IT services in the UAE: VAT Deadlines and Penalties, Explained

IT services VAT splits on the border. SaaS and services consumed in the UAE: 5%. The same services supplied to clients outside the UAE: potentially zero-rated under the exported-services conditions — recipient outside the UAE, benefit outside, documentation proving it. Meanwhile the firm imports plenty: foreign cloud infrastructure, overseas software licences, subcontractor services — all subject to reverse charge VAT that must be self-accounted. Misjudge either direction and the exposure is 5% of years of revenue plus penalties (AED 10,000 late registration, per-period filing penalties, 14% per annum from 14 April 2026). This guide maps the local-vs-exported VAT mechanics for technology firms.

VAT registration in the UAE turns on two numbers. Registration is mandatory when your taxable supplies and imports exceed AED 375,000 over the previous twelve months, or when you expect to exceed that in the next thirty days. Voluntary registration is available from AED 187,500. The test looks backward at twelve months of taxable turnover and forward thirty days — it is not about profit, cash in hand, or what you feel the business earns.

For a it services business the threshold test has teeth because nearly all it services revenue is taxable at 5%: services, product resale, bookings and packages. Add twelve months of invoices and you may be closer to AED 375,000 than the profit line suggests. Run the test quarterly, in writing, and keep the calculation — if the FTA ever asks why you were not registered, a documented quarterly test is your defence, and the absence of one is their opening. Voluntary registration below the threshold is often sensible: it lets you recover input VAT on fit-out, equipment and stock, which for a new technology practice can be substantial.

Once registered, the FTA assigns tax periods — quarterly for most small businesses, monthly once annual turnover passes AED 150 million. For each period you file a VAT return and pay any net VAT due, both within 28 days of the period end. The return is a simple arithmetic: output VAT charged to customers, minus input VAT paid on business purchases, equals the amount due (or the refund/repayable position). File even when the result is zero or a refund — a nil return filed on time beats a refund return filed late.

The tax point rules decide which period a sale belongs to: generally the earliest of invoice date, payment receipt, or supply completion. For a it services business that takes advance payments — deposits, packages, memberships — VAT is typically due when the money arrives, not when the service is delivered. That timing matters for cash flow: VAT collected in advance sits as a liability until the return, and spending it is the classic route to a painful quarter-end. Keep a VAT control account in your books and reconcile it to every return.

UAE VAT penalties escalate with the failure, and they stack. Late registration: AED 10,000. Late filing of a return and late payment each carry their own administrative penalties under the FTA's penalty regime, and late payment additionally accrues at 14% per annum from 14 April 2026 until the amount is settled. A single bad quarter can therefore produce three separate penalty lines — registration, filing, payment — before the underlying tax is even counted.

The table below summarises the headline exposures a it services business faces. Treat the fixed-penalty figures as the current published position and confirm them on tax.gov.ae before relying on them in a dispute — the FTA has revised the penalty tables before and can do so again. What does not change is the structure: the regime punishes delay more than error, which is why the voluntary disclosure path below matters so much.

Technology VAT is a three-directional problem. Outbound domestic: SaaS subscriptions, support contracts and project fees consumed in the UAE are standard-rated at 5% — including auto-renewing subscriptions where each renewal is a new tax point. Outbound exported: the same services supplied to clients outside the UAE may be zero-rated under the exported-services conditions — recipient established abroad, benefit enjoyed abroad, documentation proving both. For electronic services the "benefit enjoyed" analysis needs care: a SaaS subscription used by a foreign client's UAE branch is not an export. Inbound: foreign cloud infrastructure, overseas software licences, and subcontractor services are imported services subject to reverse charge — you self-account 5% as output VAT and recover it as input on the same return. The net is nil but the lines must appear; missing reverse-charge lines are among the commonest tech-firm VAT errors.

Mixed-use apportionment can arise where the firm makes both taxable and exempt or out-of-scope supplies — uncommon for pure tech services but relevant where financing or investment income mixes in. Subscription billing systems must generate VAT-compliant tax invoices (TRN, VAT amount, sequential numbering), not just payment receipts — Stripe-style receipts alone do not satisfy the invoice rules.

Every VAT-registered it services business must issue tax invoices showing the TRN, the VAT amount, and the consideration — and must keep copies, plus every purchase invoice supporting input VAT claims, for five years. The FTA's audit playbook starts with invoices: sequential numbering with no gaps, credit notes properly linked to original invoices, and purchase invoices that actually support the input VAT claimed. Gaps in invoice sequences and round-number-heavy purchase ledgers are exactly the patterns that invite questions.

Credit notes deserve special attention in it services. Refunds, package downgrades, and cancelled advance bookings all need credit notes that reference the original tax invoice and adjust the VAT in the period they are issued. A refund processed as a quiet cash payment with no credit note leaves output VAT overstated in one period and creates an unexplained cash outflow — both audit bait. Build credit-note issuance into your refund procedure, not as an afterthought.

Found an error in a filed VAT return — underpaid output VAT, overstated input VAT, a missed reverse-charge line? The voluntary disclosure mechanism lets you correct it, and the timing matters enormously. Disclose within 20 business days of discovering the error and the penalty treatment is materially lighter than if the FTA finds it first. Wait, and the same error draws the full penalty stack plus the inference that you hoped it would pass.

The disclosure is filed through EmaraTax against the relevant tax period, with the corrected figures and supporting workings. Common it services corrections include VAT not charged on advance deposits, input VAT claimed without valid invoices, and misclassified supplies. Make disclosure a standing agenda item in your monthly bookkeeping review: the question is not whether errors happen — they do — but whether each one is caught and disclosed inside its 20-business-day window.

If the FTA issues a penalty or assessment you believe is wrong, you can request reconsideration — but the filing window is 40 business days from the notification date, not 20. That distinction matters: the reconsideration window (40 business days, for challenging FTA decisions) is twice the voluntary disclosure window (20 business days, for correcting your own errors). Confusing the two is one of the commonest unforced errors in UAE tax disputes, and a late reconsideration request can be rejected on timing alone before the merits are ever examined.

A reconsideration request needs grounds, evidence, and precision: which decision, which figure, why it is wrong, with documents. Pay what is not in dispute where possible, and diary the 40-business-day date the day the notification arrives — business days exclude weekends and public holidays, so count carefully. If the amount at stake is large or the facts are complex, take advice before filing: a well-framed first request beats a rushed one, and you generally get one clean shot at the narrative.

VAT penalties feel designed to frighten — AED 10,000 for late registration, per-period filing penalties, 14% per annum on late payment — and for a it services business operating on thin margins, the numbers are genuinely scary. But the system's logic is simple and, in a way, merciful: it punishes delay and rewards prompt correction. Almost every penalty story we see follows the same arc — a missed registration or a late return, months of hoping, then a voluntary disclosure that would have cost a fraction if filed in its 20-business-day window.

The fix path is unglamorous and effective. Establish your registration position with a documented twelve-month threshold test. Bring every return current, oldest first. Disclose errors inside 20 business days of discovery. Then install the disciplines that prevent recurrence: monthly bookkeeping, invoice controls, and a diary that treats the 28-day deadline as immovable. Where a question shades into deliberate wrongdoing — falsified invoices, concealed sales — that is general information only and a matter for legal counsel, not a compliance retainer. For everything else, the honest economics hold: a VAT compliance routine costs less than one penalty stack. If you want your technology practice's VAT registration checked, your returns brought current, and the calendar installed, that is the work — talk to us and we will scope it against your real deadlines.