Half the questions the Ministry tells you to ask an ASP are already answered by the badge.
The Ministry of Finance publishes a two-page checklist for choosing an Accredited Service Provider: ask about security, ask about certifications, ask about their financial standing. Read it next to Ministerial Decision No. 64 of 2025 and something becomes clear — no provider can hold accreditation without ISO/IEC 27001, ISO 22301, AED 12.5 million of insurance cover and a signed declaration promising you 100 free invoices a year. Those are entry conditions. The questions worth your time are the ones accreditation does not cover.
What every accredited provider has already proved
Ministerial Decision No. 64 of 2025 sets the eligibility criteria, and the Ministry verifies them before publishing a provider on the register. A business comparing providers can treat all of this as settled:
| Condition | What it means | Source |
|---|---|---|
| Active Peppol certification | OpenPeppol conformance tests completed and the certified status maintained inside the UAE | Arts. 5(1)(a), 7 |
| Two years of product experience | The invoicing product itself must have been in operation for at least two years | Art. 5(bis), added 2026 |
| Paid-up capital ≥ AED 50,000 | Plus audited financial statements for the most recent financial year | Art. 6(2), 6(3) |
| ISO 22301 | Certified business continuity management | Art. 6(4) |
| ISO/IEC 27001 on the product | Held for the specific product used to serve you, not merely by the parent company | Art. 9(4) |
| Multi-factor authentication, encryption, monitoring | MFA on user access, encryption of data in transit and at rest, regular security monitoring | Art. 9(1)–(3) |
| Professional indemnity ≥ AED 2,500,000 | Issued by an insurer operating in the UAE | Art. 11(1) |
| Crime insurance ≥ AED 5,000,000 | Same | Art. 11(2) |
| Cyber fraud insurance ≥ AED 5,000,000 | Same | Art. 11(3) |
| UAE tax registration | Registered for corporate tax, and for VAT where registration is mandatory | Art. 8 |
| Clean standing | Not in liquidation, winding up or bankruptcy; not in litigation affecting financial standing; not blacklisted by any government authority | Art. 10(1)–(3) |
| 100 free invoices a year | A signed commitment to the Ministry to provide 100 free eInvoice exchange and reporting services per annum from the date the End-User agreement is signed | Art. 10(4) |
One caveat, in the decision itself. Article 5(3) provides that any condition in that article may be waived by the Minister. The list is the standard, not an unconditional warranty about every name on the register. It is still a far better baseline than most software procurement ever gets — and it means a small business does not need to run a security audit of its own.
The 100 free invoices are a promise to the Ministry, not automatically a clause in your contract
Article 10(4) obliges the provider to declare that it is committed to 100 free eInvoice exchange and reporting services per annum, running from the date the End-User agreement is signed. That declaration is made to the Ministry. The Ministry's own selection guide then adds the practical step, and it is worth quoting the intent plainly: it recommends ensuring that the provision of 100 free electronic invoices per annum is included in the contractual terms with the ASP.
For a consultancy issuing two or three invoices a month, that single clause is the difference between compliance costing a subscription and compliance costing nothing. Ask for it in writing before signing, not after.
What changed in May 2026: whose two years of experience counts
The original Article 5(1)(b) required the provider to have at least two years of experience operating and managing an electronic invoicing system. Ministerial Decision No. 56 of 2026 replaced Article 5 and moved the test into a new Article 5(bis): the requirement is now met where the product through which the services are delivered has been in operation for at least two years, and the experience of operating or managing that product is held either by the provider or by the third party behind it.
The same amendment states the position on outsourcing directly. A provider may use a product owned by a third party, and may outsource the development, operation or management of that product — or any element of the invoicing service — provided it retains full responsibility for meeting the accreditation conditions and for oversight of the service.
That legitimises a business model, and it also gives the Ministry's first product question real weight. When the checklist asks whether the invoicing system is the provider's own product or a third party's, and whether support is delivered directly or sub-contracted, it is now asking something that genuinely varies between two equally accredited names. The answer does not make one better than the other. It tells you who you are actually going to be talking to at 4 p.m. on a quarter-end.
Accreditation expires after two years — and your links go with it
This is the part of MD 64 that almost never appears in a vendor conversation, and it is the one with the sharpest edge for the customer.
- Accreditation is valid for two years from the date it is granted (Article 16(3)).
- Renewal must be applied for at least 70 business days before expiry (Article 18(1)), with fresh evidence of eligibility, valid insurance policies and a current ISO/IEC 27001 certificate.
- If the provider misses that window, or fails to fix the cause of a rejected renewal within the period it is given — at least 20 business days — then on the expiry date the accreditation is cancelled and the links to all persons represented by that provider are revoked (Article 18(7)).
- Accreditation can also be terminated mid-term: if the provider wants to exit, if it stops meeting the conditions, or if the Ministry receives validated complaints from end users (Article 19(1)). The provider must notify its customers within 5 business days of being told, and is delisted from the Central Register and from the OpenPeppol directory within 5 business days.
- A provider terminated for non-compliance is barred from re-applying for two years (Article 19(7)).
Why this matters more than any feature comparison. Failing to transmit invoices is capped at AED 5,000 a calendar month. Failing to notify the FTA of a system failure is AED 1,000 a day with no cap in the table — see the capped fine and the uncapped one. Your exposure to a provider that quietly lets its accreditation lapse is therefore measured in days, not in features. Two questions cover it: on what date was your accreditation granted, and what is your renewal timetable?
Pre-approved is not the same as accredited
The Ministry publishes two lists. The first is the register of Accredited Service Providers, each with an accreditation number. The second is a shorter list of providers that have completed the initial pre-approval requirements and are in the final production assessment stage.
Under Article 4 of MD 64, a pre-approved provider is authorised to provide electronic invoicing services in the UAE — but only on condition that accreditation follows within the timeline the Ministry sets. If it does not, the provider may no longer serve customers from the day that timeline expires. Choosing from the pre-approved list is a legitimate choice, not a shortcut; it simply carries a milestone that the accredited list does not.
As checked on 11 September 2026, the register held 52 accredited providers and 8 pre-approved. In May 2026 the accredited count was 32. The list moves — always take it from the Ministry's page on the day you decide, not from an article.
What the 52 actually are
The Ministry publishes names, accreditation numbers and contacts, with no categories. Reading the register as of 11 September 2026, the providers fall into four recognisable groups, and which group you want depends far more on your existing bookkeeping than on any feature list:
| Kind of provider | Who it suits | Examples on the register |
|---|---|---|
| Accounting and ERP software you may already run | The path of least work: the invoices are already in the system, the provider adds the transmission layer | Zoho, Tally, SAP, Comarch, Cygnet, ClearTax (Defmacro), Pagero, EDICOM |
| Audit and accounting firms | Businesses whose bookkeeping is already outsourced and who want one counterparty for the tax file and the invoice pipe | Deloitte & Touche – M E, EY Consulting, BDO Digital Solutions, Moore JFC Consulting, KGRN Chartered Accountants, Mac & Ross Chartered Accountants |
| eInvoicing and tax-tech specialists | Businesses with an in-house or unusual system that needs an integration rather than a replacement | InvoiceQ, Complyance, Flick Network, Taxilla, Tax Star, Marmin AI, Dariba, Fynamics |
| Infrastructure and enterprise platforms | High volumes, group structures, government-adjacent supply chains | DP World Digital GCC, Data Hub Integrated Solutions (Moro), Azentio, SunTec, Oxinus |
The grouping is our reading of the register, not an official classification, and it is not a recommendation of any provider. The useful conclusion from it is narrow and practical: check first whether the accounting software you already use is on the list. If it is, most of the integration question disappears before it is asked.
The questions actually worth asking
Strip out what accreditation already guarantees and the Ministry's checklist reduces to a short commercial conversation:
- Pricing model. Subscription or per transaction — and which is cheaper at your volume, not at the volume in the brochure. Ask explicitly about fees that are not in the headline price.
- The 100 free invoices, written into the agreement. As above.
- Integration. Can it connect to the accounting, ERP or invoicing system you actually run? Which APIs, which data formats, how much integration support is included, and what has to be migrated.
- Own product or third-party, and who supports it. Direct support means faster answers and clearer accountability; a sub-contracted support desk is not disqualifying, but you should know before you sign.
- SLAs. Defined uptime, defined support response times. An outage is not only an inconvenience here — it starts a two-business-day clock with the FTA.
- Accreditation date and renewal plan. The two-year term above.
- Scalability and roadmap. What happens when your volume grows, and how the provider plans to keep pace with changes to the specification.
- Reach and location. Which countries the provider already serves, and which Emirate it is based in.
The data-residency question has a different answer than you would expect
The Ministry's checklist asks where invoicing data is stored — locally in the UAE or overseas — and notes that data residency can matter for your own compliance and privacy policies. It is worth separating that from the legal test, because the two are frequently conflated.
Article 11 of Ministerial Decision No. 243 of 2025 requires records to be stored "within the State", and the market has widely read that as a server-location rule. The Ministry's own guidelines read it differently: what is required is that records stay complete and unaltered, that the storage infrastructure — whether located inside or outside the UAE — allows them to be produced promptly on request, and that the FTA can retrieve and reproduce them in full. Server location is expressly stated not to be the determining factor. Treat residency as a commercial and privacy preference of yours, not as a filter that disqualifies providers. The full reasoning and the retention periods are in the small-business guide.
How onboarding actually happens
Selecting is only the first half, and the mechanics are prescribed:
- Update EmaraTax first. Before onboarding, make sure your trade licence details, address and contacts in EmaraTax are current. Stale data here propagates into the invoice.
- Contract with the provider and settle the commercial terms. This happens before the technical onboarding, not after.
- Onboard through EmaraTax. The account admin of the taxable person opens the E-INVOICING tile, sees the list of providers, selects one and proceeds to that provider's portal to finish the process.
- Get your TIN if you do not have one. Already registered with the FTA? Your TIN is the first 10 digits of your TRN. Not registered and not required to be? You must generate a TIN through EmaraTax anyway.
- Receive your Peppol participant identifier from the provider, then test exchange and reporting before go-live.
One provider for everything — with one exception. The guidelines state that each person or government entity should onboard with only one provider for all of their electronic invoicing requirements. In a tax group, though, every member is onboarded separately: each has its own TIN, its own participant identifier, and each member may use a different provider.
Frequently asked questions
How many accredited eInvoicing service providers are there in the UAE?
As of 11 September 2026 the Ministry of Finance register listed 52 accredited service providers and a further 8 pre-approved providers undergoing final assessment. The number has grown quickly — it stood at 32 accredited in May 2026 — so check the Ministry's page on the day you decide rather than relying on a published figure.
What do I need to check before choosing an ASP in the UAE?
Concentrate on what accreditation does not settle: the pricing model at your actual invoice volume, whether the 100 free invoices a year are written into your contract, integration with the accounting or ERP system you already run, whether the product is the provider's own and who supplies support, defined SLAs for uptime and response times, and the date their accreditation was granted together with their renewal plan. Security certifications, insurance cover and financial standing are already accreditation conditions under Ministerial Decision No. 64 of 2025.
Are UAE ASPs required to give free invoices?
Yes. Article 10(4) of Ministerial Decision No. 64 of 2025 requires every service provider to declare to the Ministry that it is committed to providing 100 free eInvoice exchange and reporting services per annum, starting from the date the End-User agreement is signed. The Ministry's selection guidance recommends that businesses ensure this is included in the contractual terms with the provider.
How long does UAE ASP accreditation last?
Two years from the date it is granted. The provider must apply to renew at least 70 business days before expiry. If it misses that deadline, or fails to remedy the grounds for a rejected renewal within the period the Ministry allows, the accreditation is cancelled on the expiry date and the links to all the persons that provider represents are revoked.
What happens if my ASP loses its accreditation?
The provider must notify the businesses associated with it within 5 business days of receiving the termination decision, and it is removed from the Central Register and from the OpenPeppol directory within 5 business days. Your own obligations do not pause, so a provider losing accreditation is an operational event you should have a migration plan for — particularly because failure to notify the FTA of a resulting system failure is penalised at AED 1,000 a day.
Can a pre-approved provider issue electronic invoices in the UAE?
Yes. Under Article 4 of Ministerial Decision No. 64 of 2025, a provider holding pre-approval is authorised to provide electronic invoicing services, conditional on obtaining full accreditation within the timeline set by the Ministry. If accreditation is not granted within that timeline, the provider may not continue from the day it expires.
Can an ASP use someone else's software?
Yes, since Ministerial Decision No. 56 of 2026. A provider may use a product owned by a third party and may outsource development, operation or management of the product or any element of the service, provided it retains full responsibility for meeting the accreditation conditions and for oversight of the service. The two-year experience requirement now attaches to the product rather than to the provider, and may be satisfied by the third party's experience.
Can I use more than one ASP?
No. The Ministry's guidelines state that each person or government entity should onboard with only one provider for all of their electronic invoicing requirements. In a tax group the position differs: each member is onboarded separately with its own TIN and participant identifier, and different members may use different providers.
How do I onboard with an ASP in the UAE?
Finalise the contract and commercial terms with the provider first, then initiate onboarding through the FTA's EmaraTax system. The account admin of the taxable person opens the E-INVOICING tile, selects the provider from the list and proceeds to that provider's portal to complete the process. Check that your trade licence details, address and contacts in EmaraTax are up to date before you start, and generate a TIN there if you do not already have one.
Does my eInvoicing data have to be stored on UAE servers?
No. The UAE Electronic Invoicing Guidelines state that the requirement to store records "within the State" is about integrity, prompt production on request and the FTA's ability to retrieve and reproduce them, irrespective of where the servers, databases or cloud solutions are located. The Ministry's selection checklist still asks where data is stored, because residency can matter for your own policies — but it is not the legal test for compliance.
Sources
- Eligibility criteria, insurance, security requirements, the 100 free invoices, the two-year term, renewal and termination — Ministerial Decision No. 64 of 2025, Arts. 4–11, 16, 18, 19 (PDF)
- The amended Article 5, third-party products and the new Article 5(bis) on experience — Ministerial Decision No. 56 of 2026 (PDF)
- The Ministry's own selection checklist, including the recommendation on the 100 free invoices — Considerations for Selecting an Accredited Service Provider V1.0, 23 February 2026 (PDF)
- Onboarding through EmaraTax, one provider per business, tax groups, storage and the provider's ongoing duties — UAE Electronic Invoicing Guidelines V1.1, chapters 6, 13, 15 (PDF)
- The live register of accredited and pre-approved providers — Ministry of Finance, eInvoicing Accredited Service Providers
- Programme overview and document library — Ministry of Finance, eInvoicing
Verified 11 September 2026 against the Ministry of Finance's published decisions and register. Provider counts and names were read from the Ministry's register on that date and change frequently; the grouping of providers by type is our own reading of the register and is not an official classification or a recommendation. This guide describes the legal framework for selecting a provider and is not advice on which provider to choose.
Related
- eInvoicing below AED 50 million — scope, the TIN you may have to register for, storage, and your dates.
- The capped fine and the uncapped one — why an unreported outage costs more than a month of missing invoices.
- The 51 fields — what has to be on the invoice itself before a provider can transmit it.
- The five-corner model — the eleven steps your invoice takes, and the one where the FTA gets it before your customer does.
- Electronic credit notes — the four cases where one is compulsory, including a clerical error, and the 14-day clock.
- Self-billing and VAT groups — the 24-month intra-group grace period, the TIN each member needs, and why the buyer has to be live before it can self-bill you.
- VAT calculator — the 5%, the registration thresholds and the eInvoicing timetable in short.
- Corporate tax calculator — your corporate tax TRN is where your TIN comes from.