What Is an Annual Statutory Audit and How Do You Prepare for One?

What an Annual Statutory Audit Is

A statutory audit is an independent examination of a company’s financial statements conducted by a licensed external auditor who has no financial or professional connection to the business under review. The output is a formal auditor’s report — a professional opinion on whether the financial statements present a true and fair view of the company’s financial position in accordance with applicable accounting standards. In the UAE, those standards are the International Financial Reporting Standards (IFRS).

The word “statutory” distinguishes this type of audit from voluntary or internal audits: it is mandated either by law, by a licensing authority, or by a regulatory requirement. In the UAE, statutory audit obligations arise from several sources simultaneously — the Companies Law, free zone licensing requirements, and since 2025, the Corporate Tax mandatory audit framework — meaning many businesses carry audit obligations from more than one direction.

Who Is Required to Have a Statutory Audit in the UAE

The statutory audit requirement in the UAE is not universal — it applies to specific categories of business based on their legal structure, location, revenue, and tax status. Understanding which requirement applies is the first step before selecting an auditor or beginning preparation.

Companies Law Requirement

Under Federal Law No. 32 of 2021 on Commercial Companies, all public joint-stock companies must appoint an external auditor approved by the Securities and Commodities Authority. Private companies — LLCs and private joint-stock companies — are also subject to audit requirements under the same law, with the specific obligation depending on their articles of association and shareholder structure.

Corporate Tax Mandatory Audit Requirement

Under Ministerial Decision No. 84 of 2025, effective for tax periods commencing on or after 1 January 2025, audited financial statements are mandatory for three specific categories of taxable person:

• Any taxable person whose annual revenue exceeds AED 50 million in the relevant tax period
• Any Qualifying Free Zone Person (QFZP), regardless of annual revenue level — a QFZP with AED 1 million in revenue requires an audit just as much as one with AED 200 million
• All Tax Groups, which must prepare audited special purpose aggregated financial statements — a requirement added by the 2025 decision that did not exist under the earlier 2023 framework

These Corporate Tax audit requirements apply in addition to any existing free zone or Companies Law obligation — they are additive, not alternative.

Free Zone Licensing Requirements

Most UAE free zones require their licensed companies to submit annual audited financial statements as a condition of licence renewal. DMCC, JAFZA, DIFC, DAFZA, DSO, and the majority of the UAE’s other free zones all maintain this requirement independently of the Corporate Tax framework. The auditor must be on the relevant free zone’s approved auditor list — a firm that is Ministry of Economy licensed but not on the specific free zone’s list cannot produce a valid audit for that zone’s companies.

The Legal Basis for Statutory Auditing in the UAE

The UAE statutory audit framework sits across several pieces of legislation:

• Federal Law No. 32 of 2021 on Commercial Companies — the primary law governing corporate structure and the mandatory appointment of external auditors for companies of the relevant types
• Federal Decree-Law No. 47 of 2022 on Corporate Tax — establishes that taxable income is derived from accounting net profit prepared under applicable accounting standards, making the financial statements the foundation of the tax calculation
• Ministerial Decision No. 84 of 2025 — specifies the categories of taxable person required to maintain audited financial statements for Corporate Tax compliance
• Free zone regulations — each free zone’s own Member Company Regulations or equivalent specify the annual financial statement and audit submission requirements for companies licensed in that zone

How to Prepare for a Statutory Audit in the UAE

Audit preparation is not a one-week exercise before the auditor arrives — it is a year-round discipline that makes the audit itself faster, less disruptive, and lower risk. The businesses that experience the smoothest audits are those whose record-keeping practices throughout the year produce records the auditor can work from directly, rather than requiring reconstruction or reconciliation at the audit stage.

Step 1 — Organise and Maintain Financial Records Throughout the Year

The foundation of audit preparedness is current, complete financial records maintained on an ongoing basis rather than reconstructed at year end. Essential records include:

• All tax invoices issued and received, organised by period
• Bank statements for every business account, reconciled to the general ledger monthly
• Purchase orders, contracts, and delivery notes for significant transactions
• Fixed asset register with acquisition dates, costs, depreciation schedules, and any disposals
• Payroll records and WPS confirmation reports
• Loan agreements, financing documents, and any guarantee arrangements
• Board minutes and shareholder resolutions

Records must be retained for a minimum of 7 years from the end of the relevant tax period under the UAE Corporate Tax framework — 5 years for VAT purposes and 15 years for real estate-related transactions.

Step 2 — Prepare IFRS-Compliant Financial Statements

UAE statutory audits are conducted against financial statements prepared in accordance with IFRS — the mandatory accounting standard for UAE businesses, with IFRS for SMEs available for businesses below the AED 50 million revenue threshold. Before the audit begins, the business should prepare draft financial statements comprising:

• Statement of Financial Position (balance sheet)
• Statement of Profit or Loss and Other Comprehensive Income
• Statement of Changes in Equity
• Statement of Cash Flows
• Notes to the financial statements, including the accounting policies applied

The quality of the draft financial statements significantly affects the audit timeline. Financial statements prepared with clear supporting schedules for every material balance — accounts receivable ageing, inventory valuation, fixed asset rollforward, loan reconciliation — allow the auditor to begin substantive testing immediately rather than spending time requesting supporting data.

Step 3 — Communicate With the Auditor Early

Engaging the auditor before the period end — rather than after the financial statements are drafted — allows the audit timeline to be planned and any anticipated complexities to be identified in advance. Early communication should cover:

• The expected audit timeline and key deliverable dates, particularly where the audit output is needed for a specific purpose such as free zone licence renewal
• Any significant transactions during the period that may require specific accounting treatment — acquisitions, disposals, restructurings, or related-party transactions
• Any changes in accounting policies applied during the period
• Any areas where management expects to exercise significant judgment, such as impairment assessments or fair value measurements
• Access arrangements for documentation, personnel, and any third-party confirmations required

Step 4 — Proactively Identify and Resolve Potential Issues

A business that identifies a potential accounting or compliance issue before the auditor does is in a considerably better position than one that discovers it during fieldwork. Common issues worth checking before the audit begins include:

• Reconciling differences between the VAT returns filed during the year and the revenue recorded in the financial statements — unexplained variances are a standard auditor focus area
• Related-party transactions and whether they have been correctly disclosed and priced at arm’s length
• Goodwill and intangible asset impairment assessments where these appear on the balance sheet
• Inventory write-downs where stock values have declined below cost
• Going concern assessment where the business is experiencing financial difficulty

How the Statutory Audit Is Conducted

Planning and Risk Assessment

The auditor begins by understanding the business — its operations, industry, risk environment, and significant accounting policies — and uses this understanding to identify the areas where material misstatements are most likely to occur. This risk assessment drives all subsequent audit work: higher-risk areas receive more extensive testing, lower-risk areas receive proportionately less.

Internal Controls Evaluation

The auditor assesses the design and operating effectiveness of key internal controls — the processes the business uses to prevent and detect errors and fraud. Where controls are functioning effectively, the auditor can rely on them and reduce the volume of detailed substantive testing. Where controls are weak or absent, the auditor must perform more extensive substantive work to obtain sufficient evidence.

Substantive Testing

Substantive testing is the core fieldwork of the audit — examining individual transactions and balances to verify that they are accurately recorded. Testing includes analytical procedures (comparing current-year figures against prior periods and expectations), tests of details (sampling specific transactions to verify amounts, authorisation, and cut-off), and third-party confirmations (asking banks, customers, and suppliers to confirm balances directly with the auditor).

Resolving Audit Findings

Where the auditor identifies errors, misstatements, or control weaknesses, they discuss these with management before the report is finalised. Management has the opportunity to provide additional evidence, correct identified errors in the financial statements, or explain why the auditor’s finding reflects a difference in interpretation rather than an actual error.

Where material misstatements are corrected, the auditor re-performs the affected procedures. Where management disagrees with a finding and the disagreement is not resolved, it may affect the form of the audit opinion — resulting in a qualified, adverse, or disclaimer of opinion rather than an unmodified (clean) opinion.

The Benefits of a Successful Statutory Audit

• Regulatory compliance — satisfying the legal, free zone, and Corporate Tax mandatory audit requirements without exposure to licence renewal delays or FTA compliance failures
• Credible financial statements — audited accounts carry independent assurance that stakeholders — investors, lenders, joint venture partners, and counterparties — can rely on
• Fraud and error detection — an external auditor’s independent perspective identifies issues that internal review may miss, whether through inadequate controls, management override, or deliberate concealment
• Internal control improvement — audit findings on control weaknesses provide management with specific, evidenced guidance on what needs to change and why
• Access to financing — banks and investors routinely require audited financial statements before extending credit or committing capital; an audit is often the prerequisite to the financing a business needs to grow
• Corporate Tax compliance foundation — the audited financial statements that form the basis of the Corporate Tax return are more defensible to FTA review than unaudited management accounts

How to Choose the Right Audit Firm

Not all audit firms are equally positioned to serve every type of UAE business. Key factors to confirm before engaging:

• Ministry of Economy licensing — the firm must be licensed as an approved audit practice in the UAE
• Free zone approved auditor status — where the business is free zone licensed, the firm must appear on that zone’s approved auditor list; this is a separate requirement from MoE licensing
• UAE-specific regulatory expertise — the audit team should have demonstrable knowledge of IFRS, UAE Corporate Tax, VAT, and the specific regulatory requirements of the business’s industry and structure
• Who will actually handle the engagement — the qualifications of the senior professional who will lead the audit, not just the firm’s overall credentials
• Written engagement letter — scope, fees, timeline, and responsibilities confirmed in writing before work begins

Frequently Asked Questions (FAQs)

What is a statutory audit in the UAE?

A statutory audit is a legally mandated independent examination of a company’s financial statements by a licensed external auditor, producing a formal opinion on whether the statements present a true and fair view in accordance with IFRS. The mandate arises from the Companies Law, free zone licensing requirements, or the Corporate Tax mandatory audit framework under Ministerial Decision No. 84 of 2025.

Which businesses must have a statutory audit in the UAE?

All public joint-stock companies, most free zone licensed companies (as a licence renewal condition), any taxable person with annual revenue exceeding AED 50 million, all Qualifying Free Zone Persons, and all Tax Groups are required to maintain audited financial statements. Many businesses fall into more than one of these categories simultaneously.

What accounting standard is used for UAE statutory audits?

IFRS — International Financial Reporting Standards — is the mandatory accounting framework for UAE businesses. IFRS for SMEs is available for businesses below AED 50 million in annual revenue, subject to any specific requirements from their licensing authority or free zone.

How long does a UAE statutory audit take?

Typically four to eight weeks from the point when draft financial statements and supporting documentation are provided to the auditor. The quality and completeness of the records provided is the single biggest variable affecting duration — well-organised, reconciled records with clear supporting schedules significantly reduce the audit timeline.

What happens if an audit identifies errors in the financial statements?

The auditor discusses identified errors with management, who have the opportunity to correct them and provide additional evidence. Where material errors are corrected, the auditor re-performs affected procedures. Where management and the auditor disagree on a material matter and cannot resolve it, the audit opinion may be modified — resulting in a qualified, adverse, or disclaimer of opinion rather than a clean report.

Does the auditor need to be on the free zone’s approved list?

Yes. Most UAE free zones maintain approved auditor lists, and a free zone company must use an auditor from the relevant approved list. Being licensed by the Ministry of Economy is necessary but not sufficient — free zone approval is a separate requirement that must be confirmed before the firm is engaged.

How Farahat & Co. Can Help

Farahat & Co. is a Ministry of Economy licensed audit firm and approved auditor across a broad range of UAE free zones, providing statutory audit services to mainland companies, free zone entities, and businesses subject to the Corporate Tax mandatory audit requirement under Ministerial Decision No. 84 of 2025. With over four decades of experience in UAE audit and accounting, our team covers the full scope of what a UAE statutory audit requires — from initial planning through to final report delivery.

Contact Farahat & Co. today to discuss your statutory audit requirements.