Nobody thinks about governance until the bank wants a board resolution by Friday and nobody can find the last one. For a private DIFC or ADGM company, governance is not ceremony. It is the evidence file that a bank, the tax authority and eventually a buyer or an heir will ask to see.
A finance director at a family holding company in the DIFC emailed us in March with a deadline of Friday. The bank's periodic review wanted a board resolution confirming the current signatories and a certified copy of the register of shareholders. The company was six years old. Nobody could find a register, and the last board resolution anyone could locate appointed a director who had since moved to Singapore and resigned by email.
Nothing illegal had happened. The owners had simply never thought about governance beyond signing the incorporation documents, which is true of most private companies we take on.
Three people will ask, eventually
For a listed company, governance is about protecting outside shareholders. For a privately held DIFC or ADGM company, holding company or SPV, it is something more practical: the evidence file. Three audiences will one day ask to see it.
The first is the bank. Account opening is the easy part. The periodic KYC refresh, the new signatory, the large outbound payment to a related party: each of these produces a request for resolutions, registers and a beneficial ownership chart that matches what the bank already holds. Our guide to UAE corporate banking covers onboarding; governance is what keeps the account open afterwards.
The second is the tax authority. A free zone company claiming Qualifying Free Zone Person status on qualifying income, subject to conditions, has to show real substance in the free zone. Any company defending its UAE tax residency has to show where it is effectively managed and controlled. Minutes are the primary evidence of both.
The third is a buyer or an heir. Neither was in the room. Both will rely entirely on what was written down.
What the law requires is lighter than you think
The DIFC Companies Law, DIFC Law No. 5 of 2018, removed much of the old ceremony for private companies. One director is enough. Article 81 says a private company may have a company secretary; it is not obliged to. Article 86 says a private company need not hold an annual general meeting unless its articles require one.
What the law kept is the paper. Article 44 requires a register of shareholders. Article 82 requires a register of directors and, if appointed, secretaries. Article 96 requires minutes of all proceedings at general meetings and at meetings of directors, recording the names of the directors present. Articles 68 to 77 set out directors' duties, including the duty to promote the success of the company and the duty to declare an interest in a proposed transaction, with declarations recorded in the minutes. The DIFC Ultimate Beneficial Ownership Regulations add a register of beneficial owners and, where relevant, of nominee directors, both notified to the Registrar.
ADGM follows the English model closely. Section 287 of the ADGM Companies Regulations 2020 says a private company is not required to have a secretary, and the AGM duty in section 355 is framed for public companies. Section 118 requires a register of members. Section 272 requires minutes of directors' meetings to be kept for at least ten years, and section 360 does the same for shareholder resolutions. Under the Beneficial Ownership and Control Regulations 2022, changes in beneficial ownership must be reported to the Registrar within 15 days. Separately, ADGM licensing requires every entity to appoint an authorised signatory who is a UAE resident or GCC national. Our piece on resident directors and authorised signatories untangles that role from the board.
Security interests are handled differently in each centre. In ADGM, charges created by a company are registered with the Registrar under the Companies Regulations. The DIFC moved to a new secured transactions regime under the Law of Security, DIFC Law No. 4 of 2024. Confirm the registration mechanics for any specific security against current guidance.
The trap is reading "not required to hold an AGM" as "not required to govern". The law removed the meetings for show. It did not remove the need to prove decisions.
A light setup that is still real
What we put in place for a typical private holding company or SPV fits on a few pages.
A board that can actually decide
Two or three directors, at least one of whom understands the business and can be reached. A sole director works legally and is fragile in practice: if that person dies or loses capacity, nobody can sign anything. Our article on keeping control of a UAE business beyond the founder deals with that risk in more depth.
Meetings when there is something to decide
We do not recommend a fixed monthly board for a holding company with four transactions a year. We recommend a meeting for each real decision (an acquisition, a disposal, new borrowing, a dividend, a change of signatories) plus one annual meeting to approve the accounts, review the registers and confirm the bank mandate. For a company claiming QFZP status, hold the material ones in the UAE and minute where each director was sitting.
Minutes that record reasons
This is where most minute books fail. "It was resolved to approve the loan to Holdco Ltd" proves a vote. It does not prove a decision. A useful minute records what papers the board saw, what options it considered, why it chose this one, and any director who declared an interest. Four sentences are usually enough. A tax officer testing effective management, or a liquidator testing whether the directors acted properly, reads the reasons, not the resolution.
Reserved matters and signing authority
A short list of decisions that need the board or the shareholders, and a matrix of who can commit the company to what below that. The bank mandate should mirror the matrix. Where it does not, the bank mandate wins in practice, because it is what the bank acts on. When a director resigns, the mandate is updated the same week, not at the next KYC refresh.
Registers kept current, not reconstructed
Every share transfer, director change and change upstream in the ownership chain is entered when it happens. The DIFC Confirmation Statement at licence renewal then confirms information that is already right; our DIFC annual compliance calendar sets out when each filing falls.
Related-party transactions on the record
Loans from the founder, management fees from a sister company, a property the family holding company rents to the operating business. Each needs a written agreement, a board approval with the conflicted director's interest declared, and terms you could defend as arm's length. Article 34 of the Corporate Tax Law applies the arm's length standard to transactions between related parties, and for a QFZP the conditions include transfer pricing compliance; our note on QFZP status for DIFC entities lists them.
The records, and who comes looking
| Record | Required by | Who asks for it later | What goes wrong without it |
|---|---|---|---|
| Register of shareholders / members | DIFC Companies Law Art. 44; ADGM Companies Regulations s.118 | Bank at KYC refresh; buyer; executors | A transfer agreed years ago but never entered becomes a dispute about who owns the company |
| Register of directors (and secretaries, if any) | DIFC Companies Law Art. 82; ADGM Companies Regulations | Bank; counterparties; Registrar | A departed director still appears authorised; a new director's signature is questioned |
| Beneficial ownership and nominee director registers | DIFC UBO Regulations; ADGM Beneficial Ownership and Control Regulations 2022 | Registrar; bank; buyer | Registrar fines; accounts restricted when the bank's UBO record does not match yours |
| Board minutes and written resolutions | DIFC Companies Law Art. 96; ADGM Companies Regulations ss.272 and 360 | Federal Tax Authority; auditor; buyer | No evidence of where decisions were taken or that dividends and loans were properly approved |
| Conflict declarations and related-party approvals | DIFC Companies Law Arts. 75 and 77; Corporate Tax Law Art. 34 | FTA; auditor; minority shareholder or heir | Transfer pricing adjustment; claim against the director who benefited |
| Security interests | ADGM Companies Regulations (charges); DIFC Law of Security 2024 | Lender; buyer | Security unenforceable against third parties or ranked behind a later creditor |
| Data protection registration | DIFC Data Protection Law No. 5 of 2020; ADGM Data Protection Regulations 2021 | Commissioner of Data Protection; buyer | Regulatory fine; a finding in due diligence that goes into the disclosure letter |
| Accounting and tax records | Corporate Tax Law Art. 56 (seven years); DIFC Companies Law Art. 122 (six years) | FTA | Penalties; no support for a QFZP or tax residency position |
On data protection: in the DIFC, controllers and processors register with the Commissioner of Data Protection by filing a notification and renew it annually. In ADGM, controllers pay a data protection fee under section 24 of the Data Protection Regulations 2021, with some small establishments exempt. Confirm which applies to your processing against current guidance from each Commissioner.
What a buyer's lawyers actually find
When a company is sold, the buyer's lawyers send a due diligence request list, and near the top is some version of "all board minutes, written resolutions and statutory registers since incorporation". This is where eight years of informality gets priced.
The findings in the deals we have supported are remarkably consistent. A dividend declared by email between two shareholders, with no accounts referenced. Under Article 64 of the DIFC Companies Law a distribution can only be made out of profits available for distribution by reference to the relevant accounts, and Article 65 can make a shareholder who knew it was unlawful repay it. A founder's loan to the company with no agreement and no board approval, now booked as a liability the buyer is expected to assume. A 10% stake transferred to a former partner in 2019, reflected in the share purchase agreement recitals but never entered in the register. A bank mandate still naming a director who left three years ago.
None of this usually kills a deal. It produces ratification resolutions, a longer disclosure letter, specific indemnities and, in the worst cases, part of the price held back until the gaps are closed. It also adds weeks. The founder who kept a dull, complete minute book sells faster.
Heirs get less patience. An executor cannot negotiate a specific indemnity with a bank that has frozen an account because the only signatory has died and nothing documents who can act next.
Do not over-build it
A DIFC Prescribed Company holding one asset, with no bank account and no tax position to defend, needs registers kept current, a resolution for each thing it does and not much else. A quarterly board with full board packs would be theatre. The same logic applies to entities themselves: every company in a structure carries its own registers, minutes and filings, which is one reason we argue for a minimum viable structure rather than another holding layer.
The test is simple. For each record, ask whether a bank, a tax officer or a buyer could reconstruct what happened and why from the paper alone. If yes, stop there.
Where we fit
Atlas acts as outsourced company secretary for DIFC and ADGM companies, holding companies and SPVs: keeping the registers, running the board calendar, drafting minutes that record reasons, and handling Registrar filings. Where governance questions turn into corporate tax or transfer pricing questions, GTAG, the tax advisory business within our GTAG/Assetica group, takes those. The day-to-day work sits in our company secretarial and governance service.
If your minute book is thinner than it should be, or you are not sure the registers match what the bank holds, send us what you have and we will tell you what is missing.
Frequently Asked Questions
Does a private DIFC company need a company secretary?
No. Article 81 of the DIFC Companies Law (DIFC Law No. 5 of 2018) requires a public company to have a secretary but says a private company may have one. Where there is no secretary, a director or a person authorised by the directors does what the secretary would otherwise do. Many owners still appoint a corporate secretary, because someone has to keep the registers and minute book current.
Does a DIFC or ADGM private company have to hold an annual general meeting?
Not by law. Article 86 of the DIFC Companies Law says a private company need not hold an AGM unless its articles of association require one, and under the ADGM Companies Regulations 2020 the AGM obligation in section 355 applies to public companies. Check your articles, because older or bespoke articles sometimes still require one. Shareholder decisions can usually be taken by written resolution instead.
What statutory registers must a DIFC company keep?
Under the DIFC Companies Law it must keep a register of shareholders (Article 44) and a register of directors and, if it has appointed any, secretaries (Article 82). The DIFC Ultimate Beneficial Ownership Regulations add a register of beneficial owners and, where relevant, a register of nominee directors, both notified to the Registrar of Companies. Minutes of directors' and shareholders' meetings must also be kept under Article 96.
How long must board minutes be kept in ADGM?
Section 272 of the ADGM Companies Regulations 2020 requires minutes of directors' meetings to be kept for at least ten years from the date of the meeting, and section 360 applies the same ten-year period to shareholder resolutions and general meeting minutes. The DIFC Companies Law requires minutes to be kept but, in our reading, does not set an equivalent period for them. We keep DIFC minute books permanently.
How long must a UAE company keep records for corporate tax?
Article 56 of Federal Decree-Law No. 47 of 2022 requires taxable persons to keep records supporting their corporate tax position for seven years after the end of the tax period concerned. That is longer than the six-year minimum for accounting records under Article 122 of the DIFC Companies Law, so the tax rule is the one to plan around. Board minutes that evidence where decisions were taken belong in that seven-year file.
Who has to be the ADGM authorised signatory?
Every ADGM entity must appoint at least one authorised signatory who is a UAE resident or a GCC national, and that person is recorded against the licence. The authorised signatory does not need to be a director, and holding the role does not by itself give authority to bind the company in contracts or with the bank. That authority comes from the board, so document it.
Does Atlas provide company secretarial services for DIFC and ADGM companies?
Yes. Atlas provides company secretarial and governance support for DIFC and ADGM entities, including registers, board calendars, minutes, resolutions and Registrar filings. Corporate tax and transfer pricing advice sits with GTAG, the tax advisory business within the same GTAG/Assetica group.