Auditing Requirements for UAE Companies

Running a company in the UAE means keeping proper financial records. For many businesses, it also means having those records independently audited every year.

The difficulty is working out whether the rule applies to your company. UAE audit requirements depend on several things, including your legal structure, licensing jurisdiction, Corporate Tax position and industry. A Dubai mainland LLC may have one set of obligations while a free zone company follows another. Corporate Tax rules can add a separate audit requirement even when your licensing authority does not.

For example, UAE Corporate Tax rules currently require audited financial statements for a taxable person with revenue exceeding AED 50 million, every Qualifying Free Zone Person and Tax Groups under the applicable special-purpose financial statement rules.

Here is how the rules work and what your business should prepare.

What Is an Audit for a UAE Company?

A company audit is an independent review of your financial statements and the records supporting them.

The auditor looks at areas such as revenue, expenses, assets, liabilities, bank balances and significant transactions. The goal is to determine whether the financial statements fairly represent the company's financial position under the applicable accounting framework.

This is different from bookkeeping.

Bookkeeping records day-to-day transactions such as sales, purchases, payments and receipts.

Accounting takes those records and turns them into financial reports such as the profit and loss statement, balance sheet and cash-flow information.

Auditing comes afterwards. An independent auditor examines those accounts, tests supporting evidence and issues an audit opinion.

Under Article 27 of the UAE Commercial Companies Law, limited liability companies and joint-stock companies must have one or more auditors conduct an annual audit of their accounts. The same article requires annual financial accounts and the use of international accounting standards and principles.

Does Internal Auditor Certification Replace an External Audit?

No. Internal and external auditing serve different purposes.

An internal auditor normally reviews internal controls, risk processes, operational procedures and compliance inside an organisation. A statutory external auditor independently reports on the company's financial statements.

The Certified Internal Auditor certification, commonly known as the CIA, is issued by The Institute of Internal Auditors. Current certified internal auditor requirements vary according to education and experience. For example, a master's degree generally requires one year of relevant experience while a bachelor's degree generally requires two years. Candidates must also complete the required CIA examinations.

So, having an employee with an internal auditor certification does not replace a statutory audit where UAE law or your licensing authority requires an independent external auditor.

Which UAE Companies Need an Audit?

There is no sensible way to answer this question by looking at revenue alone.

Start with the company's legal form.

Mainland LLCs and Joint-Stock Companies

Article 27 of Federal Decree-Law No. 32 of 2021 requires limited liability companies and joint-stock companies to have annual audits. The law does not place a general revenue threshold on that requirement.

Foreign companies and their UAE branches also have specific accounting requirements. Article 338 states that, except for representative offices, foreign companies and branches must have an independent balance sheet and profit and loss account and an auditor registered on the UAE roster of practising auditors.

Companies Caught by Corporate Tax Audit Rules

Corporate Tax creates a separate test.

Under Ministerial Decision No. 84 of 2025, for Tax Periods beginning on or after 1 January 2025, audited financial statements are required for:

• A taxable person that is not a Tax Group and has revenue exceeding AED 50 million during the relevant Tax Period

• A Qualifying Free Zone Person, regardless of the AED 50 million threshold

• A Tax Group, which must prepare audited special-purpose financial statements under the applicable FTA rules

The 2025 decision replaced Ministerial Decision No. 82 of 2023 for Tax Periods beginning on 1 January 2025. 

For the wider tax position, read Nexture's UAE Corporate Tax guide.

Regulated Businesses

Banks, insurance businesses, financial institutions, listed companies and certain other regulated entities can face additional audit and reporting rules imposed by their sector regulator.

If your company operates in a regulated industry, checking the trade licence alone is not enough. Review the requirements of the relevant supervisory authority as well.

UAE Mainland vs Free Zone Audit Requirements

Free zones need separate attention because their own regulations can govern audit obligations.

Article 5 of the Commercial Companies Law specifically recognises that free-zone companies may be governed by the special laws and regulations of their respective zones for matters covered by those regulations.

That creates some important differences.

DMCC's guidance states that member companies must upload their audited financial statements and summary sheet within 180 days after the end of each financial year. According to DMCC compliance guidance, DMCC also requires the appointed auditor to meet its approved-auditor requirements. 

DIFC follows a different system. DIFC corporate filing guidance provides a small private company exemption and identifies private companies outside that exemption, including companies with more than 20 shareholders or annual consolidated turnover above USD 5 million, among the entities required to file audited accounts. The stated filing period is within seven months of the financial year-end. 

ADGM also provides an audit exemption for qualifying small companies and micro-entities, although public-interest entities and financial institutions identified in its rules cannot rely on that small-company exemption. 

This is why you should never assume that one free zone's rules apply to another.

If you operate in DMCC, Nexture's JLT and DMCC company setup guide explains the broader company structure and tax position.

Documents Required for a Company Audit

Your auditor needs enough evidence to connect the figures in your financial statements with actual business transactions.

Expect to prepare documents such as:

• Trial balance and general ledger

• Balance sheet and profit and loss statement

• Bank statements and bank reconciliations

• Sales invoices and credit notes

• Supplier invoices and expense records

• Receipts and payment evidence

• Customer and supplier balances

• Inventory records, where applicable

• Fixed asset register and depreciation schedules

• Payroll and employee benefit records

• Loan and financing agreements

• Shareholder and related-party transactions

• Intercompany balances

• Major customer and supplier contracts

• Lease agreements

• VAT returns and supporting calculations

• Corporate Tax calculations and returns

• Trade licence, Memorandum of Association and other incorporation records

Good bookkeeping makes this much easier.

You should also keep records for the required retention period. The Commercial Companies Law requires company accounting records to be kept for at least five years. Corporate Tax records generally need to be retained for seven years.

Nexture's Corporate Tax return filing guide explains the tax-side documentation in more detail.

How Does the UAE Company Audit Process Work?

The exact process depends on your size and business activity, but most audits follow the same basic sequence.

1. Close the Accounting Period

   Complete the year's bookkeeping first.

   Reconcile the bank accounts, review receivables and payables, record depreciation and check outstanding expenses. Trying to audit incomplete books usually causes extra questions and higher professional fees.

2. Prepare the Financial Statements

   Your accountant prepares the annual financial statements using the applicable accounting standards.

   Figures should reconcile with the underlying ledger.

3. Send Records to the Auditor

   The auditor normally sends a document request list.

   Provide complete files rather than sending documents one at a time. Missing bank statements, unexplained shareholder payments and incomplete invoices are common causes of delays.

4. Auditor Testing and Review

   The auditor may test selected sales, expenses, bank balances, contracts, inventory and other transactions.

   They do not necessarily examine every transaction. Audit procedures focus on material amounts and areas where errors or misstatements are more likely.

5. Answer Audit Queries

   The auditor may ask for confirmations or explanations.

   For example, an AED 300,000 payment to a shareholder should have documentation explaining whether it represents a dividend, loan repayment, reimbursement or another transaction.

6. Finalise the Audit Report

   Once outstanding issues are resolved, management approves the financial statements and the auditor issues the final report.

   Depending on the circumstances, the audit opinion may be unmodified or may contain a qualification, adverse opinion or disclaimer.

How Often Should UAE Companies Be Audited?

For companies subject to an annual audit obligation, the normal cycle is once for each financial year.

Under the Commercial Companies Law, a company's first fiscal year can run for between six and 18 months from registration. Later fiscal years generally run for 12 months.

Do not confuse audit frequency with the filing deadline.

A company may need one audit each year but have a specific period after year-end in which the report must be submitted. DMCC, for example, states 180 days after financial year-end while DIFC rules contain their own filing timetable for entities required to submit audited accounts.

Your Corporate Tax calendar matters too. Tax returns are normally due within nine months after the end of the relevant Tax Period.

The safest approach is to confirm four dates every year:

1. Financial year-end

2. Auditor appointment or preparation date

3. Free-zone or regulator filing deadline

4. Corporate Tax filing deadline

Consequences of Not Meeting Audit Requirements

Ignoring an audit obligation can create problems beyond the missing report itself.

Compliance Problems

A company that fails to follow applicable company, tax or free-zone regulations can face administrative action.

UAE company legislation also provides penalties for failures involving accounting records and financial reporting.

Free Zone Licence and Service Issues

Where audited accounts form part of a free zone's annual compliance process, late filing can affect company services, compliance status or licence-related procedures.

The exact consequence depends on the authority, so check your free-zone regulations rather than assuming there is one UAE-wide penalty.

Corporate Tax Risks

For a business relying on Qualifying Free Zone Person status, audited financial statements are one of the conditions associated with the regime.

Failing to meet the applicable conditions can therefore affect access to the special Free Zone Corporate Tax treatment. DMCC Corporate Tax guidance confirms that keeping audited financial statements is among the conditions for companies seeking Qualifying Free Zone Person treatment. 

Banking, Investment and Transaction Delays

A bank, investor or potential buyer may request audited accounts even where no immediate statutory filing is due.

This becomes especially important when applying for business finance, selling shares, attracting investors or carrying out due diligence.

Preparing accounts properly each year is usually much easier than reconstructing several years of records when someone suddenly asks for an audit.

Conclusion

UAE audit requirements are easier to manage once you separate the rules into three areas: company law, jurisdiction-specific requirements and Corporate Tax.

A mainland LLC can have an annual statutory audit obligation even when its revenue is below AED 50 million. A free-zone company may follow completely different filing rules. A company seeking Qualifying Free Zone Person treatment can also be required to provide audited financial statements because of Corporate Tax.

Start checking your position before the financial year closes. Confirm your jurisdiction's rules, maintain reconciled accounts and keep invoices, contracts and bank records organised throughout the year.

If you are unsure whether your UAE company needs audited accounts, Nexture can help you review your company structure, free-zone requirements and wider compliance position before the filing deadline.

Frequently Asked Questions