The United Arab Emirates (UAE) is accelerating its transition to a digital-first tax and business environment, and electronic invoicing is a central part of this transformation.

With the release of Ministerial Decision No. 64 of 2025, the UAE Ministry of Finance (MoF) has formalized the eligibility criteria and procedures for service providers (SPs) seeking accreditation to operate in the country’s e-invoicing ecosystem.

This regulation doesn’t just lay out the application path; it introduces a rigorous framework for compliance, security, and continuity. In this post, we break down what service providers need to know about becoming accredited under the new rules, how the process works, and what ongoing compliance looks like in practice.

For service providers already operating in fields such as Company Formation Services in UAE or Business Setup Services in Dubai, understanding these new compliance expectations is vital to continue offering integrated and secure solutions to clients.

Overview of the UAE’s E-Invoicing Accreditation

1. Why Accreditation Matters?

The UAE’s e-invoicing system is part of a broader push to digitize the economy and improve tax compliance and business efficiency. Only service providers who are accredited under this decision will be allowed to deliver e-invoicing services in the country.

Accreditation offers access to a centralized, secure, and interoperable infrastructure overseen by the MoF and ensures that all providers meet international and UAE-specific standards.

To promote transparency, the Ministry will maintain a Central Register of Accredited Service Providers (ASPs). Businesses seeking to partner with e-invoicing providers should consult this registry to verify accreditation status.

2. Eligibility Criteria for Service Providers

To qualify, service providers must meet a combination of technical, legal, financial, and operational requirements:

• Legal Incorporation: The provider must be legally incorporated in the UAE or a foreign jurisdiction authorized to operate in the country.

• Operational Experience: A minimum of two years of experience operating an e-invoicing system is required.

• Paid-Up Capital: Providers must have at least AED 50,000 (around USD 13,612) in paid-up capital.

• Financial Audit: Audited financial statements for the most recent fiscal year must be submitted. If unavailable at application, they must be submitted within six months.

3. Core Requirements

The UAE’s e-invoicing ecosystem aligns with the Peppol framework, an international standard for digital document exchange. Service providers must:

• Be Peppol-certified and pass OpenPeppol conformance tests.

• Use a Peppol Service Provider (PSP) product that complies with the Peppol Interoperability Framework, PINT AE specifications, and the national Data Dictionary.

• Adhere to Peppol Authority Specific Requirements (PASR) issued by UAE authorities.

These requirements ensure cross-border compatibility and enable businesses in the UAE to operate on a level playing field with global partners.

4. Necessary Measures for Security

Security and business continuity are non-negotiable aspects of accreditation. The necessary measures include:

• Information Security: Providers must be certified under ISO/IEC 27001 for their PSP product.

• Business Continuity: Providers must either hold or commit to obtaining ISO 22301 certification (within three months post-financial year).

• Data Protection: Providers must support encryption of data at rest and in transit, implement multi-factor authentication, and comply with the UAE national cloud security policy.

5. Ethical Standing

A self-declaration is required, confirming that the provider is not involved in liquidation, bankruptcy, or legal disputes that affect financial integrity. The declaration also commits the provider to:

• Offer at least 100 free eInvoice exchanges annually.

• Maintain client confidentiality.

• Confirm that it is not blacklisted by any government body.

6. Insurance Requirements

To manage operational and cyber risk, the regulation mandates significant insurance coverage, to be issued by UAE-licensed insurers:

• AED 2.5 million (approx. USD 680,636) in professional indemnity.

• AED 5 million (approx. USD 1.36 million) in crime insurance.

• AED 5 million in cyber fraud insurance.

These documents must be uploaded only after the initial MoF review and instruction to proceed.

7. The Application and Pre-Approval Process

Applications must be submitted exclusively through the MoF E-Invoicing Service Provider Accreditation Portal. The key steps are:

• Only one active application is allowed per provider.

• Draft applications can be held for a maximum of 90 days.

• The MoF responds within 90 business days.

• If additional documents are requested, providers have 30 business days to comply.

Once approved, the provider enters the pre-approval testing stage, which includes:

• Completion of OpenPeppol interoperability tests.

• Creation of a Participant ID with the Federal Tax Authority (FTA).

• Trial use of the EmaraTax production API.

• Simulated data exchange using valid Peppol PKI certificates.

8. Final Testing and Full Accreditation

Final testing is designed to verify the provider’s real-world readiness. Providers must:

• Successfully transmit tax data under monitored conditions.

• Complete the final OpenPeppol validation process.

• Participate in a trial run observed by the MoF.

Upon successful completion, the provider receives full accreditation, which is valid for two years.

9. Compliance and Renewals

Once accredited, service providers are not off the hook. The Ministry will conduct regular compliance evaluations throughout the accreditation period. To renew:

• Submit a renewal application at least 70 business days before the current accreditation expires.

• Provide updated insurance certificates.

• Present a valid ISO/IEC 27001 certification.

• Reconfirm that all eligibility criteria are still being met.

Failure to renew on time or meet renewal criteria can result in cancellation of accreditation.

10. Termination and Objection Process

Accreditation can be terminated for several reasons including:

• Voluntary exit by the provider.

• Breach of compliance obligations.

• Substantiated complaints from users.

In such cases, providers must notify clients within five business days, and the MoF may delist them from all official directories.

If a provider disagrees with the termination, it can file an objection within 40 business days, including documentation and justification. The MoF will decide within 30 business days. If the objection is rejected, the provider is barred from reapplying for two years.

Stay Updated with the UAE’s Latest Framework

The UAE’s e-invoicing accreditation framework is one of the most comprehensive and structured digital tax policies in the region. It aligns the UAE with international best practices while enforcing strict local standards for security, transparency, and continuity.

For service providers, however, success hinges on preparation. From technical interoperability to insurance and certification, every detail matters.

For businesses relying on these services, verifying that your provider is fully accredited and compliant is crucial to staying ahead in a fast-changing regulatory landscape. Many providers offering corporate services in Dubai UAE are already aligning their systems to meet these evolving digital standards.