DIFC AI Certification Platform
Ensuring compliance with DIFC Regulation 10. We guide organisations through the certification of autonomous and semi-autonomous systems that process personal data in the Dubai International Financial Centre.
Certification delivered on
- 50M USD
- Maximum fine
- 2 to 3 months
- Typical timeline
- 3 years
- Certificate validity
Certification snapshot
Regulation 10, DIFC DP Regulations
In force since 1 September 2023 for AI and autonomous systems.
Only external accredited body
Listed by the DIFC Commissioner of Data Protection.
End-to-end support
From preliminary assessment to certificate issuance.
What we do
Certification support, end to end
Our specialists combine data protection law and AI governance expertise to take your system from first assessment to a valid certificate.
Gap analysis of your AI system against Regulation 10 requirements
Development of required documentation and evidence packages
Implementation of necessary technical and organisational measures
Preparation for and management of the certification process
Post-certification compliance monitoring and support
Certification process
Six steps to a certified AI system
- Step 01
Initial assessment
Register and complete our preliminary assessment to determine if your AI system requires certification under DIFC Regulation 10.
- Step 02
Gap analysis
We identify compliance gaps and provide a detailed report with recommendations for required changes to meet certification standards.
- Step 03
Implementation support
Our experts guide you through implementing necessary changes and preparing the required documentation and evidence.
- Step 04
Formal audit
A comprehensive audit is conducted to evaluate your AI system against all Regulation 10 requirements and standards.
- Step 05
Certification issuance
Upon successful completion of the audit, we issue the official DIFC Regulation 10 certification for your AI system.
- Step 06
Ongoing compliance
We provide continuous monitoring and support to ensure your AI system maintains compliance with evolving regulations.
Our platform
The platform behind your certification
White Label Consultancy runs every Regulation 10 engagement on Pritect, our AI governance platform. You see the same record we do: system inventory, scored gap analysis, remediation progress and the evidence that supports the certification decision.
AI system inventory
Every autonomous and semi-autonomous system registered in one place, with owners, data flows and jurisdictions.
Reg 10 certification workflow
The six certification stages tracked end to end, from qualification through audit to the certification decision.
Gap analysis and remediation
Scored assessments against the Regulation 10 requirements, with non-conformities ranked and remediation tracked to closure.
Audit-ready evidence
Documentation, impact assessments and control evidence held on one record, exportable as an audit pack in PDF or Word.
Timeline
What to expect, and when
- 011 to 2 days
Initial assessment
Determination of certification requirements through our online tool or the Official DIFC Reg10 Application Portal.
- 021 to 2 weeks
Gap analysis
A thorough evaluation of your AI system against all Regulation 10 requirements.
- 034 to 8 weeks
Implementation and documentation
Implementing necessary changes and preparing required documentation with our expert guidance.
- 041 to 2 weeks
Formal audit
Comprehensive formal audit against all requirements specified in Regulation 10.
- 051 week
Certification
Official certification issuance upon successful completion of the audit.
Packages
Support scaled to your system
Pricing depends on the complexity of your AI system and the extent of compliance gaps. Custom scoping is available.
Basic package
18,000 AED
- Initial assessment and gap analysis
- Basic documentation support
- Certification application assistance
- Up to 15 hours of consultation
Ideal for smaller AI systems with limited scope
Professional package
Popular30,000 AED
- Comprehensive assessment and gap analysis
- Complete documentation preparation
- Implementation guidance for required changes
- Up to 30 hours of consultation
- Certification body liaison and management
Suitable for most AI systems requiring certification
Enterprise package
60,000 AED
- Everything in the professional package
- Custom implementation support
- Advanced compliance framework development
- Post-certification monitoring and support
- Up to 60 hours of consultation
For complex or high-risk AI systems
Our team
Data protection and AI specialists
Magdalena Góralczyk
Partner, Head of Data Protection
Federico Marengo
Associate Partner, AI Governance
Darya Ghasemzadeh
Data Protection Associate
Eva Mathur
Data Protection Junior Associate
Next step
Find out whether you need certification
To find out whether you need certification, applicants can either complete our preliminary assessment tool, or submit a Regulation 10 Certification Application through the official DIFC portal.
Determining eligibility through the DIFC Regulation 10 Portal requires a payment. If you select White Label Consultancy as your Accredited Certification Body, we can discount those fees from your certification fees.
Questions first? Read the FAQ or contact us.