Guide
Setting Up an Autonomous-Mobility or Robotics Company in the UAE
The short answer
An autonomous-vehicle or robotics venture answers to more than one authority at once: the Roads and Transport Authority (RTA) decides whether a vehicle may test or operate on Dubai's roads, under Dubai Law No. (9) of 2023 Regulating the Operation of Autonomous Vehicles, and the Ministry of Industry and Advanced Technology (MOIAT) decides whether the hardware itself needs industrial registration and conformity certification. The trade licence is rarely the constraint: the operating or testing permission is. The deployment environment decides the route: a public road, a private site or warehouse, and a controlled campus each sit under a different permission, sometimes a different authority, even when the underlying technology is identical.
The regulatory perimeter and who decides
No single body licenses "autonomous mobility" or "robotics" as a category. Each piece of the perimeter has its own owner. RTA controls what moves on Dubai's public roads: under Dubai Law No. (9) of 2023 Regulating the Operation of Autonomous Vehicles, an autonomous vehicle cannot travel on a Dubai road without an RTA licence, and any other activity involving autonomous vehicles in the Emirate needs its own RTA permit: a transport-authority decision, separate from the trade licence the company also needs. MOIAT runs the federal Industrial Registry, set up under Federal Decree-Law No. 25 of 2022, and the Conformity Certificate Services that certify manufactured and advanced-technology products against technical requirements; a robot or vehicle manufacturer can fall inside this registration before any unit reaches a road or site. Where it collects location, video or biometric data, UAE federal data protection rules (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, in force since 2 January 2022 and enforced by the UAE Data Office) apply.
A plausible activity description on the trade licence does not substitute for any of these. The authority looks at what the system actually does (where it moves, who is legally responsible when it is autonomous, and what data it gathers), not at the label chosen for the licence.
What the regulators actually require
Treat these as separate checks rather than one combined approval:
- RTA: road or site-specific testing and operating permission sits with RTA for anything moving autonomously on Dubai's public roads. Under Dubai Law No. (9) of 2023, an autonomous vehicle needs an RTA licence before it may travel on a Dubai road at all, and any other activity involving autonomous vehicles in the Emirate needs its own RTA permit. A commercial or technology licence does not carry either of these: both are applied for and granted separately, and it is RTA's decision whether and under what conditions a system may test or operate.
- MOIAT: a company manufacturing or integrating robotics or vehicle hardware should confirm whether its activity falls inside the federal Industrial Registry set up under Federal Decree-Law No. 25 of 2022, and whether its product needs a certificate of conformity through MOIAT's Conformity Certificate Services before sale or deployment, before the activity is fixed on the licence.
- Data protection: UAE federal data protection rules (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, in force since 2 January 2022 and enforced by the UAE Data Office) govern how personal, location and biometric data collected by vehicles or robots may be gathered, stored and used, a position to settle before continuous recording begins, not after a complaint.
None of this depends on whether the company calls itself a technology supplier or an operator. The determination is factual: what the system does and who answers for it when it acts autonomously.
How money moves, and what a bank looks at
A software-only AV or robotics supplier banks like any other technology company. A fleet operator or hardware manufacturer does not: equipment capital, insurance scaled to the deployment environment, and milestone-based or government funding each bring their own paperwork, and a bank reviews the safety story alongside the balance sheet. Banking readiness work should start alongside the structure decision, because the account application and the operating-approval story are read together. Where funding includes grants, strategic investors or an overseas parent, source of funds evidence is expected for every contributor, not only the founders.
Ownership, substance and the roles that must be filled
Supplier and operator are different legal positions, and keeping both in one company can widen the approval surface rather than simplify it: a hardware manufacturer answers to MOIAT on the product, while the entity that runs the fleet or deploys the robot in public is the one RTA or the site owner holds responsible when it acts autonomously. Where manufacturing, operation and outside investors sit across more than one entity, that is the kind of regulated and complex ownership structure that needs its own review rather than a standard template. Fill these roles before filing: a person who can answer for the operational design domain and safety case, a remote-operations and escalation contact, and a data-protection contact for location, video and biometric data.
What commonly goes wrong
- Treating a software or technology licence as if it were road-operating permission, when the two are decided by different authorities.
- Testing or operating outside the conditions an approval actually covers, rather than the conditions assumed.
- Leaving responsibility between the manufacturer and the fleet or robot operator undocumented until an incident forces the question.
- Collecting continuous video, location or biometric data without a written data position, on the assumption that a privacy policy covers it.
A business plan and supporting documentation that states the deployment environment, the operator of record and the data position clearly is what RTA, MOIAT, a bank and an insurer each ask for in different words: building it once avoids rebuilding it for each one.
From licence to operating
Registration is the easy step. A depot, workshop or control room needs premises that satisfy civil-defence and site requirements before vehicles or equipment are installed there, and a company sponsoring remote operators or safety drivers needs its own visa capacity for them. Any RTA testing or operating permission and any MOIAT conformity certificate renew on their own cycle, separate from the trade licence renewal, and each carries its own reporting. Cost is built in layers rather than one headline figure: entity formation, operating approvals, premises and insurance, people, and recurring renewals each carry their own number, and Velarozone's own fee is itemised in the engagement letter rather than quoted upfront. See how Velarozone works for how that layered approach is put together.
