Dental Software in Dubai and the UAE: What It Must Do

We build custom dental clinic software (Odanta), and monthly plans compete with it. This guide covers what any system must do in the UAE, whichever you buy. Our own option is Odanta, our dental clinic software, set up for your clinic, from our custom software development team. Custom here means made on Xale's platform↗ (opens in a new tab) and set up around your clinic (reported by our team).

Who licenses your clinic, and why does that decide your software?#

Not legal or tax advice; checked on 11 October 2026. We read every source below that day; your licensing authority, lawyer and accountant have the last word.

The UAE had 9,413 dentists in 2023, or 8.85 for every 10,000 people, up from 6,860 in 2020 (WHO↗ (opens in a new tab), data updated 23 January 2026). Each clinic answers to one regulator:

On 11 October 2026 we read 44 Gulf pages ranking for dental software searches on DuckDuckGo and Bing. Ten mentioned NABIDH, and three of those called a product "approved". One named the UAE's health data law. None mentioned the 25-year record rule, 0% VAT on treatment or the UAE's 2024 rules for marketing calls. Seven cited HIPAA, a US law. Eight printed a price, two in dirhams.

What does a Dubai clinic's software need for NABIDH?#

NABIDH is DHA's health information exchange. DHA's Manual for Licensing Health Facility↗ (opens in a new tab) (version 1.1, 20 November 2024) lists what a facility needs before DHA activates its licence, including "evidence of the installation of Electronic Medical Record (EMR) system that complies with the NABIDH Minimum Data Set, connectivity requirements, and other NABIDH standards", and a "Copy of approval email for tested connectivity with NABIDH". It also asks for a first registration with FANR, the nuclear regulator, before an X-ray unit goes in. Clinics inside Dubai Healthcare City, the free zone, need DHA's licences too (Dubai Law No. 16 of 2024↗ (opens in a new tab), Article 20).

NABIDH's Technical and Operational Standards↗ (opens in a new tab) (version 1.0, September 2020) apply to every DHA-licensed facility and list HL7 message types: ADT for patient details, MDM for documents, ORM and RDE for orders, ORU for results, VXU for vaccinations.

DHA's guideline for EMR transition↗ (opens in a new tab) (in force since 25 September 2024) says the new system should sign in to NABIDH with single sign-on, keep an audit trail and merge duplicate patient files, and ideally carry an electronic consent module, with the vendor keeping CPT, ICD and SNOMED-CT codes current. A small facility's whole move should take no more than three months.

Our reading: DHA approves your clinic's tested connection, not a product on its own. Ask any vendor which clinics have passed that test on its system (we have none yet), and plan the test into your opening date.

What do Malaffi and ADHICS ask of software in Abu Dhabi?#

DoH's circular 2026/10↗ (opens in a new tab) (19 January 2026) gave every facility one month to send Malaffi a plan and six months to connect its minimum datasets, future appointments included, or risk "denial/restriction of license renewal". Circular 2026/144↗ (opens in a new tab) (28 July 2026) added referrals, sent as HL7 REF messages with a SNOMED-coded specialty, by 31 August 2026.

ADHICS↗ (opens in a new tab), DoH's security standard (version 2, in force since August 2024), covers vendors too, EMR providers and web and mobile apps included. Cloud hosting must sit in the UAE, "including backup and disaster recovery", with no remote support from outside the UAE and encryption keys "not provided by the cloud service provider". Only people in the UAE, or licensed by DoH, may reach patient data, unless DoH grants an exemption. The ADHICS FAQ↗ (opens in a new tab) (version 1.3) says a clinic with one doctor must comply, and that Malaffi asks for some ADHICS controls before onboarding.

Our reading: an Abu Dhabi clinic needs its own UAE-hosted set-up, keys it holds and support from inside the UAE, or a DoH exemption. Our team works in India, so we plan that with you before quoting.

What about Sharjah and the other northern emirates?#

In the northern emirates, MOHAP licenses doctors, nurses and technicians in private facilities (Gulf News, 31 March 2021↗ (opens in a new tab)). A ministerial decision of 16 November 2021 gave MOHAP-licensed facilities a year to join Riayati, the national unified medical record (Gulf News, 4 December 2021↗ (opens in a new tab)). Sharjah is moving on its own: a Sharjah Executive Council↗ (opens in a new tab) decision of 15 July 2025 covers its private health facilities, with licensing by the Sharjah Health Authority. Ask the authority which exchange to join.

Basic health insurance became compulsory for private sector workers on 1 January 2025, mainly affecting the northern emirates, and dental care is on its list of exclusions (Gulf News, 2 January 2025↗ (opens in a new tab)). Our reading: for most of those patients, dental bills are self-pay.

Where must patient data live, and for how long?#

Federal Law No. 2 of 2019 covers health data across the UAE, free zones included. We read DoH's English edition↗ (opens in a new tab) (February 2023; the Arabic text prevails):

• Article 13: health data from care given in the UAE may not be "stored, processed, generated or transmitted outside the State", except in cases the health authority sets. Article 24 fines a breach AED 500,000 to 700,000.
• Article 20: records are kept at least 25 years from the patient's last procedure.
• Article 21: the identity number (the Emirates ID) goes in every health file, except in emergencies.

Ministerial Decision No. 51 of 2021 allows ten exceptions, such as treatment abroad, research and insurance claims (Latham & Watkins, 29 August 2021↗ (opens in a new tab)). In our reading, ordinary hosting abroad is not one of them.

Cabinet Resolution No. 32 of 2020 (Article 6, same edition) adds four rules: patient information sent electronically is encrypted, a corrected entry keeps the original, each change saves the reason and the editor's electronic signature, and every user has their own login. Our reading: reminders carry no clinical detail (a text message isn't encrypted), and nothing clinical is hard-deleted inside 25 years.

What must a consent form look like in Dubai?#

DHA's Guidelines for Patient Consent↗ (opens in a new tab) (GU-05, version 1.1, in force since 27 May 2024) ask for:

• a specific consent form for every procedure or treatment, in Arabic and English;
• no abbreviations on the form;
• a statement of anything insurance won't cover, or any co-payment;
• a separate consent for photos or videos used in marketing;
• a new form if the procedure hasn't happened within 30 days of signing.

Electronic forms and signatures are acceptable if the system records each entry with an identified user. In software, that means a template per procedure in both languages, signed on a tablet, with the estimate's co-payment and a 30-day expiry. Arabic wording needs a native Arabic writer, never machine translation.

Which codes do Dubai and Abu Dhabi claims use?#

DHA's eClaimLink↗ (opens in a new tab) lists the code sets for Dubai claims: CDT, the American Dental Association's procedure codes; the Universal Numbering System for teeth; and ICD-10-CM for conditions. If your dentists chart in FDI numbers (11 to 48 for adult teeth), the system must also give each tooth its Universal number (1 to 32). Software that uses CDT needs a commercial licence from the ADA↗ (opens in a new tab), which usually takes 2 to 4 weeks. Abu Dhabi claims go through DoH's Shafafiya↗ (opens in a new tab).

One insurer's Dubai Essential Benefits Plan (Cigna's table of benefits↗ (opens in a new tab), undated) pays for emergency dental and gum treatment at 20% co-insurance, adds up to AED 500 of routine dental care at 30% co-insurance for members earning more than AED 4,000 a month, and excludes dental prostheses and orthodontic treatment. Our reading: billing must handle self-pay, co-pay, pre-approval and claims side by side.

How do VAT and e-invoicing apply to a dental clinic?#

VAT. Article 41 of the VAT Executive Regulation↗ (opens in a new tab) (Cabinet Decision No. 52 of 2017, unofficial translation) zero-rates treatment "generally accepted in the medical profession as being necessary", preventive care included, from a licensed dentist. "Elective treatment for cosmetic reasons" is left out unless prescribed, so it carries 5%. From 1 October 2026, Cabinet Decision No. 149 of 2026↗ (opens in a new tab) zero-rates medical products the Cabinet names and goods that are a necessary part of zero-rated treatment.

Registration. A business registers once its taxable supplies and imports pass AED 375,000 in 12 months (FTA↗ (opens in a new tab), page updated 6 April 2026). One whose supplies are all zero-rated may ask for an exception (Article 16 of the regulation), so a clinic that also bills 5% work can't. Pinsent Masons reported in October 2019↗ (opens in a new tab) that providers billing patients at 0% can end up owed refunds, and the FTA's view that 5% applies when the patient and the buyer differ, such as a doctor billing a hospital for its patients.

E-invoicing. Businesses with revenue of AED 50 million or more appoint an accredited provider by 30 October 2026 and go live by 1 January 2027; the rest by 31 March and 1 July 2027 (Decision 244 of 2025↗ (opens in a new tab), amended by Resolution 66 of 2026↗ (opens in a new tab)). Sales to consumers stay outside until the Minister decides, and e-invoices are stored in the UAE (Decision 243↗ (opens in a new tab), Article 11). Our reading: a clinic billing only patients is outside for now; one billing insurers may be in. Our UAE e-invoicing guide covers the steps.

Can the system make reminder calls?#

The UAE's rules for marketing calls, Cabinet Resolutions No. 56 and 57 of 2024 as the Ministry of Economy summarised them on 29 August 2024↗ (opens in a new tab), allow calls from 9 am to 6 pm only, never to numbers on the Do Not Call Register, with the recording announced at the start. Automated systems may call but must ask before marketing; after a refusal there is no second call, and an unanswered number may be tried at most once a day and twice a week. Our reading: a call confirming a booked visit is a service call outside these rules. Odanta keeps every outgoing call inside those limits, and its AI makes no marketing calls.

Where can the system be hosted in 2026?#

• AWS said on 30 April 2026 that its UAE region had "suffered damage as a result of the conflict in the Middle East", and on 15 September 2026 that it could not restore data held only in one of its zones (AWS status feed↗ (opens in a new tab)).
• Microsoft Azure runs UAE North in Dubai with three availability zones (regions list↗ (opens in a new tab), updated 23 September 2026), and Oracle runs regions in Dubai and Abu Dhabi (Oracle↗ (opens in a new tab)).
• Google Cloud's nearest regions are Doha and Dammam (Google↗ (opens in a new tab), updated 8 October 2026), and Vercel↗ (opens in a new tab) (updated 11 August 2026) and Supabase↗ (opens in a new tab) have none in the Middle East.

Our part: Odanta runs on the Xale platform, hosted on Amazon Web Services (AWS) (reported by our team). Your workspace is kept apart from every other, the database is backed up every hour to off-site storage, and Xale's team helps inside your workspace when you ask for onboarding or support, as xale.in describes it. The health data law above keeps a UAE clinic's records in the UAE, so hosting inside the UAE, with backups and call recordings there too, is arranged for your build. We have set up none yet. Where your workspace is hosted is confirmed in your quote, in writing. AI add-ons wait until their voice and model services run inside the UAE, which we confirm before quoting.

What goes on a UAE clinic's go-live checklist?#

What does it cost in AED?#

Odanta Core starts from AED 5,000, and Arabic for staff and patients from AED 5,000, so Core with Arabic starts at AED 10,000. Those are one-fee prices; as a subscription, Odanta is quoted on request. A Dubai clinic also needs the UAE pack (VAT lines, the Emirates ID, 25-year records, bilingual consent forms, the e-invoicing export, and hosting inside the UAE, arranged for your build) and the Dubai pack (NABIDH, timed after DHA's onboarding steps). Both are quoted, and a Dubai clinic can't open without them, because DHA wants a tested NABIDH connection before it activates the licence. E-claims on eClaimLink are quoted too, with the ADA's licence at cost. Care with hosting starts from AED 500 a month once a shared UAE deployment runs, and is quoted until then. Prices are before VAT where it applies; message fees, call minutes, AI usage and gateway fees are billed at cost, in your name. Prices are reviewed on 9 January 2027. For rupee prices, see what dental software costs in India.

What have we done in the UAE, and what haven't we?#

For ZAJEL, a courier in Dubai, we designed the portal its clients use for customs documents with Dubai Customs and supported its development, designed the ZAJEL app and supported its build, and designed and built its new website (ZAJEL case study). We have not yet connected a system to NABIDH, Malaffi, Riayati, eClaimLink or Shafafiya, and we have no dental client anywhere. We have no Dubai office: we work from Kozhikode (Calicut), Monday to Saturday, 8:00 am to 5:00 pm UAE time. Our guide to outsourcing software work to India from the UAE covers contracts, VAT and data.

How does Odanta handle this?#

• Consent forms per procedure in Arabic and English with e-signatures (the Arabic extra), VAT per procedure line with your TRN, and the Emirates ID in every UAE file (the UAE pack).
• Records kept 25 years with no hard delete, an audit trail that keeps the original and the reason, one login per person, and hosting, backups and recordings inside the UAE, arranged for your build and confirmed in your quote, in writing (the UAE pack).
• Built to connect to NABIDH, Malaffi, eClaimLink, Shafafiya or NPHIES. Each connection is approved for your clinic by the authority, so we set it up with you and their onboarding team.

See Odanta's design, sample screens and prices.

No clinic runs Odanta yet; this guide is written by the team that would build it.

Changelog#

• 2026-10-12: Said how Odanta is made: on the Xale platform and set up around your clinic (reported by our team), and that a clinic can take it for one fee as priced, or as a subscription, quoted on request. The introduction names Odanta as our dental clinic software, set up for your clinic. Our own hosting passage is rewritten, in line with the founder's decisions of 13 October 2026: Odanta runs on the Xale platform, hosted on Amazon Web Services (reported by our team); hosting inside the UAE is arranged for a clinic's build, and we have set up none yet; and where your workspace is hosted is confirmed in your quote, in writing. The passage no longer names a cloud provider's region as our default. No rule, source or price changed.