Building a Delivery App in the UAE: A Sector Guide to Licensing, Compliance, and Costs

# Building a Delivery App in the UAE: A Sector Guide to Licensing, Compliance, and Costs

TL;DR: Building a competitive food, grocery, or courier app in the UAE is now as much a regulatory project as an engineering one — RTA rider certification, gold "code-9" plates, lane and speed rules, PDPL data compliance, and 5% VAT all sit on top of the usual product build, and one Dubai vendor's published guide puts on-demand builds at AED 40,000 for a basic MVP to AED 400,000+ for a full custom platform.

The UAE's on-demand delivery market looks saturated from the outside — talabat, Deliveroo, Careem, noon Food, and the newly arrived Keeta all fight for the same riders and restaurants. But the market leader is still growing — talabat's group-wide GMV rose 28% to USD 9.5 billion in 2025 (talabat Q4 2025 results) — and 2025 brought a major regulatory shake-up: new number plates, lane bans, and a wave of enforcement that changes what a compliant delivery business actually looks like. Anyone building a delivery app for the UAE in 2026 needs to design for that regulatory layer from day one — not bolt it on after launch.

1. The Market You're Building Into

A few structural facts shape any UAE delivery product decision:

• talabat still dominates. Dubai's Department of Economy and Tourism Gastronomy Industry Report, published in early 2024 (before Keeta arrived), put talabat's share of Dubai food delivery above 76% (Dubai People). talabat completed its full acquisition of grocery platform InstaShop in February 2025, and grocery & retail made up 32% of talabat's GMV in Q4 2025 (excluding InstaShop) — a sign that the winning apps in this market are multi-category, not single-vertical.
• The competitive set shifted in 2025. Keeta — the international delivery brand of Chinese tech giant Meituan — launched in Dubai in late September 2025 with 50%-off and free-delivery launch offers (Zawya).
• Deliveroo, Careem and noon Food round out the field.

The takeaway for a new entrant (a restaurant group building its own ordering app, a retailer adding last-mile delivery, or a logistics startup building a courier network) is that you're rarely competing head-on with the marketplace giants on discovery. You're usually building a direct-to-customer or B2B courier tool that needs to interoperate with the same riders, the same regulatory regime, and the same payment rails those giants use.

2. Licensing and Driver Compliance: The Part Most Foreign Founders Underestimate

This is the area where UAE delivery projects most often stall — not the app itself, but the legal and operational layer around the humans and vehicles doing the delivering. Rules have tightened sharply through late 2025 and into 2026.

2.1 Business licensing

A delivery or courier operation needs a commercial trade license from the relevant emirate's economic department (Dubai's Department of Economy and Tourism, DET, formerly DED) or from a free zone, under a courier/delivery-service activity code. Mainland licensing suits businesses that need to operate fleets and hire riders directly across Dubai; free zones (e.g., IFZA, DMCC, or Dubai South, given its proximity to logistics infrastructure) can work for the software/technology entity behind the platform, with a separate mainland entity or local service agent handling the physical delivery operation if required. Get this structuring right before writing a line of code — it determines VAT registration, hiring, and how bank settlement accounts are set up.

2.2 Rider licensing and vehicle rules

Dubai's RTA, together with Dubai Police, has built up a stack of requirements specifically targeting delivery riders:

• Driver's Qualification Certificate. Since December 2022, beyond a UAE motorcycle licence, delivery riders need an RTA driver's qualification certificate, earned through training covering defensive driving, safety requirements and periodic bike maintenance at one of nine RTA-accredited institutes (including Emirates Driving Institute, Belhasa Driving Centre, and Dubai Driving Centre). Companies must register their riders at one of these institutes (RTA).
• Vehicle age. Company delivery motorcycles have a four-year operational age limit; since February 2026 an optional technical inspection at designated Dubai centres can extend that by one year (ArabWheels). Engine-size and speed-limiter requirements also apply — confirm the current specification with the RTA before buying a fleet.
• Gold "code-9" plates. From the end of December 2025, motorcycles and e-bikes used for commercial delivery get front and rear plates with a gold background and code (9), applied gradually at licence renewal (Khaleej Times).
• Lane and speed restrictions. Since 1 November 2025, RTA and Dubai Police bar delivery motorcycles from the two leftmost lanes on roads with five or more lanes, and the leftmost lane on three-to-four-lane roads. Riders exceeding 100 km/h on roads with limits of 100 km/h or more face fines of AED 200, then AED 300 and AED 400; lane violations carry AED 500 then AED 700 fines, with permit suspension on a third offense (Dubai Media Office).
• Heat safety. UAE-wide, outdoor work in direct sun is banned from 12:30pm to 3pm between 15 June and 15 September under Ministry of Human Resources and Emiratisation rules. RTA has backed this with around 40 air-conditioned rest areas for delivery riders across Dubai (Gulf News), and in August 2026 launched a "Safe and Healthy Summer for Delivery Riders" campaign with Keeta, distributing 5,000 Keeta-sponsored health kits. RTA says it ran more than 120 field awareness activities for riders in 2025, and delivery-motorcycle fatalities in Dubai fell from 35 in 2024 to 33 in 2025 (Gulf News).

For any delivery app, this means the rider onboarding flow in your product isn't just "upload a driving license." It needs to verify the Driver's Qualification Certificate, track vehicle age and inspection status, and — for the operator — maintain audit trails proving riders were registered and trained, since enforcement now escalates to permit suspension.

2.3 Employment structuring

Riders working under a company's trade license need employer-sponsored work permits and residency visas; the employer handles the application after a confirmed job offer.

3. Tax, Data, and Payments — the Software Side of Compliance

• VAT. The UAE's standard VAT rate remains 5%, confirmed by the Federal Tax Authority, though the VAT law itself was amended from 1 January 2026 by Federal Decree-Law No. 16 of 2025 — among other changes, businesses no longer issue self-invoices under the reverse charge, and there is now a five-year limit on reclaiming excess refundable VAT (Ministry of Finance). A delivery app's checkout, invoicing, and reconciliation logic needs to itemize VAT correctly across restaurant/merchant commissions, delivery fees, and any service charges, and your backend should be built to adapt to FTA rule changes without a full re-architecture.
• Data protection. Federal Decree-Law No. 45 of 2021 (the UAE's PDPL), in force since 2 January 2022 (its executive regulations have still not been published), governs how you collect and process customer and rider location, payment, and personal data anywhere in the UAE outside DIFC and ADGM (which run their own separate data protection regimes). It borrows principles familiar from GDPR — lawfulness, purpose limitation, data subject rights to access, correct, and erase data — and applies directly to the real-time location tracking, order history, and payment data at the core of any delivery app. If your platform operates from or serves customers via DIFC/ADGM-registered entities, you need to map which regime applies to which data flow.
• Payments. Expect to integrate with UAE-relevant payment gateways and wallets alongside cash-on-delivery, and to reconcile settlement timing against your VAT invoicing cycle — a detail that's easy to underestimate until your first FTA filing.

4. What It Actually Costs to Build

There is no official benchmark, and published vendor guides differ. One Dubai vendor's 2026 guide (TekRevol) lists these tiers for on-demand apps:

Treat these as one vendor's quote bands, not market data. Another vendor guide (Netguru) suggests reserving 15–25% of the original build cost per year for maintenance and updates once live, plus separate marketing spend. Costs tend to escalate fastest around real-time GPS tracking, payment gateway integrations, and the compliance layer described above (rider verification workflows, VAT-aware invoicing, PDPL-compliant data handling) — none of which are optional in this market, so they're worth pricing in from the scoping stage rather than as change requests later. Teams that have shipped multi-sided marketplaces before — Wise Hustlers' mobile app development service is one option — tend to scope this compliance layer alongside the core product from the outset rather than retrofitting it after a rider-registration audit forces the issue.

5. A Practical Build Sequence

1. Decide your licensing structure first — mainland trade license vs. free zone plus local service agent — since it affects hiring, banking, and VAT registration timelines before any code is written.

2. Design rider onboarding around the Driver's Qualification Certificate, not just a license photo — record which RTA-accredited institute certified each rider, and store vehicle age/inspection data.

3. Build VAT-aware invoicing from day one, itemizing commissions, delivery fees, and service charges separately, with room to adapt to the 2026 FTA rule changes.

4. Treat PDPL compliance as a data-architecture decision, not a policy document — location data retention, consent flows, and data subject request handling should be designed into the schema.

5. Plan for heat-season operational rules — a dispatch system that can throttle or reroute deliveries during the 12:30–3pm summer restriction avoids both fines and rider harm.

6. Budget realistically using the ranges above, and treat compliance features as core scope, not scope creep.

FAQ

Do I need a separate license for a courier/logistics app versus a food delivery app?

Both typically require a commercial trade license under a delivery/courier activity code from your emirate's economic department, but the specific activity code and any sector approvals (e.g., for handling regulated goods) can differ — confirm the exact code with DET or your free zone authority before applying.

Can I use freelance or gig riders instead of employing them directly?

Riders working under your company's trade license generally need employer-sponsored work permits; the "freelance rider" model is constrained by the same RTA registration and Driver's Qualification Certificate requirements, so check current DET/MOHRE guidance before designing a gig-only workforce model.

Does my delivery app need to comply with GDPR as well as PDPL?

Only if you have customers or process data connected to the EU/UK. Within the UAE (outside DIFC/ADGM), Federal Decree-Law No. 45 of 2021 is the governing framework; DIFC and ADGM each have their own separate data protection regulations that apply if your entity is registered there.

How long does it realistically take to launch a compliant delivery app in the UAE?

As a planning estimate rather than a market statistic, an MVP can be built in 8–12 weeks, but licensing, rider certification rollout, and payment/VAT integration typically add several more weeks in parallel — a realistic launch timeline for a compliant multi-sided platform is more like 4–6 months end to end.

Sources

• Talabat captures 76 per cent of Dubai's food delivery market — Dubai People
• talabat Q4 2025 results press release — talabat Holding
• Keeta debuts in Dubai — Zawya
• RTA introduces gold, code-9 plates for delivery motorcycles — Khaleej Times
• RTA's new standards for older delivery bikes — ArabWheels
• Dubai RTA and Keeta launch 'Safe and Healthy Summer' campaign — Gulf News
• Ministry of Finance to implement VAT law amendments starting January 2026 — UAE Ministry of Finance
• RTA and Dubai Police regulate delivery bike use on high-speed lanes across Dubai — Dubai Media Office
• UAE: New rules for delivery riders in Dubai and Sharjah effective today — Gulf News
• RTA rolls out programme for certifying delivery motorbike riders — RTA
• UAE summer: 5,000 health kits for Dubai delivery riders with cooling towels, hand fans — Khaleej Times
• VAT in UAE (2026): 5% Rate, Registration Threshold, Exemptions & Filing Rules
• Federal Tax Authority - VAT
• Overview of UAE's Federal Decree-Law No. (45) of 2021 on PDPL — Securiti
• Mobile App Development Cost In Dubai, UAE for 2026 — Netguru
• On-Demand App Development in Dubai [2026 Guide with Cost, Features, & Trends] — TekRevol