What are the UAE MoF's full accreditation standards for Accredited Service Providers?
Effective: 2026-07-31 · Authority: UAE Ministry of Finance (MoF) / Federal Tax Authority (FTA)
UAE Accredited Service Providers must simultaneously satisfy: ISO/IEC 27001 (Information Security), ISO 22301 (Business Continuity), active OpenPeppol membership, UAE legal presence with minimum AED 50,000 paid-up capital, two years of operational e-invoicing experience, encryption at rest and in transit, UAE data residency, and provision of 100 free e-invoices annually to SMEs.
What are the complete MoF accreditation criteria for ASPs?
The UAE Ministry of Finance has established extraordinarily strict criteria for ASP accreditation. Simultaneously required: (1) OpenPeppol membership (active network participant status); (2) legal presence in the UAE with minimum paid-up capital of AED 50,000; (3) two years of documented operational e-invoicing experience; (4) ISO/IEC 27001 certification covering the e-invoicing service scope; (5) ISO 22301 certification covering business continuity for e-invoicing operations; (6) encryption of all invoice data both at rest and in transit; (7) UAE data residency—all invoice data must be stored and processed within UAE territory; (8) provision of a minimum of 100 free e-invoices annually to eligible SMEs.
- Active OpenPeppol membership (verifiable in public directory)
- UAE legal incorporation with AED 50,000 minimum paid-up capital
- Two years documented operational e-invoicing experience
- ISO/IEC 27001 certification (valid, scoped to e-invoicing operations)
- ISO 22301 certification (valid, with tested business continuity plan)
- End-to-end encryption at rest and in transit
- UAE data residency for all invoice data
- 100 free e-invoices annually per SME customer
By when must Phase 1 and Phase 2 businesses appoint an accredited ASP?
Phase 1 large businesses (revenue exceeding AED 50 million) must appoint an accredited ASP by July 31, 2026, with mandatory compliance going live January 1, 2027. Phase 2 smaller businesses and government entities must appoint an accredited ASP by March 31, 2027, with mandatory compliance going live July 1, 2027 (businesses) and October 1, 2027 (government entities).
Frequently Asked Questions
- What happens if a business fails to appoint an ASP by the Phase 1 deadline?
- Businesses that fail to appoint an accredited ASP by July 31, 2026 (Phase 1) will not be able to issue legally valid e-invoices from January 1, 2027. The MoF has indicated that non-compliant invoices will not be recognized for VAT purposes, exposing suppliers to legal liability and disrupting their O2C cycles.
- Are all ASPs pre-approved before the mandate goes live?
- The MoF has indicated that a list of pre-approved or accredited ASPs will be published as the programme progresses. The final accreditation framework demands strict ISO certifications and data residency standards. Businesses should monitor the official MoF e-invoicing programme pages for the current approved ASP registry.
AutoFact AI is not certified by, affiliated with, or endorsed by any regulatory authority referenced on this page. References describe technical alignment with published regulatory requirements only.
Related Concepts
- What ISO certifications are required for UAE Accredited Service Providers?
- What capital and presence requirements apply to UAE ASP accreditation?
- What is an Accredited Service Provider (ASP) in UAE e-invoicing?
- What is the Tax Data Document (TDD) in the UAE e-invoicing framework?
- What is Message Level Status (MLS) in the UAE Peppol e-invoicing network?