On July 10, 2026, the US Bureau of Industry and Security (BIS) moved the UAE from Export Administration Regulations (EAR) Country Groups D:3 and D:4 into Country Group A:5 — the tier reserved for close US allies. The upgrade does not give every UAE company license-free access to US technology. It gives that access to a named list of approved entities, and it opens a formal application path for everyone else.
If you are structuring a UAE company that will touch US-origin technology — importing it, distributing it, or building on it — this rule changes what your ownership structure is worth. Here is what the Federal Register filing (FR Doc. 2026-14132, published July 14, 2026) actually says.
What exactly did the US change in July 2026?
BIS made three amendments to the EAR. It removed the UAE from Country Group D:3 (chemical and biological) and D:4 (missile technology). It added the UAE to Country Group A:5. And it created Supplement No. 8 to Part 740 — a list of approved UAE entities eligible for License Exception STA and license-free advanced computing items.
Removing the D:3 and D:4 designations unlocks additional license exceptions for controlled items shipped to the UAE — TMP, GOV, TSU, AVS, and APR. It also lifts the missile-related end-use restrictions under EAR §§ 744.3 and 744.6. One thing did not change: items controlled on the Commerce Control List still require US authorization. The rule adds exceptions; it does not remove license requirements.
Does A:5 status mean any UAE company can now get US AI chips license-free?
No. This is the most common misreading of the July rule. License-free access to advanced computing items — AI chips and servers under ECCNs 3A090 and 4A090 — applies only when the ultimate consignee and all end users are entities listed in Supplement No. 8 to Part 740. For every other UAE company, the license requirement stays exactly where it was.
The same logic applies to License Exception STA. New EAR § 740.2(a)(26) restricts STA for the UAE to transactions where every end user is an approved entity. Country status opened the door; entity approval decides who walks through it.
Who is on the approved entities list?
As of July 10, 2026, Supplement No. 8 contains three categories:
| Category | Entities | What they can receive | Conditions |
|---|---|---|---|
| UAE Government agencies | Including the Ministry of Defense and Armed Forces | Full License Exception STA + advanced computing items license-free | Does not extend to state-owned corporations or government contractors |
| UAE-based AI companies | G42 (incl. G42 Cloud Technology LLC), Core42 | Advanced computing items only | Authorization auto-expires 270 days after filing (~April 6, 2027) unless they become US companies |
| US-headquartered AI companies + their UAE subsidiaries | Amazon, Apple, Google, Meta, Microsoft, OpenAI, Oracle, X.AI | Full License Exception STA + advanced computing items license-free | Approval extends to subsidiaries |
That is the entire list: one government, two Emirati companies on a timer, and eight American ones. Separately, BIS stated it intends to review export license applications for Abu Dhabi-based MGX favorably — but MGX is not on the approved list.
How does a UAE company become an approved entity?
Any commercial entity in the UAE can apply. The mechanism is a request for an advisory opinion to BIS under EAR § 748.3(c). The Secretary of Commerce, in consultation with the Secretary of State and the National Security Advisor, decides within 30 days. The filing names the assessment criteria: US national security and foreign policy interests, “including the applicant’s compliance capabilities and track record.”
Read that criterion again. For the first time, a UAE company’s compliance history — documented KYC, clean export records, verifiable ownership — has a formal, measurable value in Washington: access to controlled US technology. A company that spent three years building auditable compliance now holds an asset. A company that treated compliance as paperwork holds nothing to show.
We will be direct about the current state: as of publication, no independent UAE commercial company outside the AI infrastructure sector has been added through this route. Whether BIS approves trading or distribution businesses remains untested. If your plan depends on obtaining approved-entity status quickly, that plan carries real regulatory risk today.
How does ownership structure affect eligibility?
This is where the rule reaches far beyond AI companies. BIS enforces the worldwide license requirement for advanced computing items against entities “headquartered in, or with an ultimate parent headquartered in” Country Group D:5 or Macau — wherever the entity itself is located. Russia is a D:5 destination.
The practical meaning: a UAE free zone company whose ultimate parent sits in a D:5 country remains under the worldwide license requirement for advanced computing items. The UAE’s new A:5 status does not cure that. Jurisdiction gives the company an address; the ownership chain determines what it can receive.
This mirrors what we see in UAE banking every week. Banks do not assess the name of your free zone — they assess who owns the company and where the money comes from. US export control now applies the same test to technology access. If your holding structure runs through a restricted jurisdiction, changing your license or your free zone changes nothing.
One open point the filing does not resolve: the D:5 test is written around where an entity is headquartered, not around the nationality of an individual UBO. How BIS treats a UAE company owned directly by an individual from a D:5 country — with no corporate parent — depends on guidance beyond this rule. We flag it because the distinction matters for most founder-owned structures, and anyone claiming a definitive answer here is ahead of the published record.
What should you do if you are structuring a UAE company now?
Three practical consequences follow from the July rule.
First, if your business model involves US-origin controlled technology, map your ownership chain before you incorporate. An intermediate holding company in the wrong jurisdiction can lock you out of technology access that your operating business needs in year two — the same year banking compliance and audit requirements arrive.
Second, if you re-export electronics, components, or dual-use goods through the UAE, expect scrutiny to increase, not decrease. The filing states that BIS maintains an Export Control Officer presence in the UAE and monitors the country’s logistics network for diversion. The A:5 upgrade came with a stated UAE commitment to preventing misuse of US technology. Enforcement pressure flows downhill — to banks screening trade flows, and to the companies behind them.
Third, treat compliance records as an appreciating asset. The § 748.3(c) route rewards documented history: transaction records, end-user certificates, consistent ownership disclosure. These are the same documents a UAE bank requests during KYC and a free zone requests at renewal. Building them once serves three regulators.
Frequently Asked Questions
Does the UAE’s Country Group A:5 status apply to all UAE companies?
No. A:5 status applies to the country, but License Exception STA and license-free advanced computing access apply only to entities listed in Supplement No. 8 to Part 740. As of July 2026, that list contains UAE government agencies, G42, Core42, and eight US-headquartered AI companies with their UAE subsidiaries.
Can a regular UAE trading company apply for approved-entity status?
Yes, formally. Any UAE commercial entity may request a BIS advisory opinion under EAR § 748.3(c). BIS decides within 30 days, assessing compliance capabilities and track record case by case. No trading company outside AI infrastructure has been approved through this route as of publication.
Does a UAE company with a Russian parent get easier access to US technology after the upgrade?
No. BIS applies the worldwide license requirement for advanced computing items to entities with an ultimate parent headquartered in Country Group D:5, wherever the entity is located. Russia is in D:5. The UAE’s A:5 status does not override the ownership-based restriction.
What license exceptions became available for the UAE in July 2026?
Removing the UAE from Country Groups D:3 and D:4 made license exceptions TMP, GOV, TSU, AVS, and APR available for items controlled for chemical-biological and missile technology reasons, and expanded provisions of ACE and BAG. Underlying license requirements on the Commerce Control List remain in place.
Why do G42 and Core42 have a 270-day deadline?
The filing states their authorization automatically expires 270 days after the July 10, 2026 filing date — approximately April 6, 2027 — unless they become US companies. If not, they must reapply through the § 748.3(c) advisory opinion process to keep approved status.
Where is the official text of the rule?
The final rule is FR Doc. 2026-14132, Docket No. 260710-0168, published in the Federal Register on July 14, 2026, amending 15 CFR Parts 740, 742, and 774.
How Emirabiz works with this
We are not US export control lawyers, and we do not file BIS advisory opinions. What we do: structure UAE companies so that the ownership chain, banking profile, and compliance records tell one consistent story — the same story a bank’s compliance team, a free zone auditor, and now BIS will each test against their own rules. If your business touches US-origin technology, we pressure-test the structure before you pay for a license, not after.
Book a structuring call — 30 minutes, we map your ownership chain against banking and regulatory requirements before you commit to a setup.
Reviewed by
Elena Ovchinnikova
Co-founder & COO
Co-founder & COO of Emirabiz. Leads client consulting — corporate structuring, banking pre-screening for complicated source-of-funds, residency cases. Qualified compliance & AML specialist trained under the Thomson Reuters program.
29 articles verified
Published July 14, 2026 · Updated July 14, 2026 · How this article was made →