AW-23 — Contracts, MoUs and Legal Review Administration
| Workflow ID | AW-23 |
| Pack owner | IoL Administrative Affairs (decision of 2 September 2026; see Architecture/04_Ownership_Model.md) |
| Family | M — Communications, events and relationships |
| Ownership | Slice of MBRU legal and contracts office. MBRU Legal reviews and
negotiates legal terms and holds the institutional contract policy;
signature authority sits where AW-05 and the MBRU delegation place it;
IoL owns intake, classification, the departmental contracts register,
obligation tracking, renewal alerts and notification of dependent
workflows [IoL to confirm] |
| Governing policy | MBRU contracts and legal review policy; MBRU delegation of
authority; Dubai Health governance for agreements binding the health
system; MBRU data protection policy; CAA requirements for collaborative
and mobility provision [IoL to confirm]; ISO 9001:2015
clause 8.4; ISO 21001:2018 clause 8.4 |
| Interfaces | WF-24 partnerships; WF-17 research partnership; WF-13 placements; WF-01 programme design; WF-20 IP; AW-05 delegation; AW-04 records; AW-11 payments; AW-12 revenue; AW-16 data protection; AW-10 procurement; AW-22 brand |
| OBEF touchpoint | Agreement or MoU number. The number recorded here is the evidence that a research partner was aware of the collaboration (KPI 4.3 and 5.4 via WF-17), that a mobility or joint-degree option is CAA-approved (KPI 5.3 via WF-01 and WF-24), and that a placement site is approved (WF-13). WF-24 owns the OBEF classification of a partnership; AW-23 owns the legal instrument and its register |
| Process owner | ______________ |
| Version | 0.1 draft |
| Effective | |
| Next review |
An agreement IoL cannot find is an agreement IoL does not have. Four OBEF KPIs, every placement and every research collaboration rest on producing a signed, numbered, in-date instrument on demand.
1. Purpose
To ensure that every agreement IoL enters, relies on or is bound by is identified before it is agreed in principle, routed to MBRU Legal, signed only by a person with authority to sign it, recorded in one register with its number, dates, obligations and signatory, tracked through its life, varied or terminated only through the same route, and stored so that it can be produced within the service standard. Legal safety comes first; the evidence value follows from it.
2. Scope
Scope statement. This procedure manages an agreement from the first proposal of a relationship that would bind IoL or MBRU, through classification, legal review, approval, execution and registration, to obligation tracking, renewal, variation, termination and archiving.
Applies to. MoUs; partnership and collaboration agreements; placement-site agreements; research collaboration agreements; dual or joint degree and mobility agreements; sponsorship in either direction; service and consultancy contracts; NDAs; data-sharing and data-processing agreements; licences; letters of intent and any document a counterparty could rely on as a commitment.
Does not apply to. Purchase orders on MBRU standard terms (AW-10); adjunct and clinical-educator appointment letters (AW-08); employment contracts (MBRU HR); the OBEF classification and contribution valuation of a partnership (WF-24); the academic approval of a placement site (WF-13); institutional contract policy and the conduct of legal negotiation (MBRU Legal).
Applicable requirements. ISO 9001:2015 clauses 7.5
and 8.4; ISO 21001:2018 clause 8.4; MBRU contracts and delegation
policies and Dubai Health governance [IoL to confirm]; CAA
Standards for collaborative provision and mobility
[IoL to confirm edition]; UAE data protection law; OBEF
guide v11.5 Appendix B evidence requirements for KPIs 4.3, 5.3 and
5.4.
3. Trigger, boundary and endpoint
| Trigger | Any proposal for a relationship that would bind IoL or MBRU; a counterparty's draft; a renewal alert; a request to vary or terminate; the annual reconciliation |
| First activity | Opening a register row with a provisional number before anything is agreed in principle |
| Last activity | Archiving the executed instrument or termination record under AW-04 with the register row closed |
| Endpoint | The register shows, for every live agreement, counterparty, type, value, start and end dates, renewal terms, signatory, obligations, agreement or MoU number, storage location and the dependent workflows notified; every executed instrument can be produced within the standard |
| Upstream | Requesting Owners; WF-24, WF-17, WF-13, WF-01; AW-10 and AW-21 (non-standard terms) |
| Downstream | WF-24, WF-17, WF-13, WF-01 (number and validity); AW-11, AW-12, AW-16, AW-22 (terms); AW-04 (storage); AW-25 |
The boundary with WF-24 is the register. WF-24 keeps the partnership register with the OBEF classification and contribution values; AW-23 keeps the contracts register with the instrument. They share the agreement number and reconcile annually.
4. SIPOC
| Element | Content |
|---|---|
| Suppliers | Requesting Owners; counterparties; MBRU Legal; Budget Holders; Data Protection; Partnerships Office; CAA via WF-01 and WF-24 |
| Inputs | Proposal; counterparty draft or MBRU template; AW-05 matrix; budget confirmation; AW-16 assessment; CAA position; existing register entries for the counterparty |
| Process | Intake and register row → classify → route → negotiate → approve to sign → execute and number → complete register and obligations → notify dependents → track → renewal alerts → vary or terminate by the same route → archive → reconcile annually |
| Outputs | Executed instrument with a number; complete register row; obligations schedule; renewal alerts; notifications; variation and termination records; archived instrument |
| Customers | Requesting Owners; WF-24, WF-17, WF-13, WF-01; MBRU Legal; auditors; MoHESR; the counterparty |
| Success criteria | No agreement in force off the register; none signed without review and AW-05 authority; every obligation owned; no expiry without a prior decision; every instrument retrievable within the standard; zero unexplained differences at the WF-24 reconciliation |
5. Accountability
Process owner. IoL Contracts Administrator or
equivalent [IoL to confirm], with authority to refuse to
register an agreement that has not passed review and signature
control.
| Step | Requesting Owner | Contracts Administrator | MBRU Legal | Signatory (AW-05) | Data Protection (AW-16) | Partnerships (WF-24) |
|---|---|---|---|---|---|---|
| Open the register row at intake | R | A/R | I | I | I | I |
| Classify and route | C | A/R | C | I | C | C |
| Legal review and negotiation of terms | C | I | A/R | I | C | I |
| Data-protection review of data-sharing terms | C | R | C | I | A/R | I |
| Approve to sign | I | R | C | A/R | I | I |
| Execute, number and complete the register | C | A/R | I | R | I | I |
| Notify dependent workflows | I | A/R | I | I | I | R |
| Track obligations and decide on renewal | A/R | R | C | I | I | C |
| Authorise variation or termination | R | R | C | A/R | I | I |
| Reconcile with the WF-24 register | I | A/R | I | I | I | R |
Budget or income treatment is confirmed by the Budget Holder under AW-02.
Signature authority
[IoL to confirm against AW-05 and the MBRU delegation]
| Instrument | Signatory |
|---|---|
| MoU, letter of intent or template NDA, no financial commitment | Senior Director, IoL, or as MBRU delegation provides |
| Agreement with financial commitment or income | The AW-05 level for full-term value, not per year |
| Placement, research, mobility, joint-degree or data-sharing agreement; any instrument binding Dubai Health | MBRU institutional signatory, or Dubai Health authority, as their governance provides |
Escalation.
| Condition | Escalates to | Within |
|---|---|---|
| Agreement in force but not registered, or signed without review or outside AW-05 | Senior Director, IoL, and MBRU Legal; non-conformity via AW-24 | Same day |
| Renewal alert unanswered 30 days before expiry | Requesting Owner's line manager | Immediately |
| Mobility or joint-degree agreement without a CAA position; data-sharing agreement without an AW-16 assessment | Programme Director and WF-24; Data Protection | Before legal review proceeds |
6. Procedure
Intake. The Requesting Owner notifies the Administrator at first contact, before terms are discussed, using the intake form: purpose, counterparty, type, term, value or in-kind element, personal data, IP, and the dependent IoL workflow. The Administrator opens a register row with a provisional number and checks for an existing agreement with the counterparty. [CONTROL] Nothing that could be read as a commitment is sent before the row exists. Decision point. If a live agreement covers the relationship, the request becomes a variation (step 11).
Classify. Type from the section 2 list, value band, financial commitment or income, personal data, IP, placement, research, mobility or joint award, and whether an MBRU template exists. This sets the routing and the signatory.
Route for review. [CONTROL] Every instrument goes to MBRU Legal except an unamended MBRU template listed as pre-cleared
[IoL to confirm which]. In parallel: data-sharing terms to AW-16; financial commitment to AW-02 and income to AW-12; IP to WF-20; research collaborations to the WF-17 project record; placement sites to WF-13; mobility and joint-degree agreements to WF-01 and WF-24 for the CAA pre-approval check; any partnership to WF-24 for classification. Decision point. A mobility or joint-degree agreement does not proceed until WF-24 confirms the CAA position: KPI 5.3 scores zero for an exchange under an unapproved agreement, and the learner exposure is worse.Negotiate. MBRU Legal negotiates legal terms; the Requesting Owner negotiates academic, service or commercial content within the Budget Holder's mandate. Drafts pass through the Administrator, who keeps the version history. [CONTROL] No side letter, email undertaking or verbal assurance forms part of an agreement.
Approve to sign. The Administrator assembles the signature pack: final draft, Legal clearance, AW-16 clearance and CAA position where applicable, budget or income confirmation, and the register row. The Authorised Signatory approves. [CONTROL] The negotiator does not sign; the Requesting Owner does not sign their own agreement; anyone with an interest in the counterparty declares it under MBRU conflict-of-interest policy and takes no part. Value is assessed over the full term.
Execute and number. Both parties sign; the Administrator confirms the signed versions are identical, assigns the definitive number in the form
[IoL to confirm]and files the instrument, with originals held as MBRU policy provides. [CONTROL] A number is assigned only to a fully executed instrument.Complete the register row. Counterparty (normalised to the AW-22 organisation list), type, value, start and end dates, renewal terms and notice period, signatories, storage location, Requesting Owner and number. Every obligation on either side goes into the obligations schedule with an owner, a due date and a status. [CONTROL] A row without an end date or an obligations schedule is flagged at the monthly check.
Notify dependent workflows. Within 5 working days of execution: number, type, dates and validity window to WF-24 for the partnership register; to WF-17 for
Agreement/MOU Numberon the research project record; to WF-13 for the approved-site list; to WF-01 where a mobility or joint-degree component depends on it; to AW-11 or AW-12, AW-16 and AW-22 for their terms. [CONTROL] The notification is logged per recipient; an agreement nobody downstream knows about evidences nothing.Track obligations. The Requesting Owner reviews the schedule each quarter and reports met, due, overdue or in breach. Payments are made only through AW-11 against the schedule; income through AW-12. Decision point. Suspected breach goes to MBRU Legal via the Administrator within 5 working days.
Run renewal alerts. Alerts at 180, 90 and 30 days before expiry or notice deadline. The Requesting Owner records renew, renegotiate, expire or terminate by 60 days before expiry, and WF-24, WF-13 and WF-17 are told. [CONTROL] No agreement on which a placement, project or mobility option depends expires without the dependent workflow owner's written acceptance.
Vary. Any change to term, scope, value, parties or data handling repeats steps 3 to 8 as a numbered variation against the parent. [CONTROL] Variation by email or conduct is not recognised; the Administrator refuses to record it and refers it to MBRU Legal.
Terminate or expire. The Administrator records date, reason, surviving obligations (confidentiality, data return, IP, publication rights) and the AW-16 confirmation that personal data has been returned or destroyed. Dependent workflows are told.
Archive. Instrument, variations, signature pack, schedule and termination record go to AW-04 with the row marked closed, never deleted.
Reconcile annually. The Administrator and the Partnerships Office compare the two registers: every partnership has a live or explicitly expired instrument, every partnership instrument is classified, and the numbers match. Both sign. [CONTROL] The reconciliation is dated before the WF-26 evidence freeze, so the numbers cited in
Institute - Research Projects.xlsxandInstitute Partnerships.xlsxare the numbers here.
7. Information handled and interfaces
| Flow | Content | Classification | To or from |
|---|---|---|---|
| In | Intake form; counterparty drafts; clearances (Legal, AW-16, budget, CAA position) | Confidential, restricted | Requesting Owners; upstream workflows; MBRU Legal; AW-16; AW-02; WF-24 |
| Out | Executed instrument with number | Confidential; register access list only | Contracts repository; AW-04 |
| Out | Number, type, dates, validity window | Internal | WF-24, WF-17, WF-13, WF-01 |
| Out | Payment and income terms; data obligations; publicity rights | Internal, financial or restricted | AW-11, AW-12; AW-16; AW-22 |
| Register | Counterparty, type, value, dates, renewal, signatory, obligations, number, storage, owner, status, AW-16 reference | Confidential | Maintained here; read by AW-24, AW-25, WF-24 |
8. Controls
Stated as assertions an auditor can test.
| # | Control | Evidence |
|---|---|---|
| C1 | Every agreement in force appears on the register with a definitive number | Register versus WF-24, WF-13 and WF-17 records and AW-11 payments citing an agreement |
| C2 | Every executed instrument has MBRU Legal clearance or a pre-cleared template reference on file | Signature pack sample |
| C3 | Every signature is at or above the AW-05 level for full-term value | Signature pack versus the matrix |
| C4 | Negotiator and signatory differ, and no signatory has an undeclared interest | Signature pack; declarations |
| C5 | Every data-sharing agreement carries an AW-16 assessment reference | Register |
| C6 | No mobility or joint-degree agreement was executed without the CAA position recorded | Register; WF-24 and WF-01 records |
| C7 | Every row has an end date, an obligations schedule with owners, and notifications logged; no agreement expired without a decision recorded 60 days before | Monthly register check; renewal decision log |
| C8 | No variation exists outside the register | Live agreements against correspondence; AW-11 payments outside schedule |
| C9 | Every executed instrument can be produced within 5 working days | Retrieval test at AW-24 audit |
| C10 | The two registers reconcile annually with a signed record dated before the WF-26 evidence freeze | Reconciliation record |
9. Exceptions and escalation
| Exception | Authorised by | Rationale required | Recorded where |
|---|---|---|---|
| Urgent execution before full review (regulator, safety or funding deadline) | Senior Director, IoL, with MBRU Legal informed the same day | The deadline and the terms accepted; full review within 10 working days | Register, marked PROVISIONAL |
| Counterparty insists on its own terms over the MBRU template | MBRU Legal | Legal's risk assessment | Register and signature pack |
| Agreement discovered in force but never registered | Contracts Administrator, with a non-conformity in AW-24 | How it arose; validity; retrospective review by MBRU Legal | Register, marked LEGACY; AW-24 |
| Letting an agreement lapse that a dependent workflow relies on | Requesting Owner, with the dependent owner's written acceptance | The consequence for placements, projects or KPI evidence | Renewal decision log |
This procedure must never: allow a commitment before a register row exists; assign a definitive number to an unexecuted draft; supply WF-17 or WF-24 with a number that has no executed instrument behind it; let a mobility or joint-degree agreement carry a registered learner without the CAA position recorded; accept an informal variation; let anyone but the Administrator edit the register; or delete a row.
10. Service standards
| Service | Standard |
|---|---|
| Register row opened at intake | 2 working days |
| Classification and routing | 5 working days from a complete intake form |
| MBRU Legal review | Per MBRU Legal's standard [IoL to confirm]; chased at
15 working days |
| AW-16 review of data-sharing terms | 10 working days, in parallel |
| Signature pack assembled after clearances | 3 working days |
| Number, filing, register completion and notifications | 5 working days from execution |
| Renewal alerts | 180, 90 and 30 days before expiry or notice deadline |
| Renewal decision recorded | 60 days before expiry |
| Retrieval of an executed instrument | 5 working days; 2 working days for a regulator or MoHESR request |
| Annual reconciliation with WF-24 | Before the WF-26 evidence freeze |
11. Records and retention
| Record | System | Retention | Owner |
|---|---|---|---|
| Contracts register | Contracts register [IoL to confirm system] |
Permanent | Contracts Administrator |
| Intake, classification, drafts, correspondence and signature pack | Contracts repository | Life of agreement plus 7 years | Contracts Administrator |
| Executed instruments and variations | Contracts repository; originals per MBRU policy | Life of agreement plus 10 years, or longer where MBRU or law
requires [IoL to confirm] |
Contracts Administrator, then AW-04 |
| Obligations schedule, quarterly status, renewal decisions, notification log | Contracts register | Life of agreement plus 7 years | Requesting Owner and Administrator |
| Termination records and surviving obligations | Contracts repository | Longest surviving obligation plus 7 years | Contracts Administrator |
| Annual reconciliation record | Contracts register and WF-24 register | 10 years | Contracts Administrator |
Retention must cover the OBEF evidence window for any KPI the
agreement evidences; the Ministry may demand the instrument behind an
Agreement/MOU Number in a later cycle.
12. Risks and controls
| # | Risk | Consequence | Control | Owner |
|---|---|---|---|---|
| 1 | Staff agree terms informally before intake | MBRU bound without review | Step 1 rule; induction briefing; C1 | Contracts Administrator |
| 2 | Signature below the AW-05 level or by the wrong person | Invalid or unauthorised commitment | Signature matrix; C3; C4 | Authorised Signatory |
| 3 | Agreement expires unnoticed while a placement, project or mobility option depends on it | Learner without a valid site agreement; KPI evidence invalid | Renewal alerts; written-acceptance rule; C7 | Requesting Owner |
| 4 | Number cited in OBEF templates does not match an instrument on file | Evidence fails on demand; claim withdrawn | C1; C10; reconciliation before the evidence freeze | Contracts Administrator |
| 5 | Mobility or joint-degree agreement executed without CAA pre-approval | KPI 5.3 scores zero; learners on an unapproved award | Step 3 stop; C6 | Programme Director via WF-01 and WF-24 |
| 6 | Data-sharing agreement inconsistent with the AW-16 assessment | Breach of law; incident under AW-16 | Joint review; C5 | Data Protection |
| 7 | Obligations untracked; payments outside the schedule | Overpayment, breach, dispute | Obligations schedule; AW-11 pays only against it; C8 | Requesting Owner |
| 8 | Register edited or rows deleted | Loss of the evidence base | Write access limited to the Administrator; AW-15 access review | AW-15 |
| 9 | Legacy agreements never registered | Unknown exposure and evidence | Legacy sweep at implementation; LEGACY route | Senior Director, IoL |
13. Performance measures
| Dimension | Measure | Target |
|---|---|---|
| Compliance | Agreements in force with a register row and a definitive number | 100% |
| Compliance | Executed instruments with clearance, AW-05 signature and, where applicable, an AW-16 reference on file, on sample | 100% |
| Timeliness | Register completed and dependents notified within 5 working days of execution | 95% |
| Timeliness | Renewal decisions recorded 60 days before expiry | 100% |
| Accuracy | Unexplained differences at the WF-24 reconciliation | 0 |
| Evidence | Instruments retrieved within 5 working days on test | 100% |
| Experience | Requesting Owners rating the process clear and timely, annual pulse | 80% |
| Touchpoint | Numbers cited by WF-17, WF-24, WF-13 and WF-01 that match an executed instrument | 100% |
14. Change control
| Date | Version | Change | Reason | Approved by |
|---|---|---|---|---|
| 2026-09-02 | 0.1 | Initial draft | IoL administrative pack | draft, unapproved |