UAE statutory audit rules come from four separate sources. Company law is only one part of the picture. Free zone licence terms add their own audit rule. Corporate Tax law now sets a new audit trigger too. Sector regulators add extra rules for certain industries. So one simple question needs four separate checks. Which rule applies to your company first?
This guide walks through each trigger clearly. You will learn your legal duty and deadline. You will also learn the full audit process. We help clients pick the right approved auditor every year. Assurance Corps handles this exact Audit & Assurance Services process for clients across Dubai.
Do You Legally Need a Statutory Audit? Four Compliance Triggers
Commercial Companies Law (Mainland)
Federal Decree Law No. 32 of 2021 sets this rule. Every LLC and PJSC must follow it. PJSC companies fall under the same law. UAE branches of foreign companies must comply too. Your auditor must register with the Ministry of Economy. This registration proves the auditor meets legal standards. Audited statements get presented at your AGM. Shareholders review these numbers every single year.
Free Zone Licence Conditions
Every free zone sets its own audit rule. DMCC, JAFZA, DIFC, ADGM, RAKEZ, DWC and DDA all differ. A Ministry of Economy licence alone is not enough. DAFZA and KEZAD each keep separate approval systems too. We have seen owners submit reports from unlisted firms. Those reports get rejected during licence renewal season.
Each free zone authority keeps an approved auditor list. Licence renewal depends on using a listed firm. DIFC follows DFSA rules for its audits. ADGM instead follows FSRA guidance for approval. Firms upload signed reports through each member portal. An auditor panel then reviews and confirms each report. Every statement must also follow IFRS standards fully.
Corporate Tax AED 50M Threshold & Tax Groups
Corporate Tax law now decides who needs an audit. Company size alone does not decide this any more. Federal Decree Law No. 47 of 2022 set the first rule. Ministerial Decision No. 84 of 2025 later replaced an older rule. That older rule was Ministerial Decision No. 82 of 2023. This change applies from the tax period starting January 2025.
A taxable person outside a tax group faces one rule. Revenue above AED 50 million triggers the audit duty. Tax groups must prepare special purpose financial statements instead. This applies no matter how small their combined revenue is. A non-resident person counts only UAE linked revenue toward that limit. Only income tied to a permanent establishment or nexus counts. We flag this exact detail for branch office clients often.
Qualifying Free Zone Person (QFZP)
Qualifying Free Zone Person status carries one strict condition. Your books must stay audited every single year. This status protects your zero percent tax rate. That rate only applies to qualifying income earned. Skip your audit and the Corporate Tax regime reacts fast. Many owners assume a dormant year gets a pass. It does not work that way at all. Disqualification happens the moment an auditor finds a gap.
Edge Cases the actual rule, not just the label
A dormant company still needs its accounts filed. Any trigger above still applies without any exception. A holding company or parent company is not exempt either. A foreign branch files only its own UAE accounts. It does not file the whole group’s global numbers. We corrected this exact mistake for a recent client.
A newly incorporated company can pick its first year end. That first year can run up to eighteen months. Audit duty still starts from that very first year. Under liquidation, an appointed liquidator can demand a fresh audit. Record keeping rules require five years of stored files. Some records must stay stored for seven full years.
Statutory Audit Deadlines by UAE Authority
| Authority | Submission Window | Basis |
| Mainland (AGM) | 3 to 4 months after year end | Commercial Companies Law |
| DMCC / JAFZA / DWC | 90 to 180 days after year end | Licence renewal condition |
| DIFC | Within 4 months after year end | DFSA filing requirement |
| ADGM | Set by FSRA filing window | Regulatory filing |
| RAKEZ | Tied to licence renewal date | Renewal condition |
| DDA | Set yearly by authority notice | Renewal condition |
Each authority sets its own separate deadline. Corporate Tax law does not control this timing. A business can meet its FTA deadline easily. That same business can still miss a free zone date. Checking both deadlines separately avoids this common mistake.
What Can Change Your Deadline
Your deadline starts from your incorporation date. That date sets your very first reporting period. This first period can run beyond twelve months. Some firms request an authority extension when needed. Not every free zone grants this extra time. Ask about extensions before you assume they exist.
A mid year change of accounting period resets everything. This move needs formal notification sent in advance. Your authority must approve the change before it counts. We handled this exact reset for one client recently. Skipping that notification step causes real renewal delays.
What Happens If You Miss the Audit Deadline?
Actual Penalty Sequence
Missing your deadline starts a fine right away. Fines usually begin around AED 500 each month. Some cases reach AED 1,000 or AED 5,000 monthly. Serious delays can push fines toward AED 50,000 total. Federal Tax Authority penalties follow a set table too. Cabinet Decision No. 129 of 2025 updated this exact table. Cabinet Decision No. 106 of 2025 covers separate penalty rules.
This fine keeps growing until you file your report. Licence renewal gets blocked once fines start piling up. Continued delay can lead to full licence suspension. Filing your report stops the fine from growing further.
Corporate Tax Consequence
A missed audit hits Qualifying Free Zone Person status hard. QFZP disqualification can happen from one missed audit. Your zero percent Qualifying Income rate disappears immediately. This creates a real tax problem, not just paperwork. Filing late will not undo this exact outcome. Your audited financial statements must stay current every year.
How to Recover
Appoint an approved auditor the moment you notice a delay. Do not wait for a cleaner financial year. Contact your authority before they contact you first. Some authorities accept a staged submission plan instead. File your outstanding statement even after the deadline passes. Fines stop growing once your report gets filed. Check your QFZP status separately with your tax agent. A late audit does not restore that status automatically.
How the Statutory Audit Process Works
1. Appointment & Planning
Your board or shareholders appoint an approved auditor first. Both sides then sign a clear engagement letter. This letter sets the audit scope and materiality level. Company size and risk level shape this early plan.
2. Risk Assessment
The auditor reviews your internal controls next. This step flags fraud risk and business risk areas. Higher risk areas get tested more heavily later. This assessment happens before any fieldwork actually starts.
3. Document Preparation
Your team gathers the trial balance and records. Financial statements and supporting documents get requested here. A full readiness checklist appears later in this guide.
4. Fieldwork & Management Discussion
The auditor samples transactions and collects real evidence. Findings then get discussed directly with your management team. Any proposed adjustment gets reviewed during this same stage. A signed management representation letter closes this step.
5. Audit Opinion
Four possible opinions can come from this process. An unmodified opinion means your statements look clean. A qualified opinion notes specific exceptions found. An adverse opinion means statements are not fairly presented. A disclaimer means evidence was simply not enough. Most licence renewals accept only unmodified or qualified opinions. Adverse or disclaimer opinions trigger follow up with your authority.
Choosing the Right Statutory Auditor
Regulatory Approval & Independence
Your auditor needs Ministry of Economy registration first. Free zones like DIFC, ADGM and DMCC need separate approval. One registration alone will not cover every free zone. Independence also matters just as much as approval. A firm cannot audit books it also keeps. That creates a clear self review conflict under ethics rules.
Experience & Fee Structure
Industry specific experience shortens your fieldwork time noticeably. It also tends to lower your total audit cost. Fee drivers include your revenue volume and transaction count. Group entities and inventory complexity raise fees too. Deadline urgency can also push your quoted fee higher. Push for one fixed fee inside your engagement letter. Avoid open ended hourly billing whenever you can.
Questions to Ask Before Appointing
- Are you on our free zone’s approved list?
- Do you also handle our bookkeeping work?
- What exactly sits inside your fixed fee?
- What is your usual turnaround for our size?
Statutory Audit vs Internal Audit vs Tax Audit
Statutory audit and external audit mean the same thing here. This table treats both terms as one single engagement.
| Feature | Statutory / External Audit | Internal Audit | Tax Audit |
| Mandatory? | Yes, based on your trigger | No, voluntary or board driven | Only if FTA selects you |
| Performed by | Independent licensed external firm | In house or outsourced team | FTA or FTA appointed reviewer |
| Result goes to | AGM, authority, and tax file | Management and board only | Federal Tax Authority |
| Frequency | Every year | As needed | As triggered |
Your AGM and free zone need this exact audit. Your QFZP filing needs this same audit too. Internal audit never replaces this legal requirement.
Statutory Audit Readiness Checklist
Gather these documents before your auditor starts fieldwork.
● Financial: trial balance, general ledger, prior financial statements
● Tax: VAT returns, corporate tax records
● Banking: bank statements, reconciliations
● Payroll: and fixed asset records
● Legal: trade licence, memorandum of association, board resolutions
Download our full checklist before your next audit.
FAQs
Is every UAE company legally required to have a statutory audit?
No. Only companies that meet one trigger above need a statutory audit each year.
Is an audit mandatory for all free zone companies, or only some?
Most free zones require an annual audit. A few smaller zones may not enforce this yet.
Does the FTA require audited financial statements for every business?
No. The FTA requires this only above the AED 50 million threshold or inside a tax group.
Can one audit satisfy both my free zone renewal and Corporate Tax obligation?
Yes, in most cases. One audited statement can cover both filing needs together.
What happens to my audit obligation if my company is dormant?
It stays the same. A dormant status does not remove an existing audit trigger.
Can a tax group avoid audited financial statements if consolidated revenue is under AED 50M?
No. Tax groups must prepare audited special purpose statements regardless of combined revenue.
Ready to Start Your Statutory Audit?
Start by finding your exact compliance trigger first. Confirm your real deadline with the right authority. Gather your records early, not at the last minute. Appoint an independent, approved auditor as soon as possible.
Need a statutory audit in the UAE. The Assurance Corps can confirm your exact audit obligation. We prepare compliant financial statements for Mainland and Free Zone companies. Contact our Dubai based audit team today. Get a tailored assessment and clear quotation fast.
