Prompt
Legal AI prompts: Compliance / Due Diligence
33 prompts you can paste straight into HAQQ or any other assistant. Every one is written out in full - open it, copy it, change the bracketed parts.
Objecting to a VAT Assessment in the UAEChecklistAdvancedPersonal Tax
My client received a VAT assessment and penalties from the Federal Tax Authority dated [date] for [amount] covering tax periods [periods]. Set out the objection route end to end: 1. Each stage in order — reconsideration request to the FTA, objection to the Tax Disputes Resolution Committee, appeal to the competent court — with the deadline for each and the date it runs from. 2. The preconditions for moving to the next stage, including any requirement to settle tax or penalties first. 3. What each submission must contain to be admissible, and the language it must be in. 4. The grounds most likely to succeed on these facts, separating challenges to the assessment itself from challenges to the penalty. 5. A dated action calendar working backwards from the assessment date, flagging the first deadline that is already at risk. Mandatory rules: cite the Tax Procedures Law and its Executive Regulations for every deadline. Where a deadline is counted in business days rather than calendar days, say so. If a rule has changed recently, flag that its current form must be verified before filing.
Share Transfer Consents in an ADGM CompanyChecklistAdvancedCorporate Governance
For a company limited by shares registered in [ADGM / DIFC], a shareholder wants to transfer [percentage]% to [an existing shareholder / a third party]. Produce a consent and filing checklist: 1. Which consents are required — board, shareholders, or both — and where that requirement comes from: the regulations, the model articles, or the company's own articles. 2. Pre-emption rights: whether they apply by default, how they are waived, and the notice periods. 3. The register and filing steps with the registration authority, in order, with the deadline for each. 4. Any regulatory approval triggered by the identity of the transferee or the size of the stake. 5. The documents to be signed on completion, listed as a closing checklist. Mandatory rules: name the specific regulation and section for each requirement. State clearly where the answer depends on the company's own articles rather than the default rule, and tell me exactly which article to read. Do not answer for onshore UAE unless I ask.
Cross-Border SaaS: Hosting, Users and RegulatorMemoEnterprisePrivacy & Data Protection
A software company in [country] is selling a SaaS contract to a [bank / regulated entity] in [country]. Data will be hosted in [location], with end users across [countries]. Advise the software company: 1. Which data protection regimes actually apply, and on what connecting factor for each — establishment, targeting, the location of the data, or the customer's own regulatory obligations flowing down. 2. The transfer mechanism needed for each cross-border flow, and whether hosting in a third country changes it. 3. What the customer's financial regulator will require of us as an outsourced service provider: audit rights, sub-processor approval, exit assistance, records retention, incident notification windows, and the regulator's own right of access. 4. Data localisation or residency rules that would defeat the proposed hosting location outright — this is the question that kills deals, so answer it early. 5. The contractual package: which of these belong in the MSA, the DPA and the security schedule, and what our fallback is on each of the three points the bank will not move on. 6. A dated action list for getting to signature. Mandatory rules: name each law and article. Where a rule is issued by a regulator rather than a statute, say which regulator and which circular. Where you are not certain a requirement is in force, mark it for verification rather than stating it flatly.
Registering an Investment Fund With the CMAChecklistEnterpriseFinTech / Payments
Act as CMA counsel. A [foreign / locally licensed] entity wants to register a [public / private / simplified] investment fund in Saudi Arabia to invest in [describe the strategy and asset class]. Set out the conditions: 1. Whether the sponsor itself needs a CMA licence to act as fund manager, and which activity that licence covers — this determines whether the whole plan is possible before anything else matters. 2. Every condition for registering a fund of this specific type: minimum capital, permitted investors, custodian and administrator requirements, board or committee composition, and the auditor. 3. What must be in the terms and conditions document, and the disclosures the CMA will require for this asset class. 4. The filing route: forms, language, fees, the review timeline, and what typically triggers a second round of comments. 5. Ongoing obligations after registration: reporting, valuation frequency, disclosure, and the events requiring prior CMA approval. 6. Where a foreign sponsor is treated differently from a local one, in a two-column table. Mandatory rules: cite the CMA rules, the Investment Funds Regulations and the Capital Market Law by name and article. These rules change; where you cannot confirm the current version, mark the item for verification against the CMA's own published rulebook rather than stating it as current.
How Long It Takes to Incorporate in KSAChecklistAdvancedSmall Business
How long does it take to incorporate a [startup / subsidiary / branch] in Saudi Arabia, with [local / foreign / mixed] ownership in the [sector] sector? I want the real answer, not a brochure number. Give me: 1. Every step in order, with the authority that handles it, the realistic elapsed time for each, and what can run in parallel. 2. The steps that gate everything downstream — the foreign investment licence, the commercial registration, the national address, the Chamber of Commerce, the tax and zakat registration, the GOSI registration, the bank account. 3. The bank account specifically: say plainly that it is usually the longest single step and why, and what to prepare in advance. 4. Sector-specific approvals that apply to [sector] and where in the sequence they fall. 5. A realistic total in weeks, given as a range with the assumption behind each end of it, plus the three things that most often add a month. 6. What has to be legalised or attested abroad before anything can start, since that lead time sits outside the country. Mandatory rules: state clearly where the timing is a published service-level commitment and where it is practice. Do not present a portal's advertised turnaround as the real one. Flag anything that has changed recently and should be re-confirmed.
Licensing an Islamic Bank in IraqChecklistEnterpriseIslamic Finance & Sharia
What does it take to license an Islamic bank in Iraq under Iraqi law? Produce a full formation checklist. Deliverables: 1. The legislative basis: the Islamic Banking Law, the Banking Law and the Central Bank of Iraq's instructions, and which of them governs which question. 2. The capital required, how it must be paid up, the deposit deadlines, and any requirement that it stay blocked. 3. Founders and shareholders: permitted ownership percentages, solvency and fit-and-proper requirements, and restrictions on foreign ownership. 4. Sharia governance: composition of the Sharia supervisory board, the conditions of membership, its powers, internal Sharia audit, and how all of that relates to the board of directors. 5. The licensing route step by step: preliminary approval, documents, review period, final approval, and the conditions for commencing business. 6. Ongoing requirements: capital adequacy, anti-money laundering, periodic reporting, and restrictions on financing structures. 7. Where the requirements differ from a conventional bank, in a table. Mandatory rules: cite the law, the article and the Central Bank instruction number. Where you cannot confirm a figure, a percentage or a deadline, write "to be verified with the Central Bank of Iraq" rather than giving an approximate number. A wrong capital figure in a formation memorandum costs the client the whole deal.
Privacy Impact AssessmentReportAdvancedPrivacy & Data Protection
Conduct a privacy impact assessment for [Company's] proposed [project/system/product] that will process [describe personal data]. Identify privacy risks, assess necessity and proportionality, evaluate safeguards, and recommend mitigating measures per GDPR Article 35.
Cross-Border Data Transfer AssessmentMemoAdvancedPrivacy & Data Protection
Assess the lawfulness of transferring personal data from [origin country/region] to [destination country]. Analyze adequacy decisions, appropriate safeguards (SCCs, BCRs), supplementary measures needed, and risks per Schrems II requirements.
E-Money License Application MemoMemoEnterpriseFinTech / Payments
Prepare a memo outlining the requirements for [Company] to obtain an e-money license in [jurisdiction]. Cover capital requirements, governance, AML/KYC obligations, safeguarding requirements, and application process timeline.
Cross-Border Payment Compliance ReviewReportExpertFinTech / Payments
Conduct a compliance review of [Company's] cross-border payment operations covering licensing requirements, sanctions screening, FX regulations, correspondent banking relationships, and regulatory reporting obligations in [jurisdictions].
Stablecoin Issuance FrameworkMemoEnterpriseFinTech / Payments
Prepare a legal framework memo for [Company] planning to issue a stablecoin in [jurisdiction]. Address reserve requirements, regulatory classification, redemption rights, audit requirements, consumer disclosures, and applicable regulations (MiCA, state money transmission, etc.).
Due Diligence Request ListChecklistAdvancedCorporate / M&A
Prepare a comprehensive due diligence request list for the acquisition of [Target Company] in the [industry] sector. Cover corporate documents, financials, material contracts, IP, real property, employment, litigation, regulatory compliance, and IT/data.
IP Due Diligence ChecklistChecklistAdvancedIP / Licensing
Create an IP due diligence checklist for evaluating [Target Company's] intellectual property portfolio in connection with [M&A transaction/investment]. Cover patents, trademarks, copyrights, trade secrets, licenses, assignments, encumbrances, and litigation.
Convert Law Into ChecklistChecklistStandardCorporate / Commercial
Convert the following legal provision into a practical compliance checklist for professionals.
Regulatory Change Impact AssessmentReportExpertCorporate / Commercial
Analyze the impact of [new regulation/amendment] on [company/industry]. Identify affected operations, compliance gaps, required policy changes, implementation timeline, and risk mitigation strategies.
Regulatory Filing ChecklistChecklistStandardCorporate Governance
Create a comprehensive checklist for regulatory filings required for [company type] in [jurisdiction]. Include annual filings, change notifications, beneficial ownership disclosures, financial reporting deadlines, and penalties for late submission.
Vendor Risk Assessment QuestionnaireChecklistStandardCorporate / Commercial
Create a vendor risk assessment questionnaire covering data security practices, compliance certifications, business continuity planning, subcontractor management, insurance coverage, financial stability, and incident notification procedures.
Divorce Document ChecklistChecklistStandardFamily Law
Produce a complete checklist of documents I need to gather for an uncontested divorce in [jurisdiction]: financial, parenting, real estate, retirement and tax records.
Move-Out ChecklistChecklistStarterHousing & Tenancy
Produce a move-out checklist for [type of rental] in [jurisdiction] that maximizes my chances of getting the full deposit back: cleaning, repairs, photos, meter readings, forwarding address and inspection.
Short-Term Rental ComplianceChecklistStandardHousing & Tenancy
List the licensing, registration, tax, insurance and HOA rules I need to comply with before listing my [property] in [city] on a short-term rental platform.
Pay Equity AuditChecklistAdvancedEmployee Rights
Build a self-assessment checklist to evaluate whether I am being paid fairly compared to peers in my role, considering experience, location, market data and protected characteristics.
Executor Duties ChecklistChecklistAdvancedEstate Planning
Build a checklist for an executor administering an estate: notifying institutions, inventory, valuations, debts, taxes, distributions and final accounting in [jurisdiction].
Beneficiary DesignationsChecklistStandardEstate Planning
Build a checklist to review and update beneficiary designations on retirement accounts, life insurance, payable-on-death accounts and digital wallets to match my estate plan.
Marriage Visa EvidenceChecklistStandardImmigration
Build a checklist of evidence to prove a genuine relationship for a spouse / partner visa to [country]: photos, communications, finances, travel, family statements and a relationship timeline.
Status MaintenanceChecklistStandardImmigration
Build a yearly checklist for maintaining my [residence / visa] status in [country]: physical presence days, tax filings, address changes, renewal deadlines and travel restrictions.
VAT RegistrationChecklistStandardPersonal Tax
Build a checklist for VAT / sales-tax registration for my freelance activity in [jurisdiction] above [threshold]: registration, invoicing, returns, reverse charge and digital tools.
Regulatory Compliance CalendarChecklistAdvancedLegal Ops / Billing
Build a compliance calendar for [Company] covering recurring filings, renewals, and reporting deadlines under [list regulations or licenses]. For each item, show the trigger, how far in advance to start preparing, the internal owner, and the consequence of missing it. Flag any deadline you are not fully certain about as [CONFIRM DATE WITH REGULATOR/COUNSEL] instead of guessing a date.
Subpoena and Third-Party Records Request ChecklistChecklistAdvancedLegal Ops / Billing
Build a response checklist for when [Company] receives a subpoena or third-party records request in [jurisdiction]. Cover: confirming the deadline to respond or object, who internally needs to be notified immediately, whether the request calls for privileged or confidential material, the process for a privilege log if documents are withheld, notifying affected employees or customers if required, and the objection grounds available if the request is overbroad. Mark every jurisdiction-specific deadline or procedural rule as [CONFIRM WITH LOCAL COUNSEL] instead of assuming a default rule applies.
GCC Employment Termination: Notice, End-of-Service and Local EnforceabilityMemoExpertEmployment
Act as employment counsel advising [EMPLOYER] on terminating [EMPLOYEE ROLE] in [JURISDICTION: e.g. UAE mainland, DIFC, ADGM, Saudi Arabia, Qatar, Bahrain, Kuwait or Oman]. Facts: [CONTRACT TYPE, START DATE, SALARY STRUCTURE, REASON FOR TERMINATION, WARNINGS ON FILE, VISA OR SPONSORSHIP STATUS]. Ground every entitlement in the article of the applicable labour law or free-zone employment regulation and cite it; where you cannot cite it, say so and mark it for local-counsel confirmation rather than estimating a figure or a period. Return: (1) Termination Route — the legal grounds available in [JURISDICTION], and which of them these facts actually support, with the article for each; (2) Notice — the notice required by the statute and by the contract, which one governs, and how payment in lieu is treated; (3) End-of-Service Entitlements — the components to calculate (end-of-service gratuity or its local equivalent, accrued untaken leave, repatriation, and any pension or savings-scheme contribution that applies), each with its formula inputs and its article; (4) Enforceability Reality Check — which contractual terms are actually enforced locally and on what basis (non-compete scope and duration, garden leave, clawback, notice longer than the statutory minimum, waiver of statutory rights, settlement releases); (5) Immigration and Sponsorship Steps — work permit and visa cancellation, grace period, dependants and exit formalities to confirm; (6) Process and Evidence — the warnings, records, investigation steps and documents to have on file before the termination letter is issued; (7) Claim Exposure — how the employee would frame a claim, the forum that hears it, the limitation period to confirm, and the practical timeline; (8) Action Plan and Open Questions — sequenced steps with owners, and the questions for local counsel. This is a drafting aid for a qualified local practitioner, not legal advice.
Obligation Calendar Under a Named MENA Data Protection LawChecklistExpertPrivacy & Data Protection
Act as privacy counsel building an obligation calendar for [ORGANISATION], a [SECTOR] business processing personal data of individuals in [COUNTRY], under [NAMED LAW — for example the Saudi Personal Data Protection Law (Royal Decree M/19) and its Implementing Regulations, UAE Federal Decree-Law No. 45 of 2021, DIFC Data Protection Law No. 5 of 2020, Bahrain Law No. 30 of 2018, or Qatar Law No. 13 of 2016]. Work only from that named law and its implementing regulations. Cite the article for every obligation; where a deadline, threshold, fee or retention period is not stated in the text you are working from, write "not specified in source — confirm" rather than supplying a number. Return: (1) Applicability — whether and why the law reaches this organisation, including any extraterritorial hook, sector carve-out or free-zone regime that displaces it; (2) Registration and Filings — any registration, licence, appointment or regulator notification, with the article and the event that triggers it; (3) Recurring Obligations — a calendar of what must be done and on what cadence (records of processing, impact assessments, reviews, training, audits), each with article, internal owner and frequency; (4) Event-Driven Deadlines — the clock that starts on a personal-data breach, a data-subject request, a cross-border transfer or a change of processor, with the article and how the period is counted; (5) Cross-Border Transfer Conditions — the permitted grounds, any approval or adequacy step, and any localisation requirement, each cited; (6) Roles and Contract Terms — whether a data protection officer or local representative is required and on what trigger, the controller-processor split, and the clauses the law requires in processor agreements; (7) Enforcement Exposure — the sanctions the law itself provides for, quoted from the text, with no estimate of likelihood; (8) Gap List and Evidence — measured against [CURRENT PRACTICE], what is missing and what artefact [ORGANISATION] must be able to produce to demonstrate compliance, plus the open questions for local counsel. Current practice: [DESCRIBE].
Sukuk Structure and AAOIFI Compliance ReviewChecklistEnterpriseIslamic Finance & Sharia
Act as capital markets counsel reviewing a proposed sukuk issuance by [ORIGINATOR] of [SIZE AND CURRENCY], structured as [ijara / murabaha / mudaraba / musharaka / wakala / hybrid], issued through [SPV AND ITS JURISDICTION], listed on [EXCHANGE], with governing law [GOVERNING LAW] and underlying assets in [COUNTRY]. The question the whole review turns on is whether certificate-holders own a real interest in identified assets or only a claim against the originator dressed as ownership — answer it explicitly. Do not state an AAOIFI Sharia standard, a listing rule or a local-law position you cannot attribute to a named source; mark it To Be Confirmed and refer it to the Sharia Supervisory Board or local counsel. Return: (1) Structure Diagram in Words — each party, each contract between them, and the direction of every cash flow from subscription to redemption; (2) Asset Test — what the certificate-holders actually own, whether the assets are identified and transferable under the law of [COUNTRY], and whether true sale or only beneficial transfer is achieved; (3) AAOIFI Alignment Checklist — the standards engaged by this structure, and for each one a Met / Gap / To Be Confirmed line with the drafting or structural change needed; (4) Purchase Undertaking Analysis — how the redemption obligation is drafted, whether it prices at par or at market or asset value, and why that distinction matters for the ownership-risk question; (5) Enforcement Reality — what a certificate-holder can actually enforce against, in which forum, and whether the asset transfer would be recognised on the originator's insolvency in [COUNTRY]; (6) Disclosure Gaps — the Sharia, asset, tax and enforcement risk factors the offering document should carry, with a draft heading for each; (7) Approvals and Filings — Sharia board pronouncement, regulator approval, listing, asset-registry and tax steps in sequence with owners and lead times; (8) Decision Memo — the three structural issues most likely to stop this deal, and the question to put to the Sharia Supervisory Board on each. This is a review aid for a qualified practitioner, not legal, tax or Sharia advice.
Notarisation, Legalisation and Apostille ChainChecklistAdvancedLegal Ops / Billing
Act as the lawyer responsible for getting documents accepted abroad. The file is [TRANSACTION OR MATTER]. Documents to move: [LIST, with who issued each and where]. Country of origin: [COUNTRY A]. Country where they must be accepted: [COUNTRY B]. Receiving body: [COURT / COMPANY REGISTRY / LAND REGISTRY / BANK / IMMIGRATION AUTHORITY / NOTARY]. Work out the authentication chain end to end. The chain depends on whether both countries are parties to the Hague Apostille Convention — several states in the region are and several are not, and the difference is a single stamp versus a multi-step consular route that can add weeks. Confirm the current status of both countries against an official source rather than assuming it, and say plainly where you have not confirmed it. Return: (1) Route Decision — apostille route or consular legalisation route, with the source you checked for each country's status and the date you checked it; (2) Step Table — for each document, the ordered steps (notary, chamber of commerce, issuing ministry, foreign ministry, embassy or consulate, receiving-country foreign ministry), with the body, the fee if known, and the realistic turnaround; (3) Translation Point — at which step the translation must be made, whether it must be done by a translator licensed in the destination country, and whether the translation itself is authenticated; (4) Form Traps — originals versus certified copies, documents that expire, signature and seal requirements, documents that a notary will not certify, and language of the underlying document; (5) Corporate Documents — the extra layer for board resolutions, powers of attorney and certificates of incorporation, including who must appear and what proof of authority the notary will demand; (6) Critical Path — the sequence laid on a calendar working backwards from [DEADLINE], showing which steps can run in parallel and which cannot; (7) Failure Modes — the three most common reasons the receiving body rejects a pack, and the check that catches each before submission; (8) Confirmation Questions — the short list to put to the receiving body and to local counsel before starting, because a rejected chain has to be run again from the beginning. Confirm every step with the receiving authority; this is a planning aid, not legal advice.
Registered Commercial Agency: Protection and Termination ExposureMemoExpertCorporate / Commercial
Act as counsel advising [PRINCIPAL] on its distribution or agency arrangement with [AGENT OR DISTRIBUTOR] in [COUNTRY], covering [PRODUCTS] since [START DATE]. State whether the arrangement is [registered with the commercial agencies register / unregistered / registration status unknown], and what the principal wants to do: [terminate, decline to renew, appoint a second party, sell direct, or restructure]. In many civil-law and Gulf jurisdictions a registered agency gives the agent statutory protection that a contract cannot bargain away — exclusivity by operation of law, a renewal right, compensation on termination, and in some places the ability to block the principal's goods at the border. Establish the registration position first, because everything else turns on it. Do not state an agency-law rule, a compensation formula or a limitation period you cannot attribute to a named source; mark it To Be Confirmed for local counsel. Return: (1) Registration Position — how to verify whether this arrangement is registered, with whom, in whose name, and what the register entry itself would show; (2) Protection Map — the statutory rights that attach if it is registered, each stated as a question for local counsel with the article you believe grants it, and what changes if it is not registered; (3) Contract Versus Statute — the clauses in the current agreement that would not survive contact with the local statute (termination for convenience, chosen foreign law, foreign forum, waiver of compensation, non-exclusivity), each with what the local rule is likely to do to it; (4) Termination Routes — the grounds actually available, the notice and process for each, and which of them still triggers compensation; (5) Exposure Estimate — the heads of claim the agent could bring, how compensation is typically measured locally, and the inputs the principal must gather to size it, presented as a range with the assumptions marked; (6) Practical Leverage — what the agent can do while a dispute runs (customs block, registration held against a new appointee, refusal to deregister), and how long the principal would be out of the market; (7) Alternative Structures — restructuring to a supply or reseller arrangement, appointing a local entity, or negotiating an exit, with the trade-off and the deregistration step each needs; (8) Action Plan — sequenced steps with owners, the evidence to gather now, and the questions for local counsel before any notice is sent. This is a strategy aid for a qualified local practitioner, not legal advice.