Business Transformation & Technology Consulting · Legal & Regulatory Support
Corporate Governance Advisory
Corporate Governance Advisory is the discipline of building the board structures, decision-making rules, and internal controls that determine whether a UAE company survives an audit, a regulator's review, an investor's due diligence, or a family succession event.
Chartered Accountants · Dubai · Since 1986
Corporate Governance Advisory in the UAE covers the design, documentation, and ongoing operation of the structures through which a company's owners, board, and management exercise authority, make decisions, manage conflicts, and remain accountable to shareholders, regulators, and other stakeholders. For UAE mainland companies, the baseline legal framework sits in the Commercial Companies Law (Federal Decree-Law No. 32 of 2021), which sets out directors' duties, general meeting requirements, and — for public joint stock companies specifically — mandatory governance disclosures overseen by the Securities and Commodities Authority (SCA). For companies incorporated in DIFC or ADGM, governance is instead governed by each centre's own companies regulations, which draw on English common-law and international governance norms and, for regulated financial-services entities, layer on additional Dubai Financial Services Authority (DFSA) or Financial Services Regulatory Authority (FSRA) governance and controller requirements. Free zone companies such as those in JAFZA, DMCC, RAKEZ, IFZA, Meydan, RAK ICC, or Ajman Free Zone are governed primarily by the constitutional documents (Memorandum and Articles of Association) filed with, and the internal regulations issued by, the specific free zone authority, which typically track the mainland Companies Law's core principles while adding authority-specific administrative requirements.
Good governance is not simply a compliance checkbox — it is the operating system that determines who can bind the company, how conflicts of interest are identified and managed, how related-party transactions are approved and priced, how financial information flows to the people entitled to see it, and how a dispute between shareholders or a change of control is resolved without paralysing the business. In practice this covers: board composition and the balance between executive, non-executive, and (where relevant) independent directors; a documented schedule of matters reserved to the board versus delegated to management; conflict-of-interest and related-party transaction policies, which have taken on sharper importance since the introduction of UAE Corporate Tax under Federal Decree-Law No. 47 of 2022, because related-party pricing now has direct tax consequences alongside the underlying governance concern; delegation of authority frameworks and signing-authority matrices that define who can commit the company to what value of transaction; minute-keeping and board-resolution discipline sufficient to withstand a bank's, auditor's, or regulator's later scrutiny; and, for closely held and family-owned UAE businesses — a very large share of the UAE private company landscape — a family constitution or shareholders' agreement that separates family relationships from business decision-making and sets out a workable succession and exit framework before a crisis forces the issue.
Governance obligations scale with a company's structure and regulatory footprint. A single-shareholder free zone FZE has comparatively light formal governance requirements beyond what its own AoA and free zone authority require, though even here a documented decision-making and signing-authority framework materially reduces operational risk. A multi-shareholder mainland LLC or a group with several UAE and offshore entities needs board and shareholder-meeting discipline, related-party transaction policies, and often a shareholders' agreement layered on top of the AoA to cover matters the AoA does not reach — pre-emption rights, drag-along/tag-along provisions, reserved matters requiring unanimous or supermajority consent, and deadlock-resolution mechanisms. A DIFC or ADGM-regulated entity — a fund manager, a family office, a fintech, an insurance intermediary — carries the heaviest governance load, since the DFSA or FSRA rulebooks impose specific board composition, controller-approval, systems-and-controls, and reporting obligations on top of the underlying companies regulations, with regulatory consequences (not merely commercial ones) for governance failures.
Governance and tax compliance are now more tightly linked than many UAE businesses appreciate. Under UAE Corporate Tax, related-party transactions must generally be conducted and priced on an arm's-length basis, and Qualifying Free Zone Person (QFZP) status — which can preserve the 0% Corporate Tax rate on qualifying income — depends partly on the entity maintaining adequate substance and properly documented governance and decision-making within the UAE, not merely holding a free zone licence on paper. Economic Substance Regulations (ESR), while their reporting obligations have been progressively wound down following the introduction of Corporate Tax, established a governance-adjacent expectation that continues to inform good practice: that a UAE entity's board or equivalent management body actually meets, actually deliberates, and actually makes and minutes the core income-generating decisions within the UAE, rather than rubber-stamping decisions made elsewhere. A governance framework that cannot demonstrate genuine UAE-based decision-making is a live risk in both a Corporate Tax review and, for regulated entities, a DFSA/FSRA supervisory review.
PNPC's approach treats corporate governance as infrastructure, not paperwork. Because our Dubai team also handles company formation, Corporate Tax and VAT compliance, audit coordination, and — for many of the same family-owned client base — wills, succession, and cross-border India-UAE advisory, every governance framework we build is checked against the client's actual ownership structure, tax position, and, where relevant, family succession plans. A board charter that looks correct in isolation but conflicts with the company's transfer-pricing documentation, or a family constitution that is silent on what happens to voting shares on a founder's death, is not functioning governance — it is a document waiting to fail at the moment it is actually tested. We build governance frameworks to be used, referred to, and relied upon when a bank, an auditor, an investor, a regulator, or a family dispute actually calls on them — not filed away and forgotten until the day they are needed and found wanting.
Two further UAE-specific overlays increasingly sit inside the governance conversation rather than beside it. First, the Ultimate Beneficial Owner (UBO) regime — introduced through Cabinet Resolution requirements on Regulation of Beneficial Owner Procedures and administered by DED, the relevant free zone authority, or, for DIFC/ADGM entities, the centre's own registrar — requires companies to identify, record, and keep current a register of individuals who ultimately own or control the entity, and to file that information with the licensing authority. A governance framework that changes shareholding or board control without a corresponding UBO register update is not merely an administrative oversight; it leaves the company's public filings inconsistent with its actual ownership at precisely the moment a bank, auditor, or regulator is most likely to check. Second, for UAE businesses that fall within the Designated Non-Financial Business or Profession (DNFBP) categories under UAE AML/CFT law — a category that includes certain company service providers, real estate agents, dealers in precious metals and stones, and independent legal or accounting professionals — governance must extend to AML/CFT policies, customer due diligence procedures, and suspicious transaction reporting obligations to the UAE Financial Intelligence Unit (FIU) via the goAML platform, under supervision from the Ministry of Economy. Where a client's business sits within a DNFBP category, PNPC folds the AML/CFT governance layer into the same framework build rather than treating it as a separate, disconnected compliance exercise.
Corporate Governance Advisory vs related UAE corporate and legal engagements
| Feature | Corporate Governance Advisory | Business Setup / Incorporation | Legal Notice, POA & Agreement Drafting | Company Secretarial / Compliance Filings | Wills, Estate & Succession Planning |
|---|---|---|---|---|---|
| Primary purpose | Design and document board, ownership, and decision-making frameworks for an operating company | Register a new legal entity and obtain a trade licence | Draft, review, and coordinate execution of individual agreements, POAs, and notices | File routine statutory and licensing obligations with the relevant authority | Plan and register an individual's personal will and succession arrangements |
| Legal grounding applied | Commercial Companies Law (Federal Decree-Law No. 32 of 2021), DIFC/ADGM companies regulations, DFSA/FSRA rulebooks where regulated, Corporate Tax related-party rules under Federal Decree-Law No. 47 of 2022 | Commercial Companies Law, free zone-specific incorporation regulations | UAE Civil Transactions Law, Commercial Transactions Law, Ministry of Justice notarisation rules | DED/free zone authority administrative and filing rules | Federal Decree-Law No. 41 of 2024 (Personal Status), DIFC Wills Service Centre and ADJD frameworks |
| Output produced | Board charter, delegation-of-authority matrix, related-party policy, family constitution or shareholders' agreement, minute-keeping framework | Trade licence, MOA/AOA, establishment card | Signed, notarised and/or attested agreements, POAs, and notices | Renewed licences, filed returns, updated UBO register entries | Registered will, guardianship nomination, POA for incapacity |
| Engagement structure | Project-based framework build, typically followed by an annual or periodic governance review retainer | One-time project, often followed by annual renewal support | Per-document or retainer, scoped to the specific transaction or ongoing need | Recurring, tied to statutory filing calendar | One-time drafting engagement, reviewed every 2–3 years or on a material life event |
| Coordination with tax/corporate position | Reviewed against the company's actual Corporate Tax position, related-party exposure, and QFZP substance requirements | Determines the entity structure that later governance frameworks will sit within | Reviewed against the company's actual structure and Corporate Tax position | Reflects the entity's existing structure without redesigning it | Reviewed against the client's company shareholdings and succession context |
| Who typically needs it | Multi-shareholder companies, investor-backed businesses, DIFC/ADGM-regulated entities, and family businesses | New businesses establishing a UAE legal presence | Any UAE business entering agreements, or any individual needing a POA or notice | Any UAE company with ongoing statutory obligations | Individuals with UAE-situs assets or UAE company shareholdings |
| UBO / AML-CFT governance overlay | Included where relevant — UBO register consistency and, for DNFBP entities, AML/CFT policy integration | UBO register opened at incorporation, not maintained thereafter | Not addressed unless the specific document is a UBO declaration | UBO register updates filed as a routine administrative task | Not applicable |
| Typical review cadence once delivered | Annual or event-triggered periodic review built into the engagement | Not applicable post-incorporation | Per-document, reviewed only when a new transaction arises | Tied to the statutory filing calendar | Every 2–3 years or on a material life event |
Corporate Governance Advisory, Business Setup, and Wills/Succession Planning are frequently engaged together for family-owned businesses, since ownership structure, board governance, and personal succession planning are interdependent — PNPC structures them as coordinated parts of the same corporate and family advisory function. Company Secretarial filings are the recurring administrative layer that sits underneath — and should reflect — the governance framework designed here.
| Stage | What happens | Who acts | Typical output |
|---|---|---|---|
| Governance & Ownership Diagnostic | PNPC reviews the company's current AoA/MOA, shareholder register, board composition (if any), and existing decision-making practice, and interviews founders/directors on how decisions are actually made today versus how the constitutional documents say they should be made | PNPC governance advisory team, in consultation with founders and directors | Governance gap-assessment memo identifying the mismatch between documented and actual practice |
| Regulatory Footprint Mapping | PNPC confirms which framework(s) apply — mainland Commercial Companies Law, free zone authority rules, DIFC/ADGM companies regulations, and, where regulated, DFSA or FSRA rulebook requirements — since the governance obligations differ materially by regime | PNPC, cross-checked against the entity's licence and registration documents | Applicable-framework summary confirming which governance rules bind the entity |
| Board Structure & Delegation Design | Board composition (executive/non-executive/independent balance where relevant), reserved matters, and a delegation-of-authority matrix defining signing limits by role and transaction value are drafted to reflect the company's actual size, risk profile, and ownership spread | PNPC, reviewed and approved by the board or founding shareholders | Draft board charter and delegation-of-authority matrix |
| Related-Party & Conflict-of-Interest Policy | Policies for identifying related parties, approving related-party transactions, and pricing them on an arm's-length basis are drafted and cross-checked against the company's Corporate Tax related-party disclosures and, where applicable, QFZP substance requirements | PNPC, coordinated with the company's tax advisory function | Related-party transaction policy and standing disclosure template |
| Shareholders' Agreement / Family Constitution Drafting | For multi-shareholder or family-owned companies, a shareholders' agreement or family constitution is drafted covering pre-emption rights, reserved matters, deadlock resolution, exit mechanics, and — for family businesses — the separation of family, ownership, and management roles | PNPC, negotiated between shareholders/family members with PNPC facilitating | Signed shareholders' agreement or family constitution, cross-checked against the AoA |
| Minute-Keeping & Board Cadence Framework | A practical board and shareholder meeting cadence, minute-taking template, and resolution-filing discipline is set up so decisions are documented contemporaneously rather than reconstructed after the fact | PNPC, handed over to the company secretary or designated internal owner | Board meeting calendar, minute template, and resolution register |
| Regulated-Entity Overlay (Where Applicable) | For DIFC/ADGM-regulated entities, the framework is layered with DFSA/FSRA-specific requirements — controller approvals, senior management function accountability, systems-and-controls documentation | PNPC, coordinated with the entity's compliance officer or MLRO where one is required | Regulatory governance addendum aligned to the DFSA/FSRA rulebook |
| Rollout & Board/Family Briefing | PNPC walks the board, shareholders, or family members through the finalised framework in plain language, confirming everyone understands their reserved matters, signing authority, and escalation routes before it goes live | PNPC, presented to the full board or family group | Signed-off governance framework, distributed to all relevant parties |
| Periodic Governance Review | The framework is revisited on a scheduled basis or triggered by a material event — new investor, new director, restructuring, or a Corporate Tax or ESR-adjacent policy change — to confirm it still reflects the company's actual structure and obligations | PNPC, proactively scheduling review points with the client | Updated governance framework and review memo |
| UBO & AML/CFT Governance Overlay (Where Applicable) | For entities with a recent ownership or control change, the UBO register is checked against the governance framework's confirmed shareholding and board structure; for DNFBP-category entities, AML/CFT customer due diligence and reporting policies are integrated into the same framework | PNPC, coordinated with the entity's compliance function or MLRO where one is designated | UBO consistency check memo and, where applicable, AML/CFT policy addendum |
| Handover to Company Secretarial Function | The finalised framework, minute templates, and resolution register are formally handed over to whoever holds the company secretarial function internally or at PNPC, with a clear statement of what that function is responsible for maintaining going forward | PNPC, handed to the company secretary or designated internal owner | Handover memo confirming ownership of ongoing minute-keeping, UBO updates, and review scheduling |
| Bank Mandate & Signatory Reconciliation | Every bank signatory, standing POA, and payment-approval limit is checked against the newly built delegation-of-authority matrix so the company's actual banking authority matches what the governance framework now says it should be, and any mismatch (a departed director still listed as a signatory, for example) is flagged for formal correction with the bank | PNPC, coordinated with the client's finance function and the relevant bank | Bank mandate reconciliation memo and instruction letter to the bank where correction is needed |
| Related-Party Pricing Evidence Pack | Where related-party transactions are material, PNPC compiles the specific pricing rationale and comparable evidence supporting the arm's-length position taken, cross-referenced to the related-party policy's approval trail, so the governance approval and the tax pricing defence sit in the same file rather than two disconnected records | PNPC, coordinated with the company's Corporate Tax advisory function | Related-party pricing evidence file cross-referenced to board approval records |
| Dispute-Readiness Stress Test | Before finalising the shareholders' agreement or family constitution, PNPC walks through a small number of realistic dispute scenarios — a deadlock on a strategic decision, a shareholder wanting to exit, a family member disputing a succession step — against the drafted deadlock, exit, and succession provisions, to confirm they actually produce a workable outcome rather than reading well but failing under real pressure | PNPC, with input from shareholders or family members on realistic scenarios | Stress-test memo confirming provisions hold, or flagging specific gaps to redraft before signing |
| Governance Framework Publication & Register Update | The finalised board charter, policies, and agreements are formally filed in the company's statutory records, referenced in the shareholder and board resolution register, and — where a share or control change has occurred as part of the process — the corresponding UBO filing is submitted to the relevant authority in step with the new documentation | PNPC, coordinated with the company secretary and, where applicable, the licensing authority | Filed governance record set and confirmation of UBO register currency |
| First Post-Rollout Board Cycle Support | PNPC observes or supports the first one to two board or shareholder meetings run under the new framework, confirming the meeting cadence, board pack, and minute template are actually being followed in practice rather than only existing on paper, and correcting any drift before it becomes an entrenched habit | PNPC, attending or reviewing the first live meetings under the new framework | First-cycle observation note confirming the framework is operating as designed, or flagging early corrections needed |
A straightforward governance framework build for a single mainland or free zone company with a small number of shareholders is typically a matter of a few weeks from the initial diagnostic to a signed-off framework. Engagements involving a DIFC/ADGM-regulated entity, a multi-entity group, or a full family constitution negotiation typically take longer, depending on the number of stakeholders and the complexity of reaching agreement on reserved matters and succession terms.
Trade licence and current Memorandum/Articles of Association for each entity in scope
Shareholder register confirming current ownership percentages and any existing share classes
Board resolutions or minutes from at least the past 12–24 months, if any exist, to assess current practice
Organisational chart showing directors, officers, and key decision-makers
Details of any existing shareholders' agreement, joint venture agreement, or investment agreement
Confirmation of the applicable regime — mainland, specific free zone, DIFC, or ADGM — and, where relevant, the DFSA/FSRA licence category held
Corporate Tax registration status and, where applicable, Qualifying Free Zone Person election details
Details of existing related-party transactions and current transfer-pricing documentation, if any
Any prior regulatory correspondence, audit findings, or bank covenant reviews raising governance concerns
Family tree or ownership map identifying which family members hold shares, sit on the board, or work in management
Any existing informal understandings about succession, roles, or exit that need to be formalised
Details of any family members intended for future ownership or management roles, and the timeline anticipated
Existing or planned wills and succession documents affecting company shareholdings
Any term sheet, investment agreement, or investor governance requirements already agreed or under negotiation
Lender or bank covenant terms referencing governance, reporting, or board composition requirements
Due diligence findings or governance gaps flagged by a prospective investor, acquirer, or auditor
Client identity, trade licence and board/shareholder authorisation for the engagement
Existing governance documents, policies, or informal practice notes
Jurisdiction and regulatory framework confirmation for the entity in scope
Points of contact for each shareholder, director, or family stakeholder group
Final signed governance framework documents (charter, policies, agreements)
Board and shareholder sign-off records
Governance review calendar and named internal owner
Handover note for the company secretary, auditor, and future advisors
Current UBO register and the most recent UBO declaration filed with DED, the free zone authority, or the DIFC/ADGM registrar
Confirmation of whether the entity falls within a DNFBP category under UAE AML/CFT law
Existing AML/CFT policies, customer due diligence procedures, or goAML registration details, if the entity is a DNFBP
Details of any recent shareholding, directorship, or beneficial ownership change not yet reflected in the UBO register
Current bank mandate and list of authorised signatories for each entity in scope, for reconciliation against the delegation-of-authority matrix
Details of any director resignation, removal, or appointment pending or recently completed, and the corresponding board resolution
Preferred meeting format (in-person, virtual, or hybrid) and any existing quorum practice, for reflection in the meeting cadence framework
Details of any regulated senior management functions (for DIFC/ADGM entities) requiring individual DFSA/FSRA approval
Group organisation chart showing every UAE and offshore entity, ownership percentage, and the jurisdiction and licence type of each
Existing intercompany agreements, management fee arrangements, or cost-sharing agreements between group entities
India-side entity structure and existing transfer-pricing documentation, for groups with UAE-India operations
Any prior cross-border tax or regulatory finding relevant to how the group's related-party dealings have been priced or approved
| Phase | Triggered By | PNPC CA/Legal Guidance | Risk If Ignored |
|---|---|---|---|
| Framework Design & Rollout | Company reaches a size, shareholder count, or regulatory status where informal decision-making is no longer adequate | Governance diagnostic, regulatory footprint mapping, board and delegation framework design, and rollout briefing to all stakeholders. | Continuing to operate informally exposes the company to disputed decisions, unclear signing authority, and findings during an audit, bank review, or investor due diligence that could otherwise have been closed proactively. |
| New Investor / Board Member Onboarding | External investment round, new independent director, or strategic partner joining the board | Board composition, reserved matters, and reporting rights updated and formalised to reflect the new stakeholder's governance expectations, cross-checked against the existing AoA and shareholders' agreement. | Onboarding a new investor or director without updating the governance framework leaves ambiguity about reserved matters and reporting rights that typically surfaces as friction at the first contested board decision. |
| Related-Party Transaction Occurs | A transaction between the company and a related entity, director, or shareholder is proposed | The transaction is checked against the related-party policy, approved through the documented process, and priced on an arm's-length basis consistent with Corporate Tax requirements. | An unapproved or unpriced related-party transaction can trigger both a governance failure and a Corporate Tax related-party pricing exposure, compounding the risk rather than isolating it to one issue. |
| Regulatory Review or Audit | DFSA/FSRA supervisory visit, statutory audit, or Corporate Tax review | PNPC supports the company in demonstrating that governance documentation matches actual practice — minutes, resolutions, and delegation records that show decisions were genuinely made where and how the framework says they were. | A governance framework that exists on paper but is not reflected in actual minutes and resolutions is a common and damaging finding in both a regulatory review and a tax substance assessment. |
| Shareholder Disagreement | Shareholders disagree on a strategic decision, dividend policy, or exit timing | The shareholders' agreement's reserved-matters and deadlock-resolution provisions are applied as drafted, giving the parties a pre-agreed process rather than an ad hoc negotiation under pressure. | Without pre-agreed reserved matters and a deadlock mechanism, a shareholder disagreement can escalate directly into litigation or an operational standstill that a documented framework would have channelled into a defined resolution process. |
| Family Succession Event | Founder's retirement, incapacity, or death; next-generation family members entering the business | The family constitution's succession and role-transition provisions are applied, coordinated with the founder's will and any cross-border estate planning already in place. | A family business without a documented succession framework often faces both an ownership vacuum and family conflict simultaneously, at precisely the point the business can least absorb the disruption. |
| Group Restructuring | New entity added to the group, entity closed, or ownership structure reorganised | The governance framework is extended or amended to cover the new entity, keeping board composition, delegation, and related-party policies consistent across the group rather than fragmenting entity by entity. | An inconsistent governance framework across a group creates confusion about which entity's board actually approved a given decision, and complicates both audit and tax substance evidence for the newer or restructured entities. |
| Periodic Governance Review | Scheduled review point or a material regulatory change (Corporate Tax update, DFSA/FSRA rulebook change) | PNPC proactively reviews whether the existing framework still reflects the company's actual ownership, regulatory footprint, and risk profile, updating it where it has drifted out of step. | A governance framework left unreviewed for years can rest on an ownership structure, regulatory status, or tax position that has since changed materially, undermining its reliability exactly when it is tested. |
| UBO or Ownership Change | Share transfer, new investor admission, or change in ultimate beneficial ownership | The UBO register is updated and filed with the relevant authority in step with the governance framework's updated shareholding and board records, rather than as a separate, disconnected filing task. | An outdated UBO register that no longer matches the company's actual ownership is a common finding in a bank's or regulator's review, and can delay a subsequent transaction until corrected. |
| AML/CFT Regulatory Update (DNFBP Entities) | A change to AML/CFT supervisory guidance or a shift in the entity's DNFBP classification | PNPC reviews whether existing AML/CFT policies, customer due diligence procedures, and goAML reporting arrangements still reflect current obligations, updating the governance framework's compliance layer where needed. | A DNFBP entity operating on outdated AML/CFT policies risks both a supervisory finding from the Ministry of Economy and a governance framework that no longer matches its actual regulatory obligations. |
Negotiating and signing a shareholders' agreement before the AoA is finalised, leaving the two documents inconsistent on reserved matters, share transfer mechanics, or voting thresholds
Adopting a family constitution's aspirational language without a legally enforceable shareholders' agreement or trust structure behind it, so the constitution has no teeth when it is actually tested
Copying a board charter or governance template from another jurisdiction without adjusting it for whether the entity is mainland, free zone, DIFC, or ADGM — the underlying legal framework is not interchangeable
Finalising a delegation-of-authority matrix without cross-checking it against the company's actual bank mandate, so the two documents authorise different people to different limits
Approving related-party transactions verbally between family-member shareholders with no contemporaneous minute or pricing rationale, leaving no evidence trail if the transaction is later reviewed
Reconstructing board minutes after the fact rather than recording them contemporaneously — a pattern auditors and regulatory reviewers can often identify and that weakens the evidentiary value of the minutes
Leaving a former director or employee as an active bank signatory long after their actual authority has ended, because the DOA matrix and bank mandate were never reconciled after the departure
Treating a signed governance framework as a one-time deliverable rather than a living set of documents, so it is filed away and never actually referenced when a decision is made
Assuming Qualifying Free Zone Person status is secure because the entity holds a free zone licence, without governance evidence showing genuine UAE-based decision-making to support the substance requirement
Ignoring the DFSA or FSRA-specific governance overlay for a DIFC/ADGM-regulated entity and applying a standard free zone governance framework instead, which does not satisfy the regulator's board composition or controller requirements
Updating shareholding or board control without a corresponding UBO register filing, leaving the company's public ownership record inconsistent with its actual structure
Treating a DNFBP entity's AML/CFT obligations as a separate compliance project disconnected from its core governance framework, rather than building the two together
Is corporate governance a legal requirement for a UAE company, or only for large or listed companies?
The level of mandated formal governance scales with the entity type. Public joint stock companies are subject to detailed SCA-mandated governance rules under the Commercial Companies Law. DIFC/ADGM-regulated entities face DFSA/FSRA governance requirements specific to their licence category. A standard mainland LLC or free zone company has lighter statutory governance obligations under its constitutional documents and the Companies Law's general director-duty provisions, but this does not mean governance is optional in practice — a well-run private company still needs documented decision-making, related-party controls, and clear signing authority to function safely and to withstand a bank, auditor, or investor's scrutiny.
What is the difference between a company's Articles of Association and a shareholders' agreement?
The Memorandum/Articles of Association (MOA/AOA) is the company's public constitutional document, filed with DED or the relevant free zone authority, governing the company generally and binding on all shareholders and, in many respects, third parties. A shareholders' agreement (SHA) is a private contract between specific shareholders that can add rights and obligations not reflected in the AoA — pre-emption rights, drag-along/tag-along provisions, deadlock resolution, and reserved matters requiring unanimous or supermajority consent. Where the two conflict on matters within the company's constitutional framework, the registered AoA generally takes precedence, which is why PNPC drafts or reviews the SHA and AoA together rather than in isolation.
How does UAE Corporate Tax affect related-party transaction governance?
Under Federal Decree-Law No. 47 of 2022, related-party transactions must generally be conducted and priced on an arm's-length basis, and certain related-party and connected-person transactions require specific disclosure. A related-party transaction that is governance-approved but not properly priced (or vice versa) creates exposure on both fronts. We draft related-party policies that combine the governance-approval step (who signs off, at what authority level) with a documented, arm's-length pricing rationale, so the two requirements are satisfied together rather than as disconnected exercises handled by different teams.
What does Qualifying Free Zone Person (QFZP) status have to do with governance?
QFZP status can preserve the 0% Corporate Tax rate on qualifying income for an eligible free zone entity, but it depends partly on the entity maintaining adequate substance within the UAE — genuine decision-making, staffing, and operating expenditure connected to the qualifying activity, not merely a licence held on paper. A governance framework that demonstrates the board or equivalent management body actually meets, deliberates, and makes and minutes decisions within the UAE is part of the evidence base that supports a QFZP position; a framework that cannot show this is a live risk if the position is later reviewed.
What governance requirements apply to a DIFC or ADGM-regulated entity that don't apply to a standard free zone company?
A DIFC entity regulated by the DFSA, or an ADGM entity regulated by the FSRA, is subject to the relevant authority's rulebook on top of the underlying DIFC/ADGM companies regulations — this typically includes controller-approval requirements for significant shareholding changes, senior management function accountability, systems-and-controls documentation, and specific board composition or fitness-and-propriety expectations depending on the licence category. A standard (non-regulated) free zone company such as a DMCC or IFZA trading entity is not subject to these financial-services-specific requirements, though good governance practice remains valuable regardless.
What is a family constitution and how is it different from a shareholders' agreement?
A family constitution is a broader document than a shareholders' agreement — it typically addresses not just shareholding mechanics but the family's shared values, the criteria for family members entering employment or ownership, the process for resolving family disagreements, and the long-term vision for the business across generations, alongside the more legally binding governance and succession terms that are often mirrored into a formal shareholders' agreement or trust structure for enforceability. The constitution sets the family's shared expectations; the shareholders' agreement (and, where used, an underlying trust or holding structure) gives those expectations legal effect.
How does a delegation-of-authority matrix work in practice?
A delegation-of-authority (DOA) matrix sets out, by role and transaction type, the value threshold up to which a given individual or committee can approve a decision — a department head might approve expenditure up to a defined limit, a CEO up to a higher limit, and anything above that requiring board approval. It is cross-referenced against the company's bank mandates and signing-authority instructions so the two are consistent, and it is the practical document staff and banks actually use day to day, rather than the board charter itself.
Do minutes and board resolutions actually need to be kept for a small, closely-held UAE company?
Yes, and this is one of the more commonly under-appreciated governance gaps. Even where a small company's Companies Law obligations for formal meetings are light, contemporaneous minutes and resolutions are frequently the evidence a bank, auditor, or Corporate Tax reviewer relies on to confirm that a decision was properly authorised and that genuine decision-making occurred within the UAE. Reconstructing minutes after the fact — which auditors and reviewers can generally identify — is far weaker evidence than a contemporaneous record.
What happens to governance and voting rights if a shareholder dies?
In the absence of specific provisions, a deceased shareholder's shares typically pass through the applicable succession process — which, for UAE-situs shares, depends on whether a UAE-recognised will exists — before the resulting heir(s) can exercise voting rights, and this process can take considerably longer than a business can comfortably operate without clarity on control. A well-drafted shareholders' agreement or family constitution addresses this directly, often through provisions for interim voting arrangements, mandatory buy-out options, or a pre-agreed succession sequence, coordinated with the shareholder's personal will.
Can a shareholders' agreement force a minority shareholder to sell (drag-along), or force the majority to include a minority shareholder in a sale (tag-along)?
Yes, where the shareholders' agreement includes properly drafted drag-along and tag-along provisions. A drag-along clause allows a majority shareholder reaching an agreement to sell the company to require minority shareholders to sell on the same terms, preventing a minority holdout from blocking an otherwise agreed exit. A tag-along clause protects a minority shareholder by allowing them to participate in a sale on the same terms the majority negotiates, rather than being left behind as a minority holder in a changed ownership structure. Both are negotiated terms, not defaults, and need to be expressly included.
How does PNPC handle conflicts of interest when a director is also a major shareholder or supplier to the company?
We draft a conflict-of-interest policy that requires disclosure of the relevant interest, recusal from voting on the affected matter, and independent approval of the transaction by disinterested directors or shareholders, consistent with general director-duty principles under the Commercial Companies Law and, for regulated entities, the applicable DFSA/FSRA conflicts requirements. The policy is paired with the related-party transaction policy so a conflicted transaction is both properly governed and properly priced.
What is the ESR (Economic Substance Regulations) connection to corporate governance, given reporting has been scaled back?
ESR notification and reporting obligations have been progressively wound down for financial years following the introduction of UAE Corporate Tax, but the underlying substance principle ESR established — that a UAE entity's core income-generating activities and management decisions should genuinely occur within the UAE — continues to inform both QFZP substance requirements and how Corporate Tax and regulatory reviewers assess whether governance is real or nominal. A governance framework built to demonstrate genuine UAE decision-making remains directly relevant even where standalone ESR filings are no longer required.
Can PNPC help design governance for a group with entities in both the UAE and India?
Yes. For groups spanning the UAE and India, we coordinate governance framework design between our Dubai and India offices so board composition, delegation of authority, and related-party policies are consistent across the group and support both jurisdictions' related-party and transfer-pricing documentation. An intercompany governance and pricing framework that only holds up in one jurisdiction typically creates a mismatch the group has to reconcile later, often at the worst time — during a tax review in either country.
How often should a governance framework be reviewed and updated?
PNPC generally recommends a review every year for actively growing or investor-backed companies, and at least every two to three years for stable, closely-held businesses, alongside an immediate review triggered by any material event — a new investor or director, a significant related-party transaction, a group restructuring, or a relevant regulatory change such as a Corporate Tax or DFSA/FSRA rulebook update. A framework left unreviewed for years frequently no longer reflects the company's actual ownership, regulatory status, or risk profile.
How does PNPC price a Corporate Governance Advisory engagement?
PNPC agrees a fixed, written fee before any advisory work begins, typically scoped to the number of entities in the group, whether a DIFC/ADGM regulatory overlay is required, and whether a full family constitution negotiation is involved alongside the core board and related-party framework. The exact fee depends on the complexity of the ownership structure and the number of stakeholder groups whose sign-off is needed.
Is a minimum number of directors legally required for a UAE mainland LLC versus a free zone company?
Requirements vary by structure and authority rather than following one uniform rule. A mainland LLC's board or management arrangement is set out in its Memorandum/Articles of Association within the parameters the Commercial Companies Law allows, and many smaller LLCs operate with a single manager rather than a formal multi-member board. Free zone authorities each set their own baseline in their model AoA and internal regulations, and DIFC/ADGM-regulated entities may face a minimum board composition requirement under the DFSA or FSRA rulebook depending on licence category. PNPC confirms the specific requirement for the entity's actual authority before designing board composition, rather than assuming a single rule applies across all UAE structures.
Are virtual or remote board meetings legally valid for a UAE company?
Most UAE mainland and free zone constitutional frameworks permit board and shareholder meetings to be held virtually or by other electronic means, provided the company's AoA does not expressly restrict this and the chosen method allows all participants to properly participate and be identified. DIFC and ADGM companies regulations generally take a similarly permissive approach. What matters practically is that the AoA's own wording is checked, and that the meeting is properly convened, quorate, and minuted regardless of format, since the format itself is rarely the point of later challenge — the adequacy of notice, quorum, and record-keeping is.
What quorum is typically required for a valid board or shareholder meeting?
Quorum requirements are set by the company's own AoA (for board meetings) and by the Companies Law together with the AoA (for shareholder general meetings), and they differ by entity type and by the specific matter being decided — some reserved matters may require a higher quorum or supermajority than routine business. There is no single UAE-wide quorum figure that applies to every company; it must be read from the specific constitutional document in force for that entity.
Is appointing a company secretary a statutory requirement for a UAE company?
A dedicated, statutorily titled 'company secretary' role is not universally mandated across all UAE mainland and free zone entities in the way it is in some other jurisdictions, though DIFC and ADGM regulated entities, and larger or public joint stock companies, may have specific requirements or strong practical expectations for a designated secretarial function. Regardless of whether it is a strict legal requirement for a given entity, PNPC recommends every company designate someone — internally or through PNPC's corporate secretarial support — accountable for minute-keeping, filing deadlines, and UBO register accuracy, because this function tends to fall through the cracks when nobody is explicitly responsible for it.
What is a 'reserved matters' list and what typically goes on it?
A reserved matters list identifies decisions that cannot be taken by management or a simple board majority alone, and instead require a higher threshold — full board approval, shareholder approval, or unanimous/supermajority shareholder consent — before they can proceed. Common reserved matters include amending the AoA, issuing new shares or diluting existing shareholders, incurring debt above a defined threshold, entering or exiting a material line of business, appointing or removing senior executives, and approving related-party transactions above a defined significance level. The exact list is negotiated and tailored to the company's specific risk profile and shareholder composition, not copied wholesale from a template.
How does the UBO (Ultimate Beneficial Owner) register interact with corporate governance?
UAE companies are generally required to identify, record, and keep current a register of their ultimate beneficial owners — the individuals who ultimately own or control the entity — and to file that information with DED, the relevant free zone authority, or the DIFC/ADGM registrar as applicable. This sits alongside, and should be kept consistent with, the governance framework's shareholder register and board records; a share transfer or change of control that updates the governance documents but not the UBO filing leaves the company's public record inconsistent with its actual ownership.
What AML/CFT governance obligations apply to a UAE business that is a Designated Non-Financial Business or Profession (DNFBP)?
Certain UAE business categories — including company service providers, real estate agents and brokers, dealers in precious metals and stones, and independent legal or accounting professionals conducting specified activities — fall within the DNFBP category under UAE AML/CFT law and are supervised by the Ministry of Economy. DNFBP entities must maintain AML/CFT policies and procedures, conduct customer due diligence, and report suspicious transactions to the UAE Financial Intelligence Unit through the goAML platform. Where a client's business falls within a DNFBP category, PNPC integrates these obligations into the governance framework rather than treating them as a disconnected compliance exercise.
What happens to signing authority when a director resigns or is removed?
A director's resignation or removal should trigger an immediate review of every signing authority tied to that individual — bank mandates, the delegation-of-authority matrix, any standing POA, and any regulated senior management function they held — because their formal removal from the board does not automatically revoke authority a bank or third party has been separately notified of. The departure should be documented through a board resolution, and every institution relying on the departing director's authority should be formally notified that it has ended.
What is the difference between signing authority under a delegation-of-authority matrix and a Power of Attorney?
A delegation-of-authority (DOA) matrix is an internal governance document that sets out, by role, the value threshold up to which an individual can approve a transaction on the company's behalf — it governs internal decision-making authority. A Power of Attorney is a separate, formally executed and typically notarised legal instrument that authorises a named individual to act and sign on the company's behalf before third parties — banks, government authorities, or counterparties — and is what those third parties actually rely on to accept that the signatory has authority. The DOA matrix should inform who is granted a POA and for what scope, but the two documents serve different purposes and neither substitutes for the other.
Does registering for UAE Corporate Tax itself require board approval?
Corporate Tax registration is a compliance obligation the entity must fulfil under Federal Decree-Law No. 47 of 2022 regardless of internal governance formalities, but the decision to register, the election of any available option (such as a Qualifying Free Zone Person election, where eligible), and the ongoing tax position taken should be properly authorised and documented through the company's governance framework — typically a board or management resolution — so there is a clear record of who approved the position and on what basis.
Who should approve and sign off VAT returns within a governance framework?
There is no single UAE-wide rule dictating who must approve a VAT return, but good governance practice assigns clear accountability — typically a finance manager or CFO preparing the return, with a documented review and sign-off step by a director or authorised signatory before submission to the FTA — so the return reflects a properly authorised position rather than being filed by whoever happens to have FTA portal access. This accountability is usually captured in the delegation-of-authority matrix alongside other financial approval thresholds.
How is governance different for a holding company compared to an operating subsidiary?
A holding company's governance typically centres on investment decisions, capital allocation across subsidiaries, and group-level related-party and intercompany policy, with a comparatively lean board focused on strategic oversight rather than day-to-day operations. An operating subsidiary's governance needs to cover the operational decision-making, delegation of authority, and regulatory compliance specific to its actual business activity. Where a group has both, PNPC designs a consistent overall governance architecture — reserved matters, related-party policy, and reporting lines — that recognises the different practical focus of each entity's board rather than applying identical governance to both.
What does a 'board pack' contain and why does PNPC recommend one?
A board pack is the set of materials circulated to directors ahead of a board meeting — typically the agenda, minutes of the previous meeting, financial updates, any papers on matters requiring a decision, and background on significant related-party transactions or reserved-matter items coming up for approval. A consistent board pack practice gives directors a genuine opportunity to consider matters before voting, which strengthens both the quality of the decision and the evidentiary record that a properly informed decision was made.
Is there a specific value threshold below which related-party transactions do not need board approval?
There is no single UAE-wide statutory threshold that exempts small related-party transactions from governance approval; any such threshold is a matter for the company's own related-party policy to define, calibrated to the entity's size and risk profile. What matters for Corporate Tax purposes under Federal Decree-Law No. 47 of 2022 is that related-party transactions are conducted and priced on an arm's-length basis and, where required, properly disclosed — the governance approval threshold and the tax disclosure requirement are related but distinct questions, and PNPC addresses both when drafting the policy.
When does a UAE company need an independent (non-executive) director?
There is no blanket requirement for every UAE private company to appoint an independent director, but the case for one strengthens materially where external investors are involved, where the board would otherwise be composed entirely of related family members or executives with a direct financial interest in the matters being decided, or where a DIFC/ADGM licence category specifically requires independent board representation. An independent director's practical value is bringing a genuinely disinterested perspective to reserved matters such as related-party approvals and conflict situations that executive or family directors cannot provide.
What governance red flags come up most often during investor or acquirer due diligence?
The most common findings are: no contemporaneous board minutes or resolutions supporting significant past decisions, a shareholders' agreement that conflicts with or is silent on matters the AoA does not cover, undocumented or unpriced related-party transactions, a delegation-of-authority matrix that does not match the actual bank mandate, an outdated UBO register, and — for family businesses — no documented succession plan for what happens to control on a founder's death or incapacity. Each of these is fixable in advance far more cheaply than it is resolved as a live finding during a live due diligence process with a deal timeline attached.
What happens if a company's Articles of Association and a free zone authority's internal regulations appear to conflict?
Free zone authority internal regulations generally operate as the administrative framework within which a company's own AoA sits, and the AoA itself is typically drafted using the specific free zone's model template and must be filed with, and accepted by, that authority — so a genuine conflict is uncommon in a properly drafted and filed AoA. Where an apparent inconsistency does surface (often after a free zone authority updates its internal regulations after the AoA was originally filed), PNPC reviews both documents against the current free zone rules and advises whether an AoA amendment is needed to restore consistency.
Is there a UAE requirement for ESG or sustainability governance reporting?
Formal, mandatory ESG or sustainability governance reporting in the UAE currently applies most directly to specific regulated sectors and larger or listed entities under SCA and relevant regulator guidance, rather than as a universal requirement for every private company. That said, ESG-adjacent expectations are increasingly relevant in practice for UAE businesses seeking institutional investment, bank financing, or international supply-chain relationships, where counterparties may expect at least a basic governance and sustainability policy even where it is not a strict UAE legal requirement for that specific entity.
What is the difference between Corporate Governance Advisory and routine Company Secretarial services?
Corporate Governance Advisory is the design work — building or redesigning the board structure, delegation of authority, related-party policy, and shareholder or family agreements that determine how the company is actually governed. Company Secretarial services are the recurring administrative layer that keeps the company compliant with its existing structure — filing annual returns, updating the UBO register, renewing licences, and maintaining the statutory register — without redesigning the underlying governance framework itself. The two are complementary: the secretarial function should reflect and maintain the governance framework designed here, not operate independently of it.
What is the risk of a board that exists on paper but never actually meets or deliberates?
A board that is documented in the AoA and shareholder register but does not genuinely meet, deliberate, and make decisions is a governance framework in name only, and this gap tends to surface at the worst possible moments — a Corporate Tax or QFZP substance review questioning whether real UAE-based decision-making occurs, a DFSA/FSRA supervisory review of a regulated entity, or a shareholder dispute where one party argues decisions were never properly authorised in the first place. A framework that looks correct on paper but is not reflected in actual practice is, in practical terms, no framework at all.
How is governance kept consistent across multiple free zone entities under one holding structure?
For a group with several free zone or mixed-jurisdiction entities under a common holding structure, PNPC designs a consistent governance architecture — board composition principles, a shared related-party policy, a group-wide delegation-of-authority approach, and common minute-keeping standards — applied to each entity individually within that entity's own specific regulatory constraints, rather than either forcing an identical template onto every entity or letting each entity's governance drift independently. This keeps the group's overall decision-making traceable while still respecting that a DMCC entity, a mainland LLC, and a DIFC entity operate under different underlying rules.
How does corporate governance intersect with Wage Protection System (WPS) and labour compliance?
Governance and labour compliance intersect primarily at the level of who is authorised to approve payroll, sign off WPS submissions, and make employment-related decisions such as hiring, termination, or remuneration changes above a defined threshold — these approval authorities should be reflected in the delegation-of-authority matrix alongside financial and commercial approvals, so payroll and HR decisions are not left outside the documented governance structure. PNPC's governance framework build typically confirms who holds this authority, even though the underlying WPS compliance mechanics themselves sit with the company's payroll or HR function.
Can PNPC help align governance documentation with data protection obligations?
Yes, at the level of governance accountability — confirming who within the company's board or management structure is accountable for data protection decisions, how a data-related incident is escalated and approved for response, and how data protection policy sits within the broader delegation-of-authority and reserved-matters framework. Where a client needs the underlying data protection policy and compliance programme itself built or reviewed in depth, PNPC coordinates that with its Data Privacy & Protection Advisory engagement, so the two pieces of work are consistent rather than developed separately.
If a shareholder dispute escalates beyond what the governance framework's deadlock provisions resolve, does PNPC coordinate with litigation counsel?
Yes. Where a dispute cannot be resolved through the shareholders' agreement's reserved-matters, deadlock-resolution, or negotiated buy-out provisions, and proceeds toward litigation or arbitration before the Dubai Courts, DIFC Courts, ADGM Courts, or an arbitral forum, PNPC does not appear as courtroom advocate but supports the client's appointed UAE-licensed litigation or arbitration counsel with the underlying governance documentation, minutes, and resolution history that form part of the evidentiary record — coordinated through PNPC's Litigations & Claims Settlement engagement where the matter has escalated that far.
Does a single-shareholder UAE company (an FZE or sole-owner LLC) still need a governance framework?
Yes, though the emphasis is different from a multi-shareholder company. A sole owner does not need reserved-matters or deadlock provisions in the same way, but still benefits from a documented delegation-of-authority matrix (particularly if a general manager or CEO is running day-to-day operations on the owner's behalf), a clear record of key decisions for bank and audit purposes, and, importantly, a succession or continuity plan for what happens if the sole owner becomes incapacitated or dies, since a single point of control with no documented continuity plan is itself a significant operational risk.
What is a nominee director or nominee shareholder, and does using one create governance complications?
A nominee arrangement is where an individual holds a directorship or shareholding on the record on behalf of, and under instruction from, an underlying beneficial owner, typically documented through a nominee agreement or declaration of trust. Nominee arrangements are used for various legitimate structuring reasons but require careful governance documentation — the nominee agreement should clearly separate the nominee's formal legal role from the beneficial owner's actual instructions and economic interest, and the UBO register must still correctly identify the real beneficial owner regardless of the nominee arrangement on the public record.
Should a board conduct a formal self-evaluation or performance review of its own effectiveness?
For larger, investor-backed, or regulated entities, a periodic board effectiveness review — assessing whether the board's composition, meeting cadence, and decision quality are actually serving the company well — is increasingly expected practice and, for some DIFC/ADGM-regulated entities, a specific regulatory expectation. For smaller closely-held companies, a lighter, less formal version of the same question (is the board actually functioning as designed, or has it drifted) is still worth revisiting at each periodic governance review, even without a formal evaluation instrument.
How does a properly documented governance framework help when applying for bank financing?
Banks reviewing a UAE company for financing typically want to see clear evidence of who has authority to bind the company, how significant decisions are approved, and whether related-party dealings (which can affect the true financial picture) are properly disclosed and priced — a documented governance framework with a reconciled delegation-of-authority matrix and clean board minutes materially speeds up this review and reduces the queries a bank's credit or compliance team raises, compared to a company that has to reconstruct this evidence reactively during the financing process.
What governance standard should a UAE company be building toward if it is planning an eventual IPO?
IPO readiness governance for a UAE company preparing for eventual listing (whether on a UAE exchange under SCA oversight, DIFC's Nasdaq Dubai, or another market) generally means moving well beyond baseline private-company governance toward independent board representation, formal audit and remuneration committee structures, documented related-party approval processes meeting public-company disclosure standards, and a demonstrable multi-year track record of the board actually functioning as designed — this is a multi-year build, not a pre-listing sprint, and PNPC advises starting the transition several years ahead of an anticipated listing.
Can a shareholders' agreement create different classes of shares with different rights (preference shares, golden shares)?
Yes, subject to what the company's AoA permits and the relevant Companies Law or free zone/DIFC/ADGM company regulations allow for that entity type — preference shares (with priority on dividends or liquidation proceeds) and special control rights (sometimes informally called a golden share, giving a specific shareholder veto rights over defined matters) are both used in UAE structures, particularly for investor rounds or family succession planning where certain family members receive economic rights without full voting control. These structures need to be reflected consistently in both the AoA and the shareholders' agreement, since a right created only in the SHA may not bind third parties who rely on the public AoA.
Should a UAE company have a whistleblower or internal reporting policy as part of its governance framework?
There is no universal UAE statutory mandate requiring every private company to maintain a formal whistleblower policy, though DIFC/ADGM-regulated entities and DNFBP businesses with AML/CFT obligations typically need a clear internal reporting channel for compliance concerns as part of their regulatory framework. For other companies, PNPC recommends at least a simple internal escalation route for reporting a suspected governance or compliance breach, since the absence of any channel means concerns are more likely to surface externally — to a regulator, an auditor, or the media — rather than being addressed internally first.
Does the board need Directors' and Officers' (D&O) liability insurance as part of a UAE governance framework?
D&O insurance is not a UAE statutory requirement for private companies generally, but it is common and often expected practice for companies with external investors, multiple unrelated shareholders, or DIFC/ADGM-regulated boards, since it protects individual directors from personal liability for governance decisions made in good faith and can make it easier to recruit independent directors who would otherwise be exposed to personal risk. PNPC raises D&O coverage as a discussion point when designing board composition for investor-backed or regulated entities, though the insurance placement itself sits with the client's insurance broker.
Are electronically signed board resolutions and minutes legally valid in the UAE?
UAE law generally recognises electronic signatures for most commercial purposes under applicable electronic transactions legislation, and most mainland and free zone constitutional frameworks do not require a board resolution to be wet-ink signed, though some transactions — particularly those requiring notarisation, or dealings with certain government authorities — may still require a physical or notarised signature regardless of the underlying resolution's validity. PNPC confirms which specific documents in a given engagement need wet-ink or notarised execution versus which can be validly executed electronically.
Should dividend declaration be governed by a formal policy, or decided case by case?
A documented dividend policy — setting out the process for proposing, approving, and declaring dividends, and any criteria the board considers (retained earnings, working capital needs, upcoming obligations) — reduces the risk of a dividend decision being challenged as arbitrary or favouring one shareholder group over another, which is a particularly common source of tension in family businesses with both active and passive shareholders. PNPC drafts a dividend policy as part of the broader governance framework wherever multiple shareholder groups with different expectations are involved.
What governance duties apply to directors if the company is in financial distress or facing potential insolvency?
As a company's financial position deteriorates, directors' duties generally shift toward greater care for creditor interests alongside shareholder interests, and continuing to trade, incur new obligations, or make related-party payments without properly documented board consideration of the company's actual financial position can expose directors to personal risk under UAE insolvency and companies law principles. PNPC advises directors to increase the frequency and documentation rigour of board decisions specifically during a period of financial difficulty, rather than reducing formal governance at precisely the point it matters most.
Can a DIFC or ADGM foundation be used to hold family business shares, and how does that affect governance?
Yes — DIFC and ADGM both offer a foundation structure (a distinct legal entity with no shareholders, governed by a council under its founding charter and by-laws) that is commonly used by UAE family businesses for succession planning, holding shares in an operating company in a way that is intended to survive a founder's death without the delay of a personal succession process. Using a foundation changes the governance question from 'who inherits these shares' to 'who sits on and controls the foundation council,' which needs its own governance framework — council composition, decision rules, and beneficiary rights — coordinated with the underlying operating company's own board governance.
How should a governance framework treat a loan from a shareholder to the company, or from the company to a shareholder?
A shareholder loan in either direction is a related-party transaction requiring the same governance approval and arm's-length pricing (interest rate, term, and repayment structure) consideration as any other related-party dealing under Corporate Tax rules, and it should be properly documented through a loan agreement and board resolution rather than treated as an informal running account between the shareholder and the company, which is common in family businesses but creates both governance and tax evidence gaps.
Should the board have specific oversight responsibility for cybersecurity and IT risk?
Increasingly yes, in practice if not always as an explicit statutory requirement for every entity type — cybersecurity and IT risk (including data protection exposure) are now commonly treated as a board-level oversight matter rather than purely an operational IT concern, particularly for businesses handling significant customer data or operating critical systems. PNPC's governance framework typically assigns clear board or committee-level accountability for IT risk oversight, coordinated with the company's data privacy and IT security functions rather than left entirely to the IT department without any board visibility.
Does a franchise or agency agreement need board approval under the governance framework?
Yes, typically — entering into, renewing, or terminating a franchise or agency agreement is usually significant enough to sit on the reserved-matters list, given its long-term commercial and financial commitment, exclusivity or territory implications, and potential change-of-control triggers that could affect a future sale of the business. PNPC reviews existing franchise and agency agreements as part of the governance diagnostic specifically to confirm they were properly authorised and to flag any change-of-control or renewal terms the board should be tracking.
How should governance evolve differently for a first-generation family business versus one entering its second or third generation?
A first-generation, founder-led business typically has governance concentrated in the founder's personal judgment, with relatively informal decision-making that works because the founder holds both ownership and operational knowledge. As the business moves into a second or third generation with multiple family branches, growing shareholder numbers, and family members with varying levels of involvement in the business, governance needs to shift toward more formal reserved matters, a family council or forum separate from the operating board, and clearer criteria for family employment and ownership — the informal model that worked for the founder becomes a source of conflict once ownership and management are no longer held by the same small group of people.
If founders themselves disagree on how much formal governance the company needs, how does PNPC handle that during the engagement?
This is treated as an important input rather than an obstacle — where founders or shareholders disagree on the degree of formality needed (one wanting a lightweight framework, another wanting extensive reserved matters and independent oversight), PNPC facilitates the scoping conversation to surface the underlying concern driving each position, since the disagreement itself is often informative about a trust or control issue the governance framework should specifically address, rather than something to paper over with a compromise neither party actually finds workable.
Should governance documents be drafted in English only, or also in Arabic, for a UAE company?
Constitutional documents such as the AoA are typically filed with DED or the relevant free zone authority in Arabic, or in a bilingual format with Arabic as the governing text for mainland entities, while DIFC and ADGM documents are conventionally in English given those centres' common-law framework. Shareholders' agreements and family constitutions, being private contracts, can be drafted in whichever language the parties choose, though PNPC recommends a bilingual version where any family member or stakeholder is more comfortable working in Arabic, to avoid a later dispute over interpretation.
How does PNPC transition a governance framework from being run by PNPC to being maintained fully in-house?
PNPC's handover stage formally documents what the internal company secretary or designated owner takes responsibility for going forward — minute-keeping, UBO register updates, review scheduling, and bank mandate reconciliation — with PNPC available on a lighter advisory basis for material events (a new investor, a dispute, a regulatory change) rather than running the framework's day-to-day maintenance indefinitely, unless the client specifically wants an ongoing retainer for that operational role.
Does a UAE branch of a foreign company need its own local governance framework, or does the parent company's governance apply?
A UAE branch of a foreign company is generally not a separate legal entity from its parent, but it still needs UAE-specific governance elements — a properly documented local signing authority (typically through a UAE POA granted by the parent to the branch manager), compliance with UAE licensing and, where applicable, Corporate Tax obligations attaching to the branch's UAE activity, and clear documentation of which decisions are made locally versus referred back to the parent's own board. PNPC reviews the parent's authorisation documents and builds the UAE-specific delegation and compliance layer the branch structure requires.
PNPC Corporate Governance Advisory vs typical alternatives in the UAE market
| Consideration | Generic Governance Template Provider | Standalone Legal or Governance Consultancy | PNPC Global |
|---|---|---|---|
| Alignment with the entity's actual regulatory regime | Frequently generic, not calibrated to mainland vs free zone vs DIFC/ADGM vs regulated status | Variable — depends on the individual firm's UAE-specific and DFSA/FSRA expertise | Framework built against the entity's confirmed regulatory footprint — mainland Companies Law, free zone rules, or DFSA/FSRA rulebook as applicable |
| Integration with Corporate Tax related-party and QFZP substance position | Not addressed — templates assume governance and tax are separate exercises | Rarely available unless the firm also handles tax advisory | Related-party policy and minute-keeping practice designed to support the same evidence the Corporate Tax and QFZP position needs |
| Consistency with the company's actual AoA and shareholder register | Not possible — no visibility into the client's constitutional documents | Often addressed, but as a separate, uncoordinated drafting exercise | SHA, family constitution, and board charter cross-checked against the AoA as a standard step |
| Family succession and personal will coordination | Not available | Rarely available — most governance consultancies have no estate-planning capability | Coordinated directly with PNPC's wills, estate and succession planning practice and, for NRI families, the India office |
| Evidence readiness for audit, bank review, or regulatory scrutiny | None — the template provider is out of the relationship after sale | Variable, depending on ongoing engagement | Minute-keeping and documentation practice designed from the outset to withstand later audit, bank, or regulatory review |
| Engagement structure | One-time purchase, no ongoing relationship | Project-based, often without corporate/tax integration | Fixed, written scope agreed upfront, structured to integrate with ongoing corporate, tax, and estate-planning work |
| Cross-border group governance (UAE-India) | Not available | Rarely available | Coordinated between PNPC's Dubai and India offices for consistent group-wide governance and related-party pricing |
| Periodic review discipline | Not tracked — no relationship after purchase | Rarely tracked unless separately retained | Review points scheduled and proactively flagged, tied to material events such as new investors, restructurings, or regulatory changes |
| UBO register and AML/CFT governance integration | Not addressed — outside a template provider's scope | Rarely integrated unless the firm also handles AML/CFT compliance | UBO consistency and, for DNFBP entities, AML/CFT policy integration built into the same framework |
| Depth of experience across UAE regulatory regimes | Generic, not specific to any one free zone or regulator | Variable, often concentrated in one jurisdiction or licence type | Practising CA and corporate services firm handling mainland, free zone, DIFC, and ADGM entities across the same client base since 1986 |
| Responsiveness during a live governance event | None — no ongoing relationship after purchase | Depends on retainer terms and availability | Named PNPC governance advisory contact reachable for time-sensitive events — a new investor, a board dispute, a regulatory query |
- 01
Governance and ownership diagnostic comparing documented structure against actual decision-making practice
- 02
Regulatory footprint mapping — mainland, free zone, DIFC, or ADGM, including applicable DFSA/FSRA rulebook chapters where regulated
- 03
Board charter and delegation-of-authority matrix calibrated to the company's actual size and risk profile
- 04
Related-party transaction and conflict-of-interest policy, coordinated with the company's Corporate Tax related-party and QFZP substance position
- 05
Shareholders' agreement or family constitution drafting, cross-checked against the company's AoA
- 06
Minute-keeping framework, board meeting cadence, and resolution register handed over to the company secretary
- 07
Regulated-entity governance overlay for DIFC/ADGM entities, aligned to DFSA/FSRA requirements
- 08
Coordination with PNPC's wills, estate and succession planning practice for family-business succession events
- 09
Cross-border group governance and related-party policy coordination with PNPC's India office
- 10
Board and shareholder/family briefing session to walk stakeholders through the finalised framework
- 11
Governance framework built to withstand later audit, bank covenant review, or investor due diligence scrutiny
- 12
Periodic governance review scheduled and proactively flagged on material events or regulatory change
- 13
Written scope and fee letter agreed before drafting begins, with assumptions, exclusions, and an accountable PNPC owner
- 14
Bank mandate and signatory reconciliation against the delegation-of-authority matrix, with correction instructions where a mismatch is found
- 15
Dispute-readiness stress test of deadlock, exit, and succession provisions against realistic scenarios before the shareholders' agreement or family constitution is signed
- 16
Related-party pricing evidence file cross-referenced to the board approval trail, ready for a Corporate Tax or QFZP substance review
- 17
UBO register filing coordinated in step with any share transfer, new investor admission, or control change captured in the governance framework
- 18
Named senior PNPC governance advisory contact for time-sensitive events — a new investor, a board dispute, or a regulator query — not a rotating point of contact
If your board decisions are made informally, your related-party dealings are undocumented, or your family business has no plan for what happens to control and ownership at the next succession event, talk to PNPC's Dubai team before an audit, a regulator, an investor, or a family dispute tests whether your governance actually holds up. We build governance frameworks as part of the same practice that understands your company's tax position and, where relevant, your family's succession plans — so the framework matches the business it is meant to govern.
Jurisdiction
Free zone, mainland & offshore
Ready to get started?
Tell us about your requirement — a UAE specialist responds within 24 hours.