--- title: AHD-SEAT-16-DUBAI-US-STRUCTURE seat: STRUCTURE date: 2026-04-24 source_task_id: a2aab103466077a5e --- All 5 searches returned strong results. I now have sufficient data to produce the complete research brief. Here it is: --- # RESEARCH BRIEF: Dubai Holdco + US Clinical Delivery Entity Structure **For:** Fabian Diaz / Traffic & Access Solutions (AVINA-HOME-DETOX context) **Prepared:** 24 April 2026 **Platform:** Intelligent in-residence clinical services, UHNW principals, US delivery (CA/NY/FL) **Owners:** Kelly Mortazavi (CEO, US resident, non-physician) + Elizabeth Mortazavi MD (Medical Director, US resident, physician) **Target launch:** 01 July 2027 **Scope:** Legal structure recommendation + top 5 risks --- ## EXECUTIVE SUMMARY The structure is achievable but carries meaningful tax and regulatory complexity. The core architecture is: - **Dubai LLC (holdco):** IFZA free zone, owns IP, brand, platform, MSO entity - **US Friendly-PC (opco):** Elizabeth MD as sole nominal owner, employs physicians, is the HIPAA Covered Entity - **MSO bridge:** Dubai LLC or a US MSO subsidiary provides non-clinical management services to the US PC under a Management Services Agreement (MSA) at arm's length - **Critical constraint:** The Dubai LLC cannot directly own the US PC. Elizabeth must own it personally under a stock restriction agreement. This is the "friendly PC" model. - **Critical tax exposure:** As a Controlled Foreign Corporation (CFC) with 100% US-person ownership, the Dubai LLC triggers GILTI and Subpart F rules. The UAE 9% tax rate is below the 18.9% GILTI high-tax exclusion threshold, meaning US tax applies on top. A check-the-box pass-through election eliminates the CFC problem but changes the capital flow economics. --- ## SECTION 1: DUBAI ENTITY RECOMMENDATION **Confidence: HIGH on structure. MEDIUM on exact 2026 costs (prices change quarterly).** ### Free Zone Options Compared (2026) **DMCC (Dubai Multi Commodities Centre)** - Year 1 total: approximately AED 49,000+, plus mandatory AED 50,000 share capital deposit - Annual renewal: approximately AED 20,265+ - Strongest international brand recognition; preferred by institutional counterparties - Share capital deposit is a material cash-flow burden for a startup holdco **IFZA (International Free Zone Authority)** - Year 1 total: approximately AED 30,790 (license + establishment card) - Annual renewal: approximately AED 14,900 - No share capital deposit requirement - Allows up to 7 business activities per license (first 3 included, additional at AED 1,000 each) - Setup time: 2-5 business days - Virtual office available; suits 4-6 week annual presence **Meydan Free Zone** - Year 1 total: approximately AED 16,350 - Annual renewal: approximately AED 14,350 - Lowest cost option; designed for tech startups and service providers - Lighter institutional credibility relative to IFZA/DMCC ### 100% Foreign Ownership All three zones permit 100% foreign ownership. The 2021 UAE Commercial Companies Law amendments extended 100% foreign ownership to most sectors; medical IP licensing and tech holding are not restricted activities. ### Visa Allocation Investor visas are available under all three zones. For owners visiting 4-6 weeks per year without relocating, a single-shareholder investor visa is sufficient and does not require physical residency. None of the three zones mandate a minimum UAE presence for the visa holder in a free zone holding company context. Elizabeth and Kelly can hold UAE investor visas as non-residents. ### UAE Corporate Tax 2026 - Critical Nuance The UAE introduced a 9% corporate tax effective June 2023, with QFZP (Qualifying Free Zone Person) rules allowing 0% on "qualifying income." The critical issue for this structure: IP licensing income from a related US subsidiary requires the IP to be "qualifying intellectual property" (QIP), developed via UAE-based R&D expenditure under the nexus approach. A holding company that acquired or developed IP offshore and simply licences it from Dubai does not automatically qualify for the 0% rate. If QIP rules are not met, the 9% rate applies to the MSA fee income. Additionally, Economic Substance Regulations (ESR) require physical premises, qualified full-time UAE-resident employees, and UAE-based core income-generating activities (CIGAs). A virtual office does not satisfy ESR. This is the most common trap in UAE holding structures built primarily for tax efficiency. **Recommendation: IFZA free zone LLC.** Rationale: lowest cost, no share capital deposit, sufficient brand credibility for a services holdco, multi-activity license covers IP licensing and management services, virtual office available for minimal-presence owners. DMCC is appropriate if institutional investors or banking relationships require the premium brand. Meydan is adequate if cost minimisation is the sole driver. Note that ESR compliance will require at least a serviced office (not virtual) and a UAE-based manager or contracted administrator if the entity receives MSA income. --- ## SECTION 2: US ENTITY RECOMMENDATION **Confidence: HIGH on structure. HIGH on CPOM rules. MEDIUM on California SB 351 implementation details (effective 01 January 2026).** ### Corporate Practice of Medicine Doctrine All three target states (California, New York, Florida) prohibit non-physicians from owning or controlling a medical professional entity. California Corporations Code Section 13401, New York Education Law Section 6509-a and Business Corporation Law, and Florida statutes all require physician ownership of entities practicing medicine. A foreign corporate entity (Dubai LLC) cannot directly own a US medical PC in any of these states. No exceptions. **California update (2026):** SB 351, effective 01 January 2026, codified and strengthened CPOM restrictions, explicitly prohibiting private equity, MSOs, and non-physician entities from clinical interference. This was a direct legislative response to PE consolidation in physician practices and it tightened the boundaries of permissible MSO activity. **New York update (2025-2026):** Proposed S8442 (2025, pending) would further restrict non-physician MSO control of PC voting shares and board seats. New York is the strictest CPOM jurisdiction of the three. **Florida:** No significant 2025-2026 CPOM legislative changes. Florida is the most MSO-friendly of the three states in practice. ### MSO + Friendly-PC Structure The legally compliant architecture: 1. Elizabeth Mortazavi MD personally owns 100% of the US Medical PC. Elizabeth signs a stock restriction agreement (sometimes called a "put-call agreement") with the MSO giving the MSO economic rights over the PC without ownership rights. 2. A US Management Services Organisation (MSO entity) enters into a Management Services Agreement (MSA) with the PC. The MSO provides: billing and collections, administrative staffing, technology platform access, scheduling, marketing, and brand use. The MSO does not control clinical decisions. 3. The MSA specifies fees as a percentage of net revenue (arm's length, typically 40-60% of net clinical revenue for comprehensive management services, or cost-plus for specific services). 4. Clinical autonomy remains entirely with Elizabeth and the employed/contracted physicians. The MSO cannot direct clinical staffing decisions, care protocols, or medical records. **Can Dubai LLC own the US MSO?** Yes. The MSO is not a medical practice. Non-physician ownership of an MSO is permitted. Kelly and Elizabeth (as US persons) can own a US MSO LLC, which in turn has a contractual relationship with the Dubai LLC for platform/IP licensing. Alternatively, the Dubai LLC can contract directly with the US MSO via its own MSA. **Recommended structure:** - **Elizabeth Mortazavi MD:** sole owner of a California Professional Corporation (PC) registered as a multi-state foreign PC in NY and FL - **A US LLC (Delaware or CA):** serves as the domestic MSO, owned by Kelly and Elizabeth personally, or owned by a US holding entity - **Dubai LLC (IFZA):** contracts with the US MSO via IP licence and platform services agreement; receives management fee income from the MSO ### Why a single multi-state PC rather than state-by-state California, New York, and Florida each require a physician entity to register as a foreign professional corporation to practise in those states. Elizabeth's CA PC can qualify as a foreign professional corporation in NY and FL. This is administratively simpler than running three separate PCs, though it adds foreign qualification filings in NY and FL and requires Elizabeth to hold licences in all three states. --- ## SECTION 3: HOW THEY CONNECT **Confidence: HIGH on structure. MEDIUM on transfer pricing percentage range (arm's length requires formal TP study).** ### Ownership Chain Dubai LLC (IFZA) does NOT own the US PC. The chain is: Dubai LLC (IFZA) | | IP licence + platform services agreement (MSA-1) | US MSO LLC (Delaware or CA, owned by Kelly + Elizabeth personally) | | Management Services Agreement (MSA-2, arm's length) | US Medical PC (California, owned 100% by Elizabeth MD) | Clinical services delivered to UHNW patients (CA/NY/FL) ### Inter-Company Agreements Required **MSA-1 (Dubai LLC to US MSO):** Dubai licences the platform software, brand, data systems, and proprietary clinical protocols to the US MSO. The US MSO pays a licence fee to Dubai. This is the primary mechanism for moving profit offshore. Must be arm's length. **MSA-2 (US MSO to US PC):** US MSO provides comprehensive management services to the PC. PC pays MSO a management fee from gross clinical revenue. Must be arm's length and structured to leave the PC with sufficient net income to cover physician compensation (to satisfy CPOM - PC must look economically independent). ### Transfer Pricing For MSA-1 (US MSO paying Dubai LLC), arm's-length ranges for IP licensing in a services context are typically 5-15% of gross revenue of the US entity for brand/platform licensing, or cost-plus 10-15% for management services. A formal IRS-compliant transfer pricing study (IRC Section 482 documentation) is required before the first inter-company payment. IRS scrutiny of US-to-offshore IP payments for services companies has increased significantly since 2020. Do not set this informally. ### Capital Flow Patient (UHNW principal) pays US PC (or US MSO invoicing on PC's behalf) US PC pays MSA-2 fee to US MSO US MSO pays MSA-1 licence/services fee to Dubai LLC Dubai LLC retains profit (subject to UAE CT at 9% if not QFZP-qualifying, plus US CFC pass-through inclusions for Kelly and Elizabeth) Dubai LLC pays dividends to Kelly and Elizabeth (taxable as US individuals) --- ## SECTION 4: US TAX EXPOSURE FOR THE DUBAI LLC **Confidence: HIGH on CFC/GILTI rules. MEDIUM on effective rate estimates (depends on income mix, QBAI, and check-the-box election choice). VERIFIED: No US-UAE income tax treaty exists.** ### Controlled Foreign Corporation Status Because Kelly and Elizabeth are US persons each owning more than 10% of the Dubai LLC and together owning 100%, the Dubai LLC is unambiguously a Controlled Foreign Corporation (CFC) under IRC Section 957. This cannot be avoided under the corporate structure. ### GILTI Exposure GILTI (IRC Section 951A) requires US shareholders of a CFC to include a share of the CFC's "tested income" in their US taxable income annually, regardless of whether dividends are distributed. For individual shareholders (as Kelly and Elizabeth are): - GILTI inclusion taxed at ordinary income rates up to 37% - Section 250 deduction provides a 50% reduction, yielding a maximum effective rate of approximately 18.5% - Net Investment Income Tax (NIIT) of 3.8% applies - Combined effective GILTI rate for individuals: approximately 22-23% - UAE 9% tax does NOT offset GILTI because it is below the high-tax exclusion threshold of 18.9% (90% of the 21% US corporate rate) **IP licensing income as Subpart F:** Royalties received by the Dubai CFC from the related US MSO are Foreign Personal Holding Company Income (FPHCI) under IRC Section 954(c) - taxable as Subpart F income in the year earned, even without distribution. The Section 954(c)(6) look-through rule (now permanent post-2025) may reduce Subpart F on related-party royalties if the underlying income is active, but this requires specific structuring and legal opinion. ### Check-the-Box Election (Critical Decision Point) The Dubai LLC can file Form 8832 to elect partnership/disregarded entity treatment for US tax purposes. This: - Eliminates CFC/GILTI/Subpart F complexity - Income flows directly to Kelly and Elizabeth as individuals, taxed at ordinary rates (up to 37% + 3.8% NIIT) - Eliminates double-tax layer but removes UAE tax deferral benefit - May be net positive if UAE CT at 9% + GILTI at 22% exceeds the direct individual rate of ~40.8% The decision depends on income scale and planned retained earnings in Dubai. At low revenue ($1-2M annual platform fees), check-the-box is likely more efficient and simpler. At high revenue with material retained earnings planned for reinvestment, the CFC structure with careful planning may be preferred. ### No US-UAE Tax Treaty There is no US-UAE bilateral income tax treaty as of April 2026. This means no treaty-based withholding relief on dividend or royalty payments from the US to Dubai. Withholding on royalty payments from US MSO to Dubai LLC is 30% under IRC Section 881 unless reduced by another mechanism (check-the-box election eliminates this issue). This is a significant cost that must be priced into the model. If structured as a CFC, get specific counsel on IRC Section 954(c)(6) before the first inter-company royalty payment. ### Net Effective Rate Estimate Under CFC structure (corporate Dubai LLC, no check-the-box): - UAE CT at 9% on profit retained in Dubai (if not QFZP-qualifying) - US GILTI inclusion at approximately 22% for individuals on top (non-creditable against each other) - Combined: approximately 28-31% on IP/services income flowing to Dubai, before state tax - Plus 30% US withholding on royalties at source if no check-the-box (partially offset by foreign tax credits, but complex) Under check-the-box (pass-through): - US individual ordinary income at approximately 37-40.8% (federal + NIIT) - UAE CT at 9% may or may not apply depending on classification under UAE rules - Simpler, likely 35-41% effective rate, but no international deferral Both paths require a US international tax attorney before first transaction. --- ## SECTION 5: DATA RESIDENCY AND HIPAA **Confidence: HIGH on all five sub-questions. Research confirms the recommended architecture is compliant.** ### Can PHI be Stored in Dubai? PHI should not be stored in Dubai or UAE-based servers. While HIPAA does not contain an explicit geographic restriction, the HIPAA Security Rule requires covered entities to implement risk-appropriate safeguards for all ePHI, including assessing legal risks posed by foreign jurisdictions. UAE data regulations and potential government access create material compliance risk. Best practice, and the standard adopted by all HIPAA compliance frameworks, is US-region cloud storage for PHI. ### Recommended Data Architecture **US-region cloud (PHI):** All patient records, clinical notes, audio transcriptions (Deepgram output), scheduling data containing identifiers, and any data element meeting the HIPAA definition of PHI to remain on US-region infrastructure. **Dubai/global servers (non-PHI):** Aggregated analytics, de-identified operational metrics, platform usage data, brand assets, IP, and any data that has been de-identified under the HIPAA Safe Harbor or Expert Determination methods. **Strict segregation:** Platform architecture must ensure the Dubai LLC's systems never receive a data feed containing PHI. The Dubai entity licences the platform; it does not operate the HIPAA-relevant data layer. ### Dubai LLC as Business Associate The Dubai LLC is NOT a HIPAA Business Associate if it does not access, process, receive, maintain, or transmit PHI. IP licensing and platform provision, where the platform is operated by the US PC with PHI-access controls entirely within the US entity, does not create Business Associate status. The MSA-1 agreement should explicitly state: "Licensor [Dubai LLC] does not access, process, or store Protected Health Information as defined under HIPAA. Licensor is not a Business Associate of Licensee." ### Required BAAs for the US PC The US PC (Covered Entity) must execute signed BAAs with: - **AWS:** AWS Business Associate Addendum for any HIPAA-eligible services in US regions - **Supabase:** HIPAA Add-On with BAA (available; requires HIPAA configuration, Row Level Security, audit logging enabled) - **Deepgram:** BAA required if transcribing any audio containing PHI (patient encounters, clinical assessments) - **Zoho:** If Zoho CRM or Zoho Books is used for patient-identified records, a BAA with Zoho (available under Business/Enterprise plans) - **Any telehealth platform or scheduling tool** that handles patient-identified data The US MSO (if it acts as a Business Associate of the PC by processing billing or scheduling data) must also sign a BAA with the US PC. --- ## SECTION 6: TOP 5 RISKS, RANKED **Confidence: HIGH on risk identification. MEDIUM on probability estimates (based on public enforcement data and legal commentary, not actuarial data).** ### Risk 1: CFC/GILTI Tax Creep (HIGHEST PRIORITY) **Risk:** Kelly and Elizabeth as 100% US owners of a Dubai CFC face annual GILTI and Subpart F inclusions regardless of distributions. At scale, the Dubai structure generates less tax efficiency than projected due to: (a) UAE 9% not crediting against GILTI, (b) 30% US withholding on royalties absent a treaty, (c) potential IRS recharacterisation of MSA fees as Subpart F FPHCI. The structure may cost more in tax than a pure US domestic structure. **Probability:** HIGH. This is the default outcome under current law absent specific structuring. **Impact:** HIGH. Could reduce the economic benefit of the Dubai structure to near-zero or negative. **Mitigation:** Engage US international tax counsel (ideally a Big 4 or specialised international tax firm) before any inter-company transaction. Model the check-the-box election vs. CFC route. Get a transfer pricing study done before the first MSA payment. Consider whether UAE structure is even the right answer at sub-$5M annual revenue. ### Risk 2: CPOM Violation in California (SB 351 Exposure) **Risk:** California SB 351 (effective 01 January 2026) strengthened CPOM enforcement and empowered the California Attorney General to pursue MSOs that exercise clinical influence. If the Dubai LLC or US MSO structure inadvertently gives non-physician principals (Kelly, Dubai LLC) operational control over the PC's clinical operations - through technology platform controls, physician scheduling, EHR access, or performance metrics tied to clinical outputs - SB 351 creates enforcement risk. Penalties include voiding of the MSA, injunctions, and referral to the Medical Board of California for Elizabeth's licence. **Probability:** MEDIUM. Requires active violation, but digital health platforms can blur clinical/non-clinical lines. **Impact:** VERY HIGH. MSA void = US entity without management infrastructure; Elizabeth's licence at risk; platform shutdown. **Mitigation:** Legal audit of all platform features that touch clinical workflows before CA launch. Separate clinical decision tools (EHR, clinical protocols) from administrative tools (scheduling, billing) at the architecture level. Ensure Elizabeth has documented unilateral clinical authority that is not technically overridable by platform settings. ### Risk 3: Transfer Pricing IRS Audit (IRC Section 482) **Risk:** Inter-company IP licensing payments and management service fees between the US MSO and Dubai LLC are a frequent IRS audit target. If the MSA fee is set to maximise Dubai profit (i.e., above arm's length), the IRS can reallocate income back to the US entity under Section 482, creating underpayment, penalties, and interest. UHNW medical services with Dubai IP holding is a pattern flagged in IRS priority guidance. **Probability:** MEDIUM. Likelihood increases with revenue scale and if fees are not documented. **Impact:** HIGH. IRS reallocation, 20-40% accuracy penalties, back interest. **Mitigation:** Commission a contemporaneous IRC Section 482 transfer pricing study from a qualified economist before the first payment. Document the cost-sharing or licencing arrangement in a written agreement. File Form 5472 (inter-company transactions with foreign-related party) annually without exception. ### Risk 4: California AB5 and In-Residence Nurse Contractors **Risk:** California's AB5 (worker classification law) uses the ABC test for independent contractor status. Nurses and allied health professionals delivering in-residence services in California could be classified as employees of the US PC, not independent contractors, if the PC (a) controls their work, (b) their work is central to the business, and (c) they do not independently run their own nursing practice. Healthcare-licensed workers have a partial Borello exemption from the ABC test, but it is not absolute for RNs providing services to a single medical practice. **Probability:** MEDIUM. AB5 enforcement has been aggressive in CA since 2020. In-residence clinical services are central to the business model. **Impact:** HIGH. Reclassification triggers back payroll taxes, workers' compensation liability, benefits obligations, and NLRA exposure. **Mitigation:** Structure in-residence nurses as licensed independent practices with multiple clients, or employ them directly as W-2 employees of the PC from launch. Model the cost difference between 1099 contractor and W-2 employee before the CA operational model is finalised. Get CA employment counsel opinion before contracting with first CA nurse. ### Risk 5: UAE Economic Substance Failure **Risk:** The Dubai LLC receives MSA-1 income (IP licence fees + management service fees from US MSO). IP licensing by a free zone company is a "Relevant Activity" under UAE Economic Substance Regulations. To pass ESR, the Dubai entity must have: adequate qualified employees physically in the UAE, adequate UAE operating expenditure, and CIGAs (core income-generating activities) performed in the UAE. The platform is built, the IP is held, and the decisions are made from the US. A virtual office does not satisfy ESR. Annual ESR notification and report are required. Failure results in AED 50,000-400,000 penalties and potential automatic exchange of information with US tax authorities under OECD frameworks. **Probability:** MEDIUM-HIGH if substance is not actively maintained. **Impact:** MEDIUM. Financial penalties and reputational risk; also jeopardises QFZP free zone tax status. **Mitigation:** Budget for a UAE-based manager (local director or contracted administrator) who performs documented CIGAs. Maintain a physical serviced office (not virtual). Retain a UAE ESR advisory firm for annual compliance. Consider whether genuine UAE substance is feasible given the founders' US residence, and if not, whether the Dubai structure makes economic sense. --- ## SOURCES 1. CPOM 50-state guide, Permit Health (2025): https://www.permithealth.com/post/the-corporate-practice-of-medicine-50-state-guide 2. California SB 351 analysis, Health Law Advisor (2025): https://www.healthlawadvisor.com/california-governor-signs-sb-351-strengthening-the-states-corporate-practice-of-medicine-doctrine 3. UAE free zone corporate tax and QFZP rules, PWC UAE Tax Summaries (2025): https://taxsummaries.pwc.com/united-arab-emirates/corporate/tax-credits-and-incentives 4. UAE Economic Substance Regulations FAQ, Ministry of Finance UAE: https://mof.gov.ae/wp-content/uploads/2022/08/Economic-Substance-Regulations-Frequently-Asked-Questions.pdf 5. GILTI and Subpart F income, Grant Thornton 2026 International Tax Planning Guide: https://www.grantthornton.com/insights/alerts/tax/2025/legislative-updates/2026-international-tax-planning-guide 6. HIPAA Business Associate Agreement, HIPAA Journal: https://www.hipaajournal.com/hipaa-business-associate-agreement/ 7. Supabase HIPAA compliance documentation: https://supabase.com/docs/guides/security/hipaa-compliance 8. IFZA vs DMCC comparison, FreeZoneCompare: https://freezonecompare.com/compare/ifza-vs-dmcc/ 9. CFC rules and Dubai company, The Key Advisory (2026): https://thekeyadvisory.com/controlled-foreign-corporation-rules-and-your-dubai-company-the-2026-guide-for-international-founders/ 10. New York CPOM S8442 bill: https://www.nysenate.gov/legislation/bills/2025/S8442 --- ## CONFIDENCE ASSESSMENT SUMMARY | Section | Confidence | Key Uncertainty | |---|---|---| | 1. Dubai entity | HIGH (structure), MEDIUM (exact costs) | ESR virtual office rule confirmed; QFZP IP licensing qualification requires specialist UAE tax opinion | | 2. US entity / CPOM | HIGH | CA SB 351 implementation details evolving in 2026 | | 3. How they connect | HIGH (structure), MEDIUM (TP percentages) | Arm's length range for UHNW medical services MSA fees lacks published comparable data | | 4. US tax / CFC/GILTI | HIGH (rules), MEDIUM (effective rate) | Rate estimates are pre-planning; check-the-box election modelling changes the answer | | 5. HIPAA / data residency | HIGH | Architecture is well-established; Dubai-specific UAE data law risk is LOW given PHI stays in US | | 6. Top 5 risks | HIGH (identification), MEDIUM (probability) | Probability estimates are qualitative; no actuarial data for this specific structure | --- ## RECOMMENDED NEXT STEP Engage a **US international tax attorney with UAE and healthcare experience** (specifically one who handles CFC/GILTI planning and IRC Section 482 transfer pricing for services companies) for a **structure opinion letter covering: (1) check-the-box election analysis for the Dubai LLC, (2) Subpart F treatment of inter-company royalties, (3) 30% withholding exposure on MSA fees, and (4) a preliminary transfer pricing methodology for the MSA-1 fee.** This single engagement is the highest-leverage first step and will determine whether the Dubai holdco structure is economically viable at the planned revenue scale before any incorporation costs are incurred. Secondary engagement: a **California healthcare attorney specialising in CPOM and MSO structures** to review the friendly-PC stock restriction agreement and MSA-2 draft before the CA PC is incorporated, given SB 351's January 2026 effect.