Domain name and hosting in the UAE: what your business should own and control

Domain name hosting in the UAE is really three separate services that often get sold as one: the registrar that holds your domain licence, the DNS that tells the internet where your website and email live, and the hosting account that stores the site itself. Your business should hold the registrar account outright, in the company’s name and on a company email address, and should have its own login to DNS and hosting even when an agency runs them day to day.

This guide explains what each layer does, the .ae rules published by the .ae Domain Administration (aeDA) under TDRA, what actually happens on the day a domain expires, and the email records that decide whether your mail reaches an inbox. It describes official policy in general terms as of October 2026 and is not legal advice.

Domain name, DNS and hosting in the UAE: three different jobs

The registrar is the company you pay to register the name. For .ae, aeDA says names are registered through its accredited registrars or their resellers, and its list includes UAE firms and international ones. The registrar account is where renewals are paid and the transfer code lives.

DNS is the set of records that point the name somewhere: an A record or CNAME for the website, MX records for mail, TXT records for email authentication and for verifying services such as Google Search Console. DNS can sit with the registrar, with the host, or with a separate provider. Whoever can edit it can redirect your website or mail.

Hosting is the server space where the website’s files and database run. aeDA’s FAQ makes the point that a domain name is portable, so the hosting can sit in the UAE or overseas as long as DNS is kept up to date. You can also register a name before any hosting exists.

A common problem we see in the UAE is a business that treats its domain name and hosting as one purchase, then moves host and loses email because the MX records lived on the old host’s DNS. Each layer needs a named owner.

Why the person who built the site should not hold all three

Agencies and freelancers often register everything inside their own accounts because it is quicker at launch. That convenience becomes a dependency: if one supplier holds the domain name, DNS and hosting for a UAE business, a billing dispute or a change of supplier can take the website and every company mailbox offline at once.

aeDA is blunt about where control sits: its registration guidance says it is the registrant that controls the domain name, and only the registrant can transfer it, cancel it or make someone else the registrant. Its Domain Name Policy adds that a registrant does not own a domain at all. It holds an exclusive licence to use the name for a set period, and names are allocated first come, first served. If the agency’s name is in the registrant field, the licence is theirs in registry terms, whatever your invoice says.

Your supplier can manage your domain. Your business should be the registrant.

The sensible split is simple. The business is the registrant and owns the registrar account, paid on a company card. The agency gets delegated access to DNS and hosting to do its work. When the relationship ends, you remove its access instead of asking for yours. Our website handover checklist covers how to audit and recover each account after a project; this guide is about setting it up properly from day one.

.ae or .com: the UAE domain rules that matter

The .ae namespace has an open level and several restricted zones. aeDA states that everybody is eligible to register a first level .ae name, and its Domain Name Policy says applicants for the unrestricted .ae zone need no documentary evidence beyond the general rules and registrant warranties. The restricted zones carry extra conditions, set out in the same policy:

For co.ae and net.ae, the name must be an exact match, an acronym, an abbreviation or closely connected to your company name, trading name or trademark, where the company is one you control or hold at least half of. So a free zone company trading as Example Interiors could register exampleinteriors.co.ae in that zone, but not an unrelated generic word. The policy also says a domain licence gives no intellectual property rights, and the registrant must make sure the name does not infringe anyone else’s.

A .com follows ICANN’s global rules and has no UAE eligibility test. Choosing the main domain name is a marketing decision, not a hosting one: a .ae tells visitors you are a UAE business, while a .com suits a company that sells across borders. Many firms hold both and redirect one to the other. Whichever you choose, register it in the exact legal name on your trade licence, because the co.ae rules tie the name to that entity and the registrant record is what proves the domain is yours.

Renewals and expiry: what happens when a UAE domain name lapses

Expiry is a common way a business loses its website, usually because the renewal notice went to a former employee, a developer who moved on, or an expired card. aeDA’s Domain Name Renewal, Expiry and Deletion Policy shows how quickly the damage follows.

1. Licence period. A .ae name can be registered or renewed for one to five years. Renewal is allowed at any time, as long as the total remaining period does not go beyond five years and ninety days.
2. The expiry date passes. For .ae, co.ae, net.ae and org.ae names, the domain goes into an expired hold status, the registry stops accepting updates, and its name server records are removed from DNS. Your website and email stop resolving that day, even if the UAE hosting for the domain name is fully paid.
3. Thirty days later. The name moves to a pending purge status and renewals are no longer accepted.
4. Purge. Shortly after, the name is removed from the registry and becomes available for anyone to register.

Registrars may offer auto renewal, but the policy says they need the registrant’s explicit consent to turn it on. Do not assume it is active; check the setting in your own registrar account. For a .com, ICANN’s Expired Registration Recovery Policy requires registrars to send at least two reminders, roughly a month and a week before expiry, and to interrupt DNS for at least the last eight days of the renewal window.

Business email on your domain: SPF, DKIM and DMARC

Email on your own domain name makes a quote from a UAE supplier look credible, and it works the same whichever company provides the hosting. It needs three DNS records to be delivered reliably. Microsoft’s documentation describes the roles clearly: SPF lists the servers allowed to send mail for your domain, DKIM digitally signs each message so the receiver can check it was not altered, and DMARC tells the receiver what to do with mail that fails and where to send reports. Microsoft also says that anything less than all of them gives substandard protection.

Google’s email sender guidelines turned this from good practice into a requirement. Every sender to Gmail accounts must set up SPF or DKIM, and anyone sending more than 5,000 messages a day must set up SPF, DKIM and DMARC, with the From domain aligned, and offer one click unsubscribe on marketing mail.

• One SPF record per domain. Google Workspace’s SPF guidance says each domain needs its own SPF record listing every service that sends for it, including newsletter tools and your CRM, with a limit of ten include entries.
• DKIM from each sender. Turn on DKIM inside Google Workspace or Microsoft 365, and again in every other tool that sends as your domain.
• DMARC last, and gently. Google says SPF or DKIM must be working first, suggests waiting 48 hours after setting them up, then starting DMARC with a policy of none, reading the reports, and only later moving to quarantine or reject.

Whoever controls DNS controls these records, which is one more reason to hold that login yourself. If your mailboxes run on Google, our Google Workspace setup service covers the records end to end; if you are on Microsoft, see Microsoft 365 for Dubai businesses. Anyone sending campaigns should read our email marketing service page too.

Choosing UAE hosting: what to check beyond server location

Where the server sits matters for speed, and our guide to website hosting and data residency in the UAE covers that and the legal side. The questions below decide whether a host is easy to live with.

• Backups you can reach. How often are they taken, how long are they kept, and can you download or restore one yourself without opening a ticket?
• Support hours that match yours. Ask when a human answers, in which time zone and by which channel.
• Account in your name. UAE hosting tied to your domain name should sit in an account registered to the business, with the developer added as a user.
• Clear DNS exports. If DNS for the domain name lives with your UAE hosting provider, make sure you can export the zone so a move does not break email.
• A clean exit. Check you can download all files and the database.

The logins a UAE business should hold for its domain name and hosting

Keep this list in a company password manager and review it whenever staff or suppliers change. These accounts decide whether your domain name, hosting and email in the UAE keep working without anyone’s goodwill.

aeDA’s FAQ notes that to move a .ae name to a new registrar you give the new registrar the domain password, also called the authorisation code, and that a recovery service sends it to the registered email. That is why the registrant email matters so much. Turn on two step sign in for each account on the list.

How Digital Marketing Dubai can help

On every website we build, the client owns the domain, hosting, CMS logins and code, and we set the accounts up in the business’s name from the start, as described on our website development page. If your domain name and hosting in the UAE are already live but scattered across old suppliers, our website maintenance team can map what you hold, fix the email records and set renewals so nothing lapses quietly. Browse the wider range on our web services page, or send us your domain and we will return a written fixed price proposal within 45 minutes during business hours.