The RAK ICC Record Keeping Rules: What to Keep, Where, and for How Long

RAK ICC record keeping is the obligation owners rate least interesting and regulators rate most revealing — because records are where every other compliance claim is either evidenced or exposed. The registry has published its own guidance note on the duty, stitching together the federal AML law (Federal Decree-Law 20/2018 and Cabinet Decision 10/2019) with Regulations 101–107 of the RAK ICC Business Companies Regulations 2018. This guide decodes it — what must be kept, in what form, where, and for how long — and adds the overlay the note predates: the corporate tax regime’s longer retention clock and its cash penalties for thin books. It reflects how the accounting team at Fastlane builds record systems that satisfy the registry, the FTA and the bank from the same ledger.

What are the RAK ICC record keeping rules built on?

Three rulebooks apply simultaneously. The federal AML layer — Federal Decree-Law 20/2018 (Article 16) and Cabinet Decision 10/2019 — binds Registered Agents and other DNFBPs to keep detailed records, documents, data and statistics for all financial transaction types and for their AML/CFT risk-assessment measures, organised so as to permit data analysis and the tracking of financial transactions, and produced to the Competent Authorities immediately upon request. The registry layer — Regulations 101–107 of the Business Companies Regulations 2018 — puts a parallel duty on the company itself to keep and make available its records. And the tax layer, arriving after this guidance was written, adds the FTA’s requirements for records supporting corporate tax returns.

The guidance also defines the term owners tend to under-read. “Company records” means any register, index, record, accounting records, agreement, memorandum, Articles, minutes, annual validations or other document required by the Law to be kept by the agent. Read that list again: it spans governance (registers, minutes), constitution (memorandum, Articles), and — the part that surprises offshore owners — accounting records and agreements. An IBC with no licence still has statutory books.

The operating consequence of “immediately upon request” deserves its own sentence: record keeping is judged at the moment of production, not the moment of filing. A perfectly complete archive that takes three weeks to assemble is, functionally, a failed one — the standard is a system that can answer today, which is the thread running through everything below and through our wider RAK ICC compliance checklist.

Which documents must a RAK ICC company keep?

The registry’s list is expressly non-exhaustive — “includes the following, but is not limited to” — and covers:

Two reading notes. The governance rows are the ones that fail quietly: companies transact for years while resolutions live in email threads and registers drift out of date — a state that surfaces the day a bank, buyer or liquidator asks for the minute book. And because the list is non-exhaustive, the safe test is functional: if a document is needed to explain what the company did or owns, it belongs in the archive — the same completeness logic the Business Companies Regulations apply throughout.

What counts as “records and underlying documentation”?

The guidance is specific: accounts and records — invoices, contracts and similar documents — in relation to three things: (i) all sums of money received and expended by the company and the matters in respect of which the receipt and expenditure takes place; (ii) all sales and purchases of goods; and (iii) the assets and liabilities of the company. Money in and out with reasons, trade both ways, and the balance sheet — nothing about a company’s economic life sits outside those three heads.

Then comes the form standard, and it is the sentence that converts this duty from filing to accounting. Records must be such as (a) are sufficient to show and explain the company’s transactions, and (b) will, at any time, enable the financial position of the company to be determined with reasonable accuracy. “Show and explain” means each entry ties to its evidencing document; “at any time” means the books are kept current, not reconstructed annually. A folder of bank statements meets neither limb.

Call it what it is: this is a statutory bookkeeping requirement for every RAK ICC company, holding structures included. A dormant holding company’s books may be short — capital, a shareholding, a few expenses — but they must still exist in show-and-explain form, which is precisely the ledger that later feeds the corporate tax return and, at end of life, the liquidation audit. Running it as proper monthly bookkeeping costs less than reconstructing a single year under deadline.

Where must the records be kept?

Default rule: at the office of the company’s registered agent. The regulations then allow an alternative — such other place as the directors may determine — but only on a condition with teeth: the company must provide an undertaking that the registered agent shall, at any time it so requests, have access to and be provided with the company’s records and underlying documentation without delay. Keep the books in your head office, your group server or your accountant’s cloud if you wish — but the agent’s on-demand access must be guaranteed in writing, because the agent’s own duty to produce to the authorities is immediate.

A company that contravenes these obligations commits a contravention of the Regulations and is liable to a fine of up to level 3 on the Registrar’s penalty scale — for calibration, level 5, the scale’s maximum, is AED 20,000. The direct fine, though, is rarely the real cost: the company that cannot produce its records is the company whose renewal queries stall, whose bank review freezes, and whose agent — sitting under its own federal duties — starts treating it as a risk to be managed rather than a client to be served.

The pattern that works in 2026 is hybrid: a live cloud ledger and document archive, the registered agent named in a standing access undertaking, and a quarterly discipline of filing executed resolutions and contracts into it. Location flexibility is genuinely useful — provided the “without delay” promise would actually survive a Tuesday-morning test.

How long must records be kept — and what survives dissolution?

The registry’s floor: records are kept for at least five years from the date of their creation — a rolling, per-document clock, not one dated to the company’s birthday — and, critically, the retention period still applies once the company has been struck off or dissolved. The archive outlives the company, which is why a proper closure file is assembled before dissolution, not scattered at it. The federal AML layer applies the same five years to the agent’s side of the relationship, across six defined categories:

Now the overlay this guidance predates: UAE corporate tax runs a longer clock. Records supporting a tax return must be kept for seven years after the end of the relevant tax period — and failing to keep required records carries a penalty of AED 10,000, rising to AED 20,000 for repetition. Since every RAK ICC company is within corporate tax scope, the practical retention rule is the longest applicable clock: seven years per tax period for anything a return relies on, five-plus for everything else, both surviving closure.

How do the AML record duties reach agents and DNFBPs?

If you sit on the professional side — a Registered Agent, corporate service provider or any other DNFBP — the federal layer is your operating manual, not background law. Article 16 of the AML law and its implementing regulation require records kept in an organised fashion so as to permit data analysis and the tracking of financial transactions — a database standard, not a drawer standard — with production to the Competent Authorities immediately upon request. The six retention categories in the previous section define the file for every client relationship, from onboarding CDD to the monitoring trail.

Two categories deserve emphasis because they are the ones inspections find thin. Reliance on third parties: where another firm performed part of the due diligence, the record must show who did what and why reliance was justified — responsibility never transferred, so the evidence must sit in your file. And STR records: suspicious transaction reports are retained like everything else, but exist under the tipping-off prohibition — documented internally, never revealed to the client, with access controls to match.

The record-keeping programme is therefore inseparable from the wider AML framework — the risk assessments it evidences, the compliance officer who owns it, the training that keeps it applied. That full architecture, and the goAML reporting duty sitting on top, is what Fastlane builds for DNFBPs from AED 349; the record system described in this guide is its paper spine.

What does a compliant record system actually look like?

The registry’s guidance goes beyond the what and into the how, and its implementation list is a usable blueprint. Roles and responsibilities: named ownership of the risk assessment and of the record-keeping policies, with business-contingency and escalation procedures — someone answers for the archive, including when systems fail. The record lifecycle: logging, cataloguing and organisation on the way in; archiving, handling and transfer through life; and controlled destruction of expired records at the end — deletion is a governed event, not a spring-clean. Physical and cyber security: active and archived data protected from unauthorised access, which in 2026 means access controls, encryption and backups, not a locked cabinet alone. Audit and quality-assurance testing: the system is itself checked — sample retrievals, completeness tests, retention-clock reviews.

What does record keeping cost — right versus wrong?

The economics are unusually lopsided, because the compliant version is also the cheap one:

The reuse point is the one to internalise. The registry wants show-and-explain records; the FTA wants the same records for seven years to stand behind the corporate tax return; the bank wants the same records as source-of-funds track record; the liquidator wants them to sign the closure audit. One ledger, maintained, answers all four — which is why record keeping is the rare compliance duty that pays for itself in avoided duplication alone.

How does Fastlane run RAK ICC record keeping end to end?

We operate the archive as a living system:

1. Map the obligations — registry, federal and tax layers applied to the company’s actual profile, with the governing retention clock identified per record class.
2. Build the ledger — IFRS-compliant bookkeeping tying every entry to its invoice, contract or resolution, current at all times, not reconstructed at year-end.
3. Assemble the governance file — minute book, registers and notices brought up to date and kept parallel with every portal filing.
4. Custody and secure — cloud archive with access controls, the registered agent’s access undertaking in place, lifecycle and destruction rules documented.
5. Test and align — quarterly retrieval tests, retention-clock reviews, and the books feeding corporate tax registration and filings without a second data entry.

The outcome is the only record-keeping status worth having: producible today, defensible for seven years, and boring to every authority that asks — delivered as part of Fastlane’s accounting and bookkeeping service. The glossary below fixes the terms this guide uses.