← All resources
UAE compliance8 July 2026·8 min read

What you can and can't publish in the UAE: the permits behind your marketing

Trakheesi for property, DHA/MOHAP for aesthetics, KHDA/CAA wording for education. A plain-language map of the approvals that sit behind ordinary marketing content — and why AI content tools get this wrong.

Why this matters more now

Content production got cheap. Approval didn't. The result is a predictable failure mode: a team can now generate a month of posts in an afternoon, and the permit that was always required doesn't scale at the same rate.

This is not a reason to avoid AI content tools. It is a reason to insist that whatever you use knows when to stop and ask.

Property: the permit number is not optional

Every property advertisement in Dubai requires an advertising permit number — the Trakheesi permit — and has to be attached to a registered broker. That applies to the listing, and it applies to the social post promoting it.

Two follow-on rules matter as much:

  • Numbers come from a source. Price, yield, ROI, valuation, handover date, visa eligibility — these are figures you or the developer supply and cite. Software that invents a plausible-looking yield to make a caption work is generating your next problem.
  • No guarantees. Capital appreciation and rental return are not things you promise in a post.

There's an imagery version of the same rule. A generated visual that misrepresents a real unit is a misleading advertisement regardless of how good it looks. Use the official project material.

Health and aesthetics: a prior permit, and a list of things you never say

Health advertising in the UAE requires a prior permit — DHA in Dubai, MOHAP at federal level, DoH in Abu Dhabi. Promotional content about a treatment cannot be published without it, and "we'll get it after" is not how the sequence works.

The content rules underneath are strict and worth reading twice:

  • No guaranteed or promised results.
  • No comparative superlatives — "the best", "the safest".
  • No patient testimonials used as proof of efficacy.
  • No aggressive discounting or artificial urgency on a medical procedure.
  • No wording implying a patient needs correcting.
  • Practitioner titles must match a real licence.
  • Before/after content requires both written patient consent and the advertising permit. No exceptions.

Notice how many of those are the exact instincts a generic AI copywriter has been trained on. "Get the best results, book today, limited slots" is a normal marketing sentence almost everywhere else and a compliance failure here.

Education: say what your regulator approved, in their words

A private university, business school or training provider sits under a regulator — KHDA in Dubai, the CAA federally, ADEK in Abu Dhabi, or a foreign awarding body depending on the case.

The recurring mistake is paraphrase. An accreditation, an authorisation or a degree recognition has to be stated in wording that has been confirmed, not rephrased to fit a caption. A rewritten accreditation claim is an inaccurate one.

Beyond that: no promise of admission, of an exam pass, of recognition abroad, of a student visa or of a job placement — and no employability figure without its source and its year. Student and alumni testimonials require written consent: the thing to check before publishing, never assume after.

Consent and data sit underneath all of it

The UAE PDPL governs how you collect and handle personal data, which reaches further into ordinary marketing than most teams expect: the list you're emailing, the WhatsApp follow-up, the patient or parent record, the lead a portal sent you.

The practical version for a small team is: know why you hold each contact, know what they agreed to, and don't let a tool quietly widen either.

What to demand from an AI content tool

If you're putting agents on your marketing, the requirement is not that they know the rules in the abstract. It's that they change their behaviour because of them:

  • Ask for the permit number or reference before preparing the publication, rather than producing content you can't use.
  • Refuse to generate the regulated figure and ask you for it instead.
  • Flag the missing consent rather than assuming it exists.
  • Say plainly when a licensed local professional has to validate — and mean it, rather than appending a disclaimer to advice it just gave.
  • Put a human approval step between the draft and the world, permanently.

That last one is the load-bearing item. Everything else is a check that can miss something; approval is the one that catches what the checks didn't.

Where Pionyra sits in this

Pionyra loads these constraints per sector, and they are binding on the agents rather than advisory. The Marketing agent asks for the Trakheesi number before preparing a property post; it marks which treatment content needs an advertising permit before it can be scheduled; it asks about parental consent before a post featuring pupils. Finance and Compliance outputs are always presented as indicative work for a licensed local professional to validate.

None of that removes your responsibility as the advertiser. It's designed so the software stops being the reason you breach it.

Six AI specialists, working under your approval.

Marketing, Sales, Design, Finance and Compliance, coordinated by a CEO agent. Nothing leaves Pionyra without you validating it first.

Join the waitlist