Bespoke Health Consultancy
Healthcare due diligence in the UAE goes beyond financial and legal review. Acquirers must independently verify licensing status, Medical Director continuity, clinical governance maturity, insurance receivables quality, EMR/NABIDH/Malaffi integration health, and any open regulator actions. A clinic can look profitable on paper and be one inspection away from suspension. This guide sets out the workstreams and red flags.
UAE healthcare DD requires four independent workstreams: regulatory, clinical governance, insurance/revenue, operational.
Each workstream has specific hard verifications that cannot be taken from management representations.
The most common valuation adjustments come from receivables quality, MD continuity and open regulator actions.
Workstream 1 — Regulatory verification
- Confirm current facility licence status directly with DHA (Sheryan) or DoH (Tamm) - Verify every clinician's active licence and PQR/DataFlow status - Check for any open inspection actions, conditions or fines - Confirm named Medical Director availability and personal licence status - Confirm NABIDH (Dubai) or Malaffi (Abu Dhabi) integration is live, current and clean
Workstream 2 — Clinical governance maturity
Independently assess the six governance artefacts (incident register, clinical audit, M&M reviews, complaints, policies, KPI dashboard). Confirm they are dated, current and used — not templated for the DD.
Interview clinicians separately from ownership to test whether governance is real or theatrical.
Workstream 3 — Insurance and revenue quality
Ageing of receivables by payer. Denial rate trend over 12 months. Empanelment status with major TPAs. Any active audits by insurers. Coding accuracy sample. Revenue concentration on any single payer above 30% is a risk.
Workstream 4 — Operational and technology
EMR version and support status. Data ownership on exit. Vendor lock-in on scheduling, billing, LIS. Physical facility condition against DHA/DoH facility standards. Staffing model dependency on any single clinician (key person risk).
Common red flags
- MD notice period expiring shortly after completion - Recent unresolved inspection findings - Receivables > 120 days above 20% of revenue - Denial rate above 12% and rising - Policies dated in the DD week - EMR integration in "pending" or "amber" state - Revenue concentration on a single insurer