Guide · IT support contracts
IT AMC explained: what a UAE business should expect from an annual maintenance contract
Almost every UAE business has been offered an IT AMC. Few are told exactly what one should include. This guide explains what an annual maintenance contract is, how the traditional model compares with managed IT, and what to check before you sign.
The basics
An AMC is a promise. The contract defines how good it is.
An IT AMC — annual maintenance contract — is an agreement under which a provider looks after your technology for a fixed fee, paid annually or monthly, instead of billing you each time something goes wrong. In the UAE it is the most common way businesses buy ongoing IT support, from a ten-person trading office in Sharjah to a multi-site operation across Dubai and the northern emirates.
The difficulty is that "AMC" describes a payment arrangement, not a standard of service. Two contracts with the same name can deliver completely different outcomes. One may cover four maintenance visits a year and little else. Another may include round-the-clock monitoring, security, backup and a helpdesk bound by response targets. Knowing the difference is what protects you from paying for cover you do not actually have.
Two kinds of AMC
Traditional maintenance contract or managed IT service?
Most AMCs in the market fall into one of two models. The first maintains your equipment. The second runs your IT as a continuous, accountable service.
The traditional AMC
- A fixed number of preventive-maintenance visits a year, usually quarterly.
- Call-out support when something breaks, often with a response window that is loosely defined.
- Coverage limited to a list of named devices — anything added later sits outside the contract.
- Little or no monitoring between visits, so problems are found when users report them.
- Security, backup and cloud services frequently excluded or charged separately.
The managed-services AMC
- Continuous remote monitoring of servers, devices and the network, 24/7.
- An SLA-backed helpdesk with response targets defined by priority.
- Automated patching, managed security and monitored, tested backups built in.
- Microsoft 365, identity and cloud services looked after alongside on-premises kit.
- A monthly report and a quarterly review, so leadership sees what is being done.
The traditional model made sense when IT meant a server in the back room and a handful of desktops. Today most businesses depend on cloud email, remote access, line-of-business applications and a constant stream of security updates. A visit every quarter cannot keep pace with that. This is the same shift described in our guide to managed IT services vs break-fix — prevention replaces firefighting.
Scope
What a good IT AMC should cover in 2026.
Use this as a checklist when you compare proposals. If an area is missing, ask who is responsible for it — because if the answer is nobody, that is where the next incident will come from.
Helpdesk and onsite support
Remote support for day-to-day issues, with engineers on site when a problem genuinely needs hands on hardware. The contract should say how onsite attendance is triggered and what it includes.
Monitoring and patching
Servers, workstations and network devices watched continuously, with operating-system and application updates applied on a schedule — not left until the next visit.
Security
Endpoint protection, email filtering, firewall management and identity controls. Security that is outside the AMC is security that nobody is accountable for.
Backup and recovery
Backups that are monitored daily and restore-tested regularly, including cloud data such as Microsoft 365 — not just a job that was set up once and assumed to work.
Microsoft 365 and cloud
User changes, licensing, mailbox and Teams administration, and tenant security settings. For most UAE offices this is now where much of the daily support work happens.
Asset records and documentation
An up-to-date inventory of devices, licences, warranties and configurations, held by the provider and available to you — so knowledge does not leave with one engineer.
Security and backup deserve particular attention. They are the two areas most often left out of a low-cost AMC, and the two where a gap is most expensive. If your proposal does not include them, look at a dedicated managed cybersecurity service and confirm how backups are monitored and tested.
Before you sign
Five things to check in any AMC contract.
The proposal tells you what a provider intends to do. The contract tells you what they are committed to. Read it with these five questions in mind.
Response targets by priority
Ask for written targets per priority level, not a single vague promise, and ask whether they are counted in business hours or clock hours. Our own first-response targets, for example, are 4 business hours for a P1 critical issue, 8 business hours for P2, 1 business day for P3 and 5 business days for P4 — measured Monday to Friday 08:30–17:00 and Saturday 08:30–14:00 UAE time, and set out in the service agreement.
What counts as "covered"
Check whether new starters, new devices and new sites are added automatically, and how. A contract tied to a fixed device list tends to drift out of date within months.
Exclusions, in writing
Every AMC has limits. The good ones state them clearly: project work, hardware replacement, out-of-hours requests. Hidden exclusions are where disputes start.
Reporting and reviews
You should receive regular reporting on tickets, patch status, backup results and security — and a periodic review with someone senior enough to discuss the roadmap.
Exit and handover terms
Make sure documentation, credentials and asset records are yours and are handed over in full if the relationship ends. This protects you whichever provider you choose.
How we run it
The Missan 365 approach to an AMC.
Missan 365, a Missan Global company, has supported UAE organisations for 22+ years — 5,000+ clients served since 2004 and 10,000+ projects delivered since 2004. Our AMC is a managed service in the full sense. It follows the Missan 365 Method: a free assessment of your support, security, backup and Microsoft 365; a structured 30-day onboarding to document, patch, harden and switch on monitoring; day-to-day operation through an SLA helpdesk and 24/7 monitoring on enterprise RMM; and quarterly reviews to keep your IT improving.
Every ticket, asset and service level is tracked on our enterprise service-management platform (PSA), so reporting reflects what actually happened. Security runs on Microsoft Defender and our Sangfor Gold Partner practice, and as a Microsoft Cloud Solution Provider and Solutions Partner for AI Business Solutions we manage your Microsoft 365 alongside everything else. Plans are scoped to your users, devices and sites — compare them on our plans page.
Common questions
IT AMCs, answered.
What does AMC mean in IT?
AMC stands for annual maintenance contract. In the UAE it is the common term for an agreement under which a provider maintains and supports a business’s IT for a fixed annual or monthly fee, rather than charging for each call-out. What it actually includes varies widely between providers, which is why the scope matters more than the name.
Is an IT AMC the same as managed IT services?
Not always. A traditional AMC often covers scheduled maintenance visits and break-fix support for a list of devices. Managed IT services go further: continuous monitoring, automated patching, managed security and backup, an SLA-backed helpdesk and regular reporting. Many UAE providers use the terms interchangeably, so compare what is written into the contract.
How is an IT AMC priced?
Pricing is usually based on the number of users, devices, servers and sites, the level of onsite support required and the services included, such as security and backup. At Missan 365 every plan is scoped to your organisation after a free assessment and quoted clearly, so you pay for what you actually need.
Can we switch AMC provider mid-contract?
That depends on the notice terms in your current agreement. When you are ready to move, a structured onboarding makes the transition safe: at Missan 365 our 30-day onboarding documents your environment, secures backups and switches on monitoring, with no gap in support while responsibility changes hands.
More in the knowledge centre →
Find out what your current AMC really covers.
Start with a free assessment. We will review your support, security, backup and Microsoft 365, show you where the gaps are, and send a clear, scoped quote — no obligation.