Certification details
Everything you need to know about certifying an AI system under DIFC Regulation 10: the steps involved, the evidence required, how long it takes and what it costs.
Process
How certification works
- Step 01
Initial assessment
Register and complete our preliminary assessment to determine if your AI system requires certification under DIFC Regulation 10.
- Step 02
Gap analysis
We identify compliance gaps and provide a detailed report with recommendations for required changes to meet certification standards.
- Step 03
Implementation support
Our experts guide you through implementing necessary changes and preparing the required documentation and evidence.
- Step 04
Formal audit
A comprehensive audit is conducted to evaluate your AI system against all Regulation 10 requirements and standards.
- Step 05
Certification issuance
Upon successful completion of the audit, we issue the official DIFC Regulation 10 certification for your AI system.
- Step 06
Ongoing compliance
We provide continuous monitoring and support to ensure your AI system maintains compliance with evolving regulations.
Evidence
Documentation you will need
Our team provides a detailed checklist tailored to your system. Typical requirements include:
- Technical specifications of the AI system
- Data processing documentation and records
- Risk assessments and data protection impact assessments
- AI governance framework and policies
- Training protocols and model documentation
- Evidence of implemented technical and organisational safeguards
System changes
Most AI systems require some modification to meet Regulation 10 requirements, such as additional safeguards, improved transparency mechanisms, stronger documentation or changes to data processing practices. Our gap analysis identifies exactly which areas need work.
Validity and renewal
Certification is typically valid for two years. Significant changes to your system or to the applicable regulations may require reassessment sooner. Ongoing monitoring keeps you compliant between certification cycles.
Timeline
Typically two to three months
- 1 to 2 days
Initial assessment
Determination of certification requirements through our online tool or the Official DIFC Reg10 Application Portal.
- 1 to 2 weeks
Gap analysis
A thorough evaluation of your AI system against all Regulation 10 requirements.
- 4 to 8 weeks
Implementation and documentation
Implementing necessary changes and preparing required documentation with our expert guidance.
- 1 to 2 weeks
Formal audit
Comprehensive formal audit against all requirements specified in Regulation 10.
- 1 week
Certification
Official certification issuance upon successful completion of the audit.
How we run your certification
Every stage delivered on Pritect
Your engagement runs on Pritect, our AI governance platform. The gap analysis is scored against each Regulation 10 requirement, non-conformities are ranked, and the audit pack is generated from the same record.
- Evidence collection and document requests
- Scored gap analysis with ranked non-conformities
- Remediation plan tracked to closure
- Certification audit and decision record
Pricing
Packages
Basic package
18,000 AED
- Initial assessment and gap analysis
- Basic documentation support
- Certification application assistance
- Up to 15 hours of consultation
Ideal for smaller AI systems with limited scope
Professional package
30,000 AED
- Comprehensive assessment and gap analysis
- Complete documentation preparation
- Implementation guidance for required changes
- Up to 30 hours of consultation
- Certification body liaison and management
Suitable for most AI systems requiring certification
Enterprise package
60,000 AED
- Everything in the professional package
- Custom implementation support
- Advanced compliance framework development
- Post-certification monitoring and support
- Up to 60 hours of consultation
For complex or high-risk AI systems