Question
What is the difference between a free-zone commercial licence and a regulatory licence?
The short answer
A commercial licence is issued by the licensing authority (called a trade, service, professional or industrial licence in some registers). It records that the entity exists and may carry out the activities listed on it. A regulatory licence is issued by a sector regulator. It permits the entity to perform an activity that the sector's law reserves to approved firms, such as financial services, health services, education, media, security or transport. Holding the first does not give you the second. In the DIFC, for example, a firm needs authorisation and a licence from the DFSA to conduct Financial Services in or from the centre. Where an activity is regulated, the licensing authority either holds the commercial licence until the regulator approves, or issues it on condition that approval follows before you begin.
Two decisions, two bodies
The licensing authority decides existence and scope: does this entity exist, in this jurisdiction, with these activities on it. The regulator decides fitness: may this entity, with these people and this capital and these systems, perform this specific regulated thing. In the DIFC, the DFSA licence goes further and specifies the type of Financial Services the firm may conduct.
The two bodies ask different questions, so they ask for different documents. For a new DFSA authorisation in the DIFC, the application needs CVs of the Board, source of wealth and funds documents for the UBOs, a regulatory business plan, and risk, AML and compliance policies. A registrar forming a company has no reason to assess those, and does not try to.
How this shows up in the register itself
Activity rows in the registers we hold name the body whose approval is required. The note sits on the row itself because the requirement follows the activity. Whether a given applicant is approved is then the regulator's decision.
The bodies recorded against activities in our parsed registers include Dubai Municipality (food safety permits, consumer product permits, contractor registration and classification, engineering consultancy qualification), the Dubai Health Authority (health facility licensing), the Knowledge and Human Development Authority, the Roads and Transport Authority, the Dubai Civil Aviation Authority, the Dubai Maritime Authority, the Dubai Sports Council, the Security Industry Regulatory Agency, the Central Bank of the UAE, the National Media Authority and the Media Regulatory Office, Dubai's environment and climate change authority for environmental clearance by industrial category, Sharjah Municipality's public health and food control departments, and the Ministry of Defence together with the Tawazun Council for military goods.
Registers also record the stage. Some entries are marked as needing approval before the licence issues; others are marked as post-licence, which means the licence in your hand is not yet permission to start. The DFSA shows the same staging: after its review it sets conditions in an in-principle letter, and it grants authorisation only once you have met them.
Why 'the zone said it was fine' is not the end of it
A licensing authority speaks for its own licence only. A regulator is not bound by what a zone's sales desk said about the activity. The DFSA, for one, requires authorisation for Financial Services in or from the DIFC, and registration for a Designated Non-Financial Business or Profession.
A setup can stall after the licence has issued: the entity exists, the activity is on the licence, and the business cannot lawfully begin because the regulator's conditions are still open. At the DFSA, authorisation is granted only after the conditions in the in-principle letter are met.
Where this stops
Related
Questions that come up next
Sources
Where this comes from
- Velarozone licence catalogue: external-approval bodies recorded against activities in the parsed registers
- Central Bank of the UAE: Rulebook 3.3.2 on source of funds
- Each named regulator's own licensing directory
General information drawn from the CBUAE Rulebook, including the Retail Payment Services and Card Schemes Regulation (C 15/2021), and Cabinet Resolution No. (134) of 2025 as published, not legal or tax advice. Rules and guidance change, so confirm the current text and each institution's own requirements before you submit.
