Automation testing and VAPT-style scans with evidence for teams in Dubai and Abu Dhabi, WCAG audits for the federal digital accessibility policy, API and load testing. Transfer terms under the UAE PDPL; a platform, not a testing-services company.
Checked on 2026-10-12: 2 of 2 read at the statute, regulator or government page; the rest from law-firm or practitioner summaries, marked as such. A law changes; this table carries the date so you can tell when it needs re-checking.
| Law or standard | What it requires of you | Status as checked | Source read |
|---|---|---|---|
| Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) | Controller and processor obligations and rules on cross-border transfer, with the detail delegated to executive regulations. | In force since 2 January 2022. The executive regulations had not been published as of January 2025 according to a law-firm tracker; their later status was not verified during this check. | u.aeprimary source |
| National Digital Accessibility Policy (federal government) | Federal government digital services follow the policy, which references WCAG. | Published by the Ministry of Finance; the detailed TDRA standard was not read during this check. No private-sector web accessibility statute was found. | mof.gov.aeprimary source |
Customer data is hosted in Mumbai, India. The PDPL’s cross-border rules depend on executive regulations that were pending when we checked, so the transfer terms are agreed with you at contract stage on the Data Processing Addendum. If your entity sits in the DIFC or ADGM, that free zone’s own data protection regime applies instead; check which one governs you.
The full table of instruments by regime is section 5 of the Data Processing Addendum; the current state of every certification we do and do not hold is on the trust centre.
WCAG at the level your policy names; the federal digital accessibility policy references WCAG. The audit runs against WCAG 2.2 A, AA and AAA and reports at the level you select.
Audits map findings to sixty-six country standards and export a conformance report; how the accessibility module works.
The same job has a different name in every market, and sometimes the honest answer is that the name describes a service we are not.
Dokimore is a platform, not a testing-services company. Its scanner is the vulnerability assessment and its authorised exploitation step is the penetration test, run by your team or your provider against systems whose ownership is proven.
Security testingThe platform your QA team runs: a real-browser recorder, API studio, load testing and accessibility audits on one recorded asset.
Every moduleRecord once in a real browser, heal with a person in the loop, export to Playwright or Selenium.
Test recorderProcessor terms in the addendum and transfer terms agreed at contract stage; synthetic test data so staging holds no personal data.
Data Processing AddendumAudits against WCAG 2.2 with a conformance report at the level you select.
Accessibility auditsPrices are quoted in US dollars on every plan, before any tax your jurisdiction applies to imported software services. Self-serve plans are paid by card; Enterprise agreements are invoiced. If procurement needs a quotation with your tax identifiers, ask through the contact form (topic: billing).
The UAE is 1.5 hours behind Indian Standard Time, so the working days overlap almost entirely. Response targets by plan are on the service levels page.
Plans and caps are on the pricing page; response targets by plan are on the service levels page.
No. Dokimore is software: your team, or a provider you appoint, runs its scans and authorised exploitation steps against systems whose ownership has been proven. Every confirmed finding carries the request, the response and a proof of concept, which is the material a report is written from.
Cloud tenants are hosted in Mumbai, India. Enterprise customers who need the platform inside the UAE run it on their own infrastructure, on-premise or air-gapped, with feature parity.
The PDPL delegates its cross-border detail to executive regulations that were still pending when we checked, so we agree the transfer terms with you at contract stage on the Data Processing Addendum rather than asserting a mechanism that does not yet exist. DIFC and ADGM entities follow their free zone’s regime.
Start on the Free plan, or bring one flow from your own product and we record it live.
We use one optional analytics tool, run on our own servers, to see which pages help people. It stays off unless you turn it on. Storage needed to sign you in, keep the site secure and remember this choice is always on. Cookie Policy