considerably longer than a business can comfortably operate without clarity on control. A well-drafted shareholders' agreement or family constitution addresses this directly, often through provisions for interim voting arrangements, mandatory buy-out options, or a pre-agreed succession sequence, coordinated with the shareholder's personal will.

Yes, where the shareholders' agreement includes properly drafted drag-along and tag-along provisions. A drag-along clause allows a majority shareholder reaching an agreement to sell the company to require minority shareholders to sell on the same terms, preventing a minority holdout from blocking an otherwise agreed exit. A tag-along clause protects a minority shareholder by allowing them to participate in a sale on the same terms the majority negotiates, rather than being left behind as a minority holder in a changed ownership structure. Both are negotiated terms, not defaults, and need to be expressly included.

We draft a conflict-of-interest policy that requires disclosure of the relevant interest, recusal from voting on the affected matter, and independent approval of the transaction by disinterested directors or shareholders, consistent with general director-duty principles under the Commercial Companies Law and, for regulated entities, the applicable DFSA/FSRA conflicts requirements. The policy is paired with the related-party transaction policy so a conflicted transaction is both properly governed and properly priced.

ESR notification and reporting obligations have been progressively wound down for financial years following the introduction of UAE Corporate Tax, but the underlying substance principle ESR established — that a UAE entity's core income-generating activities and management decisions should genuinely occur within the UAE — continues to inform both QFZP substance requirements and how Corporate Tax and regulatory reviewers assess whether governance is real or nominal. A governance framework built to demonstrate genuine UAE decision-making remains directly relevant even where standalone ESR filings are no longer required.

Yes. For groups spanning the UAE and India, we coordinate governance framework design between our Dubai and India offices so board composition, delegation of authority, and related-party policies are consistent across the group and support both jurisdictions' related-party and transfer-pricing documentation. An intercompany governance and pricing framework that only holds up in one jurisdiction typically creates a mismatch the group has to reconcile later, often at the worst time — during a tax review in either country.

PNPC generally recommends a review every year for actively growing or investor-backed companies, and at least every two to three years for stable, closely-held businesses, alongside an immediate review triggered by any material event — a new investor or director, a significant related-party transaction, a group restructuring, or a relevant regulatory change such as a Corporate Tax or DFSA/FSRA rulebook update. A framework left unreviewed for years frequently no longer reflects the company's actual ownership, regulatory status, or risk profile.

PNPC agrees a fixed, written fee before any advisory work begins, typically scoped to the number of entities in the group, whether a DIFC/ADGM regulatory overlay is required, and whether a full family constitution negotiation is involved alongside the core board and related-party framework. The exact fee depends on the complexity of the ownership structure and the number of stakeholder groups whose sign-off is needed.

Requirements vary by structure and authority rather than following one uniform rule. A mainland LLC's board or management arrangement is set out in its Memorandum/Articles of Association within the parameters the Commercial Companies Law allows, and many smaller LLCs operate with a single manager rather than a formal multi-member board. Free zone authorities each set their own baseline in their model AoA and internal regulations, and DIFC/ADGM-regulated entities may face a minimum board composition requirement under the DFSA or FSRA rulebook depending on licence category. PNPC confirms the specific requirement for the entity's actual authority before designing board composition, rather than assuming a single rule applies across all UAE structures.

Most UAE mainland and free zone constitutional frameworks permit board and shareholder meetings to be held virtually or by other electronic means, provided the company's AoA does not expressly restrict this and the chosen method allows all participants to properly participate and be identified. DIFC and ADGM companies regulations generally take a similarly permissive approach. What matters practically is that the AoA's own wording is checked, and that the meeting is properly convened, quorate, and minuted regardless of format, since the format itself is rarely the point of later challenge — the adequacy of notice, quorum, and record-keeping is.

Quorum requirements are set by the company's own AoA (for board meetings) and by the Companies Law together with the AoA (for shareholder general meetings), and they differ by entity type and by the specific matter being decided — some reserved matters may require a higher quorum or supermajority than routine business. There is no single UAE-wide quorum figure that applies to every company; it must be read from the specific constitutional document in force for that entity.

A dedicated, statutorily titled 'company secretary' role is not universally mandated across all UAE mainland and free zone entities in the way it is in some other jurisdictions, though DIFC and ADGM regulated entities, and larger or public joint stock companies, may have specific requirements or strong practical expectations for a designated secretarial function. Regardless of whether it is a strict legal requirement for a given entity, PNPC recommends every company designate someone — internally or through PNPC's corporate secretarial support — accountable for minute-keeping, filing deadlines, and UBO register accuracy, because this function tends to fall through the cracks when nobody is explicitly responsible for it.

A reserved matters list identifies decisions that cannot be taken by management or a simple board majority alone, and instead require a higher threshold — full board approval, shareholder approval, or unanimous/supermajority shareholder consent — before they can proceed. Common reserved matters include amending the AoA, issuing new shares or diluting existing shareholders, incurring debt above a defined threshold, entering or exiting a material line of business, appointing or removing senior executives, and approving related-party transactions above a defined significance level. The exact list is negotiated and tailored to the company's specific risk profile and shareholder composition, not copied wholesale from a template.

UAE companies are generally required to identify, record, and keep current a register of their ultimate beneficial owners — the individuals who ultimately own or control the entity — and to file that information with DED, the relevant free zone authority, or the DIFC/ADGM registrar as applicable. This sits alongside, and should be kept consistent with, the governance framework's shareholder register and board records; a share transfer or change of control that updates the governance documents but not the UBO filing leaves the company's public record inconsistent with its actual ownership.

Certain UAE business categories — including company service providers, real estate agents and brokers, dealers in precious metals and stones, and independent legal or accounting professionals conducting specified activities — fall within the DNFBP category under UAE AML/CFT law and are supervised by the Ministry of Economy. DNFBP entities must maintain AML/CFT policies and procedures, conduct customer due diligence, and report suspicious transactions to the UAE Financial Intelligence Unit through the goAML platform. Where a client's business falls within a DNFBP category, PNPC integrates these obligations into the governance framework rather than treating them as a disconnected compliance exercise.

A director's resignation or removal should trigger an immediate review of every signing authority tied to that individual — bank mandates, the delegation-of-authority matrix, any standing POA, and any regulated senior management function they held — because their formal removal from the board does not automatically revoke authority a bank or third party has been separately notified of. The departure should be documented through a board resolution, and every institution relying on the departing director's authority should be formally notified that it has ended.

A delegation-of-authority (DOA) matrix is an internal governance document that sets out, by role, the value threshold up to which an individual can approve a transaction on the company's behalf — it governs internal decision-making authority. A Power of Attorney is a separate, formally executed and typically notarised legal instrument that authorises a named individual to act and sign on the company's behalf before third parties — banks, government authorities, or counterparties — and is what those third parties actually rely on to accept that the signatory has authority. The DOA matrix should inform who is granted a POA and for what scope, but the two documents serve different purposes and neither substitutes for the other.

Corporate Tax registration is a compliance obligation the entity must fulfil under Federal Decree-Law No. 47 of 2022 regardless of internal governance formalities, but the decision to register, the election of any available option (such as a Qualifying Free Zone Person election, where eligible), and the ongoing tax position taken should be properly authorised and documented through the company's governance framework — typically a board or management resolution — so there is a clear record of who approved the position and on what basis.

There is no single UAE-wide rule dictating who must approve a VAT return, but good governance practice assigns clear accountability — typically a finance manager or CFO preparing the return, with a documented review and sign-off step by a director or authorised signatory before submission to the FTA — so the return reflects a properly authorised position rather than being filed by whoever happens to have FTA portal access. This accountability is usually captured in the delegation-of-authority matrix alongside other financial approval thresholds.

A holding company's governance typically centres on investment decisions, capital allocation across subsidiaries, and group-level related-party and intercompany policy, with a comparatively lean board focused on strategic oversight rather than day-to-day operations. An operating subsidiary's governance needs to cover the operational decision-making, delegation of authority, and regulatory compliance specific to its actual business activity. Where a group has both, PNPC designs a consistent overall governance architecture — reserved matters, related-party policy, and reporting lines — that recognises the different practical focus of each entity's board rather than applying identical governance to both.

A board pack is the set of materials circulated to directors ahead of a board meeting — typically the agenda, minutes of the previous meeting, financial updates, any papers on matters requiring a decision, and background on significant related-party transactions or reserved-matter items coming up for approval. A consistent board pack practice gives directors a genuine opportunity to consider matters before voting, which strengthens both the quality of the decision and the evidentiary record that a properly informed decision was made.

There is no single UAE-wide statutory threshold that exempts small related-party transactions from governance approval; any such threshold is a matter for the company's own related-party policy to define, calibrated to the entity's size and risk profile. What matters for Corporate Tax purposes under Federal Decree-Law No. 47 of 2022 is that related-party transactions are conducted and priced on an arm's-length basis and, where required, properly disclosed — the governance approval threshold and the tax disclosure requirement are related but distinct questions, and PNPC addresses both when drafting the policy.

There is no blanket requirement for every UAE private company to appoint an independent director, but the case for one strengthens materially where external investors are involved, where the board would otherwise be composed entirely of related family members or executives with a direct financial interest in the matters being decided, or where a DIFC/ADGM licence category specifically requires independent board representation. An independent director's practical value is bringing a genuinely disinterested perspective to reserved matters such as related-party approvals and conflict situations that executive or family directors cannot provide.

The most common findings are: no contemporaneous board minutes or resolutions supporting significant past decisions, a shareholders' agreement that conflicts with or is silent on matters the AoA does not cover, undocumented or unpriced related-party transactions, a delegation-of-authority matrix that does not match the actual bank mandate, an outdated UBO register, and — for family businesses — no documented succession plan for what happens to control on a founder's death or incapacity. Each of these is fixable in advance far more cheaply than it is resolved as a live finding during a live due diligence process with a deal timeline attached.

Free zone authority internal regulations generally operate as the administrative framework within which a company's own AoA sits, and the AoA itself is typically drafted using the specific free zone's model template and must be filed with, and accepted by, that authority — so a genuine conflict is uncommon in a properly drafted and filed AoA. Where an apparent inconsistency does surface (often after a free zone authority updates its internal regulations after the AoA was originally filed), PNPC reviews both documents against the current free zone rules and advises whether an AoA amendment is needed to restore consistency.

Formal, mandatory ESG or sustainability governance reporting in the UAE currently applies most directly to specific regulated sectors and larger or listed entities under SCA and relevant regulator guidance, rather than as a universal requirement for every private company. That said, ESG-adjacent expectations are increasingly relevant in practice for UAE businesses seeking institutional investment, bank financing, or international supply-chain relationships, where counterparties may expect at least a basic governance and sustainability policy even where it is not a strict UAE legal requirement for that specific entity.

Corporate Governance Advisory is the design work — building or redesigning the board structure, delegation of authority, related-party policy, and shareholder or family agreements that determine how the company is actually governed. Company Secretarial services are the recurring administrative layer that keeps the company compliant with its existing structure — filing annual returns, updating the UBO register, renewing licences, and maintaining the statutory register — without redesigning the underlying governance framework itself. The two are complementary: the secretarial function should reflect and maintain the governance framework designed here, not operate independently of it.

A board that is documented in the AoA and shareholder register but does not genuinely meet, deliberate, and make decisions is a governance framework in name only, and this gap tends to surface at the worst possible moments — a Corporate Tax or QFZP substance review questioning whether real UAE-based decision-making occurs, a DFSA/FSRA supervisory review of a regulated entity, or a shareholder dispute where one party argues decisions were never properly authorised in the first place. A framework that looks correct on paper but is not reflected in actual practice is, in practical terms, no framework at all.

For a group with several free zone or mixed-jurisdiction entities under a common holding structure, PNPC designs a consistent governance architecture — board composition principles, a shared related-party policy, a group-wide delegation-of-authority approach, and common minute-keeping standards — applied to each entity individually within that entity's own specific regulatory constraints, rather than either forcing an identical template onto every entity or letting each entity's governance drift independently. This keeps the group's overall decision-making traceable while still respecting that a DMCC entity, a mainland LLC, and a DIFC entity operate under different underlying rules.

Governance and labour compliance intersect primarily at the level of who is authorised to approve payroll, sign off WPS submissions, and make employment-related decisions such as hiring, termination, or remuneration changes above a defined threshold — these approval authorities should be reflected in the delegation-of-authority matrix alongside financial and commercial approvals, so payroll and HR decisions are not left outside the documented governance structure. PNPC's governance framework build typically confirms who holds this authority, even though the underlying WPS compliance mechanics themselves sit with the company's payroll or HR function.

Yes, at the level of governance accountability — confirming who within the company's board or management structure is accountable for data protection decisions, how a data-related incident is escalated and approved for response, and how data protection policy sits within the broader delegation-of-authority and reserved-matters framework. Where a client needs the underlying data protection policy and compliance programme itself built or reviewed in depth, PNPC coordinates that with its Data Privacy & Protection Advisory engagement, so the two pieces of work are consistent rather than developed separately.

Yes. Where a dispute cannot be resolved through the shareholders' agreement's reserved-matters, deadlock-resolution, or negotiated buy-out provisions, and proceeds toward litigation or arbitration before the Dubai Courts, DIFC Courts, ADGM Courts, or an arbitral forum, PNPC does not appear as courtroom advocate but supports the client's appointed UAE-licensed litigation or arbitration counsel with the underlying governance documentation, minutes, and resolution history that form part of the evidentiary record — coordinated through PNPC's Litigations & Claims Settlement engagement where the matter has escalated that far.