Statutory Audit Requirements in UAE — Who Needs One (2026)

Every UAE business owner asks the same question. Do I need a statutory audit — or can I skip it?

The answer depends on your entity type, jurisdiction, and regulatory authority. Under Federal Decree-Law No. 32 of 2021 (the Commercial Companies Law), most UAE companies must appoint an auditor and submit audited financial statements. With corporate tax now in effect, the stakes for non-compliance have never been higher.

This guide breaks down exactly who needs a statutory audit, when it's due, and what happens if you miss it. For help finding a qualified auditor, browse the FindCPA auditor directory.

What Is a Statutory Audit in the UAE?

A statutory audit is a legally mandated independent examination of a company's financial statements. Required under UAE federal law and free zone regulations, it verifies that accounts present a true and fair view in accordance with applicable accounting standards — typically IFRS or IFRS for SMEs.

A statutory audit differs from an internal audit or a voluntary audit. It is performed by an external auditor registered with the UAE Ministry of Economy. The auditor issues a formal opinion — unqualified, qualified, adverse, or disclaimer — that accompanies the company's financial statements when filed with regulators, free zone authorities, or the Federal Tax Authority.

The legal basis comes from multiple sources:

• Federal Decree-Law No. 32 of 2021 — governs mainland LLCs, PJSCs, and other commercial companies
• Free zone-specific regulations — each free zone authority sets its own audit requirements
• DIFC and ADGM laws — financial free zones have their own company laws mandating audits
• Corporate Tax Law (Federal Decree-Law No. 47 of 2022) — Qualifying Free Zone Persons must have audited financial statements

Which Companies Must Have a Statutory Audit?

All PJSCs, most LLCs with revenue above AED 50 million, all DIFC and ADGM entities, and virtually all free zone companies need a statutory audit. Only small sole establishments and some civil companies may be exempt — though corporate tax rules are narrowing those exemptions fast.

Here is the full breakdown by entity type:

Important nuance for LLCs: Even if your LLC falls below the AED 50 million threshold, your Memorandum of Association (MOA) may require an audit. Banks and investors also frequently require audited statements. And if you are claiming Qualifying Free Zone Person (QFZP) status for corporate tax purposes, an audit is mandatory regardless of size.

What Does Federal Decree-Law No. 32 of 2021 Actually Require?

The Commercial Companies Law requires joint stock companies to appoint an auditor at each annual general meeting and prohibits the same auditor from serving more than three consecutive years for PJSCs. LLCs above the threshold must include audited financials in their annual filings.

Key provisions from the law:

For PJSCs (Articles 247-253):

• Must appoint one or more auditors at each AGM
• Auditor must be registered with the Ministry of Economy
• Auditor tenure limited to three consecutive years (can be reappointed after a gap)
• Auditor must attend the AGM and present the audit report
• Board must provide auditor access to all records and documents
• Auditor cannot be a shareholder, board member, or relative of a board member

For LLCs (Article 26 and related provisions):

• Companies with revenue above AED 50 million or more than 20 partners must appoint an auditor
• Audited financial statements must be prepared within three months of the financial year-end
• Partners can request an audit even when not legally mandated

For all companies:

• The auditor must follow International Standards on Auditing (ISA)
• Financial statements must comply with IFRS or IFRS for SMEs
• Obstruction of the auditor is a criminal offense under the law

What Are the Audit Requirements by Free Zone?

Each free zone sets its own audit rules. DMCC, JAFZA, and most major free zones require annual audited financials for license renewal. DIFC and ADGM — the financial free zones — impose the strictest requirements, including mandatory auditor rotation in some cases.

Free zone audit requirements vary significantly. Here is a comparison of the major zones:

DIFC and ADGM specifics:

DIFC entities must use an auditor registered with the DIFC Registrar of Auditors. The DIFC maintains its own list of approved audit firms — your auditor must appear on it. Small and medium entities may file abbreviated financial statements, but the audit itself is still mandatory.

ADGM provides a limited exemption for "small companies" (meeting two of three criteria: revenue below USD 5 million, assets below USD 5 million, fewer than 50 employees). These companies may be exempt from appointing an auditor, but must still file annual returns with financial information.

Corporate tax interaction: If your free zone entity claims QFZP status under the corporate tax law, you must have audited financial statements — even if your free zone authority does not specifically require an audit. This effectively closes the audit exemption for any free zone business benefiting from the 0% corporate tax rate.

When Are Statutory Audits Due?

Most UAE entities must complete their audit within six months of the financial year-end. PJSCs face tighter deadlines because they must hold an AGM within four months. Missing the deadline can delay license renewals, attract penalties, and create corporate tax complications.

Corporate tax deadline interaction: UAE corporate tax returns are due nine months after the tax period ends. Your audit must be completed before you file your corporate tax return, since the return is based on audited financial statements (if audit is required). Plan accordingly — a late audit causes a cascade of late filings.

Need a statutory audit for your UAE company? Browse vetted auditors on FindCPA — compare fees, credentials, and client reviews. Find an Auditor in Dubai →

What Are the Penalties for Not Having a Statutory Audit?

Penalties range from license renewal refusal and administrative fines (AED 10,000–50,000+) to criminal prosecution of directors. Under the new corporate tax regime, the FTA can impose additional penalties for filing returns without required audited statements.

Non-compliance consequences vary by jurisdiction:

Mainland (under Decree-Law 32/2021):

• The Ministry of Economy can impose administrative fines
• Directors and managers can face personal liability
• Obstructing an auditor is a criminal offense with potential imprisonment
• The company's commercial license renewal may be refused

Free zones:

• License renewal denied or delayed until audit is submitted
• Late filing fees — typically AED 500–1,000 per month, compounding
• In severe cases, license suspension or cancellation
• DMCC, for example, issues formal warnings before escalating to fines

DIFC and ADGM:

• Financial penalties issued by the Registrar
• Potential striking off the register for persistent non-compliance
• Directors may face disqualification orders

Corporate tax:

• Filing a tax return without required audited financials may result in FTA penalties
• The FTA can reject the return and issue estimated assessments
• Late filing penalties of AED 1,000 for the first month, AED 2,000 per subsequent month (up to AED 28,000)
• Failure to maintain proper records can result in an AED 10,000 first-time penalty, AED 20,000 for repeat offenses

The cumulative cost of non-compliance almost always exceeds the cost of the audit itself. A typical SME audit costs AED 5,000–30,000; the combined penalties can quickly surpass that.

How Do You Prepare for Your First Statutory Audit?

Start at least three months before your financial year-end. Close your books within 30 days, organize supporting documents digitally, reconcile all bank accounts, and designate one person as the auditor's point of contact. Preparation quality determines whether your audit takes four weeks or four months.

If this is your first audit, follow these steps:

Step 1: Appoint Your Auditor Early

Do not wait until after the year-end. Engage an auditor at least three months before your financial year-end so they can:

• Understand your business and industry
• Perform preliminary planning and risk assessment
• Identify any accounting issues that should be resolved before year-end
• Schedule their team's time (busy season fills up fast)

Use the FindCPA auditor directory to compare qualified auditors by specialization, fees, and client reviews.

Step 2: Ensure Your Accounts Are IFRS-Compliant

Your financial statements must follow IFRS or IFRS for SMEs. Common first-audit issues include:

• Revenue recognized on a cash basis instead of accrual
• Missing end-of-service gratuity provision
• Leases not accounted for under IFRS 16
• No expected credit loss provision on receivables

Address these before the auditor arrives. Correcting during the audit adds time and cost.

Step 3: Prepare the Audit File

Organize these documents before fieldwork begins:

Corporate documents:

• Trade license, MOA, share certificates
• Board resolutions and meeting minutes
• Related-party agreements

Financial records:

• General ledger and trial balance
• Bank statements and reconciliations for all accounts
• Receivables aging and payables listing
• Fixed asset register with purchase invoices
• Inventory count records (if applicable)
• Payroll records and WPS reports

Tax and regulatory:

• VAT returns and reconciliation
• Corporate tax registration certificate
• Transfer pricing documentation (if applicable)

Step 4: Reconcile Everything

The most common audit delays come from unreconciled accounts. Before the auditor starts:

• Reconcile every bank account to zero
• Match intercompany balances between related entities
• Clear suspense accounts and old outstanding items
• Verify that opening balances match the prior year's closing (or agreed opening for first audit)

Step 5: Designate a Point of Contact

Assign one person — your accountant, finance manager, or CFO — as the single point of contact for audit queries. This person should:

• Respond to auditor requests within 48 hours
• Have access to all financial records and supporting documents
• Be authorized to provide confirmations and representations
• Be available throughout the audit fieldwork period

Step 6: Understand the Timeline

A well-prepared first audit for an SME typically takes:

Total: 5–9 weeks for a prepared client. Add 4–8 weeks if significant accounting corrections are needed.

How Much Does a Statutory Audit Cost in the UAE?

Audit fees range from AED 5,000 for simple free zone entities to AED 500,000+ for large PJSCs. The main cost drivers are company size, transaction complexity, number of entities, and industry. Free zone SMEs typically pay AED 8,000–25,000.

Indicative fee ranges by entity type:

Get quotes from multiple firms. Our guide on choosing an auditor in Dubai covers how to evaluate proposals and avoid common pricing traps.

Frequently Asked Questions

Does a sole establishment need a statutory audit?

Under the Commercial Companies Law, sole establishments are not required to have a statutory audit. However, if your sole establishment is subject to corporate tax and claims any deductions or exemptions that require audited financials, you may need one. Check with the FTA guidelines and your tax advisor.

Can I use the same auditor every year?

For PJSCs, the law limits the same auditor to three consecutive years, after which a rotation is required. For all other entity types, there is no mandatory rotation under UAE federal law — but DIFC and ADGM may have specific rotation requirements. Good governance practice suggests changing auditors every five to seven years.

What happens if my auditor issues a qualified opinion?

A qualified opinion means the auditor found a material issue but the financial statements are otherwise fairly presented. It does not necessarily mean your company is in trouble, but it signals a problem area. Free zone authorities and banks may ask for explanations. Address the qualification cause before the next audit to avoid repeat findings.

Is a review engagement the same as an audit?

No. A review provides limited assurance through analytical procedures and inquiries. An audit provides reasonable assurance through detailed testing and verification. Where a statutory audit is required, a review engagement does not satisfy the legal requirement. Read more about IFRS compliance requirements to understand the financial reporting standards your audit will assess.

Do I need an audit for free zone license renewal even if my company had no activity?

Most free zones require audited financial statements even for dormant companies. The audit will be simpler and cheaper — often just confirming zero activity — but it must still be performed by a registered auditor and formally submitted.

Keep Reading

• How to Choose an Auditor in Dubai — firm types, pricing, and red flags
• IFRS Compliance for UAE Businesses — the accounting standards your audit will examine
• Free Zone Accounting Requirements — zone-specific rules beyond the audit
• Browse Auditors on FindCPA — compare credentials, fees, and reviews