Skip to content

Guide

How to Set Up an InsurTech or Digital Insurance Broker in the UAE

The short answer

UAE insurance activity is regulated by the Central Bank of the UAE (CBUAE) onshore, and by the Dubai Financial Services Authority (DFSA) in the DIFC or the Financial Services Regulatory Authority (FSRA) in ADGM. The permission needed is rarely a single "InsurTech licence": it is a CBUAE insurance broker licence, a DFSA or FSRA Category 4 insurance-intermediation authorisation, or โ€” for a genuine technology vendor โ€” an ordinary commercial licence with no insurance authorisation at all. What decides which applies is whether the platform recommends cover, collects premium or settles claims itself, rather than simply supplying software to an insurer or broker who already holds the licence.

Which licence fits: broker, MGA, distributor or software vendor

InsurTech is not one activity. The same product idea can be a licensed broker, a delegated underwriter, an embedded distributor inside someone else's app, or a pure software vendor selling to an insurer that already holds every licence it needs. Each model carries a different regulator relationship, so pick the closest fit before anything else:

  1. Digital insurance broker or comparison platform โ€” arranges or recommends cover between a customer and an insurer.
  2. Managing general agent (MGA) or delegated administrator โ€” underwrites or settles claims on an insurer's paper, under delegated authority.
  3. Embedded insurance distributor โ€” sells cover inside another product's checkout or app.
  4. Software provider to insurers and brokers โ€” supplies technology and holds no customer insurance relationship itself.

The test that separates them is functional, not cosmetic: who recommends the product, who receives the premium, who pays the claim, and whose licence stands behind the transaction. A platform that only displays an insurer's quotes, with the insurer genuinely doing the recommending, can sit outside insurance regulation entirely. The same screen, rebuilt so the platform ranks products or collects premium itself, moves inside the perimeter โ€” the same boundary that shapes payment gateway licensing in the UAE. Velarozone's fintech setup work starts by mapping each screen against this test before any entity or jurisdiction is chosen.

What the regulator actually requires

Three regulators can end up holding the pen, depending on where the entity sits. Onshore, the CBUAE licenses insurance brokers under its Insurance Brokers' Regulation: minimum paid-up capital of AED 3 million, with UAE nationals holding at least 51% of it, rising to AED 10 million for a financial free zone or foreign branch. It also requires a bank guarantee in its favour โ€” AED 3 million plus AED 1 million per additional branch โ€” mandatory professional indemnity cover, and one specialised professional per licensed class holding a recognised degree and five years' relevant experience. The licence is renewed annually.

In the DIFC, the DFSA authorises insurance intermediation as a Category 4 activity under its Prudential โ€” Investment, Insurance Intermediation and Banking rules, with capital set at the higher of a USD 10,000 base or an expenditure-based minimum. In ADGM, the FSRA treats it the same way: a Category 4 Financial Services Permission, its own base capital requirement, an Insurance Business Supplement alongside the application form, and an in-principle approval stage that must clear before incorporation.

A business that only licenses software to an insurer or broker who already holds one of these authorisations typically needs no insurance licence of its own โ€” that depends on the contract between the two, not on how the product is marketed.

How premium and claims money has to move

Every one of these licences exists because of money in transit. A broker who takes a customer's premium, even briefly, before passing it to an insurer is handling client money โ€” why the CBUAE asks for capital, a bank guarantee and indemnity cover rather than a standard trade licence. Premiums and claims payouts sit in segregated client accounts with licensed institutions under regulator oversight, never in the operating company's working-capital account, and never moved without the account holder's consent.

An MGA or delegated administrator moves money differently: claims are usually paid from an account the insurer controls, with the delegate authorised only up to agreed limits. Embedded distributors and comparison platforms that never touch premium still need to show a bank clearly which pattern applies, because onboarding asks who holds the money at every step before anything else. Velarozone's banking readiness work answers that before an account application goes in.

Ownership, representatives and the roles a licence needs filled

Each regulator looks past the brand to the people behind it. The CBUAE's 51% UAE national capital rule is about who owns the broker, not just how much they put in, and it vets every partner or director put forward as an Insurance Broker's Representative for integrity, competence and financial soundness. ADGM goes further, requiring FSRA approval of each director individually as a Controlled Function. A regulator about to let a company touch customer premium wants to know who stands behind the capital and the guarantee, and where it came from.

That source-of-funds question becomes part of the licensing file, not an afterthought for the bank. Velarozone's source of wealth and funds work prepares that evidence alongside the regulator's own application form. Where the product splits a licensed function from a technology company โ€” common once an insurer carries the regulated side โ€” the ownership structure connecting them needs its own answer, the kind of case Velarozone's regulated and complex ownership setup work is built for.

Where InsurTech distribution goes wrong

  • Calling ranked policy recommendations "neutral" technology, when ranking is itself advice or arranging.
  • Collecting premium through an entity that holds no broker, MGA or insurer licence.
  • Leaving claims accountability unclear between the platform, the delegate and the insurer.
  • Building a distribution brand and a customer base before the product capacity behind it is secured.
  • Comparing only incorporation fees between routes, instead of capital, guarantee, indemnity cover and renewal cost together.

Velarozone's documentation support keeps that comparison honest, assembled alongside the business plan and technology description the CBUAE, DFSA or FSRA application itself asks for.

Container terminal and cranes at a Dubai port

General guidance here; the detail that matters depends on your activity and markets.

Questions

Frequently asked

Does a comparison or ranking tool need an insurance licence?
Not automatically, but ranking or recommending products usually counts as arranging or advising, which pulls the platform inside CBUAE, DFSA or FSRA regulation. A tool that only displays data an insurer supplies, with the insurer doing the recommending, sits in a different position.
Can a software vendor avoid insurance authorisation completely?
Yes, if the vendor genuinely sells technology to a licensed insurer or broker and never recommends products, collects premium or settles claims itself. The moment any of those functions moves onto the vendor's own platform, the position changes.
Does the DIFC or ADGM route need less capital than a CBUAE broker licence?
The capital tests are different, not simply lower. DFSA and FSRA set a Category 4 base capital figure in US dollars with an expenditure-based top-up, while the CBUAE sets a fixed AED minimum plus a bank guarantee and indemnity cover. Compare the full package, not the base figure alone.
What happens if the platform briefly holds premium before passing it on?
Holding premium even briefly is the activity the broker licence, capital and bank guarantee exist to cover. A delay in forwarding funds does not remove the requirement; it is the reason for it.
Does health or telematics data change the compliance picture?
Yes. Health and telematics data needs more care than ordinary customer data under UAE data protection law, and a platform collecting it needs a lawful basis and specific consent beyond a standard terms-of-service click-through.

Get your UAE setup plan

Velarozone maps each function in the product โ€” recommending, collecting premium, underwriting, paying claims โ€” against the licence or authorisation it needs, across CBUAE, DFSA and FSRA routes, before any entity is chosen. The firm's own fee is itemised in the engagement letter; see how Velarozone works.

Apply this to your own situation

Guides describe the general position. Send us your facts and an adviser will tell you which parts actually apply to you.

Free assessment โ€” current figures are confirmed within your adviser-reviewed route comparison. Your details are not shared with third parties.

Start with a structure assessment

In an initial consultation you receive a plain-language decision summary, a document-preparation list, and the next actions for your situation. Current figures are confirmed within your adviser-reviewed route comparison.

Get my UAE setup planSend the details through the contact form

This guide provides general information, not legal, regulatory, tax, investment or financial advice. It does not guarantee a licence, authorisation, visa, bank account, funding or tax outcome.

This page is general information about UAE business setup, not legal, tax, immigration, or banking advice. Rules, fees, permitted activities, and bank policies can change. Final eligibility depends on your facts and the applicable rules at the time of application.