Software RFP in Dubai (2026): How to Write a Scope of Work That Stops Budget Blowouts

Short answer: a Dubai software RFP is won or lost in the scope of work, not in the price column. Write the deliverables, acceptance criteria, data model, integrations and IP assignment down before you invite bids, and every quote you receive becomes comparable, every change becomes billable on purpose instead of by surprise.

Most UAE buyers do this backwards. They send a two-page brief, collect four wildly different numbers, pick the cheapest, then spend six months paying for the clarity the brief never had. PMI’s Pulse of the Profession 2026 found that 31% of complex projects miss the scope of benefits they were commissioned to deliver — and complex is now the normal case, not the exception.

Three UAE numbers that explain why scope beats price

• MENA IT spending hits roughly USD 169 billion in 2026, up 8.9% year on year, with software the fastest-growing segment at about 13.9% to USD 20.4 billion (Gartner). You are buying into the most crowded supplier market the region has had — more bids, wider spreads, less comparability.
• 44% of UAE CEOs have delayed or cancelled an AI project because they feared it would fail, and 41% say they have never once challenged an AI vendor’s recommendation (Dataiku / Harris Poll survey of 900 CEOs, May 2026). Fear of failure plus unchallenged vendors is a scoping problem wearing a technology costume.
• 97% of project professionals ran at least one complex project last year and 81% say complexity is still rising, with 80% reporting real fallout — delay, rework or overspend (PMI, 2026). The Consortium for Information & Software Quality put the cost of poor software quality in the US alone at USD 2.41 trillion, and requirements that were never pinned down are the single largest contributor.

A scope of work is not paperwork you do for the lawyers. It is the cheapest software you will ever write.

What a Dubai software RFP must contain in 2026

An RFP has two jobs: make bids comparable, and make the winning bid enforceable. A brief that says “we need an app like Talabat” fails both. Anything a bidder has to guess at, they price as risk — and the cheapest bid is usually just the one that guessed lowest.

The nine blocks of a scope of work that holds

1. Business outcome, with a number. Not “improve efficiency” — “cut quote turnaround from 3 days to 4 hours for 40 sales users across Dubai and Sharjah.” Everything below is tested against this line.
2. In scope / explicitly out of scope. The out-of-scope list is the more valuable half. Name the modules, languages, reports and integrations you are not buying in phase one.
3. Functional requirements as user stories with acceptance criteria. Each story states who, what, and the condition under which it is accepted. This is what protects you at the invoice stage.
4. Non-functional requirements. Concurrent users, page-load and API latency targets, uptime, Arabic and RTL support, browser and device matrix, accessibility. Arabic support bolted on later is a rebuild, not a patch.
5. Data and integrations. Every system the build must talk to, who owns its credentials, whether a sandbox exists, and who pays if the third party’s API turns out to be undocumented. UAE builds routinely touch a payment gateway, a VAT-compliant accounting system, WhatsApp Business and an ERP — list them.
6. Hosting, data residency and compliance. State where the data sits. If you process personal data of people in the UAE, Federal Decree-Law No. 45 of 2021 (PDPL) applies and your vendor becomes a processor — so the RFP needs a data-processing annex, not a handshake. The PDPL’s executive regulations are still pending, so contract for the obligations in the law itself rather than for a published fine schedule.
7. Deliverables and milestones with payment tied to acceptance. Code, environments, documentation, admin training, source repository access. A milestone that is “80% complete” is not a milestone.
8. Handover and exit. Repository ownership, domain and DNS, cloud accounts in your name, a credentials inventory and a defined warranty window. Our note on domain and handover ownership in Dubai covers the traps here.
9. Commercial model and change control. One named route for changes, with a price and a decision-maker. Without it, every scope conversation restarts from zero.

Price the work, not the hour

Bids that look far apart often differ only in seniority mix. These are the going 2026 Dubai rate bands — use them to interrogate a quote, not to shop for the lowest number.

Role	Dubai rate (2026)	What you are actually buying
Junior developer	AED 100–150 / hr	Supervised execution of a spec someone else wrote
Mid-level developer	AED 150–300 / hr	Features built from a clear SOW — the bulk of a build
Senior / lead engineer	AED 300–550 / hr	Architecture and integration risk; the trade-off calls
UI/UX designer	AED 200–400 / hr	Flows and states that turn intent into acceptance criteria
DevOps / AI engineer	AED 350–600 / hr	Pipelines, environments, model and data plumbing

At project level, a mid-complexity business application in Dubai lands between AED 146,000 and AED 600,000, and enterprise platforms run to AED 1,800,000 and beyond. If two bids against the same SOW differ by more than about 40%, one of them has read a different scope — find out which. Our custom software cost guide for Dubai breaks the ranges down by module, and the choice between fixed price and time & materials should follow how firm your scope actually is — not which one sounds safer.

The IP clause most Dubai SOWs get wrong

Here is the myth-bust: in the UAE, paying for custom software does not automatically make you its owner. Software is protected as a literary work under Federal Decree-Law No. 38 of 2021 on Copyright and Neighbouring Rights. Article 28 gives the commissioner of a work a decent argument, but Article 9 is the one that bites — a transfer of economic rights must be in writing and must specify the right transferred, the purpose, the duration of utilisation and the place.

A single line reading “all intellectual property belongs to the Client” satisfies none of that specificity. It is the most common clause in Dubai software contracts and one of the weakest. Name the assignment explicitly: the deliverable, the rights transferred (reproduction, modification, distribution, derivative works), worldwide, in perpetuity, effective on final payment — plus a separate licence for any pre-existing vendor framework or third-party open-source component, with its licence terms listed. Infringement is not theoretical either: penalties under the law start around AED 10,000 and reach AED 100,000, rising to AED 100,000–700,000 with a minimum six-month sentence for counterfeit-related offences.

Liability and force majeure: clauses a UAE court can reopen

UAE contract law is not English contract law, and the differences surface exactly where software contracts get tested.

• Liability caps are not absolute. Article 390 of the Civil Code lets a court vary agreed compensation to match actual loss, so a cap set at one month’s fees may not survive a serious failure — in either direction.
• You cannot exclude liability for a harmful act. Article 296 voids any agreement that pre-exempts a party from liability for its own harmful act.
• Force majeure means impossible, not inconvenient. Article 273 turns on impossibility of performance. A chip shortage or a developer who resigned will not clear that bar.
• Language and forum decide outcomes. Proceedings in the onshore UAE courts run in Arabic, and the Arabic version of a bilingual contract will typically prevail. If you want English-language proceedings, say so in the RFP and name DIAC or ADCCAC arbitration.
• Signatures have tiers. Federal Decree-Law No. 46 of 2021 on electronic transactions recognises simple, advanced and qualified electronic signatures, with qualified signatures issued through TDRA-authorised providers carrying the strongest evidential weight. Real property transactions, civil-status records and notarised instruments are excluded.

Public-sector RFPs run on different rails

If you are bidding to a UAE government entity, the rules are statutory rather than negotiable. Federal procurement runs under Federal Decree-Law No. 11 of 2023, in force since 1 December 2023, with Cabinet Decision No. 122 of 2024 supplying the executive regulations; bids flow through the federal Digital Procurement Platform and suppliers must hold a current entry on the Federal Supplier Register, renewed annually. Direct purchase is typically reserved for low-value awards — usually under AED 50,000 — with everything above that tendered. In Dubai, Law No. 12 of 2020 has governed government contracts since 1 January 2021, providing for public and limited tender, competitive tender, negotiation and direct agreement. If that is your market, read our guide to tender and e-procurement portal development in Dubai.

What scoping costs in Dubai — and how Aquarius does it

The number that should decide your budget: PMI found that organisations highly effective at handling project complexity hit an 88% success rate, against 14% for those that handle it poorly. That six-fold gap is bought with discovery work, not with a bigger development team.

A proper scoping engagement in Dubai runs AED 15,000 to AED 45,000 for a mid-complexity build — roughly 3–8% of typical project value, and one to three weeks of calendar time. It produces the nine blocks above as a signed document: user stories with acceptance criteria, a data model, an integration inventory, non-functional targets, a milestone plan with payment gates, and the UAE clause set. You then take that document to market, and the bids that come back are genuinely comparable.

How we run it: fixed fee, fixed timebox, and the deliverable is yours outright whether or not you build with us — it is a document, not a lock-in. If you do proceed, the scoping fee is credited against the build. If you already have a vendor and a half-finished system, a technical due-diligence audit is usually the faster first step. Our pricing page lists the bands, and services covers the build side.

FAQ

How long should a Dubai software RFP be?

Ten to twenty-five pages for a mid-complexity build. Shorter than ten and bidders are guessing; much longer and you are usually specifying implementation detail that should be the vendor’s job. Length follows the acceptance criteria — one per user story, no filler.

Should the RFP include my budget?

Give a range, not a number. A stated band of, say, AED 250,000–400,000 filters out bidders who cannot work at your scale and stops the rest from reverse-engineering your figure. Withholding it entirely usually produces one bid at half your budget and one at triple.

Who owns the code if the contract is silent on IP?

You have an argument under Article 28 of Federal Decree-Law No. 38 of 2021, but it is an argument, not a title deed — Article 9 requires a written, specific assignment. Silence means a dispute. Put the assignment wording in the SOW and make it effective on final payment.

Is a scope of work the same as an SRS?

No. The SOW is commercial — deliverables, milestones, acceptance, payment, IP. A software requirements specification is technical and sits inside or beside it. Small projects can merge the two; anything with integrations should keep them separate so the commercial terms survive technical revisions.

Can we e-sign a software contract in the UAE?

Yes. Federal Decree-Law No. 46 of 2021 gives electronic signatures legal effect, and a qualified electronic signature from a TDRA-authorised provider carries the strongest evidential weight. The exclusions — real property, civil-status documents and anything requiring notarisation — rarely touch a software contract.

Scoping is the one phase where a day of work reliably saves a month of it. If you are about to send a software RFP out into the Dubai market, send us the brief first — we will tell you, free, which of the nine blocks is missing.