The UAE has changed a great deal since auditing was purely a company-law formality. With federal Corporate Tax now in its third year, VAT well established, and free zone authorities tightening their filing rules, an audit is no longer just a box some companies tick at licence-renewal time. For a growing number of businesses, it is a legal obligation tied directly to their tax position and their ability to keep trading.
So, are all companies in the UAE required to be audited? The short answer is no but the list of those that are keeps expanding, and the cost of getting it wrong has risen sharply. This guide explains exactly who must be audited, who is exempt, how mainland and free zone rules differ, what the corporate tax thresholds are, and how to get audit-ready without last-minute panic.
Who Needs an Audit in the UAE
The Four Pillars of UAE Audit Obligations:
Audit requirements in the UAE do not come from a single law. They flow from four overlapping sources, and a single company can be caught by more than one at the same time:
- The Commercial Companies Law Federal Decree-Law No. 32 of 2021. Under Article 27, every Joint Stock Company and Limited Liability Company on the mainland must appoint one or more auditors and have its accounts audited annually, using internationally recognised accounting standards.
- The Corporate Tax Law Federal Decree-Law No. 47 of 2022, effective for financial years starting on or after 1 June 2023. It introduced specific, revenue-linked triggers for audited financial statements.
- Free zone authority regulations: DMCC, JAFZA, DIFC, ADGM and most other zones require audited financial statements as a condition of licence renewal, regardless of company size.
- Sector and third-party requirements: Banks, lenders, regulators, and shareholders frequently demand audited accounts before extending credit, approving dividends, or completing a transaction.
The accounting framework underpinning all of this is set by Ministerial Decision No. 114 of 2023, which accepts only two standards for corporate tax purposes: full IFRS and IFRS for SMEs. IFRS for SMEs may be used only where revenue does not exceed AED 50 million; above that, full IFRS applies. Audits themselves are conducted under the International Standards on Auditing (ISA).
Who Must Be Audited, By Entity Type:
| Entity type | Audit position |
| Mainland LLC | Mandatory annual audit under Article 27 of the Commercial Companies Law. |
| Public Joint Stock Company (PJSC) | Mandatory annual audit; additional governance and disclosure rules apply as a listed/public entity. |
| Private Joint Stock Company | Mandatory annual audit under the Commercial Companies Law. |
| Free zone company (FZE / FZCO / free zone LLC) | Audit required by most free zone authorities for licence renewal, regardless of revenue. |
| Qualifying Free Zone Person (QFZP) | Audited financial statements are mandatory to hold and keep 0% status – no revenue threshold applies. |
| Any taxable person with revenue over AED 50 million | Audited financial statements mandatory for corporate tax purposes. |
| Tax group | Must prepare and maintain audited special purpose aggregated financial statements. |
| Branch of a foreign company | Generally required to submit audited financial statements of the UAE branch each year. |
| Company in liquidation | The liquidator’s report is prepared on the basis of audited financial statements. |
The practical takeaway: mainland LLCs and JSCs, free zone entities, QFZPs, large taxable persons and tax groups almost always need an audit. Very small mainland businesses that are not required to file with a regulator and fall below the corporate tax audit threshold may not have a strict legal audit obligation – but they still must keep proper books, and many choose to audit voluntarily for banking and credibility reasons.
Corporate Tax–Related Audit Thresholds:
This is the area that has changed most, so it is worth being precise. Under Article 54 of the Corporate Tax Law and its implementing decisions, audited financial statements are required in the following cases:
- Revenue exceeding AED 50 million in the relevant tax period audited financial statements are mandatory.
- Every Qualifying Free Zone Person audited financial statements are mandatory regardless of revenue. This is one of the conditions for keeping the 0% corporate tax rate on qualifying income.
- Tax groups all tax groups must prepare and maintain audited special purpose aggregated financial statements. To reduce the compliance burden, the individual members of the group are not required to prepare separate audited stand-alone statements.
- Non-resident persons only revenue derived through their UAE Permanent Establishment or nexus counts towards the AED 50 million threshold.
Which decision applies to you? The original rules came from Ministerial Decision No. 82 of 2023. These were updated by Ministerial Decision No. 84 of 2025, which applies to tax periods commencing on or after 1 January 2025. MD 82 still governs tax periods that began before that date. MD 84 introduced the tax-group audit requirement and the non-resident clarification described above.
In plain terms: if your revenue is over AED 50 million, or you are a QFZP, or you are part of a tax group, expect an audit requirement for corporate tax. Below AED 50 million and outside those categories, there is no corporate-tax audit trigger, but the Commercial Companies Law or your free zone may still require one, and the Federal Tax Authority (FTA) can ask any taxable person to provide financial statements.
The wider corporate tax numbers worth keeping in view: the rate is 0% on the first AED 375,000 of taxable income and 9% above that. Large multinationals with consolidated global revenue of EUR 750 million or more have faced a 15% Domestic Minimum Top-up Tax (DMTT) since 1 January 2025.
Exemptions For Small Businesses and Dormant Companies:
There is no blanket “small company” audit exemption in the UAE the way some other countries have one. Instead, relief tends to be indirect:
- Below the AED 50 million corporate tax threshold, there is no corporate-tax audit obligation, but a mainland LLC/JSC is still caught by the Commercial Companies Law, and a free zone entity is still caught by its authority’s rules.
- Small Business Relief (under Article 21 of the Corporate Tax Law and Ministerial Decision No. 73 of 2023, a UAE resident person with revenue of AED 3 million or less can elect to be treated as having zero taxable income. SBR is a transitional measure currently available for tax periods ending on or before 31 December 2026. It does not remove any audit obligation you have under company law or free zone rules, and you must still register, file, and keep records.
- Cash-basis accounting is permitted where revenue does not exceed AED 3 million, which eases bookkeeping but again does not remove an audit requirement.
- Dormant and zero-revenue companies are the most common misunderstanding. A dormant free zone company usually still has to file financial statements to renew its licence. “No activity” rarely means “no filing.” Always confirm with your specific authority.
Free Zone vs Mainland, and Audit Types
Free Zone vs Mainland: The Key Difference:
Both mainland and free zone regimes push towards transparency, but the mechanics differ.
Mainland companies are governed primarily by the Commercial Companies Law. LLCs and JSCs must be audited annually. The auditor must be licensed and registered with the Ministry of Economy (MoE). Even where the audited statements are not filed with a regulator, they must be prepared and kept.
Free zone companies answer to their zone’s authority. Most zones including DMCC, JAFZA, DAFZA, DSO, DIFC and ADGM require audited financial statements to be submitted within a set window after the financial year-end, and they will hold up your trade licence renewal until you comply.
Two important nuances for free zones:
- DIFC and ADGM are common-law financial free zones with their own regulators. Auditors in DIFC must be registered with the Dubai Financial Services Authority (DFSA); ADGM operates under its own registration framework overseen by the Abu Dhabi Accountability Authority (ADAA). These two zones generally require full IFRS (not IFRS for SMEs).
- Many free zones publish an approved auditors list, and only firms on that list can sign off filings for that zone. Using a firm that is not approved can lead to outright rejection of your submission.
Internal Audit vs External Statutory Audit:
These are often confused, but they serve different purposes:
- An external / statutory audit is an independent examination of your financial statements by a licensed auditor, resulting in a formal audit opinion on whether the statements give a true and fair view under IFRS. This is the audit the law, the FTA and free zones care about. It must be performed by an MoE-registered (or zone-approved) auditor who is independent of your business.
- An internal audit is a function inside (or outsourced by) the company that reviews internal controls, risk management and process efficiency. It is about improving how the business runs, is not legally mandated for most private companies, and does not satisfy statutory or tax audit obligations.
The Audit Process: Deadlines, Documents, and Steps
Audit Deadlines and Submission Timelines:
- Deadlines come from two different clocks the corporate tax clock and the free zone clock and they rarely line up.
- Corporate tax: the corporate tax return must be filed, and any tax paid, within nine months of the end of your tax period. For a financial year ending 31 December 2025, the deadline is 30 September 2026. Where audited financial statements are required, they need to be ready in time to support that return.
- DMCC: audited financial statements are submitted through the DMCC portal after year-end. DMCC has used both a 90-day and a 180-day window in different periods, so check your current deadline in the portal rather than assuming.
- JAFZA typically requires submission within around 90 days (three months) of the financial year-end.
- DIFC allows a longer window (commonly up to around six months), with filings made to the DIFC Registrar of Companies.
- ADGM similarly allows a longer window (commonly up to around six months) for filing accounts.
- Because these windows differ and change, the safe approach is to treat your licence renewal date and the nine-month corporate tax deadline as your two anchor dates and work backwards from whichever comes first.
Required Documents Checklist:
An efficient audit depends almost entirely on how well your records are organised before the auditor arrives. Have the following ready:
- Trial balance for the financial year
- General ledger and detailed nominal ledgers
- Financial statements prepared under IFRS or IFRS for SMEs (P&L, balance sheet, cash flow, changes in equity, and notes)
- Bank statements and bank reconciliations for every account
- Fixed asset register with additions, disposals and depreciation
- Sales and purchase invoices, and expense receipts
- VAT returns and workings, and corporate tax computations
- Related-party transaction details and, where relevant, transfer pricing documentation
- Loan agreements, lease agreements and major contracts
- Payroll records and end-of-service accruals
- Trade licence, Memorandum of Association, and shareholder details
- Prior-year audited financial statements
- A signed management representation letter at the end of the process
The Audit Process, Step by Step:
- Engagement and planning. You appoint a MoE-registered (or zone-approved) auditor, agree the scope and timeline, and the auditor assesses risk areas and materiality.
- Preparation. You pull together the document checklist above. Clean, reconciled records here save the most time and cost.
- Fieldwork. The auditor tests transactions, verifies balances, confirms bank and receivable balances, inspects the fixed asset register, reviews related-party dealings, and evaluates internal controls.
- Review and queries. The auditor raises questions and adjustments. You provide explanations and supporting evidence.
- Management representation. You sign a management representation letter confirming the completeness and accuracy of the information provided.
- Audit opinion and report. The auditor issues the report. The opinion will be one of four types: unqualified (clean) statements give a true and fair view; qualified true and fair except for a specific issue; adverse statements do not give a true and fair view; or a disclaimer the auditor could not obtain enough evidence to form an opinion.
- Filing The audited statements are submitted to the relevant free zone authority and used to support your corporate tax return.
How long does an audit take?
For a small-to-mid-sized company with tidy, reconciled books, a statutory audit often takes two to four weeks from the start of fieldwork to a signed report. Larger or more complex businesses multiple entities, inventory, foreign currency, significant related party deadlines can take six weeks or more. The single biggest variable is the state of your records: disorganised or unreconciled accounts can double the timeline and the cost. Booking your auditor early, well ahead of your licence renewal or the nine-month tax deadline, avoids the year-end rush when good firms are fully booked.
Choosing an Auditor and Staying Compliant
How To Choose an Approved Auditor?
Not every accountant can sign a statutory audit in the UAE. When selecting a firm, check that they:
- Are registered with the Ministry of Economy (and on your free zone’s approved auditors list, where one exists or DIFC this means DFSA-registered, for ADGM the equivalent ADGM registration).
- Hold recognised professional credentials (such as CPA, ACCA, or UAECA) and maintain independence from your business.
- Have genuine experience in your sector and with your free zone’s filing process.
- Understand the corporate tax dimension a good auditor helps reconcile accounting profit to taxable income and flags issues before they become penalties.
- Can meet your deadline without cutting corners.
You can verify a firm’s status through the MoE register or your free zone authority’s portal before engaging them.
Record Retention and Bookkeeping Best Practices:
UAE law imposes overlapping retention periods, so keep to the longest that applies:
- Corporate Tax records must be kept for seven years after the end of the relevant tax period (Article 56 of the Corporate Tax Law).
- VAT records must generally be kept for five years (Article 78 of the VAT Law), longer for real estate.
- Commercial Companies Law accounting records must be kept at the company’s head office for at least five years from the end of the financial year.
Because corporate tax sets the longest baseline, a seven-year retention policy covers you in most cases. Good bookkeeping habits that make audits painless: reconcile bank accounts monthly, keep the fixed asset register current, document every related-party transaction at arm’s length, close the books each month rather than scrambling at year-end, and retain digital copies of all invoices and contracts in an organised system.
Audits and Your Corporate Tax Filing
How Audited Financials Support Corporate Tax Filing:
Under UAE corporate tax, taxable income starts from the accounting net profit in your IFRS financial statements, then adjusts for specific tax rules. That makes the quality of your financials the foundation of your tax return. Audited statements matter because they:
- Provide a credible, independently verified starting figure for the tax computation.
- Are mandatory to submit alongside the return where you exceed AED 50 million, are a QFZP, or are a tax group.
- Reduce the risk of an FTA challenge or estimated assessment, because the numbers have already been tested.
- Support transfer pricing positions by evidencing related-party transactions.
- Protect your 0% QFZP status, which is conditional on audited financial statements being in place.
In practice, businesses that keep audit-ready books all year find corporate tax filing far less stressful than those that treat the audit and the tax return as separate, last-minute exercises.
Penalties and Consequences of Non-Compliance:
The FTA’s penalty framework is now automatic and enforced. Key figures under the current regime:
- Late corporate tax registration: AED 10,000. This penalty can be waived where the first tax return or annual declaration is filed within seven months of the end of the first tax period a relief mechanism worth confirming with the FTA, as its terms can change.
- Late corporate tax filing: AED 500 per month for the first 12 months, rising to AED 1,000 per month thereafter.
- Late payment of corporate tax: 14% per annum, applied monthly on the unpaid amount, with no cap.
- Free zone non-compliance: fines from the authority plus often more damaging a blocked or delayed trade licence renewal, which can halt your ability to operate.
- Company law breaches: failing to maintain proper audited accounts expose mainland companies to penalties under the Commercial Companies Law and the Tax Procedures Law.
Beyond the fines, non-compliance damages your standing with banks, investors and partners, and can trigger a full FTA audit.
Audit Readiness Checklist:
Use this in the weeks before your audit:
- Confirm which obligations apply to you (company law, corporate tax threshold, QFZP, tax group, free zone)
- Confirm your filing deadlines (free zone window and the nine-month tax deadline)
- Engage a MoE-registered / zone-approved auditor early
- Reconcile all bank accounts to year-end
- Finalise the trial balance and general ledger
- Update the fixed asset register (additions, disposals, depreciation)
- Prepare IFRS / IFRS for SMEs financial statements
- Compile related-party transaction details and TP documentation
- Gather invoices, contracts, loan and lease agreements
- Reconcile VAT returns to the ledgers
- Prepare the corporate tax computation from the accounts
- Ensure records are retained for seven years
Frequently Asked Questions:
Are all UAE companies required to be audited?
No Mainland LLCs and JSCs must be audited under the Commercial Companies Law, most free zone companies must be audited for licence renewal, and any taxable person over AED 50 million (plus every QFZP and every tax group) must have audited financials for corporate tax. Very small mainland businesses outside those categories may have no strict statutory audit obligation but they still must keep proper books.
Does a company below AED 50 million need an audit?
Additionally, all businesses must maintain accurate accounting records and supporting documents, even if a statutory audit is not mandatory. The Federal Tax Authority (FTA) has the authority to request financial statements and other records during a tax review or audit. Therefore, maintaining proper books of accounts and being audit-ready is considered a best practice for compliance, financing, and future business growth.
Do dormant or zero-revenue free zone companies still need to file audited accounts?
Yes, in most cases, dormant or zero-revenue free zone companies are still required to submit audited financial statements to maintain compliance. Many UAE free zone authorities require these filings as part of the trade licence renewal process, even if the company has had no business activity during the year. Since requirements can vary by free zone, businesses should always verify the specific filing obligations with their respective free zone authority.
Does Small Business Relief remove the audit requirement?
No. SBR (revenue up to AED 3 million, for periods ending on or before 31 December 2026) reduces your tax liability and simplifies your return but does not remove any audit obligation under company law or free zone rules.
Which accounting standard should we use?
Businesses in the UAE must prepare their financial statements using Full IFRS or IFRS for SMEs, depending on their eligibility. Companies with annual revenue of AED 50 million or less may use IFRS for SMEs, while those exceeding this threshold must apply Full IFRS. Businesses operating in DIFC and ADGM are generally required to prepare their financial statements in accordance with Full IFRS.
How long do we keep our records?
Businesses in the UAE must retain corporate tax records for seven years after the end of the relevant tax period. VAT records and accounting records are generally required to be kept for at least five years under the VAT Law and the Commercial Companies Law. As a best practice, maintaining all financial and tax records for seven years helps ensure compliance with most UAE regulatory requirements.
Who can legally audit our company?
In the UAE, only an auditor registered with the Ministry of Economy (MoE) is legally authorized to conduct a statutory audit for mainland companies. If your business operates in a free zone, the auditor must also be on the approved auditors list of that free zone, where applicable. For companies in DIFC and ADGM, auditors must meet the respective regulatory registration requirements to ensure the audit is valid and compliant.
When is our corporate tax return due?
Return must be filed within nine months after the end of your financial (tax) year. For example, if your financial year ends on 31 December 2025, your corporate tax return is due by 30 September 2026. Businesses should also ensure that any required audited financial statements and supporting records are completed before filing to avoid penalties and ensure full compliance with the Federal Tax Authority (FTA).
Reach out to us at info@bcl.ae
