Introduction
The statutory audit is the financial statement of record for your business
A properly conducted statutory audit does three things simultaneously. It provides independent assurance to shareholders that the financial statements they are relying on are accurate. It surfaces control weaknesses and financial reporting gaps before they become material — and before a regulator or bank finds them first. And it satisfies the requirements of multiple UAE authorities at once: free zone registrars, the Federal Tax Authority, lenders, and government tender committees all require audited accounts.
This practice has 21 years of UAE advisory experience and has conducted and supported audit engagements for more than 11,000 companies across mainland, free zone, DIFC, and ADGM entities. The statutory audit deserves the same attention as the numbers it contains.
“Every audit qualification I have ever issued in the UAE was for something the client already knew about — they just hoped the auditor would not find it.”
What is statutory audit in the UAE?
A statutory audit is the mandatory, independent examination of a company’s financial statements by a licensed external auditor, resulting in a formal auditor’s report addressed to the company’s shareholders. The auditor examines whether the financial statements present a true and fair view of the company’s financial position and performance in accordance with IFRS, as issued by the IASB — the applicable framework for most UAE entities.
The legal obligation for UAE mainland companies is established under Federal Decree-Law No. 32 of 2021 on Commercial Companies. Articles 237 to 240 require qualifying UAE companies to appoint one or more registered external auditors and have their annual financial statements audited. The appointed auditor must hold a valid UAE auditing licence. Verify current auditor registration requirements at ca.gov.ae.
Free zone companies face equivalent audit requirements from their respective free zone authority. DMCC, JAFZA, DIFC, ADGM, ADAFZ, and other UAE free zones each specify the financial reporting and audit obligations applicable to their licensees — conditions, deadlines, and submission requirements vary by free zone.
Statutory audit is external, backward-looking, and conducted by an independent third party who reports to shareholders. It is distinct from internal audit, which is conducted internally, reports to management and the board, and operates continuously throughout the year. The two functions serve different purposes and are not substitutes.
Why statutory audit matters in the UAE
Banks, investors, and government authorities require it
Bank lending facilities require audited accounts as standard due diligence. Visa applications for company owners frequently require audited accounts to demonstrate business substance. Free zone licence renewals at DMCC, JAFZA, ADAFZ, and comparable authorities require submission of audited financial statements within specified deadlines. Government tenders and procurement contracts — at both federal and emirate level — require audited accounts for prequalification. A company without current audited accounts is operationally constrained.
UAE Corporate Tax foundation
Federal Decree-Law No. 47 of 2022 on Corporate Tax introduced a 9% rate on taxable income above AED 375,000 from financial years beginning on or after 1 June 2023. CT returns are prepared on the basis of audited or reviewed financial statements. Where financial statements contain material misstatements — revenue recognised in the wrong period, expenses incorrectly classified, related-party transactions not properly disclosed — the CT return carries adjustment risk from the FTA. Verify current CT requirements at tax.gov.ae.
DIFC and ADGM regulated firms
DIFC-licensed firms are required to submit audited financial statements to the DFSA under applicable rulebook requirements. ADGM-licensed firms face equivalent obligations to the FSRA. Both regulators treat the quality and timeliness of audited financial submissions as indicators of the firm's overall governance and compliance standards. Late or unaudited submissions affect regulatory standing. Verify at difc.ae and adgm.com.
Free zone licence consequences
DMCC, JAFZA, and other major free zones specify submission deadlines for audited financial statements as a condition of annual licence renewal. Failure to submit by the required deadline risks licence suspension — affecting the company's ability to operate, employ staff, and maintain bank accounts. Verify the applicable deadline for your free zone before your financial year-end, not after.
Who is required to have a statutory audit?
Statutory audit requirements in the UAE vary by entity type and regulatory authority. The table below summarises the legal basis, requirement, and where to verify for each major entity category.
| Entity type | Requirement |
|---|---|
| UAE Mainland LLC | Annual audit mandatory; no small company exemption |
| Private / Public Joint Stock Company | Annual audit mandatory; SCA oversight for listed entities |
| Free Zone Companies | Varies by authority; typically annual; submission deadline applies |
| DIFC Incorporated Entities | DFSA-approved auditor; regulatory capital review may apply |
| ADGM Incorporated Entities | FSRA-approved auditor; annual submission to FSRA |
| UAE Branches of Foreign Companies | Varies by structure; branch or parent accounts may be required |
Important note: requirements, submission deadlines, and consequences of non-compliance vary materially between free zones and financial centres. Verify the specific obligations applicable to your entity type with the relevant authority before your financial year-end.
Key benefits of statutory audit
Independent assurance for shareholders and the board
The audit opinion provides every shareholder — majority and minority — with an independent, professionally qualified view of whether the financial statements are accurate. In a UAE family business or multi-shareholder LLC, this independence is the only assurance mechanism that does not depend on trusting management's self-reported figures.
Regulatory compliance across multiple authorities simultaneously
A single set of audited financial statements satisfies the FTA for CT purposes, the free zone authority for licence renewal, the bank for facility renewal, and government tender committees for prequalification. Maintaining current audited accounts is the most efficient way to remain operationally eligible across all these requirements at once.
Bank and investor credibility
Lenders and investors in the UAE assess financial statement quality as a primary credit and due diligence criterion. Audited financial statements — particularly those with a clean unqualified opinion from a licensed firm — materially improve a company's access to credit facilities, trade finance, and equity investment.
CT filing foundation
A CT return built on audited financial statements carries significantly less adjustment risk than one built on management accounts. The audit process surfaces revenue recognition issues, intercompany disclosures, and asset valuation questions that affect taxable income — before the CT return is filed, not after an FTA review.
Early identification of material misstatement
The statutory audit is the independent check on whether financial records are complete, accurate, and properly classified. Material misstatements identified during audit are corrected before the financial statements are issued — not after they have been relied upon by shareholders, lenders, or the FTA.
The management letter
Every statutory audit produces two outputs: the auditor's report, addressed to shareholders; and the management letter, addressed to management, documenting control weaknesses, accounting errors, and process deficiencies identified during the engagement. Its contents are some of the most practically useful commercial intelligence a business receives in any given year.
Know what your statutory audit will cost before you commit.
Get a fixed-fee quote — scoped to your entity type, turnover, and regulatory requirements. No obligation.
Required documents
Corporate Documents
- Trade licences — current and prior year
- Memorandum and Articles of Association, including amendments
- Shareholder register and current ownership structure
- Board resolutions approving prior-year financial statements
- Details of changes in directors, shareholders, or signatories
- Prior year audited financial statements and signed auditor's report
Financial Records
- Signed trial balance for the audit period and prior year
- Complete set of management accounts for the audit period
- Bank statements for all accounts for the full audit period
- Detailed general ledger for the full period
- Fixed asset register with acquisitions, disposals, and depreciation
- Aged accounts receivable and payable listings at year-end
Supporting Documentation
- All intercompany agreements and management fee arrangements
- Transfer pricing documentation for the period
- Major customer contracts and revenue agreements
- Loan agreements, facility letters, and security documents
- Lease agreements — property, equipment, vehicles — for IFRS 16
- Insurance schedules
Prior Year Audit File
- Signed engagement letter from prior year auditor (if different firm)
- Auditor's closing meeting notes or handover documentation
- Management representation letters from prior years
- Details of prior-year qualifications or emphasis of matter paragraphs
- Status of any prior-year remediation actions
Statutory audit process — 6 steps
Before year-end
Auditor appointment and engagement letter
The auditor should be appointed before the financial year-end — not after it. Early appointment allows interim procedures, year-end inventory attendance, and planning based on the actual closing position. The engagement letter documents scope, fee, timeline, and independence confirmation.
Weeks 1–2
Planning and risk assessment
Business understanding, risk identification, materiality setting, and audit procedure design. Planning is the basis on which the entire audit is scoped. A poorly planned audit either over-audits low-risk areas and under-audits high-risk ones.
Weeks 3–4
Interim procedures and controls assessment
Assessment of control design and operating effectiveness; review of accounting policies and significant judgements; preliminary analytical procedures. Informs the nature and extent of year-end fieldwork — a stronger control environment supports more efficient substantive testing.
Weeks 5–10
Year-end fieldwork and substantive testing
Substantive testing across all significant line items — revenue, receivables, payables, inventory, fixed assets, borrowings, equity. Related-party transactions and management judgement areas receive focused testing. Duration depends on records quality and entity complexity.
Weeks 11–12
Completion procedures and management representations
Final analytical review, subsequent events, going concern assessment, and signed management representation letter confirming completeness. The representation letter is formal audit evidence — not a formality.
Weeks 13–14
Auditor's report issuance and sign-off
Audit report issued once all procedures are complete and representations received. Signed report and audited financial statements submitted to the relevant authority — free zone registrar, DFSA, FSRA, or FTA — within the required deadline.
Processing times are indicative based on standard engagements. Complex entities, multi-year catch-up audits, and DIFC or ADGM regulated firm audits typically require longer fieldwork and completion periods.
Week-by-week timeline
| Phase | Timeframe | Activity |
|---|---|---|
| Auditor appointment | Before year-end | Auditor selected; engagement letter signed |
| Preliminary planning | Weeks 1–2 | Risk assessment; materiality set; audit plan prepared |
| Interim procedures | Weeks 3–4 | Controls assessment; accounting policy review; preliminary analytics |
| Fieldwork — Phase 1 | Weeks 5–7 | Substantive testing: revenue, receivables, payables |
| Fieldwork — Phase 2 | Weeks 8–10 | Fixed assets, inventory, borrowings, equity, related parties, judgements |
| Completion procedures | Weeks 11–12 | Subsequent events; going concern; management representations obtained |
| Draft financial statements | Weeks 12–13 | Auditor reviews draft statements for disclosure completeness |
| Auditor's report | Weeks 13–14 | Final report signed; financial statements approved; management letter issued |
| Filing and submission | By authority deadline | Submission to free zone, FTA, DFSA, FSRA, or other authority as applicable |
The annual audit cycle
A well-managed statutory audit follows a predictable annual cycle. The single most important decision in this cycle is made before the financial year ends — appointing the auditor early enough to conduct interim procedures and plan fieldwork properly.
Appoint
Before YE
Plan
Wks 1–2
Interim
Wks 3–4
Fieldwork
Wks 5–10
Complete
Wks 11–12
Report
Wks 13–14
File
By deadline
Appoint
Before YE
Plan
Wks 1–2
Interim
Wks 3–4
Fieldwork
Wks 5–10
Complete
Wks 11–12
Report
Wks 13–14
File
By deadline
Four types of audit opinion
The audit opinion is the auditor’s formal conclusion on whether the financial statements present a true and fair view. Understanding the four opinion types — and what triggers each — is essential for any UAE business owner or board member relying on audited accounts.
Unqualified (Clean)
Most commonTrigger
Financial statements present a true and fair view; no material misstatement; scope not limited; all required information provided.
Consequence for the business
Full acceptance by all UAE authorities and commercial counterparties. Most credible CT filing foundation. Required by banks, free zones, and government tender committees.
Qualified
ModifiedTrigger
Material misstatement in a specific area — or scope limitation preventing testing of a specific area — but not pervasive to the financial statements as a whole. Includes an "except for" paragraph. Common triggers: undisclosed related-party transactions, revenue recognition timing differences, inventory not independently verified.
Consequence for the business
Formally noted by free zone authorities at licence renewal. Banks may require written management explanation before renewing credit facilities. The FTA may examine the qualified area in a CT compliance review. A recurring qualification in two or more consecutive years raises serious governance questions.
Adverse
Most seriousTrigger
Financial statements do not present a true and fair view — misstatement is both material AND pervasive, affecting the financial statements as a whole. Rare in practice. Situations involving significant revenue overstatement, undisclosed liabilities, or improper consolidation.
Consequence for the business
Financial statements are effectively unusable for submission to free zone authorities, banks, or the FTA. The company must restate and re-audit before the statements can be relied upon. Reputational and commercial consequences are immediate and severe.
Disclaimer of Opinion
No opinionTrigger
Auditor unable to obtain sufficient evidence to form a conclusion — and the potential effect of that limitation is both material and pervasive. Triggers: management refusing to provide required information, unavailability of accounting records, pervasive going concern uncertainty with no management disclosure.
Consequence for the business
Similar commercial consequences to an adverse opinion — financial statements cannot be submitted to regulatory authorities or relied upon by lenders. The underlying cause must be resolved before the audit can be re-conducted.
Practitioner note
In 21 years of UAE audit practice, the most costly audit delays I encounter are not caused by complex accounting issues — they are caused by companies that appointed their auditor three months after year-end and then could not understand why the process took longer than expected.
Cost breakdown
Statutory audit fees in the UAE depend on entity size, operational complexity, related-party transactions, and whether a first-year audit is required.
| Entity type | Indicative annual fee |
|---|---|
| Small UAE LLC (turnover < AED 5M) | AED 8,000–18,000 |
| Medium company (AED 5M–50M turnover) | AED 18,000–55,000 |
| Large company / group (AED 50M+ or multi-entity) | AED 55,000–200,000+ |
| DIFC or ADGM licensed firm | AED 35,000–120,000 |
| Free zone single entity | AED 10,000–30,000 |
All fees are indicative as of 2026. Fees vary materially based on accounting records quality, related-party complexity, number of entities, and whether a first-year audit is required. Companies without an internal audit function will pay a premium because the external auditor must perform additional substantive testing.
Estimate your audit and compliance costs.
Model your statutory audit, CT filing, and annual compliance spend by entity type.
Case study
Anonymised — Dubai Mainland Trading Company, 3 Shareholders, AED 18M Turnover
AED 18M
Annual turnover
AED 620K
Revenue timing difference found
14 weeks
Catch-up audit (2 periods) completed in
6 weeks
Bank facility approved after submission
A Dubai mainland trading company with 3 shareholders and AED 18 million annual turnover came to us after their bank refused an AED 4 million facility request — no audited financial statements for the previous two years. We completed a catch-up audit covering both periods in 14 weeks.
During the audit, we identified AED 620,000 in revenue recognised in the wrong financial period — income recorded in Year 1 that related to contracts substantially completed in Year 2. The reclassification affected both years’ taxable income. We also identified two related-party transactions with no transfer pricing documentation — a management fee arrangement and an intercompany loan — both documented and disclosed before the financial statements were finalised.
Both sets of audited financial statements were issued with unqualified opinions. The bank facility was approved within six weeks of submission. A voluntary disclosure was made to the FTA to correct the revenue timing difference before any FTA enquiry arose.
Five statutory audit mistakes UAE companies make
Appointing the auditor after the financial year has already ended
Every month between year-end and auditor appointment is a month during which year-end cut-off evidence becomes harder to obtain, inventory observations cannot be conducted, and the audit timeline compresses. A company that appoints its auditor in March for a December year-end has already lost the opportunity for interim work and early substantive testing — resulting in a longer fieldwork period, higher fees, and a later audit opinion that then affects free zone licence renewal and CT filing deadlines.
Using the same firm for both internal and external audit
An auditing firm that designs, implements, or reviews internal controls — or provides bookkeeping services — for the same client cannot then audit the financial statements those controls and records produce without a fundamental independence conflict. UAE auditing standards, IIA standards, and DIFC/ADGM regulator requirements all prohibit this arrangement. A company that relies on the same firm for both functions is not receiving genuine independent assurance from either.
Providing an incomplete or unreconciled trial balance at the start of fieldwork
An audit that begins with an unreconciled trial balance, missing bank statements, or accounting records that do not agree to the management accounts will take two to four weeks longer than one that begins with complete, reconciled records — and that additional time is billed at professional rates. The single most effective preparation is ensuring accounting records are complete, reconciled to all bank accounts, and agreed to prior year closing balances before fieldwork begins. This is the finance team's responsibility, not the auditor's.
Not disclosing all related-party transactions
Failure to disclose related-party transactions fully — intercompany loans, management fees, director loans, transactions with entities connected to shareholders — is the most common trigger for an audit qualification in UAE SMEs. IFRS requires disclosure of all related-party relationships and transactions regardless of whether they were conducted on arm's-length terms. The FTA also examines related-party transactions under Federal Decree-Law No. 47 of 2022 transfer pricing rules. Non-disclosure in financial statements and non-documentation for TP purposes are two separate problems that frequently occur together.
Treating the management letter as optional reading
The management letter documents every control weakness, accounting error, and process deficiency the auditor identified during the engagement that did not rise to the level of an audit qualification. It is not addressed to shareholders and is not public. Its contents are the most detailed independent assessment of the company's financial processes it receives in any given year. A management team that files the letter unread and unacted upon will see the same findings — or worse — in the following year's audit.
Renewal and ongoing obligations
Auditor reappointment — board or shareholder resolution; engagement letter renewed before the financial year begins, not after it ends.
Free zone submission deadline — verify at the start of each financial year; build a timeline that delivers audited accounts at least 30 days before the deadline.
UAE CT return — due within 9 months of the financial year-end (tax.gov.ae). Ensure the audit is completed well in advance of the CT filing deadline.
Board approval of audited accounts — formal board resolution required before submission to any authority. Board approval is part of the governance record.
DIFC and ADGM firms — internal audit programme and regulatory reporting obligations run year-round alongside the annual statutory audit cycle.
Auditor rotation — SCA-listed Public Joint Stock Companies must rotate the external audit firm after the specified consecutive engagement period. Verify current SCA rotation requirements directly with the Securities and Commodities Authority.
