Which UAE cloud regions and providers support TDRA-compliant data hosting?

TDRA Data Residency at a Glance

The Telecommunications and Digital Government Regulatory Authority (TDRA) sets the UAE's baseline framework for data localisation, cybersecurity, and cloud adoption — most formally through the UAE National Cloud Computing Policy and Cabinet Decision No. 21 of 2021 on personal data protection. For government data, the rules are stricter: certain categories must stay within UAE sovereign infrastructure. For private-sector workloads, the requirement is typically that personal and sensitive data be hosted in a region where the provider has UAE-based physical infrastructure and data-processing agreements aligned with UAE PDPL.

Certified UAE Cloud Regions by Provider

Government vs. Private Sector Rules

• Government entities must use TDRA-accredited or UAE-sovereign cloud providers (G42/Khazna being the primary option). AWS, Azure, and Google have government-track agreements but confirm accreditation status before contracting.
• Private sector companies must comply with UAE PDPL: data processing agreements, data subject rights mechanisms, and no unrestricted cross-border transfer without consent or an adequacy decision.
• Financial services operating in DIFC or ADGM face additional rules from DFSA and FSRA respectively, which can be stricter than baseline TDRA requirements.
• Healthcare data is subject to DOH (Abu Dhabi) and DHA (Dubai) regulations on top of PDPL.

Practical Tradeoffs

Azure UAE North is the most mature region by service breadth and is the default choice for Microsoft-stack enterprises. AWS me-central-1 is newer but expanding quickly and is well-suited for teams already in the AWS ecosystem. Google Cloud me-central1 has a narrower service catalogue in-region than its global footprint — verify that the specific managed services you need (e.g., certain AI/ML offerings) are available there. OCI UAE East is the strongest fit if your stack is Oracle-heavy. For maximum sovereignty with no foreign-jurisdiction exposure, G42 Cloud / Khazna is the only fully UAE-sovereign option.

Where Architecture Decisions Get Complex

TDRA compliance isn't just about picking a region — it also involves data classification policies, encryption key residency (bring-your-own-key vs. provider-managed), audit logging, and contractual DPAs. Teams building regulated products in the UAE often need an architect who has worked through these requirements before. CodeNicely has built PDPL-aligned products in the UAE market and can advise on region selection as part of a broader architecture engagement — though any major provider with a UAE region, paired with a qualified local consultant, can get you there.