Dubai, UAE · SRA Regulated

What Good Corporate Governance Actually Looks Like for a Growing Business in the Gulf

Corporate governance has a branding problem. For most founders and business owners, the phrase conjures images of boardroom formalities, lengthy policy documents, and compliance obligations that belong to larger organisations — not to a business that is still finding its feet. The result is that governance is routinely deferred until it becomes urgent. And by the time it becomes urgent, the problems it was designed to prevent have usually already happened.

The UAE is an instructive case. Up to 90% of private companies in the UAE are family businesses, contributing approximately 40% of national GDP and employing more than 70% of the private sector workforce. These are not small operations — many are substantial, multigenerational enterprises. And yet governance reform in this sector remains, as the 2025 KPMG Global Family Business Report identified, one of the most pressing priorities for sustained growth across the Gulf region.

The regulatory environment is also changing. The UAE's Federal Decree-Law No. 20 of 2025 introduced strengthened corporate governance requirements aligned with international standards, including multi-class share structures, enhanced minority shareholder protections, and more coherent governance standards across mainland and free zone jurisdictions. Investors, lenders, and commercial partners are asking governance questions before they commit. The era when informal structure was commercially acceptable — even for private companies — is passing.

What governance actually means in practice

Governance is not a set of documents. It is a system — the way decisions are made, who makes them, how accountability is maintained, and what happens when things go wrong. A company with a beautifully drafted governance framework that no one follows has worse governance than a company with minimal documentation whose decision-making is nonetheless disciplined and transparent. The goal is substance, not form.

For a growing business in the Gulf — whether a founder-led startup, a family business, or a PE-backed company — good governance at the relevant stage of development typically involves a handful of core elements that are often absent.

Good governance is not about adding bureaucracy. It is about removing ambiguity — about decisions, authority, accountability, and what happens next.

Clear decision-making authority

The most common governance gap I encounter in growing businesses is the absence of a clearly documented decision-making framework. Who can commit the company to contracts above a certain value? Who approves new hires at senior levels? Who can authorise payments, open bank accounts, or change banking mandates? In the absence of documented delegated authority, these decisions either accumulate at the top — creating bottlenecks and key-person risk — or they happen informally, creating exposure when the informal decision-maker is wrong, absent, or disputed.

A delegated authority matrix does not need to be complex. For most growing businesses, a one-page document setting out approval thresholds by category and value is sufficient. What matters is that it is documented, understood by the people it applies to, and actually followed.

Shareholder and founder alignment

Founder relationships and family business dynamics have a way of appearing stable until they are not. Research consistently shows that the majority of startup breakups stem from internal disagreements — typically around shareholding, IP ownership, or decision-making rights. In the UAE specifically, the speed at which companies can be formed and funded means that many businesses are established without the governance foundations that protect them when relationships change.

A properly drafted shareholder agreement addresses, at minimum, how shares are held and can be transferred, how decisions are made and what requires unanimity, how profits are distributed, what happens when a founder leaves or becomes incapacitated, how deadlocks are resolved, and how disputes are managed. Under UAE law, IP created by a founder does not automatically belong to the company unless explicitly assigned in writing — a fact that has caused significant disputes in tech and IP-heavy businesses where founders held valuable assets personally.

For family businesses, the governance challenge is amplified by the overlap between family relationships and commercial roles. The UAE Family Business Governance Law, enacted in 2022, created a legal framework for succession planning, dispute resolution, and the formalisation of ownership arrangements. Using it is optional for private businesses — but the problems it was designed to address are not optional. Generational transitions without clear governance structures are one of the primary causes of family business failure in the region.

Financial controls and transparency

Growing businesses frequently operate with financial controls that are too thin for their size. Bank signatories who are not updated when personnel change. Expenses approved verbally rather than through a documented process. Related-party transactions that are not separately identified or approved. These are not just compliance risks — they are the conditions under which fraud, misappropriation, and dispute arise.

More practically, they are the conditions that make fundraising harder. An investor, bank, or commercial partner conducting due diligence on a business with weak financial controls will either walk away or impose a significant risk premium on the cost of capital. Investing in financial governance — documented approval processes, segregation of duties, regular management accounts, and annual audits — has a direct commercial return in the form of easier and cheaper access to capital.

The governance-investment connection

This is the argument that tends to land most clearly with founders: governance is not about regulatory compliance — it is about commercial readiness. Sophisticated investors, whether private equity, family offices, or institutional capital, conduct governance reviews as part of their due diligence. A business that cannot demonstrate clear decision-making authority, documented ownership, clean financials, and a functioning board or advisory structure will either fail that review or pass it with a lower valuation.

The UAE's updated Commercial Companies Law introduced multi-class share structures — a long-awaited development that allows founders to separate economic rights from voting rights, enabling them to raise capital without ceding control. This is an important tool for growing businesses. But it only works if the underlying governance structure is in place to give investors confidence that the company is being run properly.

Where to start

Governance reform does not need to happen all at once. For most growing businesses, a practical starting point is three things: document your decision-making authority, ensure your shareholder agreement is fit for purpose, and establish a regular cadence of financial reporting that goes beyond the bank balance. From that foundation, the next layer — an advisory board, a formal audit function, an ESG framework — can be added as the business scales.

The businesses that wait until a funding round, a dispute, or a regulatory inquiry to address their governance typically find that the cost — in time, money, and distraction — is far higher than the cost of building the structure early. Governance built under pressure is always more expensive than governance built by design.

Anthony Michael Letayf

Anthony Michael Letayf

Senior legal and commercial adviser and angel investor in early-stage businesses across F&B, Legal Tech, Biotech and real estate. Formerly Group General Counsel of NMC Healthcare, advising the Board and Executive Leadership Team on governance frameworks. Full bio →

Disclaimer: This article is for general informational purposes only and does not constitute legal advice. It does not create a solicitor-client relationship. Anthony Letayf is qualified in England and Wales only. Full disclaimer →