Packages & pricing · straight numbers, published
A senior compliance hire costs AED 500k+ a year. Here's the honest alternative.
Eight fixed packages with published starting prices — something almost nobody in this market will show you. Every package is run by people who have held the MLRO chair, passed regulator inspections and founded regulated companies themselves.
Find your package in ten seconds
Applying for a DFSA / FSRA licence?Or holding an in-principle approval?→ Authorisation SprintNewly licensed, no compliance head?Returns, MLRO report and monitoring are now yours.→ CO/MLRO RetainerNot sure where you stand?The AML law changed in Oct 2025 — most manuals now cite repealed law.→ AML Health CheckVARA-licensed VASP?Gap report, BRA and thematic-review prep, run under your CO.→ VARA SupportReal estate, gold, CSP, audit company?goAML, risk assessment and training — inspection-ready in 30 days.→ DNFBP AML StarterRegulator findings on your desk?Evidence-grade remediation, s166-style method.→ Remediation Support
Ongoing — your compliance function, monthly
Flagship
Outsourced CO / MLRO Retainer
DIFC & ADGM companies without a full-time compliance head
A named, regulator-approved Compliance Officer and MLRO — your entire compliance function run to a published calendar. No missed deadline, ever.
- Named CO and/or MLRO on your licence
- Annual compliance calendar — every filing owned
- Monthly monitoring, screening & CDD sampling
- Board MI pack and MLRO annual report
- Regulator liaison & STR handling discipline
VARA Compliance Support
Dubai VASPs — run under your own CO
Everything beneath your mandatory Compliance Officer: the work VARA inspects, kept inspection-ready. We make your one required hire survivable.
- Decree-Law 10/2025 gap report, maintained & evidenced
- Board-approved BRA + quarterly reviews
- Circular tracking — you never learn a deadline from VARA
- STR file support & inspection preparation
DPO-as-a-Service
DIFC · ADGM · UK/EU data protection in one retainer
Since July 2025, DIFC data subjects can sue you directly. Your privacy programme is litigation exposure now — we run it on a calendar.
- Named DPO or adviser-to-DPO
- ROPA, DPIAs and transfer assessments
- 72-hour breach response, rehearsed
- Data-subject requests inside statutory clocks
DNFBP Monitor
Brokerages, gold & DPMS, CSPs, auditors — after the Starter
The Ministry fined DNFBPs AED 42M in six months. This keeps you off that list for less than the cheapest single violation.
- Monthly sanctions & list screening
- Registers reviewed, goAML watched
- Annual risk-assessment refresh
- Annual training top-up, logged
Fixed fee — defined outcome, defined price
First-time pass
Authorisation Sprint
DFSA / FSRA applicants & in-principle approval holders
Your licence application built, filed and defended by someone who has sat on both sides of the regulator's table — end to end, first time.
- Regulatory business plan & full application pack
- AML framework & policy suite, built to the new law
- Fit-and-proper packs for your key people
- Every regulator question answered inside 5 working days
- Day-1 compliance pack when the licence lands
Most popular entry
AML Health Check
Any regulated company or DNFBP — 10 working days
A board-ready gap report against the post-October-2025 AML stack. If your manual still cites the 2018 law, this is how you find out before your regulator does.
- Full framework review vs the new federal law + your rulebook
- Optional CDD file testing & systems walkthrough
- Every finding rated, cited and costed to fix
- Board presentation included
- Fee credited in full against a retainer signed within 60 days
DNFBP AML Starter
Real estate, gold & DPMS, CSPs, auditors
Zero to inspection-ready in 30 days — goAML registered, risk assessment done, policies live, team trained.
- goAML registration + business risk assessment
- Policies, screening set-up & staff training
- Inspection-readiness certificate at day 30
- Continues into the DNFBP Monitor above
Remediation Support
Companies with regulator findings on the desk
Regulator findings answered with s166-grade method — every finding mapped, fixed, evidenced and independently tested before close.
- Findings-to-evidence workplan your supervisor accepts
- Repair programme run to milestones
- Monthly reporting to the regulator
- Independent close-out testing
Compare the monthly packages
| What you get | CO/MLRO Retainer | VARA Support | DPO-as-a-Service | DNFBP Monitor |
|---|---|---|---|---|
| Compliance calendar & every filing | ✓ | ✓ | ✓DP obligations | ✓goAML scope |
| Staff training, logged | ✓annual | ✓ | ✓awareness | ✓annual top-up |
| Board reporting pack | ✓monthly MI + quarterly board | ✓CO sign-off pack | ✓annual report | —quarterly note |
| Regulator / inspection liaison | ✓ | ✓inspection prep | ✓Commissioner/ODP | —inspection prep add-on |
| Monthly monitoring & screening | ✓ | ✓ | — | ✓ |
| Suspicious-report (STR) discipline | ✓48-hour decision standard | ✓support to your MLRO | — | ✓route + training |
| Named regulator-approved officer | ✓CO & MLRO on your licence | —runs under your CO | ✓named DPO | —your officer, trained by us |
| From, per month | AED 15,000 | AED 12,000 | AED 6,000 | AED 3,000 |
The path most clients take: Authorisation Sprint → CO/MLRO Retainer from day one of the licence. Your application is built by the same people who will run the function — so nothing is written for the regulator that can't be operated in real life. Ask about combined pricing.
Add-on with any retainer — The KYC Desk: send your onboarding to us and get back decision-ready CDD files inside 2–7 business days — verified, screened and risk-rated under your own methodology, with a written recommendation. You keep every acceptance decision; we do everything underneath it. Standard files AED 450, dropping to AED 275 at committed volume · EDD cases from AED 3,500.
The numbers behind the pricing
US$160–320k
Real year-one cost of one in-house DIFC compliance officer — salary, visa, DEWS, recruitment, CPD. If the hire works out.
AED 100M
New maximum corporate AML fine under Federal Decree-Law 10/2025 — with personal criminal liability for managers.
US$51,000
What one ADGM company was fined simply for failing to appoint an MLRO. The seat itself is the exposure.
How an engagement works
1
25-minute callWe tell you exactly what your regulator will ask you in the next six months. Useful either way.2
Three options in writingWithin 48 hours — fixed prices, plain scope, our recommendation stated.3
Signed & startedEngagement letter, then onboarding: access, calendar, and a first win inside 30 days.4
Run on a rhythmMonthly cycle, board pack, filings — you stop thinking about compliance. That's the product.Book the 25-minute call.
You'll get value even if we never speak again — we'll tell you exactly what your regulator will ask you in the next six months.
Book the callAll prices in AED, exclusive of VAT. "From" pricing subject to scoping — final fees confirmed in a written proposal and governed by an engagement letter. Named-officer appointments are subject to regulator approval of the individual. Ayla is a compliance consultancy; nothing here is legal, tax or investment advice. Fines and salary figures cited from public enforcement notices and published UAE market data, current July 2026. Prices reviewed quarterly.