Aureus Worldwide

ADGM

ADGM RegLab: The FSRA Fintech Sandbox

· 6 min read · By Aureus Worldwide

ADGM RegLab: The FSRA Fintech Sandbox

The ADGM RegLab is the Financial Services Regulatory Authority's fintech regulatory sandbox, a controlled space where innovators can test new financial products and services under a tailored, restricted authorisation before committing to full regulation. Launched as one of the first sandboxes of its kind in the region, the RegLab lets a fintech firm trial a genuine proposition with real customers while the FSRA modifies certain requirements to fit the limited scale of the test. This guide explains what the ADGM RegLab is, how the sandbox works, who is eligible, and how a firm graduates from it.

What the ADGM RegLab is

Regulation is built for firms operating at scale, which can make it a poor fit for an early-stage fintech testing an unproven idea. The RegLab bridges that gap. It is a regulatory laboratory in which the FSRA grants a restricted Financial Services Permission and, alongside it, tailors the rules, relaxing some requirements that would otherwise be disproportionate for a small, controlled trial, while keeping the protections that matter.

The point is to let genuine innovation be tested safely. A firm can find out whether its product works, whether customers want it, and whether its controls hold up, and the FSRA can see how a novel model behaves, without the firm having to carry the full cost and obligations of authorisation from day one. It complements ADGM's wider innovation ecosystem, including the ADGM tech startup licence for non-regulated technology businesses.

How the sandbox works

The mechanics are what make the RegLab distinctive:

  • A restricted permission. Participants receive a Financial Services Permission scoped tightly to the test, limited activities, limited customer numbers and limited volumes.
  • Tailored requirements. The FSRA modifies or waives specified rules, for example around capital or certain systems, proportionate to the limited scale, while core protections such as AML and client safeguards remain.
  • A defined test plan. The firm agrees clear parameters and safeguards up front: what it will test, with how many customers, over what period, and with what consumer protections and exit arrangements.
  • A time limit. The test runs for a fixed period, commonly up to around two years, after which the firm graduates or exits. The FSRA sets the current duration.

Because the permission is restricted, a RegLab firm is not fully authorised: it can only do what its tailored permission allows, within the agreed limits. That restriction is the trade-off for the lighter requirements.

RegLab versus full FSRA authorisation

Feature RegLab (sandbox) Full FSRA authorisation
Permission Restricted, test-scoped Full Financial Services Permission
Requirements Tailored and proportionate Applied in full
Customers and volumes Capped by the test plan Commercial scale
Duration Time-limited test Ongoing, subject to supervision
Purpose Prove the model and controls Operate at scale

The sandbox is a stepping stone, not a destination. It is designed to lead somewhere, to full FSRA authorisation once the model is proven, or to a clean exit if it is not.

Who the RegLab is for

The RegLab is aimed at firms with a genuinely innovative financial proposition that does not fit neatly into the existing rules. In assessing applicants the FSRA typically looks for:

  • Genuine innovation, a new or significantly different product, service or business model.
  • A clear benefit to the financial-services industry or to consumers.
  • Readiness to test, a proposition mature enough to trial with real customers in or from ADGM.
  • A defined test plan with sensible limits and consumer safeguards.
  • An intention to deploy the product more widely on graduation, within ADGM.

Many RegLab propositions involve payments, digital finance, wealthtech, insurtech and virtual assets, the last of which intersects with our guide to ADGM's virtual asset framework. The exact criteria are set by the FSRA and should be confirmed before applying, as the regulator refines its intake over time.

The application and cohort process

Historically the FSRA has run the RegLab through application windows or cohorts, assessing candidates against the criteria above and agreeing a bespoke test plan with those it admits. Applicants prepare much the same substance as a full application in miniature, a description of the proposition, the test parameters, the controls and the finances, but calibrated to the trial. Confirm the current intake arrangements with the FSRA, as the process is periodically updated.

What the FSRA modifies, and what it never relaxes

It is easy to read the word sandbox as light-touch, but the RegLab is better understood as proportionate, not lenient. The FSRA is willing to tailor requirements that would be disproportionate for a small, time-limited trial, for example scaling capital to the limited scope, or modifying certain systems and reporting expectations. What it does not relax are the protections that exist to keep customers and the market safe:

  • AML and sanctions controls apply in full, because money-laundering risk does not shrink just because a firm is small.
  • Client-money and asset safeguards remain, so that a test never puts customer funds at avoidable risk.
  • Honest dealing and clear disclosure to customers, including that they are dealing with a firm in a test, are expected throughout.

Understanding this line is the key to a realistic RegLab plan: you get relief on scale and proportionality, not on integrity.

Preparing a strong RegLab application

Firms that get into the RegLab tend to share a few habits. They can articulate their innovation crisply and explain the benefit to consumers or to the industry. They bring a concrete test plan, how many customers, what limits, what success looks like, and how they will exit if it fails. And they show that, behind the idea, there is a credible team and a workable operating model, including the finances to see the test through. A vague concept with no test parameters rarely progresses; a well-defined trial with sensible safeguards does.

Graduating from the sandbox

The RegLab is explicitly temporary. As the test period ends, a firm follows one of a few paths:

  1. Graduate to full authorisation, apply for a full Financial Services Permission and scale up.
  2. Exit, if the model does not work or the firm decides not to proceed, wind the test down cleanly and return customers to their position.
  3. Adjust, refine the proposition based on what the test showed before moving to full authorisation.

Planning for graduation from the outset matters, because full authorisation brings the full weight of capital, prudential and reporting obligations that the sandbox relaxed. A firm that has kept clean books and disciplined controls during the test steps up to full regulation far more smoothly.

How Aureus Worldwide can help

Aureus Worldwide is a Dubai-based accounting, tax, CFO and compliance-advisory firm. Sandbox admissions are granted by the FSRA, supported by your regulatory counsel. Our contribution is the financial and operational backbone a fintech needs to test credibly and then scale: setting up accounting and management reporting, providing outsourced CFO support and financial projections, framing AML controls that must hold even in a sandbox, and keeping tax and audit-ready records in order for the step up to full authorisation. We work alongside your DIFC and ADGM and legal advisers throughout. To build the finance function behind a RegLab test, contact us.

Frequently asked questions

What is the ADGM RegLab?

The RegLab is the FSRA's regulatory sandbox, a controlled environment in which fintech firms can test innovative financial products and services under a tailored, restricted authorisation. It lets innovators trial a real proposition with real customers while the FSRA modifies certain requirements to fit the limited scale of the test. It was one of the first sandboxes of its kind in the region.

How long can a firm stay in the RegLab?

The RegLab is designed as a time-limited test, commonly for up to around two years, after which the firm is expected to either graduate to full authorisation or exit. The test period lets a firm prove its model and its controls before taking on the full weight of regulation. The FSRA sets the current duration and any extension terms.

What are the RegLab eligibility criteria?

The FSRA looks for genuine innovation, a clear benefit to the financial services industry or to consumers, readiness to test the proposition in or from ADGM, a defined test plan with limits, and an intention to deploy the product more widely on graduation. The precise criteria are set by the FSRA and should be confirmed before applying.

Is a RegLab firm fully authorised?

No. A RegLab participant holds a restricted Financial Services Permission tailored to the test, not a full authorisation. It can only do what its restricted permission allows, within agreed customer and volume limits, and must graduate to a full permission to operate at scale. The restrictions are the trade-off for the modified requirements.

Talk to our chartered accountants →