Skip to content

Insights AR-AP

Credit Control Policy for UAE SMEs 2026: A Template Your Finance Team Can Adopt This Week

A UAE SME credit control policy template — credit-limit framework, credit-scoring methodology, payment terms by buyer tier, CFO sign-off matrix and dunning cadence the finance team can adopt this week.

UAE SME CFO reviewing a credit control policy document with credit-limit matrix and payment terms framework for mainland and free zone buyers
UAE SME CFO reviewing a credit control policy document with credit-limit matrix and payment terms framework for mainland and free zone buyers Photo: Velmont Crest Editorial

Key takeaways

  1. Credit control policy is the missing rulebook in most UAE SMEs — without it the dunning cadence and stop-supply trigger have no authority
  2. Credit-limit framework scales assessment effort to exposure: trade reference at AED 0-50k, bank reference + statements at AED 50-250k, full credit assessment above AED 250k
  3. Payment terms by buyer tier — net 30 SME private sector, net 60 mid-market, net 90 GREs and developers, COD or advance for new buyers without trade reference
  4. CFO sign-off matrix sets thresholds: finance manager up to AED 50k, CFO up to AED 250k, owner above AED 250k for limits, discounts and write-offs
  5. Stop-supply trigger at day 60 must be enforced in the ERP, not left to commercial team judgement
  6. Annual policy review keeps the credit-scoring matrix calibrated to actual collection history and reflects FTA, IFRS 9 and Commercial Transactions Law updates

A credit control policy is the rulebook that turns ad-hoc receivables work into a process. Most UAE SMEs run without one. They pay for the gap every time a difficult buyer pushes back on a stop-supply, the commercial director argues for a limit exception, or the owner gets dragged into a payment-plan call that the finance manager should have handled.

This template is written for owners, managing directors, CFOs and finance managers of UAE SMEs in the AED 5-80 million revenue band. It covers what a credit control policy is, the six areas it has to cover, the credit-limit framework that scales assessment to exposure, the payment-terms grid by buyer type, the CFO sign-off matrix, and the operational details that decide whether the policy lives in the business or on a shelf: credit scoring, stop-supply triggers, exception process, annual review.

Why a written policy matters

Most UAE SME finance managers cannot enforce the stop-supply trigger today. The reason isn’t a missing data point or absent paper authority. It’s that there’s no written policy to point to when the commercial director protests. Every difficult conversation defaults to ad-hoc judgement, the relationship argument wins, and the cadence collapses.

A two-page policy, signed by the owner and visible to the commercial team, changes that conversation from personal judgement to documented rule. The finance manager doesn’t defend the trigger anymore. The policy does.

Day 1

when a written credit control policy starts paying back — the first difficult conversation it removes

The policy is also a key audit item. UAE auditors increasingly test that credit controls are documented and operating effectively, particularly for SMEs in continuous net-receivable positions where IFRS 9 ECL provisioning materially affects the financial statements.

Six areas the policy has to cover

A complete UAE SME credit control policy covers:

  1. Credit-limit framework — how new buyers are credit-assessed by exposure tier
  2. Payment terms by buyer type — standard terms by buyer category, exception process
  3. Deposit and milestone billing — for project-based work, advance percentages and retention rules
  4. Hold-supply trigger — at what days-past-due commercial supply stops
  5. CFO sign-off matrix — authority levels for limits, discounts and write-offs
  6. Dunning cadence template — five-stage escalation aligned to UAE buyer norms

The policy itself is typically 4-8 pages — short enough that the commercial team will actually read it, which matters more than completeness. The credit-scoring matrix, dunning template library and exception log live as appendices.

Area 1: setting credit limits

Credit-limit framework scales assessment effort to exposure. The principle: low exposure deserves light assessment; high exposure requires full diligence.

Tier 1 — AED 0 to 50,000 credit limit

Assessment requirements:

  • Commercial registration and licence verification (trade licence, free-zone licence, GRE registration as applicable)
  • One trade reference confirmed (existing supplier email confirmation of payment behaviour)
  • Owner/manager name and contact details

Standard initial limit: AED 25,000 unless higher specifically requested Approval: Sales manager + finance manager Time to approve: 2 working days

Tier 2 — AED 50,000 to 250,000 credit limit

Assessment requirements:

  • Tier 1 requirements plus:
  • Bank reference (last 6 months of statements or bank confirmation letter)
  • Two trade references from existing suppliers
  • Latest unaudited management accounts (for businesses below AED 50m revenue)
  • Management sign-off (CFO or finance director)

Standard initial limit: 25-50% of the buyer’s average monthly purchase volume across the supplier base Approval: CFO with finance manager recommendation Time to approve: 5 working days

Tier 3 — AED 250,000+ credit limit

Assessment requirements:

  • Tier 2 requirements plus:
  • Last two years of audited financial statements
  • Three trade references
  • Al Etihad Credit Bureau report on the owner/PIC where applicable
  • Bank reference letter
  • Owner sign-off (for limits above AED 500,000)

Standard initial limit: Determined case-by-case based on financial-statement analysis (typically current ratio, days-receivable, gearing, profitability trend) Approval: Owner with CFO recommendation Time to approve: 10 working days

Limit increase process

Existing buyers can request limit increases after a clean payment history of 6-12 months. The increase request follows the same tier structure based on the proposed new limit (not the increment).

Area 2: payment terms by buyer type

Payment terms should match buyer risk and UAE market norms.

Buyer typeStandard termsNotes
New buyer (any tier)COD or 50% advanceFirst three orders
SME private sector (after trade history)Net 30Mainland LLC, free-zone company
Mid-market corporatesNet 45-60Annual revenue AED 50m-500m
Large corporatesNet 60Annual revenue above AED 500m
GREs and developersNet 90 against POADNOC, Etisalat, DEWA, Emaar, Damac, Aldar
Free-zone-to-free-zone B2BNet 30-45DMCC, JAFZA, DAFZA
Government direct procurementPer contractOften net 90+ with retention
Export to GCCLC or advanceNet 30 only with established history
Export outside GCCLC or advancePer buyer market

Exception requests follow the CFO sign-off matrix (Area 5). For project-based work, the standard terms above apply to recurring spend; milestone billing rules apply to project deliverables.

Area 3: deposits and milestone billing

For project-based businesses (consulting, IT services, construction, engineering, fit-out), the policy specifies the deposit and milestone billing structure:

Deposit on engagement letter / PO acceptance:

  • Consulting and professional services: 25-50% of total fee
  • IT services / software development: 30-50%
  • Construction and fit-out: 10-30% mobilisation advance
  • Equipment supply with installation: 30-50% on PO, balance against delivery + commissioning

Milestone billing structure:

  • Defined deliverables with sign-off triggers
  • Milestone invoices issued within 2 working days of buyer sign-off
  • Final 10-15% retention released against handover and warranty period as per contract

Retention release:

  • Construction and fit-out: 5-10% retention typically released 6-12 months after handover, subject to defects rectification
  • Equipment supply: warranty retention as per contract terms

The policy specifies that milestone invoices follow the standard dunning cadence (Area 6) from due date, with retention release triggered by the contractual conditions rather than the standard cadence.

Area 4: when to stop supply

The hold-supply trigger is the most powerful lever in the collection cadence. The policy specifies:

Trigger threshold: All invoices above AED 25,000 at 60 days past due (lower threshold for higher-risk buyers as determined by credit scoring).

Implementation: ERP hold on the customer account. The hold prevents new sales orders, delivery notes and invoices being raised against the buyer until released.

Notification: Formal email to buyer’s finance contact and commercial contact on the day the hold is applied, copying the buyer’s owner/CEO for invoices above AED 100,000.

Release conditions:

  • Full settlement of all overdue balances, OR
  • Written payment plan signed by buyer’s CFO/owner and Velmont Crest CFO (using the template in the dunning cadence library)

Override:

  • Commercial team cannot override informally
  • Override requires CFO written approval
  • All overrides logged in the credit policy review file for annual policy review

The day-60 trigger is the policy’s teeth. If commercial overrides become routine, buyers learn the cadence is theatre and the entire credit policy loses authority.

For the full dunning cadence including the stop-supply trigger language, see our dunning letter template library.

Area 5: who signs off on what

The CFO sign-off matrix sets authority levels for credit decisions, settlement discounts and write-offs. Authority must be written so it cannot be challenged in difficult conversations.

Standard UAE SME matrix (calibrated to AED 30m revenue business):

DecisionFinance managerCFOOwner
New buyer credit limit Tier 1 (≤AED 50k)ApproveNotifyNotify
New buyer credit limit Tier 2 (AED 50k-250k)RecommendApproveNotify
New buyer credit limit Tier 3 (>AED 250k)RecommendRecommendApprove
Existing buyer limit increase up to 25%ApproveNotifyNotify
Existing buyer limit increase 25-100%RecommendApproveNotify
Existing buyer limit increase above 100%RecommendRecommendApprove
Payment terms exception within standardApproveNotifyNotify
Payment terms exception beyond standardRecommendApproveNotify
Settlement discount up to 5%ApproveNotifyNotify
Settlement discount 5-15%RecommendApproveNotify
Settlement discount above 15%RecommendRecommendApprove
Write-off up to AED 25kRecommendApproveNotify
Write-off AED 25k-100kRecommendRecommendApprove
Write-off above AED 100kRecommendRecommendApprove
Stop-supply trigger overrideRecommendApproveNotify
Bad-debt write-off + VAT bad-debt relief claimRecommendApproveNotify

The thresholds scale with business size. For SMEs above AED 100m revenue, the AED amounts typically double. For SMEs below AED 15m revenue, halve the thresholds.

Area 6: the dunning cadence

The policy specifies the standard dunning cadence. The full template library, with letters in English and Arabic, lives in the dunning letter template guide and is referenced from the policy as an appendix.

Summary cadence:

Day past dueStageFormat
7Cordial reminderEmail (automated)
14Courtesy callPhone
21Firm reminderEmail (automated)
30Statement + finance manager escalationEmail
45Commercial escalationEmail to senior contacts
60Stop-supply triggerEmail + ERP hold
75Final demand letterFormal letterhead
90Legal referralReferred to UAE-licensed law firm

For the supporting DSO improvement plan, see our days sales outstanding improvement guide. For the underlying AR ageing diagnostic, see the accounts receivable ageing playbook.

Scoring a buyer before you ship

Credit scoring produces a rating that drives credit limit, payment terms and assessment frequency. A typical UAE SME methodology:

Internal indicators (weight 60%):

  • Average days-to-pay over last 12 months (weight 30%)
  • Dispute frequency — disputes raised per 100 invoices (weight 10%)
  • Returned cheque history — count over last 24 months (weight 10%)
  • Credit limit utilisation pattern — average vs peak (weight 10%)

External indicators (weight 40%):

  • Commercial registration validity, licence type, years in operation (weight 10%)
  • Audited financial statement health — current ratio, gearing, profitability trend (weight 15%, only for Tier 2+ buyers)
  • Bank reference quality (weight 5%)
  • Al Etihad Credit Bureau report (weight 5%, where applicable)
  • Trade references (weight 5%)

Output rating:

RatingScore bandAction
A85-100Full standard terms, annual review
B70-84Standard terms with semi-annual review
C55-69Tighter terms (e.g. net 15 instead of net 30), quarterly review
D40-54COD or 50% advance, monthly review
E<40Do not trade or full advance only

The scoring matrix is calibrated annually against actual 12-month collection performance — if A-rated buyers are missing payment dates, the matrix is mis-weighted and needs adjustment.

Wiring this into IFRS 9 ECL

IFRS 9 requires that the SME provision for expected credit losses (ECL) on all trade receivables at each reporting date. The credit policy’s credit-scoring output feeds the ECL provision matrix directly:

Credit ratingStage 1 ECL on current ARStage 2 ECL on 30+ past due
A0.25%2%
B0.5%4%
C1.5%8%
D4%15%

Plus standard ageing-bucket overlays for all ratings:

  • 61-90 days: 8%
  • 91-180 days: 25%
  • 180+ days: 60%

UAE auditors increasingly test that the credit scoring and ECL matrix are integrated and calibrated to realised losses. The annual policy review is the standard moment for this calibration.

The paperwork FTA needs for bad-debt relief

Article 64 of the UAE VAT Executive Regulations allows VAT-registered suppliers to recover output VAT on bad debts subject to:

  1. Supply has occurred and VAT charged
  2. Consideration written off in the supplier’s books
  3. More than 6 months have passed since supply
  4. Customer notified in writing of the amount written off

The credit policy specifies that:

  • Write-offs above AED 25,000 require CFO approval (per Area 5 matrix)
  • Write-offs above AED 100,000 require owner approval
  • The bad-debt-relief working paper is prepared quarterly from the 180+ ageing bucket
  • The customer-notification letter (which can be the day-90 legal referral letter, the final demand or a separate write-off notification) is filed with the write-off journal entry

Lining up with the 28-day VAT cycle

FTA rules require VAT-registered businesses to pay net VAT within 28 days of period-end. Output VAT on issued invoices is paid regardless of whether the invoice has been collected.

The credit policy’s payment terms framework should be calibrated to this constraint. SMEs in continuous net-payable VAT positions (most trading SMEs) need tight payment terms to avoid funding the FTA out of overdraft. SMEs in net-refund positions (most exporters) can offer more generous payment terms because the VAT timing flow funds the working capital gap.

For the full VAT mechanics, see our VAT registration guide.

When a cheque bounces

Cheque dishonour in the UAE was largely decriminalised in January 2022 under the amended Commercial Transactions Law. Returned cheques are now generally a civil matter unless aggravating circumstances apply.

The credit policy specifies returned-cheque handling:

  • Day 0 (cheque returned): same-day email + phone call requesting immediate replacement
  • Day 3: formal letter on letterhead, returned cheque attached
  • Day 7: referral to legal counsel for civil claim
  • Account automatically moved to COD or advance for next 12 months minimum
  • Credit rating downgraded by one grade (e.g. B to C); two returned cheques in 24 months trigger E rating and trade suspension

The yearly review meeting

The credit control policy is reviewed annually, ideally aligned to the audit cycle:

Review scope:

  • Credit-scoring matrix calibration against actual 12-month collection performance
  • Payment-terms benchmark against UAE sector norms (especially when CCC has moved)
  • Sign-off threshold review against business growth
  • Regulatory updates (FTA bad-debt relief, Commercial Transactions Law, IFRS 9 methodology)
  • Dunning cadence performance review
  • Stop-supply trigger overrides log review

Output:

  • Updated policy document with version number and effective date
  • Owner sign-off on material changes
  • Communication to finance and commercial teams
  • Updated dunning templates and ERP configuration as required

Material changes mid-year (e.g. acquisition, new buyer segment, regulatory change) require a policy amendment with owner sign-off.

Where UAE SMEs trip themselves up

The most common failure is writing the policy and then not enforcing it. The document goes on a shelf, the cadence drifts, and the team goes back to deciding each case on the day. Nearly as common is setting the thresholds too low for the size of the business. An AED 50k write-off needing owner approval makes sense at AED 10m revenue; at AED 60m it’s just a bottleneck on the owner’s calendar, and a bottleneck is where overdue accounts go to sit unactioned.

Then there’s the failure to connect the two halves of the policy — approving Tier 3 limits on a D-rated buyer because the commercial team pushed hard for the sale, which defeats the point of scoring the buyer at all. Letting commercial overrides become routine does the same damage from the other direction: once overrides are normal, the stop-supply trigger and the sign-off matrix stop meaning anything.

Two more are worth naming. A policy that ignores ECL provisioning and bad-debt-relief documentation isn’t aligned to IFRS 9 and FTA requirements, and that gap shows up later as audit findings and delayed tax recovery. And treating the whole thing as a finance document is a mistake, because credit control is really a commercial discipline — the sales team, the commercial director and the owner all need to be in the briefing and the annual review, not just cc’d on it.

When to bring in outside help

Most UAE SMEs benefit from advisory support on credit policy when one or more of the following is true:

  • No written credit policy exists today
  • The current policy is outdated (more than 2 years since review)
  • Stop-supply triggers are routinely overridden
  • The 90+ AR bucket exceeds 15% of total AR
  • Audit has flagged inadequate credit controls or IFRS 9 ECL methodology
  • The business is preparing for investment, bank facility renewal or sale where receivables quality will be diligenced

Typical AR/AP advisory engagements include the policy drafting, credit-scoring matrix construction, sign-off matrix calibration, briefing of finance and commercial teams, integration with the dunning cadence and weekly AR review meeting, and annual policy review on the audit cycle.

For owners wanting a CFO-level review across credit policy, AR/AP and the wider working-capital cycle, see our CFO advisory page and the working capital playbook.

How Velmont Crest helps

Velmont Crest drafts and rolls out credit control policies for UAE SMEs as part of our accounts receivable and payable management and CFO advisory work. Typical engagements include:

  • Policy diagnostic of the current state (often: no written policy exists)
  • Draft policy aligned to UAE FTA, IFRS 9 and Commercial Transactions Law requirements
  • Credit-scoring matrix construction calibrated to the SME’s actual buyer base
  • CFO sign-off matrix sized to the SME’s revenue and risk tolerance
  • Dunning template library (English + Arabic) — see the dunning letter guide
  • Briefing of finance and commercial teams
  • Configuration of the cadence in Zoho Books, QuickBooks Online or Xero
  • First-quarter facilitation of the weekly AR review meeting
  • Annual policy review on the audit cycle
  • Integration with the wider accounting and bookkeeping cycle

This is advisory and accounting support — Velmont Crest is a DED-licensed accounting and advisory firm, not a licensed debt-collection agency or financial-services entity. Legal recovery and litigation are referred to UAE-licensed law firms.

To discuss your current credit control set-up and where the gaps are, book a free consultation or WhatsApp the team directly.

Frequently asked questions

What is a credit control policy, and why does a UAE SME need one?
It's the written rulebook for how you extend credit, set payment terms, chase overdue invoices and pull the plug on supply when a buyer won't pay. Without one, every awkward conversation falls back on someone's judgement in the moment — the commercial team protects the relationship at the expense of cash, finance has no authority to escalate, and the owner gets dragged into every payment fight. A two-page policy the owner has signed turns all of that from a personal argument into a documented rule the sales team can see.
What should be in a UAE SME credit control policy?
Six areas, really. The credit-limit framework — how new buyers get assessed by exposure tier, the standard limit per category, and how a limit increase gets requested. Payment terms by buyer type — net 30 for SME private sector, net 60 for mid-market, net 90 for GREs and developers. Deposit and milestone rules for project work. The hold-supply trigger — the days-past-due point where supply stops. The CFO sign-off matrix — who signs off limit exceptions, settlement discounts and write-offs. And the dunning cadence — cordial at day 7, firm at day 21, commercial escalation at day 45, final demand at day 75, legal review at day 90.
How should credit limits be set for UAE buyers?
Scale the effort to the exposure. Up to AED 50,000, a single confirmed trade reference and a commercial-registration check is enough. From AED 50,000 to 250,000, add a bank reference and management sign-off on top of that. Above AED 250,000, you want the last two years of financial statements, multiple trade references, a bank reference, an Al Etihad Credit Bureau pull where it applies to that buyer type, and CFO sign-off. The opening limit usually lands around 25-50% of the buyer's average monthly purchase volume across its supplier base, and increases get earned the boring way — a clean 6-12 month payment record.
What payment terms should a UAE SME offer different buyer types?
Match the terms to the risk and to what the market actually expects. A brand-new buyer of any size gets cash-on-delivery or 50% advance for the first three orders — no exceptions early on. SME private sector, net 30. Mid-market, net 45 to 60. Large corporates, net 60. The government-related giants (ADNOC, Etisalat, DEWA, Dubai Holding) and the big mainland developers (Emaar, Damac, Aldar) will want net 90 against PO with retention per contract, and you generally take it. Free-zone-to-free-zone B2B sits around net 30 to 45; GCC exports lean on a letter of credit or advance for first orders. Spell out the standard term and the exception route, and stick to it.
What is a CFO sign-off matrix, and what thresholds work for UAE SMEs?
It's the grid that says who can approve what — credit decisions, settlement discounts, write-offs. A typical UAE SME setup runs roughly like this. A limit increase up to 25%, the finance manager approves and the CFO is just notified; 25-100%, the finance manager recommends and the CFO approves. Settlement discounts up to 5% sit with the finance manager, 5-15% with the CFO. Write-offs up to AED 25k go to the CFO; AED 25k-100k, the CFO recommends and the owner approves; above AED 100k, the owner signs, with audit-committee notification where one exists. Writing it down is the whole point — nobody gets to argue the authority mid-call.
How does credit scoring work for UAE SME buyers?
It blends what you already know about a buyer with what you can find out from outside. Internally, you're looking at average days-to-pay over the last 12 months, how often they dispute invoices, any returned cheques, and how hard they push their limit. Externally — commercial registration and licence type, years trading, audited financials (above the AED 250k limit), the quality of the bank reference, an Al Etihad Credit Bureau report where it's relevant, and trade references from existing suppliers. That feeds an A/B/C/D rating, which in turn drives the limit, the payment terms and how often you re-check them. Anything below a D either pays COD or advance, or you don't trade with them at all.
When does the credit policy require Al Etihad Credit Bureau input?
AECB mostly covers individual credit, plus some commercial data, so it earns its keep when you're extending real money to a sole-proprietor or owner-run business and the owner's personal profile genuinely tells you something about the risk. For corporate buyers — LLCs, free-zone companies past a threshold — the policy usually calls for an AECB pull on the owner or PIC once the limit clears AED 500,000, alongside the corporate financials. The per-report fee is a rounding error against the exposure.
How should the credit policy handle the day-60 stop-supply trigger?
The day-60 stop is the strongest lever you've got in the whole cadence, so the policy has to nail down four things: the threshold (usually any invoice above AED 25,000 at 60 days past due), how it's enforced (an ERP hold, not somebody's judgement on the day), the notification (a formal email to the buyer's finance and commercial contacts), and what releases it (full settlement, or a written payment plan with CFO sign-off). And it has to say in plain words that the commercial team can't quietly wave the hold through — any override needs the CFO's written approval and gets logged for the annual review. The moment overrides become casual, the trigger stops meaning anything.
How often should a UAE SME review its credit control policy?
Once a year as a full review, and ideally on the audit cycle so the policy is current the moment the audit team starts testing your credit controls. Walk through the credit-scoring matrix against your actual 12-month collection record, benchmark the payment terms against your sector, and re-check the sign-off thresholds against how much the business has grown — AED 50k thresholds set when you were a AED 10m business are nonsense once you're at AED 50m. Fold in any regulatory shifts (FTA bad-debt relief, the Commercial Transactions Law, IFRS 9 ECL methodology) and a look at how the dunning cadence is actually performing. Anything material that changes mid-year gets its own amendment with owner sign-off.
Does Velmont Crest draft credit control policies for UAE SMEs?
Yes — drafting and rolling out credit control policies is part of our [accounts receivable and payable management](/services/accounts-receivable-payable-management/) and [CFO advisory](/services/cfo-advisory/) work. A typical engagement starts with a diagnostic of where you are today (often: no written policy at all), then a draft built to UAE FTA, IFRS 9 and Commercial Transactions Law requirements. From there we construct a credit-scoring matrix calibrated to your real buyer base, size a CFO sign-off matrix to your revenue and risk appetite, brief both the finance and commercial teams, wire it into the dunning cadence and the weekly AR review, and set the annual review on your audit cycle.

Filed under: credit control policy, credit policy template UAE, credit limit framework, AR-AP management, CFO sign-off matrix, payment terms UAE, credit scoring SME

Published · Updated