How to Set Up a HealthTech or Telemedicine Platform in the UAE

UAE healthcare regulation runs by emirate, not by free zone. DHA licenses healthcare facilities and telehealth services in Dubai; the Department of Health – Abu Dhabi licenses facilities there; MOHAP sets the federal baseline and licenses facilities directly in the Northern Emirates. A free zone can host your holding company, but it does not hold the clinical permission — that sits with the health authority covering where the patient is treated or where the facility and clinicians are based. Choose the entity's home for the approval, not the brochure.

DHA's Standards for Telehealth Services require any natural or legal person who establishes, operates or provides telehealth services in Dubai to hold a DHA licence, applied for and managed through its Sheryan portal. The standard excludes two things from remote delivery: emergency cases needing immediate intervention, and the prescribing of narcotic, controlled or semi-controlled medication, both of which stay in-person. Patient consent must be captured before the consultation takes place. Applying for a new Dubai facility licence through Sheryan carries a stated processing time of five working days once the application is submitted, and activation needs a NABIDH-compliant electronic medical record in place before the facility can start operating.

MOHAP licenses telemedicine centres as a category of private health facility. Its process runs in two stages: an auditor review, then an engineering review of the facility's drawing plans, which must be revised and stamped by a specialised healthcare-design consultant. Initial approval is valid for one year only — the window to meet the technical requirements before the operating licence is granted, not permission to start seeing patients.

If the platform includes a diagnostic tool, wearable or remote-monitoring device, the classification and market authorisation now sit with the Emirates Drug Establishment, the federal authority for medical and pharmaceutical products under Federal Decree-Law No. 38 of 2024. This moved out of MOHAP's own remit, so a device roadmap built around MOHAP's older process needs rechecking against the Emirates Drug Establishment's current registration route before any diagnostic or treatment claim is marketed.

Prescribing follows the same discipline. A teleconsultation model can prescribe standard medication under its health authority licence, but narcotic, controlled and semi-controlled medicines are excluded from remote prescribing under DHA's telehealth standard — build the in-person referral into the patient journey rather than discovering the gap after launch.

Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in the Health Fields governs how health data is handled across the UAE, including in free zones — health data is not ordinary app analytics, and a platform that treats it that way is building on the wrong assumption. In Dubai, DHA's NABIDH programme is the health information exchange that aggregates patient records across public and private providers; a DHA-licensed telehealth facility needs a NABIDH-compliant record system connected before its licence activates, which means the data architecture decision has to be made before the facility application, not after.

A bank underwriting a clinical platform is reading the same approval story the regulator is. Before onboarding, have ready: the facility and telehealth licence status with each authority involved, the registered Medical Director's standing with DHA (changing that person is itself a formal DHA service, which tells you how seriously the authority treats the role), medical-liability insurance scaled to the clinical model, and evidence the NABIDH or equivalent data connection is built, not promised. Banking readiness in this sector means showing the clinical governance is real, not just that the company exists. Where cost is not set by a regulator, it is built in layers and itemised in the engagement letter — see how Velarozone works.

DHA requires a registered Medical Director on every licensed facility, including telehealth facilities, and that person is named in the licence itself, not just in internal paperwork. Ownership structures that separate the technology company from the clinical entity need to keep that distinction honest in practice: the clinical entity holds the patient relationship, the Medical Director answers to the regulator for it, and the technology company supplies, it does not diagnose. A documented ownership and governance structure that blurs this line at the website or app level, even while the paperwork separates it, is the single most common way these platforms drift into an approval they never applied for.

Other recurring mistakes: assuming a software licence covers remote prescribing of controlled medication, which DHA's standard specifically excludes; treating patient records as ordinary product data rather than as governed by Federal Law No. 2 of 2019 and, in Dubai, NABIDH; and marketing a diagnostic claim for a device that has not been through the Emirates Drug Establishment's classification.