Most export-control rules are readable in an afternoon. The work is in the decision the rule forces you to make, and in the record that shows you made it.
Sanctions exposure usually turns up inside a transaction nobody flagged: a distributor appointment, a re-export, a payment routed through a UAE subsidiary, a counterparty whose ownership chain runs through a sanctioned jurisdiction. We look for it before the deal closes, then paper the decision so it holds up when a regulator or an auditor reads it back three years later.
We advise on classification and licensing, re-export risk, restricted-party screening, and ownership-and-control analysis where US primary sanctions concepts surface in structures that are otherwise UAE-domestic.
“Compliance is the record of the decision, made at the time.”
Programme design and testing sits alongside the transaction work: policies, training, internal audits, and voluntary disclosure mechanics when a breach turns up. Both are built to what the client's board and external auditors will need to see.