ISO 21384 Certification in UAE – UAS Requirements, Audit & Compliance | Get Certified with SCS
https://scscertification.com/contactus.php
Uncrewed aircraft systems (UAS), commonly called drones, are now used for construction surveys, infrastructure inspection, mapping, energy projects, agriculture, media production and industrial monitoring across the UAE. As commercial drone use expands, companies are expected to manage more than the aircraft itself. They need reliable operating procedures, competent personnel, risk controls, maintenance arrangements and records that demonstrate how flights are planned and controlled.
ISO 21384 provides an international framework for commercial UAS operations. For UAE organizations, its requirements need to be considered alongside applicable aviation regulations, GCAA requirements and, where relevant, emirate-specific requirements.
The current published edition is ISO 21384-3:2026, which addresses operational procedures for commercial UAS operations.
For a UAE company considering certification, the real question is not simply whether it owns or operates drones. The more useful question is whether its UAS activities are managed through a consistent, documented and controlled operating system.
What Is ISO 21384 Certification in UAE?
ISO 21384 is a family of standards relating to unmanned aircraft systems. ISO 21384-3:2026 focuses on operational procedures for commercial UAS operations.
Certification against the applicable requirements provides an independent assessment of an organization's UAS operational controls within the agreed certification scope.
This can be relevant to organizations involved in:
-
Commercial drone operations
-
Aerial inspection
-
Surveying and mapping
-
Construction monitoring
-
Infrastructure inspection
-
Energy and utilities
-
Agriculture
-
Industrial monitoring
-
Photography and media
-
GIS and geospatial services
The emphasis is on how the organization manages its operation. Owning a modern aircraft does not, by itself, demonstrate that flights are properly planned, personnel are competent, equipment is maintained or emergencies are controlled.
ISO 21384-3:2026 – What UAE Companies Need to Know
ISO 21384-3:2026 is the current published edition of ISO 21384-3. It was published in August 2026 and specifies requirements for safe commercial UAS operations.
There is an important point for UAE organizations working with older regulatory or technical references.
Earlier UAE documentation may refer to ISO 21384-3:2019. UAE Cabinet Resolution No. 110 of 2023, for example, includes ISO 21384-3:2019 in its technical references relating to the UAE scheme for drones products and systems.
Companies should therefore check the exact edition applicable to their certification, contract, tender or regulatory requirement rather than assuming that an older reference has automatically changed to the 2026 edition.
Before starting certification, it is sensible to establish:
-
The ISO edition applicable to the certification scope
-
The edition referenced by the relevant UAE requirement
-
Any customer or tender specification
-
Existing certification arrangements
-
Any applicable transition requirements
This distinction can prevent confusion between an ISO standard reference and a UAE regulatory obligation.
ISO Certification, GCAA Approval and Dubai Requirements Are Different
ISO certification should not be confused with permission to operate a drone.
These are separate compliance areas.
ISO 21384 certification concerns the organization's conformity with applicable ISO requirements within the defined certification scope.
GCAA requirements concern applicable UAE civil aviation and UAS regulatory matters.
Dubai also has an emirate-level legal framework governing unmanned aircraft activities.
In practical terms:
ISO 21384 — operational procedures and management controls for commercial UAS activities.
GCAA requirements — applicable federal aviation and UAS requirements.
Dubai requirements — applicable requirements for unmanned aircraft activities within Dubai.
Certification body — independent assessment against the applicable certification criteria.
An ISO certificate therefore should never be presented as a replacement for an aviation authorization, UAS registration or flight permit.
UAE Laws and Regulatory Requirements Relevant to UAS Operations
UAS operators need to identify the regulatory requirements that apply to their particular activities.
The requirements can depend on factors such as:
-
Commercial or non-commercial use
-
Type of UAS
-
Operating location
-
Nature of the flight
-
Pilot and operator responsibilities
-
Surveying or photography activities
-
Airspace conditions
-
Security requirements
-
Customer requirements
-
Project-specific restrictions
The GCAA provides registration and authorization arrangements for organizations and operators involved in professional UAS activities.
For organizations operating in Dubai, Law No. 4 of 2020 regulates unmanned aircraft activities in the Emirate. The legislation addresses matters including registration, permits, operating conditions, qualifications and safety and security requirements.
The practical lesson for a company preparing for ISO 21384 certification is straightforward: regulatory obligations should be identified and incorporated into operational planning, rather than treating the ISO audit as a substitute for regulatory compliance.
What Does ISO 21384 Look Like in a Real UAE Operation?
Consider a construction company using a drone to inspect a high-rise building in Dubai.
The company may already have an experienced pilot and a technically capable aircraft. That is only part of the picture.
Before a flight, someone needs to determine whether the location is suitable, whether the planned operation is authorized, whether weather conditions are acceptable, whether people could be exposed to unnecessary risk and whether the aircraft is ready for use.
There also needs to be a response if the aircraft loses communication, develops a technical problem or encounters unexpected conditions.
After the operation, the company may need to retain flight records, inspection results, equipment information and relevant project data.
An ISO 21384 approach brings these activities into a more consistent operational framework.
ISO 21384 Requirements for UAE Organizations
The precise requirements applicable to an organization depend on its certification scope and UAS activities. Several areas are particularly important when preparing for certification.
Operational Planning
Commercial UAS activities need controlled planning rather than relying solely on the experience of an individual pilot.
Planning may consider the operating area, intended flight, aircraft suitability, weather, site conditions, personnel, communications and foreseeable operational risks.
A company conducting roof inspections may have a very different operating procedure from one carrying out power-line inspections or construction surveys.
The procedure should reflect the actual work.
Risk Management
UAS operations can create risks involving people, property, aircraft, airspace, information and business operations.
A useful risk assessment should lead to practical controls.
For example, a drone survey at an isolated development site may involve different risks from a flight around a populated construction project. The operating procedure needs to reflect that difference.
Personnel Competence
Commercial UAS operations depend on people who understand their responsibilities.
Depending on the organization, relevant personnel may include:
-
Pilots or remote operators
-
Observers
-
Maintenance personnel
-
Flight planners
-
Operational managers
-
Personnel responsible for approving operations
Training, experience, qualifications and authorization should be appropriately documented for roles within the certification scope.
Aircraft and Equipment Controls
Equipment readiness is another important part of operational control.
Organizations may maintain controls covering:
-
Pre-flight inspections
-
Battery condition
-
Equipment status
-
Maintenance
-
Defect reporting
-
Damaged components
-
Calibration where applicable
-
Equipment identification
-
Maintenance history
The purpose is not to create unnecessary paperwork. The objective is to have reliable evidence that equipment is maintained and suitable for the intended operation.
Emergency Preparedness
Normal flight conditions cannot be assumed on every operation.
Procedures should address foreseeable events such as communication loss, equipment malfunction, unexpected weather, battery problems, positioning issues or unauthorized people entering the operating area.
Emergency procedures should be understandable to the people expected to use them.
Incident and Occurrence Management
A company can learn a great deal from incidents and near misses.
Suppose several flights are interrupted because batteries repeatedly reach an unexpected low level. That pattern could indicate a weakness in inspection, charging, storage or replacement practices.
Similarly, repeated problems gaining access to project sites could indicate that pre-flight planning needs improvement.
Recording an event is useful. Learning from it is more important.
Documented Information and Records
Evidence is central to certification.
Depending on the scope, relevant records can include:
-
UAS operating procedures
-
Risk assessments
-
Flight planning records
-
Personnel competence records
-
Training records
-
Maintenance records
-
Equipment records
-
Emergency procedures
-
Incident reports
-
Applicable regulatory documents
-
Corrective-action records
-
Operational records
Documentation should be proportionate to the organization's actual activities.
ISO 21384 Internal Audit Checklist for UAE Companies
A pre-certification review can help an organization identify weaknesses before the formal assessment.
A practical review can cover five areas.
Regulatory Readiness
Has the organization identified the GCAA requirements applicable to its activities?
Have applicable Dubai or other emirate-level requirements been identified?
Are relevant registrations, authorizations and permits identified?
Does the certification scope accurately describe the organization's UAS activities?
Operational Controls
Is there a documented process for planning and authorizing flights?
Are operational risks assessed?
Are location, weather, airspace and site conditions considered?
Are emergency arrangements established?
Personnel
Are UAS responsibilities clearly assigned?
Can the organization demonstrate relevant personnel competence?
Are training and authorization records maintained?
Equipment
Are aircraft and associated equipment inspected and maintained?
Are defects identified and controlled before operation?
Can maintenance records be linked to the relevant equipment?
Performance and Improvement
Are incidents and operational problems recorded?
Are corrective actions followed through?
Does the organization evaluate operational performance and opportunities for improvement?
The checklist should be adapted to the company's actual UAS activities rather than used as a generic drone checklist.
What Will an ISO 21384 Certification Auditor Check?
An auditor will normally want to see a connection between documented procedures and actual operations.
For example, if a company states that every aircraft receives a pre-flight inspection, the auditor may examine the procedure, identify who is responsible and review completed inspection records.
If the company states that personnel are competent, evidence may include training, qualifications, experience and authorization records relevant to their responsibilities.
The same principle applies to emergency procedures, maintenance, risk assessments and incident management.
The basic audit trail can be viewed as:
Documented process → implementation → operational evidence → evaluation → corrective action or improvement where applicable
This is why preparing documents immediately before an audit is rarely sufficient. The controls need to be part of normal operations.
ISO 21384 Certification Requirements in UAE
The first step is to define the certification scope.
Depending on the business, the scope could include:
-
Commercial aerial inspection
-
Surveying and mapping
-
Construction monitoring
-
Infrastructure inspection
-
Energy asset inspection
-
Agricultural UAS services
-
Media and photography operations
-
GIS and geospatial services
Once the scope is clear, the organization can identify applicable requirements, assess existing controls and address gaps.
A typical certification project involves:
-
Defining the certification scope
-
Reviewing current UAS operations
-
Identifying gaps
-
Establishing or improving procedures
-
Implementing operational controls
-
Reviewing readiness
-
Completing the certification assessment
-
Addressing identified nonconformities
-
Completing certification activities according to the applicable certification scheme
The exact assessment process depends on the certification body and certification arrangement.
ISO 21384 Certification in Dubai
Dubai has a substantial commercial market for drone applications in construction, surveying, infrastructure, inspection and media.
Organizations operating UAS in Dubai need to consider the applicable UAE requirements as well as Dubai-specific requirements.
Dubai Law No. 4 of 2020 establishes a framework for unmanned aircraft activities in the Emirate. It includes provisions relating to permits, registration, qualifications and operating requirements.
For an organization seeking ISO 21384 certification in Dubai, the best approach is to map its actual drone activities against both its ISO operational controls and applicable regulatory obligations.
ISO 21384 Certification in Abu Dhabi
Abu Dhabi has significant UAS applications across construction, infrastructure, energy, utilities, surveying and industrial operations.
Organizations should establish which federal and local requirements apply to their particular operation.
Certification scope also matters.
A company providing drone inspection services across several industrial facilities may need a more extensive operational-control framework than a business using one aircraft occasionally for internal site surveys.
ISO 21384 Certification in Sharjah and Other Emirates
The same certification principles can apply to organizations operating in Sharjah, Ajman, Ras Al Khaimah, Fujairah and Umm Al Quwain.
The ISO requirements do not simply change because an organization moves between Emirates. However, the regulatory and operating environment may differ.
Companies should therefore consider:
-
Operating locations
-
Applicable aviation requirements
-
Local authority requirements
-
Customer specifications
-
UAS activities
-
Personnel responsibilities
-
Operational risks
-
Required evidence
ISO 21384 Requirements by Industry in the UAE
Construction
Construction companies use drones for progress monitoring, surveying, inspection and site documentation.
Their operational controls may need to address changing site conditions, workers, contractors, temporary structures, restricted areas and project-specific risks.
Oil and Gas
UAS can support inspection, monitoring and surveying activities in oil and gas environments.
Planning may need to account for site access, security, hazardous locations, emergency arrangements and customer-specific operational requirements.
Energy and Utilities
Drones can be used to inspect difficult-to-access infrastructure and assets.
The operating procedure should reflect the characteristics of the asset, the surrounding environment and the potential consequences of an operational failure.
Surveying and GIS
Surveying organizations depend on consistent flight planning, data collection, equipment readiness and competent personnel.
The quality of the final survey depends on the entire operating process, not simply the drone's technical specifications.
Agriculture
Agricultural UAS activities can include crop monitoring, mapping and field assessment.
Operating procedures should reflect the environment, equipment, personnel and applicable regulatory requirements.
Media and Film
Commercial filming can involve operations around people, buildings, events and controlled locations.
Planning, site control, permissions and emergency arrangements therefore require particular attention.
Security and Inspection
Security and inspection activities can involve sensitive imagery, restricted locations and confidential customer information.
Organizations should establish appropriate controls over access, storage, retention and handling of information according to applicable requirements.
Who Should Consider ISO 21384 Certification in UAE?
ISO 21384 certification may be relevant to:
-
Commercial drone operators
-
UAS service providers
-
Construction companies
-
Surveying and mapping organizations
-
Infrastructure inspection providers
-
Energy and utility companies
-
Agricultural UAS operators
-
Industrial inspection organizations
-
Media and production companies
-
Organizations providing contracted drone services
It can also be relevant where customers, contractors or tender specifications request evidence of structured UAS operational controls.
Benefits of ISO 21384 Certification
The value of certification depends on how well the system is implemented.
For an organization with active commercial UAS operations, a structured system can help bring greater consistency to:
-
Operational planning
-
Risk management
-
Personnel competence
-
Equipment readiness
-
Emergency response
-
Record management
-
Incident learning
-
Customer requirements
-
Operational improvement
Where a major contractor or customer requests evidence of controlled UAS operations, certification may also support the organization's supplier or prequalification documentation.
Certification should not, however, be presented as a replacement for regulatory approval or as a guarantee that every individual flight will be safe.
ISO 21384 Certification Cost in UAE
There is no single ISO 21384 certification price applicable to every UAE company.
The cost can depend on:
-
Organization size
-
Number of personnel involved
-
Number of operating locations
-
Complexity of UAS activities
-
Certification scope
-
Existing procedures
-
Existing management-system controls
-
Audit duration
-
Certification arrangements
A small drone company operating from one location will have a different certification requirement from a large contractor managing multiple UAS teams across several projects.
A scope-based quotation is therefore more useful than a generic advertised price.
How Long Does ISO 21384 Certification Take?
The preparation period depends on how mature the organization's existing controls are.
A company that already has documented operating procedures, competence records, maintenance controls and risk assessments may require less preparation than an organization developing its UAS management system for the first time.
The certification project should allow enough time for controls to be implemented and demonstrated in actual operations.
ISO 21384 Certification vs UAS Compliance
ISO certification and regulatory compliance should be treated as two connected but different responsibilities.
Regulatory compliance concerns meeting applicable aviation and legal requirements.
ISO 21384 certification concerns conformity with the applicable ISO requirements within the defined certification scope.
For example, receiving an aviation authorization does not automatically demonstrate conformity with ISO 21384.
Likewise, obtaining ISO certification does not automatically provide permission to operate a drone in a restricted location.
Maintaining separate but connected compliance records makes this distinction much easier to manage.
How SCS Can Support ISO 21384 Certification in UAE
SCS can discuss ISO 21384 certification requirements with organizations operating commercial UAS activities in the UAE.
The certification scope should reflect the company's real activities, locations and operational responsibilities.
Preparation can focus on areas such as:
-
UAS operational procedures
-
Risk controls
-
Personnel competence
-
Equipment controls
-
Emergency arrangements
-
Records
-
Applicable regulatory requirements
-
Certification readiness
Organizations should confirm the applicable ISO edition, certification scope and regulatory requirements before beginning the assessment.
Get ISO 21384 Certified in UAE with SCS
If your company uses drones for construction, surveying, inspection, infrastructure, energy, agriculture, media or other commercial activities, ISO 21384 certification can provide a structured framework for managing UAS operations.
The practical starting point is to understand your current operating controls and identify what needs to be strengthened before certification.
Contact SCS to discuss your ISO 21384 certification requirements and the appropriate certification scope for your UAE operation.
Need ISO Certification for Your Business?
Speak with our certification specialists to understand certification requirements, audit process, implementation timelines and accredited certification services.