Activity guide / Technology & Software
On-site Managed IT Services business setup in the UAE
Contracted operation of a client’s computer systems at its premises, with defined access and responsibilities; not software-product development or staff supply.
Plan this activityBy Two Pillars Advisory. Sources last checked 2026-10-27. Independent guidance, not authority advice.
Understanding on-site managed it services
An on-site managed IT provider operates agreed parts of a client’s computer environment under an ongoing service contract. The commercial distinction is responsibility for a client system, rather than delivering a one-off software build or renting servers from a hosting facility. Meydan’s listing names on-site management and operation, but its surrounding explanation is limited and must not be stretched into permission for every technical service. Each assignment should identify the systems, location and access privileges involved. Security testing, equipment repair, public connectivity and labour supply are not presumed included. Client permission, supplier licences and a controlled offboarding procedure are as important as the entity’s activity wording.
Review scope: Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation. Two Pillars Advisory FZCO is an independent consultancy, not a licence issuer or regulator.
At a glance
- What the activity covers: Contracted operation of a client’s computer systems at its premises, with defined access and responsibilities; not software-product development or staff supply.
- Activity type: Professional services
- Likely jurisdiction context: Depends
- Possible external approvals: Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation.
What you offer matters.
What this activity covers
Contracted operation of a client’s computer systems at its premises, with defined access and responsibilities; not software-product development or staff supply.
A plain-English label, not an official activity name or code.
Boundaries & approvals to check
Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation.
Keeping shared administrator passwords after an engagement ends.
Your independent consultant: Two Pillars Advisory
Two Pillars helps you define the business model, compare routes and prepare an application. We are an independent consultancy, not a licensing authority.
The licence issuer / regulator: the competent authority
The competent licensing authority decides the permitted activity scope and issues the licence. A sector regulator may separately assess and authorise regulated services. Neither decision is made by TPA.
Choose around your operations.
Pure software and IT services rarely need external approval. Products handling biometric, health, telecom or payment data can bring sector rules.
For on-site managed it services: Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation.
Confirm the local operating route
Describe where customers, staff, premises and goods will be located. Ask the mainland issuer and any proposed free zone to confirm the exact scope and any permissions for operating outside the zone.
Map delivery across borders
Describe where the service is delivered or goods move. Confirm entity scope, destination requirements and any UAE local operations separately; international customers do not establish free zone eligibility.
Check the sector perimeter first
Describe the actual service, product and client type to the competent regulator. A commercial registration alone does not establish authorisation to deliver regulated services.
| Decision point | Mainland | Free Zone | Sectoral approvals |
|---|---|---|---|
| Who decides? | Competent emirate licensing authority | Proposed free zone licensing authority | Competent regulator, where applicable |
| Permitted operating scope | Requires case-by-case confirmation | Requires case-by-case confirmation | Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation. |
| Premises, people & documents | Confirm for the selected activity | Confirm for the selected activity and zone | Confirm against the regulated service or product |
| Fees & timing | Obtain a current itemised quotation | Obtain a current itemised quotation | Confirm if a separate application applies |
From scope to application.
- List the client systems and on-site duties, marking excluded repair, security-testing and telecom tasks.
- Ask the issuer to confirm the named operating scope and the permitted client-site arrangement.
- Agree administrator privileges, change approval, service escalation and audit access with the client.
- Test access revocation, credential transfer and recovery handover before starting the managed-service term.
Illustrative planning sequence; the authority may require a different application order or additional steps.
Common mistakes worth avoiding.
- Keeping shared administrator passwords after an engagement ends.
- Calling a manpower-supply arrangement an IT service contract without checking the employment and activity rules.
Authority information, independently explained.
Published by Two Pillars Advisory. References last checked 2026-10-27; each source’s check date and jurisdiction are shown below. Review is limited to the cited activity scope, not an approval or universal licensing assessment. Confirm current requirements directly before applying.
No affiliation, partnership or endorsement by the authorities listed.
- Meydan Free Zone: Provision of on-Site Management and Operation of Clients' Computer Systems And/or Data — zone activity description. Only the specific Meydan on-site operating activity is supported here. Detailed technical and mainland operating permissions require individual confirmation. (Meydan Free Zone, Dubai only, checked 2026-10-27)
- Invest in Dubai: Search business activities. Official Dubai activity search. Final activity wording and code must be confirmed here or with the licensing authority before filing. (Dubai, checked 2026-09-12)
- Dubai Department of Economy and Tourism (DET): Business licensing. Official Dubai business licensing information, including licence types and permit requirements. (Dubai, checked 2026-09-12)
Before you take the next step.
Does this include cybersecurity testing?
Not automatically. The named on-site operating activity is not evidence for penetration testing or other specialist security services; confirm those separately.
Can the team work at any mainland client site?
No universal right is established by the zone listing. Confirm the contract, delivery location and any out-of-zone operating conditions before deployment.
How is it different from web hosting?
The managed provider operates the client’s systems under agreed access at the client site. Hosting supplies capacity elsewhere; the responsibilities and permissions differ.