
Previous experienceBusinesses subject to Value Added Tax
Tax Agency registration No. 30001887 — registered to act and correspond on your behalf before the FTA.
Verify on the FTA registerOpens the FTA's official register filtered to this entry (20043873).
Controls that protect the business without slowing it down
Practical internal controls and compliance routines, designed to fit how your business actually operates — so every obligation has an owner and the obvious risks are closed off before they cost you.
Weak controls are usually discovered at the worst possible moment
Control gaps rarely announce themselves. They surface as a duplicate payment, a supplier nobody verified, a filing that was missed, or an audit finding that should have been caught internally long before.
Situations we are often called in for
- A payment error, a duplicate invoice or an unexplained loss has already happened.
- Responsibilities were never formally separated as the team grew.
- Filings or renewals were missed because nobody clearly owned them.
- An audit raised control findings that now need to be closed properly.
Designing sensible controls costs far less than dealing with what happens when they are absent.
Proportionate controls, written down and actually followed
- Controls sized to the business — approval limits and segregation of duties that fit a real team.
- Procedures your people can follow without having to interpret them.
- One compliance calendar, with a named owner for every obligation.
- Support until the change is adopted — not simply a list of what is wrong.
Designed and recommended by us; decided and owned by you. See what's included
Where the controls sit
Six things a control environment needs
From the first approval limit to the last remediation, each piece is documented so it survives staff changes, growth and the next audit.
Controls design
IncludedApproval limits, authorisation matrices and reconciliation routines proportionate to your size and risk — the controls that matter, not every control that exists.
Policies & procedures
IncludedWritten procedures for purchasing, payments, payroll, expenses and month-end that your team can follow without needing to interpret them.
Segregation of duties
IncludedWho requests, who approves, who pays and who reconciles — separated in the system and on paper, even in a small finance team.
Compliance calendar
IncludedVAT returns, the Corporate Tax return, licence renewals and statutory filings in one view — each with a named owner and a sensible lead time.
Controls testing
IncludedPeriodic walkthroughs and sample tests that confirm the controls still operate as designed, with findings you can act on rather than file away.
Remediation
IncludedManagement-letter points and gap findings translated into specific changes, implemented with your team so the same findings do not reappear next year.
You receive the schedules, the findings and the owners of each action — in writing, before the auditor arrives.
The compliance calendar, handled
The recurring obligations of a UAE business change with its licence, its tax registrations and its size. These are the ones we typically map first — each with a named owner and a sensible lead time.
- VAT returns and payments for each tax periodPrepared from reconciled records and reviewed before submission
- Corporate Tax return once a year, within the FTA's filing windowWith the working papers that support every adjustment
- Tax registration records kept current with the FTAChanges of address, activity, ownership or bank details, where applicable
- Trade licence and establishment renewalsMainland or free zone, including the approvals each authority attaches
- Beneficial-ownership and substance-type filings where applicableThe registers, declarations and notifications your entity type requires
- Annual financial statements and audit where requiredBy your licensing authority, your lenders or your shareholders
- Payroll-process controls and end-of-service provisions where applicableDeadlines on the calendar; provisions and leave accruals reconciled
- Contract, insurance and banking datesLease renewals, policy expiries and covenant reporting — the internal deadlines most often missed

Fieldwork you can see
Walkthroughs happen at your premises and on your records. Findings are discussed with the people who own the process before they are written into a report.
From assessment to controls that keep working
Four steps, with your team involved at every one — controls only work when the business genuinely accepts them.
Two guides that go with a controls engagement
Practical reading from the Knowledge Hub on building a compliance calendar and closing audit findings properly.
How a compliance calendar is built
Which obligations belong on it, where the dates come from, how each item gets an owner and a lead time, and what management should see every month.
Turning a management letter into controls
How to read the auditor's findings, rank them by risk, translate each into a procedure, a system setting or a separation of roles — and show next year that it has been fixed.
Questions we hear before every controls engagement
It should not. Controls that are too heavy simply get bypassed. We design to the size and risk of your operation — four controls that are followed beat twenty that are not — and where a control adds friction, a system setting or approval limit protects you with less effort.
Your obligations — tax filings, licence and registration renewals, statutory submissions and internal deadlines — each with a named owner and a lead time. Due dates come from the FTA and your licensing authority, never estimates. Nothing depends on memory, and management sees what is due before it is late.
Yes. We take the management-letter points, translate each into a specific change — a procedure, a system setting, a separation of roles — and support implementation with the people who will run it. We then test the change in operation, so the same findings do not reappear next year.
We design and recommend; you decide and own them. Controls only work when the business accepts them, so we build them with your team, not hand you a manual. Each control names an owner on your side, and periodic reviews check it is applied — not just written down.
A control that is not evidenced is a hope, not a control.
Review my internal controls
For growing businesses that have outgrown informal controls, companies facing audit- or investor-driven control requirements, and management teams that want obligations tracked properly rather than remembered. A short consultation first, then a written scope and quote before any work begins.
1234Book a controls consultation
A specialist responds promptly.
We use your details only to respond to your request.
Close the gaps before they cost you
Book a consultation and get a clear next step — and a written scope — promptly.


