Emiratisation Targets 2026: Who Is Covered and By When
Emiratisation targets for UAE private companies in 2026: who is covered, the 2% yearly rise, the deadlines, the contributions, and how to track your position.
For banks and financial services
Run the bank's back office with controls an auditor can follow
Access reviews from one screen, permissions as narrow as the job, maker-checker on finance and payroll, an audit trail that shows tampering, and regulator letters under secrecy levels.
No credit card · Ready in about a minute · Your data stays private
What you get
The parts of Tarleaks a bank or financial firm uses most for its own operations. Each links to the full feature list.
Access reviews from one screen
The Users list shows last sign-in, authenticator, live sessions and lock state for everyone, and the Roles page flags roles with very wide access and roles nobody holds.
Permissions as narrow as the job
Every action is its own permission, so a role can be as narrow as the job. Each grant or revoke is recorded with who made it and kept permanently.
An audit trail that shows tampering
The database records the old and new value of every tracked change. With the audit chain switched on, a deleted or inserted entry breaks the chain and shows up.
Regulator letters under secrecy levels
Register letters, decisions and circulars with a secrecy level. A person without clearance gets nothing back, not even a count, and every view and download is logged.
ISO standards, clause by clause
Work through a standard you license, such as ISO 27001 information security or ISO 22301 business continuity, clause by clause, and see open gaps in priority order.
Maker-checker in finance and payroll
Switch on maker-checker so the person who drafts a journal entry, a payment batch or a payroll run cannot approve or post it.
Apps you will use
The apps a financial firm usually starts with for its back office. Each joins the same people, roles and audit trail.
Security, Access & Compliance
Sign-in, sessions, roles, network limits, audit trail and backups.
Correspondence Register
Regulator letters, decisions, circulars and complaints under secrecy levels.
ISO Compliance Suite (Imtithal)
ISO standards such as 27001 and 22301, clause by clause, with a gap analysis.
HR Management
Staff records, certifications, nationalisation ratios and privacy requests.
Document Management
Controlled files, legal hold, access logs and retention.
Helpdesk & Ticketing
Internal service desks with response targets, including a confidential HR desk.
Also used by compliance and HR
Smaller pieces that answer an auditor's next question.
- Each ISO standard is licensed on its own, among them ISO 27001, 27701 privacy, 22301 continuity and 31000 risk. ISO compliance
- Sign-in and every request limited to your office networks, after a rehearsal that blocks nobody. Security
- Customer complaints logged with a severity and escalated up the chain, as far as the ceiling you set. Correspondence
- A file on legal hold cannot be archived, destroyed, shared by link or edited until the hold is lifted. Documents
- The Emirati share of staff and the Saudi Nitaqat band, worked out live from HR records. HR
- A confidential HR desk whose tickets only its team and the requester can see. Helpdesk
Guides
Plain-language guides from our blog, with their official sources, and step-by-step guides for each role.
Nitaqat Bands in 2026: How Your Colour Is Calculated
How Saudi Nitaqat bands work in 2026: the five colours, what sets your required Saudization rate, the Qiwa contract rule from 15 April 2026, and next steps.
Step-by-step role guides
Questions
Is Tarleaks a core banking system?
No. Tarleaks runs the bank's own operations: people, access, records, correspondence and compliance work. Customer accounts, cards and payments processing stay in your core banking and payment systems.
Can auditors read without changing anything?
Yes. The correspondence auditor role reads every record at every level, including the access log and disposal certificates, and holds no permission to write. Finance has a read-only auditor role too.
Can we limit access to our office networks?
Yes, when you switch it on. An administrator lists the address ranges people may work from, and everyone else is refused at sign-in and on every request. A rehearsal mode first records who would have been blocked.
Do the nationalisation figures use banking-sector targets?
Not yet. Emiratisation is shown against a fixed 2 percent reference target, and the Nitaqat band uses the general bands for mid-sized companies, not sector-specific thresholds.
Not covered yet
- Tarleaks is not a core banking system: customer accounts, cards and payments processing are not part of the product.
- Anti-money-laundering screening and know-your-customer checks are not covered.
- In the ISO apps, evidence, audits and risks can be viewed but not yet created on screen.
See your own back office in Tarleaks
Tell us how you review access, handle regulator letters and track compliance today, and we will show you the same work in Tarleaks.
No credit card · Ready in about a minute · Your data stays private
Free for 30 daysNo credit cardStart free trial