THE NUMBERS, WITH SOURCES.

HOW TO READ THIS PAGE

Every figure below carries a trust rating, because the numbers on this subject are not equally solid and the difference decides how you may use them.

The distinction matters more than it looks. "97% are embedding AI agents" is not a measurement of deployment; it is what respondents reported to a survey run by a firm that sells AI advisory work. That does not make it false. It makes it a reading of sentiment, and sentiment and behavior move at different speeds — which is exactly what the gap between the adoption table and the governance table shows.

ADOPTION AND DEPLOYMENT

GOVERNANCE AND CONTROL

Read against the section above, this is the interesting part of the whole page: near-universal reported adoption, and a minority who say they can enforce their own policy across it. The adoption figures are UAE, the control figures are global. No published survey measures enforcement capability in the UAE on its own, which is itself the finding.

RETURNS AND BOTTLENECKS

GOVERNMENT AND POLICY

INFRASTRUCTURE AND INVESTMENT

WORLDWIDE COMPARATORS

WHAT IS NOT ON THIS PAGE

Some figures in circulation did not make it here, and the reasons are part of the method.

• Figures from consultancy AI reports withdrawn or corrected during 2025 and 2026. Several such reports were found to contain fabricated citations and were pulled or amended by their publishers. Figures traceable only to those documents are excluded pending verification against a primary source.
• A mandatory four-tier AI risk classification, a September 2026 self-assessment deadline and penalties of AED 10 million. Widely repeated, and not found in any statute — see our briefing on what actually applies.
• Figures reported under conflicting attribution. Where two sources are credited with the same number, we trace it to the publisher with a first-party record or leave it out. The 77% and 92% productivity figures above are attributed to IBM's Race for ROI study and dated October 2025 for that reason — they are frequently recirculated in 2026 coverage without their original date.
• A pairing that circulated under the wrong publisher and the wrong geography. The 64% / 26% / 77% control figures above were briefly published here as UAE data from Cloudera. They are global figures from Check Point’s 2026 Cloud Security Report, reached through UAE-framed coverage that carried them without a geographic qualifier. Cloudera’s own UAE research reports a different 64% (scalability as an advantage of hybrid architecture) and a different 77% (readiness to manage agents), and no 26% at all. The rows now carry the correct publisher, date and scope.
• Two events reported as one. A June specialist training in Dubai, attended by 300 participants from 50 federal institutions, has circulated in August coverage as a revised attendance figure for the separate August workshop that opened the program's strategic phase. Both events are listed above, each with its own date.
• Market-size forecasts with no disclosed method. Common in press coverage, unusable in a business case.

When we run a readiness audit, every figure in the report carries this same treatment: source, date, rating. A number that cannot be traced does not go in.