Understanding Activity Code 7020.99 and ISIC Classifications concerning AI Licensing in Dubai

What is the price for AI start-ups then?

The majority of AI startups in Dubai choose 7020.99 since it is the general category. Here’s the reason why:

7020.99 covers:

• Machine learning model development
• AI product development (chatbots, recommendation engines, computer vision systems)
• Data science and analytics services
• Research and development in AI
• Technology licensing and intellectual property
• A mix of services (for example, AI along with consulting and implementation)

What about using 7020.10 or 7020.20?

• The rule 7020.10, which applies to custom software, is too restrictive since it is intended for companies that develop software for a particular client; in the case of a general AI product or platform, using 7020.10 may lead to confusion regarding your license.
• The code 7020.20, which is used for consultancy, should be applied in cases where you merely provide advice—for example, when assisting companies with their AI strategies. However, it does not properly represent the nature of your activities if you are developing your own algorithms or products.
• The option 7020.99 is flexible since you can switch between carrying out advisory work, developing products, carrying out research, and implementation all without having to alter your license.

The Actual State of Regulation: What 7020.99 Actually Allows

In practice, should your registration be under ISIC 7020.99 in a Dubai free zone, you can:

✅ Develop and sell AI software and products

✅ Provide AI consultancy and advisory services

✅ License technology and software to other companies

✅ Conduct R&D in machine learning and data science

✅ Process data for analytics (with appropriate information protection measures)

✅ Provide training and support on AI systems

✅ Develop APIs and integrations for AI platforms

⚠️ You cannot (without additional licensing):

• Operate as a data center (requires separate code: 6311)
• Provide telecom services or bandwidth.
• Provide financial advisory (conflicts with fintech regulations)
• Handle healthcare data without additional compliance (HIPAA-equivalent rules)
• Process government-classified information

Additional Licensing Considerations for AI

Beyond your activity code, AI companies in Dubai may need:

1. Data Protection Compliance

Since most AI companies deal with personal data, your company must comply with the UAE Data Protection Law. This is not a separate licence, but it does have an impact on the way you manage your business:

• Data residency rules (some data must be stored locally)
• Consent management for training data
• GDPR-equivalent compliance if you process EU resident data

2. Cybersecurity Compliance

Depending on your service, you may need:

• ISO 27001 certification (information security)
• Compliance with UAE Critical Information Infrastructure Protection rules
• Frequent security reviews

3. Financial services (if applicable)

If your AI product touches financial services (robo-advisory, algorithmic trading, lending algorithms):

• You might have to obtain extra licensing from the Central Bank of the UAE or the Securities and Commodities Authority.
• The rules are different when you are operating in the DMCC (since it has a financial services authority) as compared to the other free zones.

4. Free Zone-Specific Requirements

Different zones have slightly different rules:

• DMCC: Requires additional financial services compliance if you touch fintech
• Dubai South: Streamlined approval for pure tech activity codes; less financial services friction. For others: the standard ISIC 7020.99 requirements apply.

How to Register Your Activity Code

The process is simple:

1. Choose your free zone (see our previous post on free zones)
2. Select activity code 7020.99 (or another 7020.xx code if your business model is clearly narrower)
3. Submit documentation:
   • Passport/ID copies of shareholders
   • Business plan or service description
   • Proof of office space (if required by zone)
   • Bank references (to establish your legitimacy)
4. Get approval (typically 2-3 working days)
5. Pay the licensing fees (for basic ISIC 7020.99 registration, the amount is about AED 4,000 to 6,000 per year).
6. Receive your trade license.

Common Mistakes to Avoid

Mistake 1: Registering under “Management Consultancy” (7020.20) to look more established.

It often has the effect of backfiring. The idea of offering management consultancy suggests that you do not develop software, which can lead people to ask questions about the way you actually operate. If you are developing or selling AI products, stick to 7020.99.

Mistake 2: Using the wrong ISIC code because your free zone suggested it

Free zones might base their regulations on what they have previously used rather than on what is most suitable for your business. If you’re unsure, it’s a good idea to consult a business setup consultant.

Mistake 3: Registering under code 6311 (data center operations) because you want to host data

If your software company keeps customer data, then you don’t need code 6311 since that code is intended for businesses which operate public data centres, and you can use 7020.99 together with proper data protection compliance.

Mistake 4: Assuming one activity code covers everything

If your AI company plans to offer several different services, such as software development, recruitment, and import/export, you might need more than one activity code. This is possible, but it will make things more complex and increase costs.

Scale and Flexibility

One benefit of ISIC 7020.99 is that it expands along with your business. You can begin as a solo founder offering AI consulting, then move into product development, and later add licensing income, all without changing your code.

You generally won’t find it necessary to alter your activity code. The only situation in which you would do so is if your business begins providing infrastructure services, for example by running a data centre for your product. In that case, you might need a different sub-activity code. If this occurs, your free zone authority can help you.

The Bigger Picture

Your activity code is the foundation of your business in Dubai. If you choose the right code from the beginning, you are unlikely to have problems later. Code 7020.99 is made for companies like yours. It is flexible, well-known, and effective.

While most companies are not troubled by the activity code itself, they do have difficulties with the later compliance requirements such as data protection, cybersecurity, and unexpected rules that are specific to particular zones. We will look at these subjects in our future posts.

Next, learn when it is better to operate in a Dubai free zone or on the mainland, and how this choice affects your company structure, taxes, and legal status.

Related Reading

• Dubai Company Setup: Mainland vs Free Zone
• Free Zone Comparison Guide
• Bank Account Opening for Tech Startups
• Tax Advisory for AI Companies in Dubai