FOR BRANDS · UAE · KSA · QATAR · KUWAIT · BAHRAIN · OMAN

In the GCC, the Managing Director
is personally liable for every campaign.

UAE Federal Decree-Law No. 55/2023 does not fine the agency. It does not fine the creator. It fines the brand — and holds its senior management personally responsible. Fines up to AED 1,000,000. Criminal liability for serious violations. CognitivaOS is the compliance record that proves your brand executed correctly — before the NMA asks.

Book a confidential briefing →See the Brand Portal
AED 1M
Maximum fine per violation under UAE Federal Decree-Law 55/2023. Personal liability for senior management.
Dual licence
NMA Advertiser Permit + Trade Licence required per campaign. Missing either: full brand liability.
GCAM KSA
General Commission for Audiovisual Media. Sponsored content disclosure mandatory. Brand is responsible.
0 days
Time allowed to reconstruct compliance documentation when NMA investigates. You need it pre-built.

MANAGING DIRECTOR PERSONAL LIABILITY

This is not a compliance department problem. It is your problem, personally.

01

UAE Federal Decree-Law No. 55/2023 — Brand Management Personal Liability.

The law that governs influencer and creator marketing in the UAE explicitly holds brand senior management accountable for campaign compliance failures. The MD, CEO, or designated responsible officer can face personal criminal liability for serious violations — not just corporate fines. This is not a theoretical risk. NMA enforcement has been active since January 2026.

02

AED 1,000,000 per violation — and violations compound.

Each undisclosed post, each campaign without a verified NMA Advertiser Permit on file, each piece of content that violates the 20 UAE content guidelines — each is a separate violation. A campaign with 10 creators, each posting twice, is 20 potential violation events. At AED 5,000–1,000,000 each. Without a record proving compliance, every one is an exposure.

03

The NMA does not accept retrospective reconstruction.

When the National Media Authority investigates, they want the compliance record. Not a report your legal team assembled afterwards. Not screenshots from WhatsApp. A contemporaneous, verified, timestamped record of what was disclosed, when, by which creator, on which platform. That record has to exist before the post goes live — not after the investigation starts.

04

GCAM in KSA holds brands to the same standard.

The General Commission for Audiovisual Media in Saudi Arabia requires documented disclosure for every piece of sponsored content. Brands operating campaigns through Saudi creators bear direct responsibility. The GCAM dossier requirement is the same as the NMA requirement: contemporaneous, verifiable, timestamped — not reconstructed.

05

Your agency cannot provide this record. Only CognitivaOS can.

Your agency's campaign report is written by your agency. It documents what they want it to document. CognitivaOS holds the record in independent custody — neither your agency nor the creator can modify it after the fact. It is the only record that answers the NMA or GCAM investigation before it starts.

THE BRAND PORTAL

The compliance record the NMA requires. Built automatically.

CognitivaOS is not a compliance tool. It is the execution infrastructure that produces compliance documentation as an automatic by-product of every campaign — NMA Advertiser Permit verification, disclosure status per post, cryptographic approval proof, CBUAE-licensed AED payment. All pre-built before any investigation.

NMA LICENCE VERIFICATION

Advertiser Permit status verified per creator per campaign.

Every creator's NMA Advertiser Permit and Trade Licence status is verified and captured as a mandatory field in the execution record. The NMA compliance question — 'was the creator licensed?' — is answered with a timestamped, cryptographically signed record. Not a PDF the agency emailed you.

DISCLOSURE TRACKING PER POST

#ad/#sponsored captured as a primary execution event.

Every post's disclosure status — #ad, #sponsored, #gifted, #partnership — is captured at the moment it fires, per platform, per creator. The NMA requires this to be contemporaneous. CognitivaOS makes it structurally impossible for it not to be.

20 CONTENT GUIDELINES · AUTO-CHECKED

UAE content compliance pre-publication.

Before any creator post goes live, CognitivaOS AI checks against the UAE 20 content guidelines — no alcohol promotion, Islamic values respected, no content disrespecting government or religion. Violations flagged before the post publishes. Not after the NMA notices.

APPROVAL ANCHOR · MD PROTECTION

Every approval: named officer, timestamped, immutable.

Each sign-off is attributed to a named person with a specific role — not 'the brand'. The record shows the approval chain. When the NMA asks who authorised a campaign, the answer is already in the record. Independent custody: neither party can modify after the fact.

CBUAE-LICENSED AED PAYMENT

Approval → AED payment in 1–3 days → VAT record auto-generated.

All creator payments via CBUAE-licensed Stripe UAE local rails. Full VAT documentation per transaction, permanently linked to the approval event that triggered it. The payment record is the compliance record — one object, not two separate systems.

COGNITIVE RECORD EXPORT

NMA-ready dossier. On demand. Before they ask.

The complete, digitally signed record of every licence verification, approval, disclosure event, and payment — exportable in seconds. The investigation dossier is pre-built. Your legal team answers the NMA question before the investigation formally opens.

BEFORE / AFTER

What changes for your brand team — and for you personally.

WITHOUT COGNITIVAOS

NMA Advertiser Permit: assumed to be on file with the agency
Disclosure compliance: hoped for, tracked by the creator's own caption
20 content guidelines: checked after the fact, if at all
Approval chain: WhatsApp messages between multiple parties
Payment records: manual AED transfers, no linked approval evidence
NMA investigation: days of reconstruction by legal team

WITH COGNITIVAOS

NMA Permit status verified, timestamped, in record before campaign launches
Disclosure status per post per platform captured as primary execution event
AI content check against 20 UAE guidelines before publication
Approval chain: named officer, timestamped, cryptographically immutable
CBUAE-licensed AED payment linked to the approval event that triggered it
NMA dossier pre-built — exportable in seconds, not days

GCC REGULATORY FRAMEWORK

The laws that make the Managing Director personally responsible.

UAE Federal Decree-Law 55/2023

National Media Authority · Personal liability for senior management

Every promotional post requires clear, immediate disclosure. Dual licence mandatory: Trade Licence + NMA Advertiser Permit (AED 1,000/year). Fines: AED 5,000–10,000 (basic), up to AED 1,000,000 (serious). Senior management personal liability for repeat or serious violations. Active enforcement since January 2026.

NMA Dual Licence System

Effective 2026 · Trade Licence + Advertiser Permit

Two separate licences required for every creator operating commercially in the UAE. CognitivaOS captures licence verification as a mandatory field per execution event. Missing licence = full brand liability. Record proves verification was completed before campaign execution.

UAE 20 Content Guidelines

Cultural compliance · Fines up to AED 1,000,000

No alcohol promotion. Respect Islamic values and traditions. No content disrespecting government, religion, or UAE cultural norms. Violations: content removal + fines up to AED 1,000,000. CognitivaOS AI checks every post against all 20 guidelines before publication.

GCAM · Saudi Arabia

General Commission for Audiovisual Media · KSA enforcement

Sponsored content disclosure mandatory per GCAM guidelines. No promotion of Sharia-prohibited products or services. No content undermining social values. Brand is directly responsible for creator compliance. GCAM-compliant audit trail per campaign, digital signed, pre-built by CognitivaOS.

CBUAE · Payment Compliance

Central Bank UAE · Licensed payment infrastructure

All creator payments must flow through CBUAE-authorised infrastructure. CognitivaOS uses Stripe UAE entity with full CBUAE licensing. AED payment in 1–3 days. VAT documentation auto-generated per transaction. Complete payment audit trail linked to the approval event.

UAE VAT · Federal Tax Authority

5% VAT · FTA documentation requirements

Creator payments above threshold require VAT-compliant documentation. CognitivaOS generates structured VAT records per transaction, linked to the approval event, exportable for FTA audit. No manual VAT reconstruction at year-end.

YOUR BRAND'S LEGAL POSITION

The difference between a violation and a defence.

In GCC regulatory enforcement, the outcome of an investigation is determined almost entirely by documentation quality. A brand with a pre-built, cryptographically signed compliance record answers the NMA question before it becomes an enforcement action. A brand without one is reconstructing under time pressure, with legal fees mounting, while the compliance gap is exposed.

AED 1M

Maximum fine per violation. Your personal exposure.

Jan 2026

NMA enforcement active. Investigations already underway.

0

Seconds to export your pre-built compliance dossier.

Every NMA Advertiser Permit verified before the campaign launches — not assumed.
Every disclosure event captured at the moment it fires — contemporaneous, not reconstructed.
Every approval attributed to a named officer with a timestamp — not 'we approved it verbally'.
Every payment through CBUAE-licensed infrastructure — with full VAT documentation.
The dossier that answers the investigation exists before the investigation starts.

The NMA does not accept 'we thought the agency handled it'. CognitivaOS means you can prove they did.

HOW IT WORKS · THREE STEPS

01

Campaign setup — licences verified before launch.

Every creator's NMA Advertiser Permit and Trade Licence is verified and logged. 20 content guidelines checked for the campaign brief. In-region data storage confirmed (UAE data stays in UAE). The compliance record starts before the first post goes live.

02

Campaign execution — every event captured as it happens.

Brief acceptance timestamped. AI content check before publication. Disclosure status captured as a primary event per post. Approval attributed to named officer. Every event signed cryptographically and locked — immutable, in independent custody.

03

Payment and record — CBUAE-licensed, audit-ready.

Approval triggers CBUAE-licensed AED payment via Stripe UAE. VAT documentation auto-generated. The complete, digitally signed dossier is available on demand — for your CFO, your legal team, or the NMA — in seconds.

CONFIDENTIAL BRIEFING

Book a confidential briefing for your legal and compliance team.

We brief your legal team on the NMA enforcement landscape and show you the exact compliance record CognitivaOS produces for your current campaigns. No agency present. Confidential. Your legal exposure quantified before the session ends.

Book the confidential briefing →

Senior management · Legal team · Compliance officer · No agency required

CognitivaOS for Brands | GCC — UAE & Saudi Arabia | Cognitiva