WhatWe Do
We design, strengthen and evidence compliance capability for UAE businesses.
Four practices we lead with. Twelve we deliver.
Most clients start with one of these four. The rest of the bench plugs in as the mandate grows , from a single AML review to a multi-year managed programme.
Twelve practices, one bench.
Pick one. Combine three. Hand us the whole thing. The structure flexes to the mandate, the standards don’t.
Regulatory Compliance
AML/CFT, sanctions, KYC and supervisory-grade programmes for banks, exchange houses and DNFBPs.
Learn moreRisk Management
Enterprise, credit, operational and conduct risk — from framework to the next board pack.
Learn moreInternal & External Audit
Statutory, internal, IT and financial-crime audits that read like findings, not literature.
Learn moreCybersecurity
Cyber, third-party risk and incident readiness aligned to NESA, ISO 27001 and PDPL.
Learn moreData & Analytics
Data governance, MIS dashboards and AI-ready foundations for risk, compliance and finance.
Learn moreDigital Transformation
Process redesign, RPA and operating models that scale without breaking the controls.
Learn moreFinance Transformation
Close, control, FP&A, IFRS and the finance-system upgrade you keep deferring.
Learn moreOperations
Back-office redesign, payroll and shared-service build-out for banks and corporates.
Learn moreCustomer Experience
NPS, voice-of-customer analytics, journey design and complaints handled like controls.
Learn morePeople & Change
Capability uplift, change management and the training that makes a new policy stick.
Learn moreManaged Solutions
Outcome-based managed services and specialists deployable in 48 hours.
Learn moreStrategic Advisory
Market entry, feasibility, M&A and portfolio calls — with the regulator already in the room.
Learn moreUAE regulatory radar.
The frameworks our clients — banks, DNFBPs and free-zone companies — most often need to evidence against.
PDPL — Personal Data Protection
Federal Decree-Law No. 45 of 2021.
Data subject rights, controller and processor duties.
AML-CFT & PF
Federal Decree-Law No. 20 of 2018.
Money-laundering, terrorist and proliferation financing.
Cybercrime Law
Federal Decree-Law No. 34 of 2021.
Digital fraud, data misuse and offence definitions.
ESR — Economic Substance
Cabinet Decision No. 57.
Relevant-activity tests and substance reporting.
UBO — Beneficial Ownership
Cabinet Decision No. 58.
UBO registers, disclosure and verification.
VAT & Corporate Tax
FTA registration, return cycles and
the 9% corporate tax regime.
How We Deliver
Four phases. Clear milestones. Built to operate, not to sit on a shelf.
Diagnose
Regulatory mapping, control inventory, gap analysis against UAE expectations.
Design
Frameworks, policies, procedures and operating models calibrated to your business.
Implement
Roll out controls, train teams, configure tools and tooling. Go-live discipline.
Operate
Run the function under SLA. CDD, screening, monitoring, reporting at production scale.
Transformation Practices
Where business services meet engineering — operating-model change, automation and analytics.
Data & Analytics
Risk MI, regulatory dashboards, customer segmentation and decision-grade reporting.
Digital Transformation
Operating-model design, channel and platform change for regulated firms.
Finance Transformation
Close, controls, FP&A redesign and finance-process automation.
Operations
Process re-engineering, BPO transition support and back-office optimisation.
Take the next step
Want to know which capability your business needs first?
Tell us where the regulatory pressure is — we'll start there. From a single AML review to a multi-year managed programme, the bench scales with the mandate.
