For your compliance team.
The rules for prior approvals and patient data, and how Bruxford meets them. Each links to its source.
Dubai gives you one hour from the order.
Since 16 November 2025, the request is due within an hour of the order.
- Rule
- Health Insurance Claims Management Policy Directive, Dubai Health Insurance Corporation (DHIC, part of the DHA).
- In force
- 16 November 2025, for Dubai insurers, TPAs and providers. The Dubai Government Insurance Program is exempt.
- Providers
- Send the request electronically within one hour of the physician's order.
- Insurers
- Answer within 6 hours (elective outpatient), 24 hours (elective inpatient), immediately for emergencies.
- Late claims
- A delay fee of 0.03% of the net claimed amount per day.
How Bruxford handles it
- The clock starts at the order. The request is drafted in about 20 seconds (median 18.6 s on our demo, 21 October 2026).
- Your coordinator reviews and approves. Bruxford then submits it through the insurer's official channel.
- Each request records when in the hour it was sent, so you can show you met the rule.
Sources: Al Tamimi & Co.; Mondaq. Summaries are ours; check the directive with your insurer or counsel.

UAE rules on patient data.
Patient data stays in the UAE.
- DoH AI Standard
- Clause 3.1.4.5.1: AI compute, storage and disaster recovery in the UAE. Clause 3.1.4.4.2: no training on production data. It binds DoH-licensed facilities and their vendors.
- ADHICS v2
- Effective August 2024: cloud, backup and DR in the UAE (CS 1.2(2)), no offshore remote support (CS 1.2(3)(c)), anonymised copies stay in the UAE too (DP 1.4).
- Federal law
- Federal Law No. 2 of 2019, Article 13: health data is stored and processed in the UAE unless a ministerial decision allows otherwise. Article 24 fines: AED 500,000 to 700,000.
Sources: DoH Abu Dhabi, Responsible AI Standard V1; DoH, ADHICS v2; UAE Legislation, Federal Law No. 2 of 2019. Checked 18 October 2026.
How we handle data.
Designed for UAE hosting, with a person approving every request.
- Hosting
- Designed for UAE-hosted deployment. We agree the UAE environment with you before any patient data is processed. The public demo is not UAE-hosted, so it holds no real patient data.
- Demo data
- Product demos use invented clinics, insurers, patients and listings. No real patient data and no real insurer is involved. Payer rules in the demos are illustrative.
- Approval
- Bruxford submits through the insurer's official channel, and only after a named person at the clinic approves.
- Record
- What Bruxford read, what it suggested, who approved it and when.
- Logs
- IDs, lengths and outcomes. Never the text of doctors' notes.
- Training
- No training on your production data.
- Paperwork
- A one-page letter of intent and a data processing agreement.