UAE moves to Country Group A:5: what changes for AI hardware buyers

On 10 July 2026 a final rule from the US Bureau of Industry and Security, titled Enhanced Favorable Treatment for the United Arab Emirates Under the Export Administration Regulations, took effect. It was published in the Federal Register on 14 July. The rule removes the UAE from Country Groups D:3 and D:4 and adds it to Country Group A:5, which makes License Exception STA available to the UAE government and to approved UAE commercial entities.

The headline is broader than the effect on AI hardware. The Federal Register text states that advanced computing items still require a licence except when shipped to approved entities listed in a new Supplement No. 8 to Part 740. Morgan Lewis, in a summary dated 21 July, notes that licence requirements continue for ECCNs 3A090.a and 4A090.a and related .z items, and that lower-performance 3A090.b and 4A090.b items remain under UAE-specific requirements, each with an exception for entities in Supplement No. 8 approved to receive them licence-free.

Who is approved

According to Morrison Foerster’s alert of 20 July, Supplement No. 8 covers UAE government agencies, G42 and Core42, and eight US-headquartered AI companies and their subsidiaries. The government approval does not extend to state-owned corporations or to contractors of government agencies. The G42 and Core42 authorisation expires automatically on 6 April 2027 unless BIS gives further notice. Other UAE commercial entities can request approval through an advisory opinion, which BIS reviews case by case, weighing the applicant’s compliance capabilities and track record. Both firms stress that approval is entity-specific, not country-wide, and the rule states that Supplement No. 8 status does not override the end-use and end-user licence requirements in Part 744.

Diversion remains the central concern. The rule cites a BIS Export Control Officer presence in the UAE and cooperation with UAE authorities so that illicit procurement networks do not exploit the new status. Enforcement elsewhere shows why: on 25 August 2026 Al Jazeera reported that prosecutors in Taiwan had indicted nine people, including staff of Nvidia’s and Supermicro’s Taiwan units, on charges including document forgery, over AI servers sent to China, some transshipped through Indonesia and Japan.

What it means for buyers

For a UAE buyer that is not listed in Supplement No. 8, nothing about the licence requirement for advanced GPUs and servers has changed, and the supplier will need a licence or another valid authorisation. Morgan Lewis advises exporters to verify that the ultimate consignee and every end user are approved, and to keep risk-based compliance in place to identify diversion red flags. In practice, expect a credible supplier to ask for the legal entity name, the installation site and its power capacity, the intended workload, and a signed end-user statement, and to record serial numbers at delivery. Buyers should prepare these documents before requesting a quotation, check their own customers against the same standard if they resell, and be wary of any offer that promises licence-free delivery without asking who the end user is.