Master Services Agreement (UAE)

A Master Services Agreement (MSA) in the United Arab Emirates is a complete framework contract under the UAE Civil Code (Federal Law No. 5 of 1985) and the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) that establishes the standard terms and conditions governing a long-term service relationship between a provider and a client. Rather than negotiating a new legal agreement for every project, the parties agree the MSA once and then execute project-specific Statements of Work (SOWs) that define the scope, deliverables, timeline, and fees for each individual engagement. The SOWs incorporate the MSA's general provisions — liability caps, intellectual property, confidentiality, data protection, payment terms, and dispute resolution — by reference, avoiding duplication and ensuring consistency across the entire relationship.

The MSA structure is the standard commercial framework for multi-project service relationships in the UAE across a wide range of industries. Technology managed services providers, IT consulting firms, management consultancies, legal process outsourcing companies, engineering design firms, and marketing agencies all use MSA frameworks to service their UAE corporate clients efficiently. The efficiency advantage is significant: without an MSA, each new engagement requires a full contract review cycle, which can add weeks of legal negotiation and cost. With an MSA in place, a new SOW can be agreed and executed in days, because the parties are only agreeing the project-specific commercial terms against a pre-negotiated legal backdrop.

The UAE Civil Code (Federal Law No. 5 of 1985) governs the MSA as a binding contract. Article 125 confirms formation when offer and acceptance meet on the essential terms, Article 246 imposes the duty to perform in good faith, and Articles 282 and 389 govern compensation for breach. The Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) supplements the Civil Code for commercial obligations, including interest on overdue payments under Article 76 and the evidentiary weight of commercial invoices before the Dubai Courts and the Abu Dhabi Judicial Department. The Commercial Companies Law (Federal Decree-Law No. 32 of 2021) requires that the MSA be signed by an authorised representative of each party, confirmed by board resolution or power of attorney.

Value Added Tax (VAT) at 5% under Federal Decree-Law No. 8 of 2017 applies to the services provided under the MSA and each SOW, and the Federal Tax Authority (FTA) requires compliant tax invoices for each taxable supply. Corporate Tax at 9% under Federal Decree-Law No. 47 of 2022 on taxable income above AED 375,000 affects both parties' financial planning for the relationship. The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office, is particularly relevant for MSAs in technology, healthcare, and financial services, because the service provider typically processes the client's data — including employee records, customer data, and financial information — in the course of delivering the services. The MSA must address PDPL compliance, including processing purposes, security obligations, data subject rights, and cross-border transfer restrictions.

For parties operating in the DIFC or ADGM, those free zones apply their own independent common-law frameworks. The DIFC Courts and ADGM Courts adjudicate disputes governed by DIFC or ADGM law, and those zones apply the DIFC Data Protection Law (DIFC Law No. 5 of 2020) or the ADGM Data Protection Regulations 2021 rather than the federal PDPL. The Federal Arbitration Law (Federal Law No. 6 of 2018) governs DIAC arbitration proceedings, and awards are enforceable in more than 170 jurisdictions under the New York Convention, making arbitration an attractive option for cross-border service relationships involving UAE and non-UAE parties.

The UAE Copyright Law (Federal Decree-Law No. 38 of 2021, as amended by Federal Law No. 26 of 2021) and the Federal Law on Industrial Property (Federal Law No. 11 of 2021) protect the intellectual property created or used under the MSA. The Telecommunications and Digital Government Regulatory Authority (TDRA) regulates certain technology services and data activities, and the MSA should address any sector-specific licensing requirements applicable to the provider's services.

A Master Services Agreement in the United Arab Emirates is needed whenever a service provider and a client expect to work together on multiple projects over an extended period and want a single legal framework that governs all engagements without renegotiating standard terms each time a new project is commissioned.

Technology outsourcing relationships are the most common use case for UAE MSAs. An IT managed services provider contracted to support a bank supervised by the Central Bank of the UAE, a government entity, or a major UAE conglomerate will work under an MSA that covers cybersecurity obligations, data protection under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), service level commitments, liability caps, and escalation procedures. Each quarterly managed services renewal, project enhancement, or new technology initiative is documented in a SOW executed under the MSA.

Management consulting and advisory engagements with UAE government and semi-government entities — including Abu Dhabi Investment Authority (ADIA) affiliates, the Ministry of Finance, the Ministry of Economy, and the Securities and Commodities Authority (SCA) — use MSAs to govern multi-year transformation programmes. The MSA records the consultant's obligations on confidentiality, intellectual property, and regulatory compliance, while the individual project phases are governed by SOWs with their own fees and deliverables.

Engineering design and project management firms providing services on UAE infrastructure projects — roads, utilities, airports, and real estate developments requiring approvals from the relevant municipality or free-zone authority — use MSAs with project owners to cover professional liability, insurance requirements, and the flow of design deliverables across multi-phase projects. The MSA ensures that the professional indemnity insurance and liability cap provisions are agreed once at the relationship level, not each time a new design package is commissioned.

Marketing, communications, and creative agencies serving UAE corporate clients use MSAs to cover intellectual property ownership of creative work, the terms for campaign approvals, and the PDPL obligations for handling customer data used in campaigns. The MSA avoids the agencies having to renegotiate standard terms for each campaign SOW.

A UAE Master Services Agreement that is commercially effective and enforceable before the Dubai Courts, the Abu Dhabi Judicial Department, or a DIAC arbitral tribunal must contain the following core provisions. The forms-legal.com UAE Master Services Agreement template addresses each element in a structure used by UAE professional services firms and their corporate clients.

Party identification must record the full legal name, trade licence number, and registered address of both the provider and the client. The signatories must have corporate authority under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021).

Services framework must define the general categories of services covered by the MSA — information technology, consulting, engineering, marketing, or other professional services — and the Statement of Work process through which individual engagements are agreed and authorised. The precedence rule (SOW overrides MSA for project-specific matters) must be stated.

Payment terms must state the standard invoicing period, the payment period in days, the currency (AED), and the confirmation that fees are exclusive of VAT at 5% under Federal Decree-Law No. 8 of 2017. The interest rate for overdue payments under Article 76 of the Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) must be addressed.

Intellectual property must address ownership of deliverables (client, provider, or joint), the treatment of pre-existing IP, the scope of the licence granted to the client for pre-existing IP incorporated in deliverables, and the prohibition on the provider reusing client-specific deliverables for other clients.

Confidentiality must protect each party's information disclosed in connection with the MSA and SOWs, with a stated post-termination survival period and PDPL compliance obligations for personal data under Federal Decree-Law No. 45 of 2021.

Data protection must address the processing of personal data: the categories of data, the processing purposes, security measures, data subject rights, incident notification obligations, cross-border transfer restrictions, and the applicable regime (federal PDPL, DIFC Data Protection Law, or ADGM Data Protection Regulations).

Liability must include an aggregate liability cap in AED or a formula, the exclusion of indirect and consequential losses, and the carve-outs for death, personal injury, fraud, and mandatory statutory liability.

Term and termination must set the MSA's duration, the notice period for voluntary termination, the grounds for immediate termination (material breach, insolvency under Federal Decree-Law No. 51 of 2023, loss of trade licence), the treatment of active SOWs on termination, and the survival of confidentiality, IP, liability, and payment provisions.

Governing law and dispute resolution must state UAE federal law and the forum: Dubai Courts, Abu Dhabi Courts, DIAC arbitration under the Federal Arbitration Law (Federal Law No. 6 of 2018), DIFC Courts, or ADGM Courts.

Completing a UAE Master Services Agreement requires the parties to agree the standard commercial terms before the template is executed, reserving project-specific details for the Statements of Work that will follow.

Start with party details. Enter the full legal name of the provider and the client exactly as each appears on its trade licence from the relevant Department of Economic Development or free-zone registrar. Record the licence number and registered address. Confirm the signatory's authority — a board resolution or power of attorney is required for corporate parties under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021). Enter the date in DD/MM/YYYY format.

Describe the general scope of services. The MSA description should be broad enough to cover all anticipated engagement types — for example, IT consulting, software development, and managed IT support — without being so narrow that a new category of service falls outside the MSA and requires a new framework agreement.

Describe the SOW process. State that each engagement will be governed by a separately executed SOW, that the SOW will specify deliverables, timeline, fees, and acceptance criteria, and that in case of conflict the SOW prevails over the MSA on the matters it addresses. This process description governs how the parties will commission and authorise each project.

State the payment terms: the invoicing trigger (milestone, monthly, or on delivery), the payment period (e.g. net 30 days from invoice date), the currency (AED), and the confirmation that fees are exclusive of VAT under Federal Decree-Law No. 8 of 2017.

Select the IP ownership model: client owns deliverables on full payment, provider retains and licenses, or jointly owned. The choice should reflect the nature of the deliverables and the parties' commercial intentions.

State the liability cap: a formula (e.g. 100% of fees paid under the relevant SOW in the preceding 12 months) gives the client certainty and the provider a defined risk exposure. Confirm the carve-outs for fraud, death, and personal injury.

Set the MSA term and select the governing forum. Both parties should sign through authorised representatives. Electronic signatures are valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021).

A Master Services Agreement in the United Arab Emirates operates within a layered statutory framework. The UAE Civil Code (Federal Law No. 5 of 1985) governs formation under Article 125, good-faith performance under Article 246, and remedies for breach under Articles 282 and 389. Article 390 recognises agreed liability limitations as binding, subject to the prohibition on excluding liability for intentional harm or gross negligence under Article 297. The Commercial Transactions Law (Federal Decree-Law No. 50 of 2022) applies between merchants and provides for commercial interest under Article 76 on overdue payments.

Corporate authority is governed by the Commercial Companies Law (Federal Decree-Law No. 32 of 2021). Both parties must hold valid trade licences for their relevant activities, and the provider must hold any sector-specific licence required by the Telecommunications and Digital Government Regulatory Authority, the Ministry of Economy, or other relevant regulators.

VAT compliance under Federal Decree-Law No. 8 of 2017 is mandatory: the provider must charge VAT on each taxable service supply, issue compliant FTA tax invoices, and maintain records for five years. Corporate Tax under Federal Decree-Law No. 47 of 2022 applies to taxable income above AED 375,000. The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to personal data processing, with obligations on security, lawful basis, data subject rights, and cross-border transfer. Intellectual property is protected by the UAE Copyright Law (Federal Decree-Law No. 38 of 2021) and Federal Law on Industrial Property (Federal Law No. 11 of 2021). Insolvency is governed by Federal Decree-Law No. 51 of 2023. Arbitration falls under the Federal Arbitration Law (Federal Law No. 6 of 2018). Electronic execution is valid under Federal Decree-Law No. 46 of 2021.

UAE master services agreements frequently contain avoidable errors that lead to disputes between providers and clients, or expose the parties to regulatory risk.

1. No clear SOW precedence rule. An MSA that does not state which document controls when the MSA and an SOW conflict on the same point creates uncertainty. State explicitly that the SOW prevails over the MSA for the matters it specifically addresses.

2. IP ownership not specified. Failing to address whether the client or the provider owns the deliverables is the most commercially significant drafting gap. Without a clear IP clause, the UAE Copyright Law (Federal Decree-Law No. 38 of 2021) default rules apply, which may not align with either party's commercial expectations.

3. VAT not addressed. An MSA that does not confirm fees are exclusive of VAT under Federal Decree-Law No. 8 of 2017 leads to disputes about whether the 5% VAT is included in the negotiated rate. Always state exclusive of VAT and the obligation to issue FTA-compliant tax invoices.

4. No PDPL data processing clause. An MSA under which the provider will process the client's customer or employee data without a PDPL-compliant data processing clause exposes both parties to regulatory risk under Federal Decree-Law No. 45 of 2021. Include the required provisions on processing purposes, security measures, and incident notification.

5. Liability cap with no carve-outs. A liability cap without express carve-outs for fraud and wilful misconduct may be unenforceable in respect of those acts under Article 297 of the UAE Civil Code, creating a gap in the liability framework. State the carve-outs explicitly.

6. No termination-of-SOW clause. An MSA that terminates without addressing whether active SOWs terminate simultaneously or run to completion leaves both parties uncertain about ongoing obligations. Specify the treatment of active SOWs on MSA termination.

7. Signing without proper authority. A signatory without a board resolution or power of attorney under the Commercial Companies Law (Federal Decree-Law No. 32 of 2021) may not bind the entity. This is particularly important for MSAs, which govern large volumes of work over multi-year periods.