A surprising number of UAE businesses discover their audit obligation only when a licensing authority rejects a renewal or the FTA requests audited financials during a Corporate Tax review. By that point, catching up is expensive and stressful.

The UAE does not have a single, unified audit law. Instead, audit requirements come from multiple sources: your company’s legal form, the emirate or free zone you operate in, sector-specific regulators, and now the Corporate Tax framework. This guide consolidates all of it.

Quick answers

  • Do all UAE companies need an audit? No. But most free zone companies, all mainland LLCs above certain thresholds, and all regulated entities do.
  • What triggers a mandatory audit? Your legal form (LLC, PJSC), your licensing authority’s rules, your free zone regulations, or sector-specific requirements (banking, insurance, funds).
  • When is the deadline? Typically within 3 to 6 months of your financial year-end, depending on the authority. Free zones usually specify this in the licence conditions.
  • Does the FTA require audited accounts? The Corporate Tax Law does not mandate an audit for all taxpayers, but the FTA can request audited financials during a review, and free zone Qualifying Free Zone Persons must maintain audited financial statements.
  • How much does an audit cost? For a straightforward SME audit, fees typically range from AED 5,000 to AED 30,000 depending on complexity, revenue size, and the audit firm.
  • Can my bookkeeper do the audit? No. The auditor must be independent, registered with the relevant authority, and cannot be the same firm that prepares your accounts (in most free zones and for regulated entities).

Who Needs a Statutory Audit?

Mainland companies

LLCs (Limited Liability Companies): Under the UAE Commercial Companies Law (Federal Decree-Law No. 32 of 2021), LLCs are required to appoint an auditor. In practice, enforcement has historically varied, but the introduction of Corporate Tax has tightened scrutiny. If your LLC is filing a Corporate Tax return, the FTA may request audited financials as part of its review process.

Public Joint Stock Companies (PJSCs): All PJSCs must have their financial statements audited annually by an SCA-approved auditor. This is non-negotiable and is a condition of maintaining the listing (for listed companies) or the company’s legal standing.

Private Joint Stock Companies: Same obligation as PJSCs. Annual audit by a registered auditor.

Sole establishments and civil companies: Generally not required to obtain a statutory audit under company law, though the FTA may still request audited or certified financials for Corporate Tax purposes.

Free zone companies

Most UAE free zones mandate annual audited financial statements as a condition of licence renewal. This is one of the most common audit triggers for SMEs. Key examples:

  • DMCC: Annual audit required for all member companies.
  • JAFZA: Annual audit required.
  • DAFZA: Annual audit required.
  • DIFC: Audit required for most entity types (with some exemptions for small companies meeting specific thresholds).
  • ADGM: Audit required, with limited exemptions for qualifying small entities.
  • IFZA, RAKEZ, Sharjah free zones: Most require annual audited accounts for licence renewal.

If you are weighing the benefits of free zone setup or comparing mainland vs. free zone structures, factor in the annual audit cost as a recurring compliance expense.

Qualifying Free Zone Persons (QFZP)

This is a critical point. To qualify for the 0% Corporate Tax rate on qualifying income, a Qualifying Free Zone Person must maintain audited financial statements. If your free zone entity claims the 0% rate and does not have an audit, the FTA can deny the qualifying status and apply the standard 9% rate to all your income.

Sector-regulated entities

Regardless of legal form or jurisdiction, entities regulated by the following authorities always require audited financials:

  • Central Bank of the UAE (CBUAE): Banks, finance companies, payment service providers, exchange houses.
  • Securities and Commodities Authority (SCA): Listed companies, investment funds, brokers.
  • Insurance Authority (now merged into CBUAE): Insurance companies, brokers, and TPAs.
  • DFSA (DIFC): All authorised firms.
  • FSRA (ADGM): All financial services permission holders.

What Does an Audit Actually Involve?

A statutory audit is an independent examination of your financial statements to confirm that they present a true and fair view of the company’s financial position and performance, in accordance with the applicable accounting framework (usually IFRS or IFRS for SMEs).

The audit process

  1. Engagement and planning: The auditor assesses risk areas, understands your business, and plans the scope of work. They will request your chart of accounts, trial balance, and prior-year financials.
  2. Fieldwork: The auditor tests transactions and account balances. This includes verifying bank balances, reviewing receivables and payables, testing revenue recognition, examining expense documentation, and checking inventory (if applicable).
  3. Management representations: You will be asked to sign a representation letter confirming the completeness and accuracy of the information provided.
  4. Draft report: The auditor shares draft findings and any proposed adjustments.
  5. Final audit report: An opinion is issued: unqualified (clean), qualified, adverse, or disclaimer. Most SMEs should aim for an unqualified opinion.

What auditors look for

  • Revenue completeness: All income is recorded and supported by contracts, invoices, and bank receipts.
  • Expense validity: Costs are genuine, business-related, and properly documented.
  • Bank reconciliation: Bank balances match the general ledger with all reconciling items explained.
  • Related-party transactions: Any dealings with connected persons are identified, disclosed, and at arm’s length. This overlaps directly with the transfer pricing rules.
  • VAT reconciliation: VAT on the balance sheet reconciles with VAT returns filed. If your VAT refund claims are pending, the auditor will verify the receivable.
  • Gratuity provision: End-of-service gratuity is properly calculated and accrued.
  • Going concern: The business can continue operating for at least 12 months from the balance sheet date.

How Audit Connects to Corporate Tax

The UAE Corporate Tax return starts with your accounting profit and adjusts it for specific items. If the underlying financials are unreliable, the tax return built on top of them is unreliable too.

  • QFZP requirement: As noted above, maintaining audited financial statements is a condition for the 0% rate. No audit means no qualifying status.
  • FTA review power: The FTA can request audited financials from any taxpayer during a tax audit or review, even if you are not otherwise required to have one.
  • Transfer pricing: Auditors will flag related-party transactions, and their treatment in the audit supports your transfer pricing documentation.
  • Deductions: The audit verifies that deductible expenses are genuine and properly recorded, reducing the risk of disallowance during an FTA review.

For the step-by-step Corporate Tax filing process, see our guide on how to file your first UAE Corporate Tax return.

How to Prepare for Your Audit

Good preparation cuts audit time (and therefore cost) significantly. Here is a practical checklist:

Before the auditor arrives

  1. Close your books properly. All transactions for the year should be recorded, accruals posted, and the trial balance finalised. If you need help with the basics, see our guide on smart accounting for UAE SMEs.
  2. Reconcile all bank accounts. Every bank account should be reconciled to the general ledger as at year-end, with all outstanding items explained.
  3. Prepare a receivables and payables ageing. The auditor will test these. Flag any old or disputed balances and document any write-offs.
  4. Gather supporting documents. Have contracts, invoices, receipts, and board resolutions organised and accessible. Digital records are fine; the auditor does not need paper.
  5. Calculate gratuity provision. Prepare the end-of-service gratuity calculation for all employees as at year-end.
  6. Reconcile VAT. Ensure the VAT payable or receivable on the balance sheet matches the amounts reported on your FTA returns.
  7. Identify related-party transactions. List all transactions with shareholders, directors, sister companies, and other connected persons, with amounts and terms.

During the audit

  • Respond to auditor queries promptly. Delays in providing information are the number-one cause of audit overruns and fee escalations.
  • If the auditor proposes adjustments, discuss them and understand the rationale before agreeing or pushing back.
  • Do not hide problems. Auditors will find them anyway, and disclosure demonstrates good governance.

Choosing an Auditor

  • Registration: The auditor must be registered with the relevant authority. For mainland companies, this means the Ministry of Economy. For DIFC, the DFSA maintains an approved list. For ADGM, the FSRA.
  • Independence: The auditor cannot be your bookkeeper or accountant (this is a requirement in most free zones and for all regulated entities). If you currently outsource your accounting, use a different firm for the audit.
  • Sector experience: An auditor familiar with your industry will be faster, cheaper, and more accurate. A trading company audit is very different from a fintech audit.
  • Fee structure: Get a fixed-fee engagement letter. Hourly billing on audits is a recipe for surprises. Confirm what is included (audit opinion, management letter, FS preparation support).

Frequently Asked Questions

Does every UAE company need a statutory audit? No, but most do. All free zone companies (for licence renewal), mainland LLCs (under company law), PJSCs, regulated entities, and any Qualifying Free Zone Person claiming 0% Corporate Tax must have audited financials. Sole establishments generally do not, though the FTA may request them.

Can I use the same firm for bookkeeping and audit? In most free zones and for regulated entities, no. The auditor must be independent of the entity preparing the financial statements. For mainland LLCs, it is strongly discouraged even where not explicitly prohibited.

What happens if I don’t get an audit when required? Consequences vary: free zone licence renewal may be rejected, the FTA may deny QFZP status (triggering 9% tax), and regulators may impose fines or suspend permissions. For PJSCs, it is a legal violation.

How long does an SME audit typically take? For a well-prepared SME, fieldwork takes 1 to 2 weeks and the final report is issued within 4 to 6 weeks of starting. Poor preparation can double or triple this timeline.

What is the difference between an audit and a review engagement? An audit provides reasonable assurance (the highest level) that the financial statements are free from material misstatement. A review provides limited assurance, based on analytical procedures and inquiries rather than detailed testing. Most statutory requirements specify an audit, not a review.

Do I need IFRS financial statements for the audit? Most free zones and the FTA expect financial statements prepared under IFRS or IFRS for SMEs. Some smaller entities may use other frameworks, but IFRS is the safest default. Understanding financial statements is essential for any business owner going through this process.

Can the FTA reject my Corporate Tax return if I don’t have an audit? The FTA will not automatically reject a return for lack of audit, but it can request audited financials during a review. For QFZPs, the absence of an audit means the 0% rate is not available, and the FTA will assess tax at 9%.

How Success Business Advisors can help

We prepare your books to audit-ready standard, liaise with your auditor to resolve queries efficiently, and ensure the audited financials align with your Corporate Tax return. Book a pre-audit review and we will identify the gaps before the auditor does.