What ADHICS Actually Costs in Abu Dhabi
The honest breakdown — platform, advisor, TRBA audit, remediation and the hidden line items most quotes leave off. Numbers for Basic, Transitional and Advanced tiers below.
The six cost components
Every ADHICS programme has the same six moving parts. The spread between a well-run and poorly-run programme is almost entirely in components 2 (advisor billable hours), 4 (technical double-pay) and 5 (quarterly reporting ongoing cost).
Platform & policy pack
ADHICS-aligned policy pack across all 12 control families, Statement of Applicability builder, risk register and vendor register.
Dedicated advisor
ADHICS-experienced advisor runs the readiness programme, mock TRBA interviews and the first quarterly report with you.
TRBA audit fee
Paid to the DoH-approved audit firm. Scales with facility size, tier and in-scope sites.
Technical remediation
MFA rollout, encryption, logging, backup testing. Most ePHI-handling tools are already in your stack — LowerPlane maps them to ADHICS controls.
Quarterly compliance reporting
Report prep, data aggregation, submission to DoH every quarter.
Malaffi connection controls
Authentication, logging and access review for HIMS connections into Malaffi.
Cost by ADHICS tier
Three tier bands, three cost bands. The platform fee is flat per tier — audit fees scale with facility size and in-scope sites.
Basic
Transitional
Advanced
The hidden costs most quotes miss
Five line items drive the gap between what you were quoted and what you actually pay by audit day. Watch for these up front.
Re-doing a Statement of Applicability
A single corporate SoA is not accepted. Each DoH-licensed facility needs its own, which doubles or triples the work on multi-site contracts.
Vendor contract rework
Existing HIMS and processor contracts rarely contain ADHICS-aligned clauses. Legal rework typically adds AED 20,000–40,000 to the first-year programme.
Late or missing quarterly reports
A missed quarterly submission becomes a major finding at the next TRBA audit. The cost is remediation, not the submission — expect double-digit hours per missed quarter.
90-day findings window expiring
If a finding is still open past 90 days, DoH can escalate to a licensure review. The cost is the licence itself — not an abstract fine.
Audit scope creep
TRBA audit fees are quoted on confirmed scope. Scope changes mid-engagement — new sites, new systems — trigger change orders. Lock scope before the engagement letter.
What LowerPlane includes
Everything except the audit fee paid directly to your DoH-approved audit firm:
- ADHICS-aligned policy pack and Statement of Applicability builder
- Dedicated advisor through readiness, mock interviews and the first quarterly report
- Pre-filled quarterly report workflow with DoH submission guidance
- Finding tracker with 90-day timer per item from your TRBA report
- Vendor register with ADHICS-aligned contract clauses
- Malaffi connection control pack
- ISO 27001 and SOC 2 mapping for Growth tier and above
See the full pricing page or ADHICS platform overview.
Frequently asked questions
Is the TRBA audit fee included in LowerPlane pricing?
No. The TRBA audit fee is paid directly to the DoH-approved audit firm you engage. LowerPlane covers the platform, dedicated advisor, policy pack, quarterly report workflow and remediation tooling — everything up to the audit itself.
How much does a TRBA audit cost?
TRBA audit fees vary by facility size, tier and the number of in-scope sites. Expect AED 25,000–40,000 for a Basic-tier single-site clinic, AED 40,000–75,000 for Transitional-tier multi-site providers, and AED 100,000+ for Advanced-tier hospitals. Firms quote directly to the facility.
Do I need a consultant on top of LowerPlane?
Most of our Abu Dhabi healthcare customers do not. Your dedicated LowerPlane advisor runs the readiness programme, mock interviews and quarterly report workflow. Facilities with complex clinical estates or Advanced-tier hospitals sometimes bring in a specialist consultant for a specific gap — not for the full programme.
What does ADHICS cost if I run it in-house?
In-house programmes typically land at AED 180,000–350,000 for year one when you count the information security hire or allocation, policy drafting, control implementation, audit prep hours and quarterly reporting work. The hidden cost is the delay — in-house programmes typically take 4–6 months to reach TRBA-ready.
Can I pay in AED?
Yes. Our Abu Dhabi healthcare customers are invoiced in AED or USD depending on preference, with pricing fixed at the start of the contract.
Want a quote for your facility?
Share your facility type, tier and number of in-scope sites. We’ll come back with a line-item quote within one business day.
Request an ADHICS Quote