Executive summary

• First 90 days: UAE compliance risk starts when deadlines, owners, and evidence are not mapped early.
• Entity type: Mainland, free zone, listed, small business, and high-revenue companies do not track the same obligations.
• Finance control: A useful compliance system needs deadline, owner, recurrence, evidence, and status.
• Best next step: Start with a calendar before obligations become last-minute filing work.

A UAE company finishes setup, receives its licence, opens a bank account, and starts operating.

The hard part appears to be done. The company can invoice customers, hire employees, sign contracts, and start reporting performance. For the founder or finance lead, the focus naturally moves to revenue, cash, hiring, and monthly reporting.

But this is also when UAE company compliance obligations start to become a finance operating issue.

In the first 90 days, the company needs to understand which obligations apply, who owns them, when they recur, what evidence is required, and which deadlines depend on entity type, fiscal year-end, revenue, employees, free zone, or sector. The risk is not usually that finance ignores compliance. The risk is that different parts of compliance sit in different places from day one.

One accountant tracks VAT. HR tracks payroll. The founder remembers licence renewal. A tax advisor watches corporate tax. The free-zone portal holds audit or accounts filing requirements. If leadership asks, “Are we covered for the next quarter?” there may be no single place to answer from.

That is the real first-90-days problem.

Why the first 90 days create compliance risk

The first 90 days after setup are not only an administrative period. They set the operating rhythm for how the company will track obligations going forward.

At first, the company can survive with reminders, emails, advisor notes, and spreadsheet tabs. That may work when there are only a few items to remember. But as soon as the company hires employees, becomes VAT-registered, crosses a threshold, operates from a free zone, or prepares its first financial year-end, the compliance workload becomes less predictable.

The problem is fragmentation. Corporate tax may follow one timeline. VAT may follow another. Payroll obligations may recur monthly. Free-zone filings may depend on the authority. UBO updates may connect to licence renewal. Audit or accounts requirements may depend on company type. E-invoicing may apply later depending on revenue.

A company that does not map these early often ends up treating compliance as a series of surprises. The deadline appears, someone asks who owns it, finance searches old emails, and the team works backwards from urgency.

That is a weak operating model. Finance should not discover obligations only when the deadline is close.

Which UAE company compliance obligations may apply

A UAE company does not have one universal compliance checklist. The right starting point is to identify which categories usually apply to the entity.

For most finance teams, the first review should cover:

• Corporate tax registration, return, and payment timelines
• VAT registration thresholds, return filing, and payment obligations
• Payroll and WPS requirements
• GPSSA obligations for Emirati employees, where applicable
• Free-zone audit or accounts filing requirements
• UBO declaration updates
• Chamber, licence, or authority-related obligations
• Annual general assembly requirements for LLCs, where applicable
• Transfer pricing or related-party transaction requirements
• Corporate tax relief elections, where relevant
• E-invoicing milestones, especially for higher-revenue businesses
• Voluntary disclosure requirements if tax errors are discovered

The important point is not that every company has every obligation. It is that finance needs a filter for what applies.

A Mainland LLC may need to think about corporate tax, VAT, WPS, GPSSA, Emiratisation if it crosses the relevant employee threshold, UBO, Chamber items, LLC annual general assembly requirements, and voluntary disclosure. A DMCC company may need to track corporate tax, VAT, WPS, UBO, annual audit requirements, and specific free-zone items. A DIFC or ADGM company may have its own accounts filing timelines. A listed PJSC has capital markets filing obligations. A high-revenue company may need to prepare for e-invoicing milestones.

This is why the first step is not “make a deadline list.” The first step is to define the company profile.

Why obligations differ by company type

The same UAE compliance calendar can produce different working lists for different companies.

A small business under the relevant revenue threshold may need to review whether small business relief applies and whether it must be actively elected. A company with AED 50M or more in revenue may need to prepare earlier for e-invoicing milestones. A multinational group above the relevant revenue threshold may need to track CbCR or DMTT-related obligations. A company generating greenhouse gas emissions may need to consider climate-related compliance.

Free-zone companies also need a more specific view. DMCC, JAFZA, DIFC, and ADGM do not all follow the same filing pattern. Some obligations are common across many companies, such as corporate tax or VAT where applicable. Others depend on the free zone, company form, size, or regulatory status.

That is where generic reminders become unreliable. A reminder that says “audit due in June” is not enough if the company has not confirmed which authority applies, whether the company type is in scope, what the financial year-end is, and what evidence needs to be submitted.

The same applies to recurring obligations. A VAT-registered business needs to track VAT returns and payments based on its tax period. Employers need to track payroll obligations. Companies with relevant tax errors need to know when voluntary disclosure may be required. These are not one-off setup tasks. They are recurring finance controls.

The first 90 days should therefore produce a working compliance map, not a folder of scattered documents.

The first 90-day UAE compliance checklist

Use the first 90 days to build the compliance rhythm before the company is operating under pressure.

Confirm the company profile

Start with the basics. Confirm the legal entity type, licensing authority, free zone or mainland status, financial year-end, shareholder structure, activity, expected revenue, employee plan, and whether the company is part of a wider group.

This profile determines which obligations should be reviewed first.

Confirm tax registration and filing timelines

Finance should confirm whether the company is required to register for corporate tax, what its financial year-end is, and when the first return and payment timeline may fall. The UAE Corporate Tax return and payment timeline is generally tied to the tax period, so the financial year-end matters for planning.

Do not wait until the return is due to define ownership. Assign responsibility early for tax registration status, return preparation, payment planning, supporting records, and advisor coordination.

Check VAT registration exposure

VAT should be reviewed early, even if the company is not yet registered.

Finance should track taxable supplies, imports, expected revenue, and whether the company is approaching a registration threshold. Once registered, VAT returns and payments become part of the recurring finance calendar.

The operating point is simple: VAT should not live only in the accountant’s head. It should sit inside the monthly finance review.

Confirm payroll, WPS, and GPSSA requirements

If the company hires employees, payroll compliance needs to be mapped from the start.

Finance should confirm whether WPS applies, how salaries will be processed, who owns payroll submission, and how the company tracks payment timing. If Emirati employees are hired, GPSSA obligations may also need to be reviewed.

Payroll is a recurring compliance workflow. It should not be treated as a disconnected HR task if finance is responsible for cash, payroll funding, or monthly reporting.

Review free-zone and authority-specific requirements

If the company operates in a free zone, finance should confirm the specific audit, accounts, licence, portal, and filing requirements for that authority.

This is where many companies become exposed. They assume “free zone” is one category, when each authority may have different rules, timelines, and submission processes. DMCC, JAFZA, DIFC, and ADGM should be reviewed separately.

Confirm UBO and corporate structure updates

UBO requirements should be tracked as part of the company’s recurring compliance calendar. Finance should know when updates are required, what information must be kept current, and how this connects to licence renewal or authority requirements.

This is not always a monthly task, but it should have a clear owner.

Identify threshold-based obligations

Some obligations appear only when the company crosses a threshold. That may involve revenue, employee count, group revenue, taxable supplies, or transaction values.

Finance should create a simple trigger list. For example: if revenue crosses a certain point, check VAT, e-invoicing, small business relief eligibility, or other threshold-based items. If the company hires more staff, review payroll and Emiratisation exposure. If related-party transactions become material, review transfer pricing requirements.

Thresholds should be monitored before they are crossed, not after.

Assign owners and evidence

A compliance calendar is only useful if every obligation has an owner.

For each item, finance should record:

• What the obligation is
• Which entity it applies to
• Who owns it
• When it is due
• Whether it is fixed-date, recurring, or event-based
• What evidence is required
• Where the evidence is stored
• Whether an advisor or authority portal is involved
• What the current status is
• When it should be reviewed again

This can start in a spreadsheet. The point is not to build a complex system immediately. The point is to stop relying on memory.

What finance should review every month

After the first 90 days, compliance should become part of the monthly finance rhythm.

The monthly review does not need to be long. It should answer a few practical questions:

• Did any new obligation become relevant this month?
• Are any deadlines due in the next 30, 60, or 90 days?
• Has the company crossed a revenue, VAT, employee, or group threshold?
• Are payroll, WPS, and pension obligations up to date?
• Are VAT, corporate tax, or excise items on track?
• Are any free-zone audit or accounts deadlines approaching?
• Are UBO, licence, Chamber, or authority updates required?
• Is evidence stored for completed filings?
• Are any tax errors or voluntary disclosure issues under review?
• Does leadership have a clean view of upcoming compliance risk?

This is where a calendar becomes more than a list of dates. It becomes a control layer for finance.

A useful calendar should show both fixed deadlines and recurring obligations. Fixed deadlines help finance prepare for known dates. Recurring obligations help finance build habits around monthly, quarterly, annual, and event-based work.

The UAE Compliance Calendar is built around that distinction: fixed-date deadlines on one side, recurring obligations on the other, then entity-type filters to help companies understand what may apply to them.

When a compliance calendar becomes necessary

A compliance calendar becomes necessary when no single person can reliably hold the full compliance picture in their head.

That point arrives earlier than many companies expect. It can happen when the company hires its first employees, registers for VAT, starts operating from a free zone, prepares for its first year-end, adds a second entity, or starts selling enough that threshold-based obligations become relevant.

The calendar does not replace tax or legal advice. It gives finance a working structure for asking better questions, tracking deadlines, assigning ownership, and reducing last-minute filing work.

The same operating principle applies beyond compliance: finance teams need one controlled view of important data, deadlines, and reporting logic instead of scattered files and reminders.

For UAE companies, the first 90 days are the right time to build that control. Waiting until the first missed deadline, late filing, or board question is usually more expensive than setting up the rhythm early.

This article is a practical reference, not legal or tax advice. Obligations vary by entity type, fiscal year-end, sector, free zone, and company circumstances. Always confirm specific obligations with a qualified UAE tax advisor or the relevant authority before acting.

Download the UAE Compliance Calendar to track fixed deadlines, recurring obligations, and company-type requirements in one source-cited reference.

‍