Two Pillars Advisory FZCO › Business Setup › Technology & Software › Cloud Services & Datacentres

Activity guide / Technology & Software

Cloud Services & Datacentres business setup in the UAE

Enterprise cloud capacity, colocation and infrastructure operations, distinguished from designing software or hosting an individual website.

Plan this activity

By Two Pillars Advisory. Sources last checked 2026-10-27. Independent guidance, not authority advice.

Enterprise cloud and datacentre infrastructure — illustrative context for cloud services & datacentres
Original AI-generated editorial illustration · Not a photograph of TPA staff or an approved facility

Understanding cloud services & datacentres

An enterprise cloud or datacentre business contracts for computing capacity, storage and operational resilience rather than simply building websites. Its responsibilities may include tenancy isolation, backup recovery and infrastructure monitoring, depending on whether it owns a facility or resells capacity from an upstream operator. These models create different premises, connectivity and customer-contract questions. Meydan promotes a cloud and datacentre scope, while DDA defines datacentre operations within its covered zones. Neither source establishes permission to construct a facility, operate a public telecommunications network or store every category of regulated information. Map the physical location, service boundaries and data flows before choosing an entity.

Review scope: Meydan cloud listing and DDA section 16.6.3 support their respective zone scopes only. Facility, telecom and client-sector permissions remain separate. Two Pillars Advisory FZCO is an independent consultancy, not a licence issuer or regulator.

Colocation

Separate owned-facility, colocation and managed-reseller models in the infrastructure brief.

Managed enterprise cloud

Document rack space, power, cooling, carrier arrangements and the party responsible for each operational layer.

Reseller infrastructure

Confirm activity scope and facility permissions with the selected issuer; assess public connectivity separately with TDRA where relevant.

At a glance

  • What the activity covers: Enterprise cloud capacity, colocation and infrastructure operations, distinguished from designing software or hosting an individual website.
  • Activity type: Professional services
  • Likely jurisdiction context: Depends
  • Possible external approvals: Meydan cloud listing and DDA section 16.6.3 support their respective zone scopes only. Facility, telecom and client-sector permissions remain separate.

What you offer matters.

What this activity covers

Enterprise cloud capacity, colocation and infrastructure operations, distinguished from designing software or hosting an individual website.

A plain-English label, not an official activity name or code.

Boundaries & approvals to check

Advertising UAE-only data residency while replica storage or support access sits overseas. Signing a building lease or buying equipment before confirming power, site and permitted facility use.

Your independent consultant: Two Pillars Advisory

Two Pillars helps you define the business model, compare routes and prepare an application. We are an independent consultancy, not a licensing authority.

The licence issuer / regulator: the competent authority

The competent licensing authority decides the permitted activity scope and issues the licence. A sector regulator may separately assess and authorise regulated services. Neither decision is made by TPA.

Choose around your operations.

Meydan cloud listing and DDA section 16.6.3 support their respective zone scopes only. Facility, telecom and client-sector permissions remain separate.

Describe your business model, review location and sector scope, then confirm with the competent authoritiesYour actual business modelCustomer & delivery locationPremises & peopleProduct & sector permissions
Illustrative decision map — not an eligibility assessment. Confirm the local operating route, cross-border delivery and regulated scope with the competent authorities.

For cloud services & datacentres: Meydan cloud listing and DDA section 16.6.3 support their respective zone scopes only. Facility, telecom and client-sector permissions remain separate.

Confirm the local operating route

Describe where customers, staff, premises and goods will be located. Ask the mainland issuer and any proposed free zone to confirm the exact scope and any permissions for operating outside the zone.

Map delivery across borders

Describe where the service is delivered or goods move. Confirm entity scope, destination requirements and any UAE local operations separately; international customers do not establish free zone eligibility.

Check the sector perimeter first

Describe the actual service, product and client type to the competent regulator. A commercial registration alone does not establish authorisation to deliver regulated services.

Route comparison — questions to verify for this activity, not a recommendation
Decision pointMainlandFree ZoneSectoral approvals
Who decides?Competent emirate licensing authorityProposed free zone licensing authorityCompetent regulator, where applicable
Permitted operating scopeRequires case-by-case confirmationRequires case-by-case confirmationMeydan cloud listing and DDA section 16.6.3 support their respective zone scopes only. Facility, telecom and client-sector permissions remain separate.
Premises, people & documentsConfirm for the selected activityConfirm for the selected activity and zoneConfirm against the regulated service or product
Fees & timingObtain a current itemised quotationObtain a current itemised quotationConfirm if a separate application applies

From scope to application.

  1. Separate owned-facility, colocation and managed-reseller models in the infrastructure brief.
  2. Document rack space, power, cooling, carrier arrangements and the party responsible for each operational layer.
  3. Confirm activity scope and facility permissions with the selected issuer; assess public connectivity separately with TDRA where relevant.
  4. Prepare tenant isolation, recovery testing, incident escalation and customer-data export terms before selling capacity.

Illustrative planning sequence; the authority may require a different application order or additional steps.

Prepare the evidence. Price the scope.

A preparation checklist to discuss with the relevant authority — not a mandatory document list. Requirements and costs remain to be confirmed for your chosen route.

Conditional document checklist

Facility and upstream contracts

Separate owned-facility, colocation and managed-reseller models in the infrastructure brief.

Network and tenancy diagram

Document rack space, power, cooling, carrier arrangements and the party responsible for each operational layer.

Recovery and incident plan

Confirm activity scope and facility permissions with the selected issuer; assess public connectivity separately with TDRA where relevant.

Line-item budget questions

Entity and facility assessments

Obtain current entity and facility-specific quotations, distinguishing operation from construction.

Power cooling and leased capacity

If relevant, price power, cooling, colocation, upstream capacity and connectivity contracts separately.

Security resilience and specialist review

Budget recovery testing, security, insurance and regulated-workload assessment according to the client model.

Review the official references before committing to an application

Common mistakes worth avoiding.

  • Advertising UAE-only data residency while replica storage or support access sits overseas.
  • Signing a building lease or buying equipment before confirming power, site and permitted facility use.

Authority information, independently explained.

Published by Two Pillars Advisory. References last checked 2026-10-27; each source’s check date and jurisdiction are shown below. Review is limited to the cited activity scope, not an approval or universal licensing assessment. Confirm current requirements directly before applying.

No affiliation, partnership or endorsement by the authorities listed.

Before you take the next step.

How does this differ from website hosting?

The client purchases enterprise infrastructure, colocation or managed cloud operations. A website-hosting supplier may buy that capacity, but the facility and tenant responsibilities are different.

Does a cloud activity authorise a public telecom network?

No such permission is inferred. Public network or subscriber connectivity needs a separate assessment; document which licensed provider supplies the communications layer.

Can every client’s data be hosted?

No blanket eligibility is established. Health, financial and other sensitive workloads need client-sector and data-protection review alongside the infrastructure contract.

Ask Two Pillars to confirm Cloud Services & Datacentres