A clinic manager with an ADHICS audit date and no idea where to start doesn't need a sales pitch. They need someone who knows what the auditor will ask for and who won't disrupt patient care. This guide to the top ADHICS compliance consultants in Abu Dhabi sets out who offers the service, and what makes each type of provider different.
How to read this list. Intello publishes this article and competes with the companies named in it, so Intello appears first. The rest are in alphabetical order, and the order is not a ranking. Details come from each company's own website, checked in November 2026, so please confirm them directly before you decide. No company paid to appear here. ADHICS is set by the Department of Health in Abu Dhabi. Confirm the current requirements with the regulator. If something is out of date, tell us and it will be corrected.
Three kinds of ADHICS provider
| Type | Strength | Watch for |
|---|---|---|
| Cybersecurity firm | Technical controls, testing, incident readiness | Less feel for clinical workflows |
| Healthcare IT specialist | Knows clinics, Shafafiya, Malaffi and day-to-day systems | Less depth in security testing |
| Audit or assurance firm | Evidence, documentation and audit discipline | May not carry out the fixes itself |
The list
| Company | Base | Focus |
|---|---|---|
| Intello Cyber Technologies | Dubai, on site in Abu Dhabi | Gap assessment, security, testing |
| DTS Solution | Abu Dhabi and Dubai | Security consulting |
| Glocert International | Dubai (DIP) | Healthcare assessments |
| HLB HAMT | Dubai (City Tower 2) | IT audit and assessment |
| ITSEC | Dubai and UAE | Regulator-focused security |
| Paramount | Dubai and Abu Dhabi | Healthcare security |
| Pure RCM | Abu Dhabi focus | Healthcare IT and RCM |
| Safecare Technology | Abu Dhabi (MBZ City) | Hospital software and ADHICS audit |
| ValueMentor | Abu Dhabi and Dubai | ADHICS penetration testing |
| Wattlecorp | UAE, India, US | ADHICS testing and code review |
1. Intello Cyber Technologies
Intello helps hospitals, clinics, pharmacies, insurers and health-tech suppliers meet ADHICS, the Abu Dhabi Healthcare Information and Cyber Security Standard. It assesses you against version 2, puts the right controls and policies in place, and prepares the evidence the Department of Health will review. Its office is in Dubai, and the team works on site in Abu Dhabi.
What Intello does. It first confirms your control level (Basic, Transitional or Advanced), then works across governance, risk management, policies, awareness, assets, access, third parties and cloud, and incidents and continuity. Its engineers can also carry out the technical fixes, or work alongside your IT team.
How Intello does it.
Scoping call (free). Your entity type, control level, facilities and systems in scope, and any DoH deadlines.
Gap assessment (weeks 1 to 4). Interviews, document review and technical checks against the ADHICS v2 controls, with each gap rated by risk.
Roadmap and quick wins (weeks 4 to 5). A prioritised plan with owners and dates, starting with Basic controls and anything exposing patient data today.
Policies and governance (weeks 4 to 10). The mandatory policy set, steering committee terms and risk register, written for your organisation and not copied from a template.
Technical remediation (weeks 6 to 20). Access control, logging, vulnerability management, backup, network and endpoint controls.
Internal audit and DoH readiness (final 3 to 4 weeks). A mock audit, a completed self-assessment and an evidence pack organised by domain.
A clinic or pharmacy at the Basic level typically takes 2 to 3 months, and hospitals at the Advanced level usually need 4 to 6 months.
Why Intello.
Compliance and engineering in one team, so the work doesn't stop at a gap report.
Sized to your facility. A clinic isn't sold a hospital project.
Testing in-house. Penetration testing is available when the evidence calls for it.
One programme across rules. ADHICS is mapped against other health regulators, ISO 27001 and the UAE IA Standard if you operate across emirates.
Call +971 55 355 6787 to book a free readiness check.
Worth a look if: you want compliance work and the security fixes from one team.
2. DTS Solution
With an office at Makeen Tower, DTS Solution has published guidance on ADHICS v2 and what changed from the first version, and offers compliance consulting and testing.
Worth a look if: you're a larger provider with complex infrastructure.
3. Glocert International
Glocert lists ADHICS within its healthcare assessment services, covering risk assessments and required controls.
Worth a look if: you'd like a structured assessment, perhaps alongside other certifications.
4. HLB HAMT
The IT audit and assessment team at HLB HAMT offers an ADHICS compliance service as part of a wider audit firm.
Worth a look if: you value audit discipline, and your finance team already knows the firm.
5. ITSEC
ITSEC has a page dedicated to ADHICS v2.0, and organises its work around UAE regulators, with CREST-certified testing as part of its offering.
Worth a look if: you want a security firm that works by regulator.
6. Paramount
Paramount says it tailors solutions for healthcare to meet ADHICS and Dubai Health Authority guidelines, and lists an Abu Dhabi entity.
Worth a look if: you run facilities in both Abu Dhabi and Dubai.
7. Pure RCM
Pure RCM is a healthcare revenue cycle and IT provider, with Abu Dhabi services such as Shafafiya and Malaffi consultancy alongside ADHICS compliance and cybersecurity audits.
Worth a look if: you're a clinic or pharmacy and want one partner who already knows your systems.
8. Safecare Technology
Safecare Technology has its head office at Mazyad Mall Tower 1 and builds hospital management software. It also offers an ADHICS audit service.
Worth a look if: you'd like a local healthcare technology provider.
9. ValueMentor
ValueMentor lists offices in both cities and offers penetration testing specifically for ADHICS, which is useful if your gap is on the testing side.
Worth a look if: you mainly need the testing evidence, not a full programme.
10. Wattlecorp
Wattlecorp has ADHICS-specific services, including source code review, and mentions health technology clients in Abu Dhabi.
Worth a look if: you build or customise healthcare software.
The 10 ADHICS providers compared
These columns come from each company's ADHICS page where it has one. Paramount mentions ADHICS on its home page without service detail. "Not stated" means it wasn't on the pages reviewed in November 2026, not that the company doesn't offer it. Ask each company directly.
| Company | Type | Gap assessment | Policies | Pen testing | Audit support |
|---|---|---|---|---|---|
| Intello | Security firm | Yes | Yes | Yes | Yes |
| DTS Solution | Security firm | Not stated | Yes | Yes | Not stated |
| Glocert International | Certification and assessment | Yes | Yes | Yes | Yes |
| HLB HAMT | Audit firm | Yes | Yes | Yes | Yes |
| ITSEC | Security firm | Yes | Yes | Yes | Yes |
| Paramount | Security firm | Not stated | Not stated | Not stated | Not stated |
| Pure RCM | Healthcare IT | Yes | Yes | Not stated | Yes |
| Safecare Technology | Healthcare software | Yes | Yes | Yes | Yes |
| ValueMentor | Security firm | Yes | Yes | Yes | Yes |
| Wattlecorp | Security firm | Yes | Yes | Yes | Yes |
Choose based on where you are
Picture two organisations. One is a three-site dental group with a thin IT team, whose priority is to get policies, access control and backups in order without disrupting appointments. The other is a hospital with connected devices, its own developers and several vendors. Those are different projects, and they shouldn't be bought from the same price list.
| Your situation | What to look for |
|---|---|
| Small clinic, little IT | Practical help, and a provider who knows clinic systems |
| Multi-site group | One programme across sites, and clear evidence for each facility |
| Hospital | Depth in security, medical devices, testing and third parties |
| Health tech vendor or supplier | Testing and code review, and clarity on what your clients need from you |
| Audit date in sight | Honest timing, and a focus on the most important gaps first |
Questions to ask
Have you worked with ADHICS v2? Ask what changed from the first version.
How many facilities like ours have you supported? And can you share a reference?
Who visits our site, and how often? Clinical teams need someone who understands their day.
What won't you do? Some providers advise only, and others only test.
How do you avoid disrupting patient care? Testing around clinical systems needs careful limits.
Do you claim any DoH endorsement? If so, ask for evidence, and check it with the regulator.
Before you speak to anyone, run through the ADHICS v2 compliance checklist, which will make those conversations more useful. Why ADHICS compliance is important can help you make the case to management, and our healthcare cybersecurity guide explains how ADHICS fits with other UAE rules.
Talk to Intello about ADHICS or contact us.
Frequently asked questions
Where can I find ADHICS compliance services in the UAE?
Cybersecurity firms, healthcare IT specialists and audit firms all offer them. This list covers 10 providers, but it isn't a ranking. Compare their ADHICS v2 experience, how often they'd be on site and what they actually deliver.
Does an ADHICS consultant need to be based in Abu Dhabi?
Not necessarily, as long as they can work on site when needed. Ask who visits your facility, how often, and whether they understand your clinical systems.
Can a consultant guarantee ADHICS compliance?
No. Compliance is assessed against the Department of Health's requirements. Be careful with any guarantee, or any claim of endorsement that you can't verify with the regulator.
What should a small clinic look for in an ADHICS consultant?
Practical help and experience with clinics. Look for someone who can prioritise access control, backups, policies and staff awareness without selling a hospital-sized project.
Who is ADHICS for?
It applies to healthcare entities regulated by the Department of Health in Abu Dhabi. Suppliers may also be asked to support it through contracts. Confirm your position with the regulator.
How long does ADHICS compliance take with Intello?
A clinic or pharmacy at the Basic level typically takes 2 to 3 months, while hospitals at the Advanced level usually need 4 to 6 months. It starts with a free scoping call to confirm your control level.