← All posts
Compliance·6 September 2026·7 min read

Your first 12 months as a UAE company: every legal deadline you can't miss

A month-by-month calendar of every filing, renewal and disclosure a new UAE company must handle in year one — trade licence, WPS, VAT, Corporate Tax, ESR, UBO, and PDPL.

You've registered the entity. The trade licence is on the wall. Now what?

Most first-time UAE founders miss two or three legal deadlines in their first year. Not because they don't care — because nobody hands them a calendar. The licence authority cares about renewals; MOHRE cares about payroll; the FTA cares about VAT and Corporate Tax; the Ministry of Economy cares about UBO. Each one operates in its own portal, on its own schedule, with its own penalty regime.

This is that calendar. Twelve months of every filing, renewal and disclosure you cannot afford to miss.

Month 1: The Foundation

The first 30 days are administrative, but each item unlocks the next.

Trade licence activation. The physical licence arrives, but the DED / freezone authority still expects you to complete final activation — signage, corporate stamp, PRO registration. Skip it and you'll pay for it at renewal.

Immigration file + establishment card. Required before you sponsor any visa (employee, dependant or investor). Typical timeline: 5–10 working days once documents are complete. Without it, no visas move.

Corporate bank account. The single biggest under-estimate for new UAE companies. Plan 4–6 weeks minimum, sometimes longer. Every UAE bank has different KYC thresholds — expect 30+ documents and 2 in-person meetings. Start this in week 1, not month 3.

MOHRE + WPS enrolment. If you have any employees — even one — you must be enrolled in the Wage Protection System. First salary payment must clear through WPS on time or you're in breach, and future visa renewals are blocked at the source.

PDPL Data Controller designation. Under Federal Decree-Law 45/2021, any UAE company processing personal data must designate a Data Controller (whether or not you need a full DPO). If you never name one, the default Controller is the founder — with personal liability attached.

Months 2–3: Systems Running

First WPS payroll run. All employee salaries must transit through the Wage Protection System via an approved bank or exchange house. Delayed WPS files are the fastest route to a MOHRE lockout.

First VAT return (if VAT-registered at incorporation). Filed quarterly through the FTA portal. Even if your VAT liability is zero, the return must be filed — late filing triggers administrative penalties that escalate on repeat.

Populate your renewal calendar. Get every recurring deadline into whatever system you'll use to track them. Trade licence, WPS, VAT, insurance, tenancy — they don't self-remind, and grace periods are shorter than most founders expect.

Months 4–6: Mid-Year Check

UBO update, if anything changed. The Ministry of Economy requires you to notify any change in Ultimate Beneficial Owners (new shareholder, exit, restructure) shortly after the change. Most founders miss this because they assume it's an annual filing. It isn't — it's continuous.

Bank account KYC refresh. Every UAE bank runs periodic KYC refreshes (typically every 6–12 months). Missing the request window results in account freezes. Watch your registered email — banks don't call.

Contract expiry checks. By month 6, several original setup contracts (office lease, insurance, cloud tenancies) are approaching renewal. Auto-renewals almost always favour the counterparty — negotiate before the notice window closes.

Months 7–9: The Big Ticket Items Approach

Corporate Tax registration. Every UAE-taxable entity must register for Corporate Tax with the FTA. The deadline depends on your incorporation date and licence-issuance month, but for most 2024-incorporated companies, the deadline falls somewhere in this window. Missing CT registration triggers a significant administrative penalty — even if you owe zero tax.

Trade licence renewal preparation. Most emirates require 30–60 days of lead time. Freezone renewals often bundle with immigration file renewal, so treat them as one workflow. Missing your renewal date means the licence expires plus daily late fees in most emirates until reinstated.

Economic Substance Regulations (ESR). If your entity carries out any "relevant activity" — holding company, IP business, distribution, headquarters, banking, insurance, investment fund management, lease-finance, or shipping — ESR notification is due within 6 months of your financial year-end, and the full ESR report is due within 12 months. ESR is triggered by activity, not entity size, and it catches most founders off-guard.

Months 10–12: Annual Filings

UBO annual confirmation. Even if nothing changed, some emirates require an annual confirmation filing to verify UBO records are current. Missing it triggers escalating fines.

Statutory audit (freezone-dependent). DMCC, DIFC, ADGM and most freezones require an annual audit by a licensed UAE auditor from the freezone's approved panel. Mainland companies over certain revenue thresholds also require audits. Audits take 4–8 weeks — book your auditor by month 9, not month 12.

First Corporate Tax return. Due 9 months after the end of your first tax period. For a company with a calendar tax period incorporated in early 2024, that lands in September 2025. For companies with fiscal years ending later, the CT return will land in year two — but the return itself is still year-one tax. Get this wrong at 9% of profits and the tax cost dwarfs any penalty.

The Recurring Cycle (Every Year, Forever)

Once you're through year one, four things recur on autopilot:

  • Trade licence renewal — annually, on your issuance anniversary
  • WPS payroll — monthly, before the deadline of the following month
  • VAT return — quarterly, within 28 days of period end (if VAT-registered)
  • Corporate Tax return — annually, within 9 months of your tax period end

Plus the intermittent items: UBO updates on change, ESR filings if you have relevant activities, bank KYC refreshes, insurance renewals, tenancy renewals.

Freezone-Specific Twists

The above covers the federal calendar. Every freezone adds its own layer:

  • DMCC — annual audit by DMCC-approved auditors only, member portal renewal, specific document templates
  • DIFC — DFSA regulatory returns if you're financially regulated, separate Employment Law regime (not the Federal Labour Law)
  • ADGM — FSRA reporting if regulated, ADGM Companies Regulations audit rules, ADGM Employment Regulations
  • IFZA / RAKEZ / SPC / Meydan — simpler regimes but each has its own portal, its own renewal window, its own document expectations
  • Mainland (DED) — MOA amendments through Emirates ID + DED, service agent requirements for certain licence types

If you operate in multiple freezones or mix mainland + freezone, you multiply the calendar.

What Most Founders Miss

After watching hundreds of UAE first-year setups, these are the recurring blind spots:

  1. ESR is triggered by activity, not entity type. A tiny holding company can be in scope. A large trading company might not be. Check the activity list; don't assume.
  2. MOHRE renewals are per-visa, not per-licence. Each employee's visa has its own expiry. Miss one and that employee stops being legally employed.
  3. Bank KYC refresh isn't optional and isn't reschedulable. Miss the deadline, the account freezes, and unfreezing takes 2–4 weeks.
  4. Trade licence auto-renewal isn't automatic. Even in freezones that market it that way, you must confirm payment and document currency each cycle.
  5. PDPL applies to everyone. There is no minimum revenue threshold. Small companies are in scope from day one.

How OpeAre Helps

OpeAre pre-loads your compliance calendar with every UAE federal deadline the day you sign up, matched to your entity's incorporation date, freezone and activity type. Reminders fire at 30, 14 and 7 days before each deadline — into your inbox and Slack, so the ones that get missed aren't missed because you forgot they existed.

Plus every contract, policy, KYC file, payment approval and audit log lives in one workspace, so when the licence authority or the FTA asks for proof — you have it in one place, not scattered across four Dropbox folders and three lawyers' inboxes.

Try OpeAre free for 7 days. Full Business tier access, no card required.

Start free trial → opeare.com

Written by OpeAre Editorial.
Published 6 September 2026.
Try OpeAre free →