AI development in Dubai and the UAE: data law, Arabic and WhatsApp (2026).
What UAE companies need to know before building an AI system: how federal, DIFC and ADGM data rules apply, and what Arabic and WhatsApp change about the build.
Three things make AI projects for UAE companies different from the same project in London or New York. Where your company is licensed decides which data law applies. Customers expect to be served in Arabic and English, often in the same conversation. And many of those conversations happen on WhatsApp rather than a website.
This guide covers the rules and the practical choices in 2026.
Which data law applies to you
The UAE has three data protection regimes, and your licence decides which one you’re under.
- Onshore: the federal PDPL. Federal Decree-Law 45 of 2021 has been in force since 2 January 2022. Its Article 18 gives people the right to object to decisions made solely by automated processing and to have a person review them. Companies get six months to comply once the Executive Regulations are issued. As of early 2026, authoritative practice guides reported that those regulations hadn’t been issued and that the UAE Data Office wasn’t yet fully operational, so check the status before you plan around specific obligations. Some sectors, including health and finance, have their own rules on top.
- DIFC. The Dubai International Financial Centre has its own data protection law and commissioner. Its Regulation 10, issued in 2023, specifically covers personal data processed by autonomous and semi-autonomous systems, including AI. It places duties on the companies that deploy and operate them.
- ADGM. Abu Dhabi Global Market has its own regulations and regulator, with fines of up to USD 28 million.
Whichever regime applies, the same design choices keep you safe: collect only what the system needs, log what it does, give people a route to a person, and know where your data is processed. If you use a model provider outside the UAE, check the transfer rules for your regime and your sector. Several major providers now offer regional hosting.
Arabic changes the build
A system that works well in English won’t automatically work well in Arabic. Plan for these from the start:
- Dialect and register. Customers write in Gulf Arabic, other dialects and Modern Standard Arabic, and many switch between Arabic and English mid-sentence or write Arabic in Latin letters. Your test cases need all of it.
- Model choice. General-purpose models from OpenAI, Anthropic and Google handle Arabic well. Arabic-first models are also available from the region, including Jais (from G42 and MBZUAI), the Falcon family (from the Technology Innovation Institute in Abu Dhabi) and Saudi Arabia’s ALLaM. Compare them on your own evaluation set, not on benchmarks.
- Retrieval. Search over Arabic documents needs Arabic-aware text processing. If your documents are in one language and questions arrive in another, cross-language retrieval needs testing on its own.
- Interface. Right-to-left layout, mixed-direction text and Arabic numerals all need handling in any web or app interface.
WhatsApp is often the channel
For many UAE businesses, from real estate to clinics, customers would rather send a WhatsApp message than fill in a web form. An AI agent there can answer, qualify, quote and book around the clock, and hand over to your team with the full conversation. Meta’s rules shape the design: its terms allow AI that supports your business, such as sales or support, but bar companies whose product is a general-purpose AI assistant.
Our WhatsApp sales agent write-up shows how one works in production, with prices drawn from real data and negotiation limits enforced in code.
The UAE’s AI push, and what it means for buyers
The UAE Strategy for Artificial Intelligence, launched in 2017, aims to make the country a leader in AI by 2031. Dubai’s Universal Blueprint for AI targets AED 100 billion a year for the emirate’s economy from AI. It also includes a chief AI officer in each government entity and a dedicated AI commercial licence. The Dubai AI Campus at DIFC opened in 2024. For companies selling to government or semi-government buyers, expect AI to appear in tenders, with questions about data residency, Arabic support and governance.
What to ask an AI development partner in the UAE
| Ask | Good answer |
|---|---|
| How will you test Arabic, English and mixed messages? | A test set drawn from real customer messages in each, scored on every change |
| Where is our data processed and stored? | Named regions and subprocessors, matched to our licence and sector |
| What can the agent commit us to? | Limits enforced in code (discounts, terms, bookings), not just in the prompt |
| What happens when it doesn’t know? | It says so, and hands over to a person with the conversation attached |
| What do we own at the end? | The code, prompts, evaluation set and documentation |
Questions UAE buyers ask
Do we need to host everything in the UAE?
Not always. It depends on your regime, your sector and the data. Government, health and financial work is most likely to require local or approved hosting. Design the system so the model and hosting can change without a rebuild.
How long does a project take?
A focused assistant or WhatsApp agent typically takes six to ten weeks, including Arabic testing. Larger integrations take three to five months.
Can one assistant serve web chat, WhatsApp and staff?
Yes. The same core (retrieval, rules and limits) can sit behind several channels, each with its own interface and tests.
Modulus Labs AI builds AI agents, assistants and the web and mobile apps around them for companies in the UAE and across the Gulf. Tell us what you need, and we’ll reply within one business day.