Financial
The rights you think you have: five legal stress tests for a more resilient business
Resilience is not only about cash reserves, backup servers or alternative suppliers. It also depends on whether a company’s legal rights and permissions still work when the business is under pressure.
By: Maroun Abou Harb, Associate at BSA LAW
Resilience is discussed as an operational or financial discipline. Businesses test liquidity, back up systems and diversify supply chains. Yet every continuity plan rests on legal infrastructure: licenses, delegated authorities, contracts, data permissions, employment arrangements, security rights and evidence.
That infrastructure can fail when needed most. The replacement supplier cannot be appointed without third-party consent. Customer data cannot lawfully be moved to the backup provider. An insurance claim is compromized by late notification. A guarantee was signed incorrectly. The company owns a platform, but not all of its intellectual property.
The most dangerous legal risk is not the missing clause. It is the right management assumes the business has, but cannot use.
In the UAE, the Central Bank’s 2026 Operational Risk Management Regulation now requires licensed financial institutions to implement a comprehensive operational risk and resilience proecedure. The principle is valuable for every company: identify what must continue, locate the legal points of failure and test them before disruption does.
- Can the business lawfully act?
Start with corporate authority, check that licenses match actual activities, constitutional documents reflect the ownership and governance structure, and beneficial-owner, shareholder and director records are accurate. Review reserved matters, signing matrices, powers of attorney and banking mandates.
A deal, borrowing or emergency payment can stall because the authorized signatory is unavailable, a power has expired or an approval threshold was misunderstood. Group companies should confirm which entity employs people, owns assets, contracts with customers and receives revenue.
Run this scenario: if the chief executive and chief financial officer were unreachable tomorrow, who could bind the company, access its accounts and appoint an alternative supplier? If the answer is uncertain, the business has a legal single point of failure.
- Which contracts become dangerous under stress?
Most contract reviews examine value and liability. A resilience review asks a different question: what happens when performance is interrupted?
Build a heat map of critical customer and supplier contracts, ranked by operational importance and consequence of failure. For each, test termination and suspension rights, force majeure and change-in-law provisions, service levels, price-adjustment mechanisms, liability caps, indemnities, insurance, governing law and dispute forum, subcontracting, assignment and change-of-control restrictions. Check notice methods and cure periods; a valuable right can disappear if a notice is sent late or to the wrong address.
Then examine optionality, can the company use a replacement supplier, obtain transition assistance, retrieve its data in a usable format and continue using essential intellectual property? Is there a source-code escrow or step-in mechanism where appropriate?
The aim is not to renegotiate every contract. It is to know which five contracts could stop the business and to fix those first.
- Can technology fail without the legal part failing too?
A technical recovery plan is incomplete if the contracts do not support it. Cloud, payment, telecommunications and managed-service arrangements should align promised recovery times with the company’s tolerance for disruption. Audit rights, incident cooperation, subcontractor controls, data-location commitments and exit assistance should be tested.
The incident playbook must allocate legal decisions. Who determines whether regulators, customers, insurers or affected individuals must be notified? Who preserves evidence and engages external advisers? How will legal privilege or professional confidentiality be preserved? A cyber incident moves quickly; ambiguity over decision-making wastes the hours that matter most.
Conduct an exercise with management, technology, legal, communications and finance. Introduce a realistic vendor outage or data breach and follow the contracts: who calls whom, what must be notified, and what can actually be recovered?
- Does the company know what data and technology it is using?
Across the GCC, privacy and cybersecurity regimes increasingly regulate how data is collected, processed, retained, transferred and protected. A company cannot comply, or recover confidently, without knowing where its data goes.
Create a data map covering customers, employees, vendors and website users. Record the purpose and legal basis for processing, storage location, access rights, retention period, cross-border transfers and third-party processors.
The same exercise should include artificial intelligence, by identifying public and embedded AI tools, the information supplied to them, the outputs relied upon and the human review applied. Confidential information, personal data and third-party intellectual property should not enter a tool because an employee can access it. An approved-use policy, procurement review and output-verification process are proportionate safeguards.
- Can the company protect value when conditions deteriorate?
Management should monitor covenant breaches, unpaid taxes, overdue receivables, expiring insurance, threatened claims and counterparties showing signs of insolvency. The legal team should know which rights permit suspension, security enforcement, contract termination or protective court relief, and whether exercising them could create risk.
People and intellectual property also require continuity planning. Confirm that employment and consultancy terms contain appropriate confidentiality, invention-assignment and post-termination protections, tailored to the governing law. Identify key-person dependencies, succession gaps and access held by departing staff. Register intellectual property where appropriate and maintain evidence of creation and ownership.
Business needs also to review insurance as a contract, not a certificate. Map material risks to coverage, exclusions, deductibles, notification deadlines and consent requirements. The policy is only useful if the company knows how to activate it.
In brief, the output should be that for every critical risk, record the business service affected, relevant entity and contract, responsible owner, required action, deadline and escalation threshold.
Report the highest exposures to the board and repeat the exercise after major acquisitions, restructurings, regulatory changes or technology deployments.
A focused review can produce four useful assets:
- an authority and obligations calendar;
- a critical-contract heat map;
- a data and AI inventory; and
- a tested incident playbook.
No company can remove disruption. It can, however, remove the uncertainty surrounding who may act, what must be done and which rights remain available.
Financial
Connecting Industries and Trade: Malakut Business Forum 2026 Brings Together 750+ Delegates and 300+ Companies
The Malakut Business Forum 2026 is set to bring more than 750 delegates and over 300 companies together at Sky Bubble, Meydan Hotel, Dubai, on 25 November 2026, with C-suite executives and directors accounting for 60 per cent of attendees.
The one-day forum will convene senior leaders from banking, trade, insurance, logistics and industry across five streams: Finance, Risk, Artificial Intelligence, Logistics and Technology.
The 2026 edition builds on the success of the inaugural forum with even greater scale and a more focused agenda. Organisers are lining up more than 25 industry speakers and over 20 partners, with a projected digital reach of 200,000+ online users, providing even more opportunities for partners to connect, engage and be seen. The key topics to be explored during this edition include business resilience, geopolitical challenges, innovation and the future of global trade.
“Business leaders are making critical decisions under pressure, across borders and with less certainty than ever. The Malakut Business Forum was created to bring the right people into the same room, so decisions are better informed and conversations turn into real opportunities. Our 2026 edition is bigger, bolder and built for impact, and we are proud to host it in Dubai, a global crossroads of trade,” said Alex Dolgopolov, CEO of Malakut, the Founding Partner of Malakut Business Forum 2026
The programme is built around real cases and candid discussion. Finance sessions will examine how companies protect liquidity under pressure and turn high-risk projects into bankable ones. The Risk stream will address securing political violence and war risk cover during active conflict, and what businesses can do when the insurance market will not take the risk. Artificial Intelligence sessions will look at AI savings that reached the P&L, the move from copilots to agents and what leaders refuse to automate. Logistics will tackle rerouting during conflicts and the question of who pays for resilience, while Technology will cover scaling across fragmented markets and modernising core systems without disrupting daily operations.
Beyond the main stage, delegates can expect a networking reception, a partner showcase, a live podcast studio, VIP hospitality and an evening cocktail and dinner experience. Private Skyboxes overlooking the Meydan race track will offer partners an exclusive setting for high-value meetings with clients, prospects and partners.
Financial
Stablecoins Can Move Money Faster. Can They Make Cross-Border Payments More Reliable?
Imagine a business that pays an overseas supplier in stablecoins. The transfer is confirmed within minutes, but the supplier cannot access the funds in the currency needed to fulfil the order. A bank review holds up the conversion, the delivery date approaches, and neither party knows how long the delay will last.
The payment has worked as a blockchain transaction. As a business transaction, however, it has fallen short.

This distinction matters as stablecoins gain attention as a more efficient way to move money internationally. They offer genuine advantages, including faster settlement and the potential to reduce transfer costs. But businesses do not adopt payment methods simply because the technology works. They need to know that money will arrive when expected, that recipients can use it, and that problems can be resolved without leaving both parties in limbo.
For stablecoins to become a practical part of global commerce, the industry must address the parts of a payment journey that technology alone cannot fix.
The Real Cost Is More Than the Transfer Fee
Sending money across borders remains expensive, despite years of investment in digital payments. World Bank data puts the global average cost of remittances at approximately 6.36% per US$100, down from 8.89% in 2010. Progress has been uneven, with established corridors such as the UAE–India and US–Mexico benefiting from more developed financial networks, while some routes serving Africa, Latin America and Southeast Asia continue to face higher costs.
The UAE illustrates why this matters. With expatriates accounting for around 88% of its population, the country is a major centre for international remittances, particularly to South Asia. Improvements in payment infrastructure have implications not only for individuals sending money home but also for companies paying suppliers, contractors and employees abroad.
Stablecoins could help reduce some of the friction involved. Yet headline transaction volumes can obscure how much progress has actually been made in everyday payments. The $8.82 trillion in stablecoin transaction volume cited for the first half of 2026 includes activity that is not necessarily linked to purchasing goods, paying suppliers or settling commercial invoices. Estimates of real-world stablecoin payment activity, at approximately $390 billion, offer a different perspective on adoption.
The distinction is important. Moving a digital asset between wallets is not the same as completing a payment that meets a business’s commercial needs. The latter requires the entire process, from funding and settlement to conversion, reconciliation and confirmation, to work reliably.
Businesses Need Someone to Turn to When Payments Fail
Conventional payment systems have plenty of shortcomings, but businesses generally operate within established arrangements for investigating failed transfers, handling refunds and determining who is responsible for a loss. Stablecoin payments introduce a different set of participants and processes, and responsibility can become less clear when something goes wrong.
A cross-border transaction might involve a stablecoin issuer, a payment provider, an exchange and one or more banks. Each may have its own compliance obligations, operating procedures and timelines. A transaction can settle on-chain while remaining inaccessible to its intended recipient because a bank review, liquidity issue or other operational problem interrupts the next stage.
For a business, the consequences are tangible. A supplier may delay an order, a shipment may miss its window, or a contractual payment deadline may be breached. The savings achieved through faster settlement can quickly lose their value if the business cannot predict when the recipient will actually receive usable funds.
This is why dispute handling, refunds, transaction restrictions and clear escalation procedures need to be considered from the outset. A system designed for commercial use cannot rely on the assumption that every transaction will proceed as intended.
There is room for infrastructure that brings together blockchain-based payments and familiar financial risk controls. Such systems could help coordinate transaction monitoring, counterparty checks and the handling of disputed or interrupted payments.
The objective is not to recreate every layer of traditional banking, but to give businesses a clear process and an accountable party when a payment requires intervention.
International Payments Need International Coordination
The same issue arises at the regulatory level. A business making payments across several markets should not have to navigate a completely different set of operational expectations at every border.
Europe’s Markets in Crypto-Assets Regulation (MiCA), the US GENIUS Act, and frameworks developed by the UAE’s Virtual Assets Regulatory Authority (VARA) and Central Bank of the UAE (CBUAE) represent important efforts to establish rules for digital assets. However, they differ in their treatment of issuers, reserves, disclosures and permitted activities. Approval in one jurisdiction does not automatically establish acceptance in another.
Information-sharing requirements create another challenge. Where Travel Rule protocols are implemented differently, payment providers may struggle to exchange information about transaction participants consistently. This can introduce friction even when the underlying transfer is technically straightforward.
The answer is not necessarily a single global rulebook.
Countries have different legal systems and regulatory priorities. What the industry needs is greater compatibility between those systems: clearer expectations for cross-border transactions, more consistent information-sharing arrangements and practical ways for compliant providers to operate across jurisdictions.
For businesses, regulatory predictability is part of payment reliability. Companies need to understand the conditions under which funds can be transferred, held or released before committing to a payment method.
The Banking Relationship Still Matters
Stablecoins may change how value moves, but they do not eliminate the need to connect digital assets with conventional money. Businesses still need access to fiat currencies, dependable liquidity and banking services that support their operations.
That connection remains a weakness in parts of the market.
Liquidity can be spread across different issuers and blockchain networks, while some banks have chosen to reduce their exposure to digital asset companies rather than develop services for them.
The broader lesson is that blockchain infrastructure cannot operate in isolation. Its commercial usefulness depends partly on the strength of the institutions and services that connect it to the wider financial system.
Reliability Is What Will Make the Difference
None of this means that compliance controls should be weakened. Stablecoin issuers and payment providers must be able to respond to sanctions requirements, suspicious activity and other legitimate reasons to restrict transactions. But businesses also need transparency about why a payment has been held, what steps are required to resolve the issue and who is responsible for communicating the outcome.
Smart contracts can automate agreed payment conditions, but they cannot independently settle every legal dispute or reconcile conflicting requirements across jurisdictions. Those responsibilities must be addressed through contracts, institutions and operating procedures designed around the realities of cross-border commerce.
The next stage of stablecoin adoption will depend on how well the industry deals with these less visible parts of the payment experience. Better settlement technology is valuable, but it must be matched by dependable banking access, compatible regulatory arrangements and clear responsibility when transactions do not go to plan.
For businesses, the question is not simply whether stablecoins can move money faster. It is whether they can make international payments more predictable, easier to manage and less costly in practice.
That is the standard the industry must meet if stablecoins are to become more than an alternative way to transfer digital value.
(Author Info: Jack Tang is an accomplished fintech entrepreneur, at the intersection of payments infrastructure and digital assets. As Co-founder & CEO of London-based BoomFi, Jack leads the platform’s work in crypto payment infrastructure. He has over ten years of experience in entrepreneurship, building and scaling businesses across consumer and enterprise markets.)
Financial
Pay10 Announces Strategic Partnerships at Dubai FinTech Summit 2026, Advancing the UAE’s Digital Payments Ecosystem
Pay10, a UAE-regulated financial technology company, today announced a series of strategic partnerships, commercial agreements and Memoranda of Understanding (MoUs) at Dubai FinTech Summit 2026. The announcements mark a step towards expanding digital payment choices and supporting the UAE’s transition towards real-time, interoperable and account-based payments, in alignment with the Central Bank of the UAE’s Financial Infrastructure Transformation (FIT) Programme.
Pay10’s partnerships with leading brands, including GEMS, Jumbo Electronics, Bikanervala, Allday, Just Gold and Save In Gold, span education, retail, food and beverage and specialised commerce. With live deployments already in place at GEMS, Bikanervala, Allday and Just Gold, Pay10 is extending its payment ecosystem across everyday consumer and business transactions.
Building a Connected Payments Ecosystem
Pay10 brings together instant payments, Open Finance, digital accounts, domestic card infrastructure and merchant payment acceptance through an integrated platform.
Directly integrated with Aani, Pay10 enables instant payments and supports account-based payment experiences. Its Open Finance capabilities allow consumers to securely connect supported bank accounts, access consolidated financial information and monitor spending through one application. Its Jaywan issuance capabilities also enable eligible wallet customers to access domestic card payments across POS terminals, ATMs and e-commerce channels.
For merchants, the platform offers multiple payment acceptance options, including Pay by Pay10, Pay by Bank, card acceptance, interoperable QR payments, payment links and digital payouts. Its proprietary POS application, QR and soundbox solutions are supported by an in-house Terminal Management System.
Through supported account-based payment methods, merchants can access funds in real time, helping improve cash flow and reduce payment acceptance costs, with potential savings of up to 70% in applicable use cases. Pay10 also reports transaction success rates of over 90% across its integrated technology infrastructure.
Strategic Partnerships and Collaborations
The partnerships with GEMS and Jumbo Electronics aim to expand digital payment choices and improve collection efficiency across education and consumer retail. Existing deployments with GEMS, Bikanervala, Allday and Just Gold demonstrate the application of Pay10’s payment solutions across different commercial environments.
Allday, a leading convenience chain in the region, presents an opportunity to explore the impact of digital payment solutions across high-frequency, small-value transactions.
Pay10 also announced several MoUs to explore emerging financial use cases. Its partnership with Yalla Financial Solutions, part of Fintra Holding, will explore bank-account-based wallet funding through Open Finance.
Additionally, our collaboration with TotalPay will enable TotalPay to access Pay10’s merchant payment acceptance capabilities through its technology platform and integrations. The partnership aims to expand merchant payment choices and simplify the adoption of emerging payment solutions.
Dr. Waleed Sadek, Founder & CEO of Yalla Financial Solutions, said: “We are pleased to explore this strategic collaboration with Pay10, reflecting our shared vision of building a more connected and accessible financial ecosystem. Through Open Finance and account-based wallet funding, we aim to unlock new opportunities for seamless digital payments and enhance the financial experience for businesses and consumers across the region.”
Supporting the UAE’s Financial Infrastructure
Pay10’s strategy aligns with the Central Bank of the UAE’s FIT Programme through the adoption of domestic payment infrastructure, including Aani, Jaywan and Open Finance. By investing in direct infrastructure connectivity and proprietary technology, the company aims to support greater interoperability, financial inclusion and more efficient payment experiences.
Harry Gill, Founder & Chairman, Pay10, said: “The UAE has laid the foundations for the future of finance, and our goal is to make it accessible to everyone. Pay10 is building a UAE-based alternative payment ecosystem that brings together domestic payment infrastructure, Open Finance, accounts, cards and merchant solutions. Our partnerships with GEMS, Jumbo Electronics, Bikanervala, Allday and Just Gold reflect growing confidence in this vision. We remain committed to advancing the UAE’s financial ambitions through a connected, interoperable ecosystem built to scale globally.”
Our collaboration with TotalPay will enable it to access Pay10’s payment acceptance capabilities for merchants through TotalPay’s technology platform and integrations. The partnership aims to expand merchant payment choices and simplify the adoption of emerging payment solutions.
With further agreements, product launches and integrations in development, Pay10 aims to expand its consumer and merchant capabilities across the UAE and international markets.
-
Trending1 year agoOPPO A6 Pro 5G Review: Reliable Daily Driver
-
Tech News2 years agoDenodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
VAR2 years agoMicrosoft Launches New Surface Copilot+ PCs for Business
-
Automotive2 years agoAGMC Launches the RIDDARA RD6 High Performance Fully Electric 4×4 Pickup
-
VAR11 months agoHuawei Nova 14 Pro Review: Where Camera Excellence Meets Ecosystem Evolution
-
Tech Interviews3 years ago
Navigating the Cybersecurity Landscape in Hybrid Work Environments
-
Hospitality2 years agoGulfood 2025 30th Edition Kicks Off Today, Setting New Benchmarks in F&B Growth and Innovation
-
Tech News1 year agoNothing Launches flagship Nothing Phone (3) and Headphone (1) in theme with the Iconic Museum of the Future in Dubai


