Inside a PRO Retainer: What You Are Actually Buying

Most proposals from a corporate PRO services company in Dubai arrive as a price list. A column of transaction names, a column of numbers, a line at the bottom. Nothing about what happens when a file is rejected, who you call when a renewal is three days out, where your passports are kept, or what you get back if you leave.

That is not a document you can govern a supplier with, and it is not a document you can compare against another one. What follows is the structure a proper engagement should have, written so you can hold it up against whatever is currently on your desk.

Scope: name the transactions, not the service

A scope that says "PRO services" says nothing. A usable scope names the transactions and states, for each one, whether it is included.

Work through your own transaction load first and then insist the scope mirrors it. The list is finite:

Labour, with MOHRE. Work permit issue, renewal and cancellation. Offer letter and employment contract registration, including the renewal cycle. Establishment card issue and file updates. The monthly wage file.

Immigration, with ICP and GDRFA. Entry permits. Status change for people already in the country. Medical fitness scheduling. Emirates ID issue and renewal. Residence permit issue, renewal and cancellation. Dependant applications where you support them.

Licensing, with Dubai Economy and Tourism. Trade licence renewal. Activity amendments. Partner, capital and structure changes. Tenancy registration where the provider handles it.

Documents. Attestation submission and tracking. Legal translation coordination. Certified copies. Collection and return of originals.

For each line the scope should say one of three things: included in the retainer, available at a stated additional fee, or not provided. Anything left unmarked will be argued about later.

The exclusions matter more than the inclusions

Ask specifically about these, because they are where most disputes start.

The disbursement question deserves a direct answer in writing. Government charges are published per service by the authority. A MOHRE work permit is published at AED 250 to AED 3,450 depending on the establishment's classification. A Dubai trade licence register fee is published at AED 600. Your provider should be able to show you the published figure and their own fee as two separate lines. Some add a handling margin, which is a legitimate commercial choice, but you should know it is there.

Service levels you can honestly ask for

Here is the constraint that separates a serious provider from a salesman. No provider can commit to a government processing time. ICP publishes a two-day service completion duration for a residence permit. GDRFA publishes 48 hours on several of its services. Those are the authority's figures, not the provider's, and they are not a promise anyone else can make on the authority's behalf.

What a provider can commit to is everything on their own side of the line. Ask for service levels on these, and treat a refusal as informative:

Notice that not one of those depends on the authority. That is the point. A provider who says "we cannot commit to anything because it is up to the government" is avoiding the parts that are genuinely theirs.

Practical asset: the SLA table. Take the seven rows above into your own document, add a column for the committed time, and send it to every provider you are considering as part of the request for proposal. The differences in what they are willing to write down will tell you more than the fee comparison.

Escalation, and who you actually call

A named individual, a named manager above them, and a response time for each. That is the whole requirement, and it is remarkable how often it is missing.

Ask what happens when your named contact is on leave. Ask whether the handover is documented or verbal. Ask who you contact outside working hours when a candidate is at the airport and something has gone wrong. The answers do not need to be elaborate. They need to exist.

Reporting that tells you something

A monthly report that lists completed transactions is an invoice with extra steps. A report worth having answers four questions:

1. What is in progress, and at which stage?
2. What was rejected this month, why, and what changed as a result?
3. What falls due in the next 60 and 90 days?
4. What is at risk, and what do we need to do about it?

The third item is the one that earns the fee. A provider who tells you in October what expires in December is doing the job. A provider who tells you in December is just processing.

Document custody, the question nobody puts in writing

Your provider will hold original passports, degree certificates, marriage certificates and company documents. This is the part of the relationship with real exposure, and it is almost never addressed in a proposal.

Put it in the agreement:

• A receipt for every original. Item, condition, date taken, named person taking it, named person releasing it.
• Where originals are stored. Not "securely". Say where, and who has access.
• Maximum hold time. How long may an original stay with the provider once the transaction is complete?
• Return protocol. Who signs for the return, and what is the evidence.
• What happens on loss or damage. State the position rather than leaving it to be discovered.
• Hand-back on termination. Every original, every copy, every credential, within a stated number of days, with a signed inventory.

If a provider hesitates on any of these, that is your answer. Ask every provider you are considering, ourselves included, to give you their custody protocol in writing before you hand over a single original document.

Portal credentials stay with you

Government portal access, authorised signatory status and UAE PASS identities belong to named people. Where a provider operates your transactions, they should operate under your access rather than owning it.

Agree three things in writing. Whose name each credential is registered in. What the recovery route is if that person leaves your company. What the provider does with any access they hold on the day the contract ends.

This is not distrust. It is the difference between changing supplier in a week and changing supplier in a quarter.

Accountability and getting out

Errors. Where a file fails because of a provider's mistake, who bears the re-submission cost and any government charge incurred? Agree it before it happens.

Term and notice. A twelve-month lock on a company whose headcount is unpredictable is a real cost. Ask for a notice period you could actually use.

Termination assistance. The provider's obligations for a defined period after notice: complete files in progress, return originals, hand over the renewal calendar, transfer or release credentials.

Data. Employee passport and personal data is being processed on your behalf. Ask what happens to it at the end of the engagement.

Data and confidentiality

Your provider will handle passport copies, salary information, medical appointment details and family documents for your employees. That is personal data about people who are not party to your contract.

Four points belong in the agreement, and none of them is onerous.

Purpose limitation. The data is processed only to perform the transactions in scope, and for nothing else.

Sub-processors. Couriers, typing centres and translators will touch it. Ask who they are and whether the same obligations flow down to them.

Retention. How long does the provider keep employee data after a transaction closes, and after the engagement ends?

Breach notification. If something is lost or exposed, when and how are you told? You will need to tell your employees.

This is not a theoretical concern. A lost passport is a real event with a real cost to a real person, and the time to agree who does what is before it happens.

The first thirty days

Transitions fail more often than steady-state service does, so agree the onboarding in the same document as the service.

A proper transition covers five things. A register of every recurring obligation and its next due date, built jointly rather than assumed. A documented handover of any files already in progress. Confirmation of who holds which portal credential and in whose name. A signed inventory of any original documents transferred to the provider. And a named date by which the first full monthly report will be delivered.

Ask for that as a thirty-day plan with dates against it. A provider who has done this before will have one ready. A provider who has not will improvise, and you will spend the first quarter correcting a register nobody built properly.

The question set

Take these to every provider. Ask for written answers.

1. Which transactions are inside the base fee, and which are extra? Show me the line items.
2. Are government charges passed through at cost, or with a margin?
3. What will you commit to in writing on acknowledgement, submission and renewal notice?
4. Who is my named contact, who is their manager, and what happens when they are away?
5. Where will our original documents be held, and what is your receipt and return protocol?
6. Whose name will our portal credentials be registered in?
7. What does your monthly report contain? Show me a real one with the client details removed.
8. If a file fails because of your error, who pays for the re-submission?
9. What is the notice period, and what do you do in the handover window?
10. What is your licensed activity, and can I see the licence?

The last question is worth asking plainly. Anyone can verify a Dubai licence through the Department of Economy and Tourism's public business search, and a provider who is comfortable being checked is usually comfortable being governed.

A word on contract language

Nothing in this article is legal advice, and none of the structures described should be treated as drafted clauses. They are the commercial points a buyer should make sure their own agreement covers. Have the final document reviewed by a UAE-licensed lawyer before signing, particularly the liability, data and termination provisions.

If you have not yet decided whether to outsource at all, the in-house comparison comes first. If you need the underlying transaction list to build your scope against, the full map is here.

Ask us to write it down. Send us your headcount, your expected annual transaction volume and the emirates you cover, and we will return a scope of work and a service level table in the structure set out above, with government charges and our own fees as separate lines. Compare it against anything else you have been sent. That is what it is for.

Read any scope of work with one boundary in mind. A retainer commits a provider to its own turnaround, never to the authority's. MOHRE, ICP, GDRFA and Dubai Economy each assess their own applications and each decides them. RINJAZ is a privately licensed service provider, not a government body, and no clause in a scope of work changes who signs off.