Free 5-minute check · UAEDirector's Risk Check for UAE portfoliosYour control score, the statutory deadlines at risk for your emirate, and a board-ready briefing. No sign-up to see your score.Run the 5-minute check →
If Dubai Civil Defence or Dubai Municipality asked you this afternoon for the current Legionella control records on your Dubai mall, could you name the file, the folder and the person who holds it?
Most heads of property with Gulf retail assets cannot answer that in one sentence. Not because the records do not exist, but because they sit with a managing agent, a contractor and a Mollak account that nobody in London or Singapore has opened this quarter.
The owner carries the duty, not the agent
You are the owner. The managing agent, the FM contractor and the local auditor all work for you, and the regulator treats the evidence as yours. Dubai Municipality publishes its expectations as numbered technical guidelines, and the ones that bite in a shopping centre are specific: Technical Guidelines (44) for Controlling Legionella in Water System, (125) for Health and Safety in Malls and Shopping Centers, (81) and (80) on public and private swimming pools, (120) for water features in public areas, (48) for examination and certification of lifts and lifting appliances, and (47) for boilers and pressure vessels.
Each of those is a document set, not a single certificate. Legionella control alone means a current risk assessment, a written scheme, temperature and biocide records, and the competence of whoever did the work. When a cooling tower or a decorative water feature in a mall atrium is implicated in a case, the inspector does not ask whether you have a contractor. The inspector asks to see the log.
Free 5-minute check · UAEDirector's Risk Check for UAE portfoliosYour control score, the statutory deadlines at risk for your emirate, and a board-ready briefing. No sign-up to see your score.Run the 5-minute check →What is a building condition audit in Dubai, in practice?
It is the point where all of that evidence is pulled together and tested. In a retail asset it usually starts with the physical condition of the building shell and the plant that serves it, then widens into the compliance records behind each system. A certified auditor or a specialist consultant reviews the asset, checks the documentation against what is actually installed, and produces a report that a regulator, an insurer or a buyer can rely on.
The Dubai Land Department maintains a published list of approved financial auditors, currently 29 records, which is where an owners association or a fund looks when it needs an independent party to sign something. You can see the Dubai Land Department list of certified auditors as it stands. That list is about accounts, not plant rooms, so do not assume the name on it covers your cooling tower. The condition audit is a separate exercise, and the person who signs it needs to have actually seen the building.
For a shopping centre, the audit typically covers the base build, the landlord plant, the common areas, the life safety systems, the water systems, the lifts and escalators, and the interface with tenant fit-outs. The last one is where portfolios get caught, because a tenant's grease trap, kitchen extract or back-of-house water tank can sit inside your building and outside your records.
Where the evidence usually lives, and where it goes missing
In most Gulf retail portfolios the records are spread across four places: the managing agent's drive, the FM contractor's portal, the Mollak system for owners association matters, and a shared inbox that nobody owns. The Dubai Land Department's owners association registration process runs through Mollak and requires documents such as a DEWA invoice in the owner's name, a trade licence where the unit is held by a company, and an Ejari tenancy registration certificate where relevant. That is the administrative layer. It is not the same as the technical layer, and the two are rarely reconciled.
What goes missing is predictable. The Legionella log for the quarter when the contractor changed. The lift examination certificate that expired while the renewal was in procurement. The pool water test results for the month the mall was quiet. The fire damper inspection that was done but never signed. None of these are dramatic failures on their own. Together they are the difference between a clean audit and a file that takes three weeks to assemble.
To understand how condition now feeds directly into rent and valuation in this market, the Dubai AI rental index and building condition piece sets out the link. The same evidence that satisfies an inspector is the evidence a buyer's diligence team will ask for.
What good looks like on the day
Good is not a thick report. Good is a single index, per building, that names each system, the regulation or guideline that applies, the current certificate or log, the date it was last checked, and the person who holds the original. When an inspector, an insurer or a buyer asks for Legionella controls, you open one folder and hand over the last twelve months of records in under ten minutes.
Three things make that possible. First, one named owner per building, not per portfolio, because a portfolio-level owner cannot answer for a specific mall. Second, a monthly reconciliation between what the contractor says was done and what is actually filed, which is a fifteen-minute task if it is done monthly and a fortnight if it is done annually. Third, a clear line between the administrative evidence in Mollak and the technical evidence in the FM system, so that neither is assumed to cover the other.
DEWA's mandatory energy audit requirements add a further layer to the same file, and the DEWA energy audit deadline is worth reading alongside this, because the data you need for one is largely the data you need for the other.
Your 60-second self-check
- Could you produce the current Legionella risk assessment and the last twelve months of control records for every retail asset you own in Dubai, today?
- Do you know which of your buildings has a lift or pressure vessel certificate due for renewal in the next ninety days, and who is chasing it?
- Can you name the single person who holds the original compliance file for each building, and would they answer the phone this week?
If any of those gave you pause, the fastest way to close the gap is to send the free 5-minute Director's Risk Check to the colleague who actually holds the records, and ask them to run it. It comes back as a control score for the portfolio and a board-ready briefing, which is the version you want in front of you before the next question arrives.
Herman's verdict
A building condition audit in Dubai is not a certificate you buy once and file. It is the standing proof that the building you own is being run to the standard the regulator, the insurer and the buyer each assume it is. If that proof lives in three systems and one inbox, you do not have it.
— Herman
Until next time — keep the evidence closer than the deadline.
Walk into your next senior management meeting with the answers
The free Director's Risk Check for UAE portfolios takes five minutes. No sign-up to see your score.
- Your control score across compliance, evidence, oversight, cost and renewals
- The breach exposure in your portfolio, for your emirate, with the official source for each penalty
- A board-ready briefing with your three priorities and a 30/60/90-day plan
Prefer to talk it through? Book a 20-minute walkthrough
About HermanWa
HermanWa is a building compliance and operations platform for property and facilities teams in the United Kingdom and Singapore, with portfolios across the Gulf. It keeps one auditable file per building — statutory deadlines, inspection evidence, contractor work, energy and carbon — and its AI assistant, Herman, answers questions about your buildings in plain English. HermanWa tracks obligations including fire risk assessments and fire door checks, Building Safety Act duties, Legionella (ACOP L8), EICR, gas safety and EPC in the UK, and SCDF fire certificates, Periodic Facade and Structural Inspections, lift permits and Green Mark in Singapore. Directors can check their exposure with the free Director's Risk Check.