Published with the consent of the person concerned. Identifying details have been removed.
We recently prepared a full setup proposal for a client in Dubai. He is in full-time employment, holds a residence visa sponsored by his employer, and wants to start taking his own work without resigning — software, cloud services and hardware.
When he approached us he asked one question: "Do I need an NOC from my employer?"
By the time the proposal was finished, that was the least important question on the list. The six points below are where people actually end up with the wrong licence, or with a contract they cannot perform.
1. "I am just working for myself, a freelancer permit will do" — usually it will not
His business has five lines: reselling commercial SaaS for retail, implementation and delivery for software vendors, cloud service resale, hardware supply, and network services.
All of it sounds like "IT services". In the activity catalogue it splits into two categories: reselling SaaS and supplying hardware are commercial (trading) activities; implementation, cloud and network maintenance are professional or service activities.
That single distinction removes most of the options. The main Dubai freelancer permits — GoFreelance, DMCC FreelanceUAE, Expo City, DAFZ Talent Pass — cannot carry trading activities, and most are issued in your personal name only and do not allow employees. If you want to resell software and supply hardware, you need a company entity.
Work out which of your lines are trading and which are services before you choose a licence. Do it the other way round and you will be re-registering when you add a business line next year.
2. What constrains you is the employment contract, not immigration law
No UAE rule prohibits an employed person from holding a free zone licence. The licence is issued by the free zone authority and the residence visa by GDRFA/ICP; the two can be held separately. A licence taken with a zero visa quota opens no immigration file, and your existing visa and Emirates ID are untouched.
So whether an NOC is required comes down to the individual free zone's rule, and several state expressly that it is not.
The real risk sits in the employment contract — and the dangerous clause is not exclusivity, it is IP assignment.
If the contract provides that all intellectual output created during employment belongs to the employer — very common in IT contracts — then ownership of the code and the work you deliver to your own clients is contestable. Your client pays, and you may not hold what you delivered.
That is a far more serious problem than the NOC, and obtaining an NOC does not fix it. They are different clauses.
Before you apply for anything, take out your employment contract and read three things: exclusivity, moonlighting, and IP assignment.
3. Selling hardware to a mainland client is not a domestic sale
This is where deals most often come apart.
Goods moving from a free zone into the UAE mainland are a customs import, not a domestic transaction. Dubai Customs is explicit: a customs declaration for sale of goods to the mainland is required; most goods attract 5% duty on CIF value; and the declarant must hold a valid licence issued by the relevant mainland authority together with a customs business code obtained on that basis.
A free zone company cannot be the importer of record itself. Two structures work, and one is clearly simpler:
- Let your mainland corporate client act as importer of record. It already holds a mainland licence, so this is the cleanest route and needs no distributor. You deliver and invoice within the free zone.
- Appoint a mainland-licensed importer or distributor. Higher cost, longer chain.
Either way, build the 5% into your price at quotation stage. Telling a client afterwards that 5% needs adding usually ends the deal.
One more point: Dubai Executive Council Resolution No. 11 of 2025 opened routes for free zone entities to operate onshore, but it deals with the right to conduct the activity, not with customs, and it applies to Dubai free zones only. It does not solve the goods problem.
4. Two activities with identical names — pick the wrong one and you upgrade your premises
You only find this by reading the activity master itself.
In the Ajman Free Zone activity list, "Computer Equipment Requisites Trading — Import & Export" appears twice, with identical wording:
| Activity code | Premises allowed |
|---|---|
| AM-10340 | Office / Virtual Office / Warehouse / Land |
| AM-02775 | Warehouse / Retail Units only |
If your licence comes with an office or virtual office, selecting AM-02775 means either paying to upgrade the premises or paying again to change the activity.
Several related activities behave the same way: hardware repair (AM-03036), telecom equipment repair (AM-02844) and computer assembly (AM-02232) all require Warehouse or Retail Unit premises and cannot be held on an ordinary office package. So if your "hardware services" include on-site repair or assembly, settle it before signing — not after the licence issues.
Choosing activities by name alone is not enough. Read the premises column.
5. Keep the word "agent" out of your contracts
The client's own words were that he acts as an agent for domestic and international software vendors. A natural way to describe it — and in the UAE, a defined legal status with its own statute.
Under Federal Law No. 3 of 2022 (in force 15 June 2023), a registered commercial agent must be a UAE national, or a company wholly owned by UAE nationals or public legal persons. A foreign-owned free zone company is not eligible to register.
The good news: ordinary non-exclusive resale and distribution arrangements do not require registration at all. In practice foreign principals deliberately avoid registration, because it confers strong and hard-to-terminate protections on the local agent. Contracting as a non-exclusive reseller or an implementation subcontractor is entirely lawful.
What to avoid is the wording. Keep sole agent, exclusive agent, exclusive distributor and territorial exclusivity out of contracts, website, business cards and marketing. The Commercial Agencies Committee looks to substance, but wording is the evidence most readily relied on.
Know the trade-off: your protection comes entirely from the contract, with no statutory compensation right. So when contracting with vendors, set out notice periods, termination grounds, and the treatment of stock and commission on termination.
6. Cloud hosted abroad closes three sectors
His cloud resources sit in China. The UAE imposes no general data-localisation requirement on the private sector, so that is not unlawful in itself. Three sectors are nonetheless closed:
| Sector | Restriction and basis |
|---|---|
| Healthcare | Health data may not be stored, processed, generated or transferred outside the State — Federal Law No. 2 of 2019, Article 13 |
| Banking | The master system of record, including all confidential data, must be maintained within the UAE — CBUAE Outsourcing Regulation for Banks, Article 6 |
| Government | Cloud First policy requires public-sector workloads on in-country or sovereign cloud — TDRA Cloud First policy |
This client targets the retail sector, which sits squarely within the workable range. But it has to be settled at the market-planning stage, or sales effort goes into deals that will fail compliance review at the end. Where personal data crosses borders, Article 23 of the Personal Data Protection Law (Federal Decree-Law 45 of 2021) applies — contractual safeguards plus the data subject's explicit consent, there being no UAE adequacy decision covering China.
While we are here, the network line has a boundary too: installing and maintaining a client's own network is fine; selling connectivity — leased lines, SD-WAN, VPN, IP telephony, internet access — is a telecommunications service requiring a TDRA licence, and in practice must be resold through an e& or du partner arrangement.
Finally
Not one of these six is something you deal with after the licence issues. Every one of them affects which free zone you choose, which activity codes go on the licence, and how the first contract is written.
Getting a licence is not the hard part. Knowing what to ask before you get one is.
Can I hold a company licence in Dubai while in full-time employment?
Yes. The licence is issued by the free zone authority and the residence visa by GDRFA/ICP, and the two can be held separately. A licence taken with a zero visa quota opens no immigration file, so an existing employer-sponsored visa and Emirates ID are unaffected. Whether an NOC is required depends on the individual free zone; several state expressly that it is not. What genuinely needs review is the exclusivity and IP assignment wording in the employment contract.
Can a free zone company sell hardware directly to a UAE mainland client?
It can sell, but goods moving from a free zone into the mainland are a customs import: most goods attract 5% duty on CIF value, and the declarant must hold a mainland licence and a customs business code. A free zone company cannot be the importer of record itself; in practice the simplest structure is for the mainland corporate buyer to import in its own name.
Are software development and software resale the same business activity?
No. Software development is a professional or service activity and software resale is a commercial (trading) activity. They are separate entries in the activity catalogue and must be selected individually. If you intend to do both, confirm that the chosen free zone permits trading and service activities on a single licence.