What are the audit requirements in UAE?

Audit requirements in UAE are mandatory for most corporate entities, covering both mainland companies and free zone establishments. The obligation to maintain audited financial statements is embedded in federal company law and reinforced by free zone authority regulations, tax registration rules, and banking requirements. Whether a business is a limited liability company on the mainland, a branch of a foreign entity, or a free zone company, it will almost certainly need a licensed external auditor to sign off on annual accounts. This guide covers who must comply, which laws apply, how the process works, typical timelines, and the practical pitfalls that foreign founders most often encounter.

The primary federal statute governing companies on the UAE mainland is the Commercial Companies Law. This law requires all companies incorporated under it - including limited liability companies, public joint stock companies, and private joint stock companies - to appoint a licensed external auditor and to have their annual financial statements audited. The auditor must be registered with the Ministry of Economy and hold a valid UAE practising licence.

The Commercial Companies Law sets out the auditor';s duties explicitly. The auditor must examine the company';s books, verify that the financial statements give a true and fair view, and report to the shareholders. The audit report is presented at the annual general meeting, which must be held within a specified period after the financial year end - typically within four months for most entity types.

Beyond the Commercial Companies Law, the UAE Corporate Tax Law introduced a new layer of compliance. Businesses that are subject to corporate tax must maintain audited financial statements if their revenue exceeds a threshold set by the Federal Tax Authority. Even entities that qualify for a zero-rate or exemption may still need audited accounts to substantiate their position. The Corporate Tax Law therefore extends the practical reach of audit obligations well beyond what company law alone requires.

The Economic Substance Regulations, issued by the Ministry of Finance, add a further dimension. Entities carrying out relevant activities must demonstrate genuine economic substance in the UAE, and audited financials are a key piece of evidence in that assessment. Failure to produce credible audited accounts can undermine an economic substance filing.

On the mainland, the obligation is clear: every company incorporated under the Commercial Companies Law must appoint an auditor and produce audited annual accounts. This covers limited liability companies regardless of size, joint stock companies, and branches of foreign companies registered with the Ministry of Economy.

Free zone companies operate under the regulations of their respective free zone authority rather than directly under the Commercial Companies Law. However, virtually every major free zone - including the Dubai International Financial Centre, Abu Dhabi Global Market, Jebel Ali Free Zone, Dubai Multi Commodities Centre, and others - imposes its own mandatory audit requirement. The DIFC and ADGM, as common law financial free zones, have particularly detailed audit and financial reporting frameworks modelled on international standards.

Sole establishments and civil companies present a more nuanced picture. A sole establishment is technically the liability of its owner and is not a separate legal person, so the statutory audit obligation under company law does not apply in the same way. In practice, however, banks, government tenders, and visa applications frequently require audited accounts even for sole establishments, creating a de facto audit requirement that goes beyond the strict legal text.

Foreign branches registered in the UAE must submit audited financial statements to the Ministry of Economy annually. The audit must cover the branch';s UAE operations and, in some cases, the parent company';s consolidated accounts as well, depending on the nature of the branch';s activities.

Each free zone authority sets its own rules, and the details vary considerably. Most free zones require companies to submit audited financial statements to the authority within a fixed period after the financial year end - commonly three to six months. Failure to submit on time can result in fines, licence renewal delays, or both.

The DIFC operates under its own Companies Law and requires all DIFC-incorporated entities to prepare financial statements in accordance with International Financial Reporting Standards. Auditors must be registered with the DIFC Registrar of Companies and hold a DIFC practising certificate. The DIFC framework is among the most rigorous in the region and is broadly comparable to requirements in major common law jurisdictions.

ADGM similarly requires IFRS-compliant financial statements and mandates that auditors be registered with the ADGM Registration Authority. ADGM has its own Companies Regulations that set out audit committee requirements for certain categories of company, including those with public interest characteristics.

Other free zones such as JAFZA, DMCC, and RAKEZ require annual audited accounts but are generally less prescriptive about the accounting standards to be applied, accepting both IFRS and IFRS for SMEs in many cases. A common mistake made by founders in these zones is assuming that any accountant can perform the audit. In practice, the auditor must hold a valid UAE licence and, in many free zones, must appear on the authority';s approved auditor list.

If you are setting up in a free zone and are uncertain which auditor to appoint or what the submission deadline is, contact info@vlolawfirm.com. We can assist with documents and filings and help you avoid licence renewal complications.

The audit cycle in UAE typically follows the financial year, which for most companies runs from 1 January to 31 December, although free zone companies may adopt a different year end with authority approval. The practical steps are as follows.

The company must maintain proper books of account throughout the year. The Commercial Companies Law requires books to be kept in Arabic or, in many free zones, in English. Records must be retained for a minimum of five years. A common mistake among foreign founders is neglecting bookkeeping during the year and then attempting to reconstruct records before the audit - this creates delays, increases professional fees, and can raise red flags with the auditor.

Once the financial year closes, the company';s management prepares draft financial statements. These are handed to the external auditor, who conducts fieldwork - reviewing transactions, testing internal controls, verifying balances, and confirming material items with third parties. For a straightforward small or medium-sized company, fieldwork typically takes two to four weeks. Larger or more complex businesses may require six to twelve weeks.

The auditor issues a draft report, management responds to any queries, and the final signed audit report is produced. On the mainland, this report is presented to the shareholders at the annual general meeting. In free zones, the signed accounts and audit report are submitted to the free zone authority, often through an online portal.

Timelines matter. Most mainland companies must hold their annual general meeting within four months of the financial year end. Most free zones require submission within three to six months. Missing these deadlines triggers fines that, while not always large individually, accumulate quickly and can block licence renewals.

The introduction of corporate tax has made audit compliance more consequential. Under the Corporate Tax Law, taxable persons must maintain financial records sufficient to support their tax return. The Federal Tax Authority has the power to request audited financial statements as part of a tax audit or review. Businesses that cannot produce credible audited accounts face a significantly higher risk of adverse tax assessments.

For businesses with revenue above the threshold specified by the Federal Tax Authority, audited financial statements are not merely good practice - they are a prerequisite for filing an accurate corporate tax return. The threshold is set at a level that captures most active trading companies, so the practical effect is that the majority of UAE businesses subject to corporate tax will need an audit.

VAT, introduced earlier under Federal Decree-Law No. 8 of 2017, does not itself mandate an audit, but VAT-registered businesses must keep detailed records for a minimum of five years, and the Federal Tax Authority can and does cross-reference VAT returns against financial statements during audits. Discrepancies between VAT returns and audited accounts are a common trigger for FTA inquiries.

A practical scenario: a mainland LLC operating in the trading sector with annual revenues in the mid-millions of AED will need audited accounts to satisfy the Commercial Companies Law, to support its corporate tax return, and to provide to its bank for credit facility renewals. The audit is not a single compliance box - it feeds multiple obligations simultaneously.

A second scenario: a DMCC free zone company with a single foreign shareholder and modest revenues may technically fall below the corporate tax audit threshold, but the DMCC authority still requires annual audited accounts for licence renewal. The founder cannot bypass the audit simply because the tax law threshold is not met.

The auditor must be licensed by the Ministry of Economy for mainland companies or by the relevant free zone authority for free zone entities. In the DIFC and ADGM, the auditor must hold the specific registration issued by those authorities. Using an unlicensed auditor renders the audit invalid and can expose the company to regulatory penalties.

Audit fees in UAE vary widely depending on the size and complexity of the business, the free zone or mainland jurisdiction, the quality of the company';s bookkeeping, and the reputation of the audit firm. For a small free zone company with clean records, fees typically start from the low thousands of AED. For a mid-sized mainland LLC with multiple revenue streams, fees can reach the mid-to-high tens of thousands of AED. Large or complex businesses, particularly those in regulated sectors, will pay considerably more.

Many underestimate the indirect costs of an audit. If bookkeeping has been neglected, the company may need to engage an accountant to prepare or clean up the records before the auditor can begin. This preparation work is billed separately and can add significantly to the total cost. Investing in proper monthly bookkeeping throughout the year is almost always cheaper than reconstructing records at year end.

A non-obvious requirement is that some free zone authorities require the audit report to be submitted in a specific format or accompanied by a management letter or a specific declaration from the auditor. Failing to use the correct format can result in the submission being rejected, even if the audit itself was properly conducted.

To ensure your audit is handled correctly and submitted on time, contact info@vlolawfirm.com. We can help structure the compliance process correctly the first time.

What happens if a UAE company does not submit audited accounts on time?

Late submission of audited accounts triggers different consequences depending on the jurisdiction. In most free zones, the authority imposes a fixed fine per month of delay and may refuse to renew the company';s trade licence until the accounts are submitted. On the mainland, failure to hold the annual general meeting within the required period and to present audited accounts can expose the company';s managers to personal liability under the Commercial Companies Law. In practice, banks also treat the absence of current audited accounts as a risk indicator, which can affect credit facilities and account maintenance. The cumulative effect of fines, licence delays, and banking complications makes timely compliance significantly more cost-effective than remediation after the fact.

How long does an audit typically take in UAE, and what does it cost?

The duration depends on the size and complexity of the business and the quality of its records. A small free zone company with well-maintained books can typically complete an audit in two to four weeks from the date the auditor receives the draft financial statements. A larger or more complex business may take two to three months. Costs for small companies generally start from the low thousands of AED, while mid-sized businesses should budget for the mid-to-high tens of thousands of AED. The single biggest driver of cost overrun is poor bookkeeping - companies that have not maintained proper records throughout the year will pay substantially more for both the preparation of accounts and the audit itself.

Does a UAE free zone company need a different auditor than a mainland company?

Yes, in most cases. While some audit firms hold licences for both mainland and free zone work, the specific registration requirements differ. Mainland auditors must be licensed by the Ministry of Economy. DIFC auditors must be registered with the DIFC Registrar of Companies. ADGM auditors must be registered with the ADGM Registration Authority. Other free zones typically require the auditor to appear on the authority';s approved list. A firm that is licensed for mainland work is not automatically approved for DIFC or ADGM engagements, and vice versa. Before appointing an auditor, confirm that they hold the specific licence or approval required by your jurisdiction. Using an auditor who lacks the correct registration invalidates the audit and creates compliance exposure.

Audit requirements in UAE are broad, mandatory for most entity types, and enforced through multiple channels - company law, free zone regulations, corporate tax rules, and banking practice. The consequences of non-compliance range from fines and licence delays to tax exposure and banking difficulties. Understanding which rules apply to your specific entity and jurisdiction is the essential first step.

VLO Law Firms advises international clients on audit requirements in UAE. We can assist with identifying the applicable audit obligations for your entity, selecting a properly licensed auditor, managing submission deadlines, and coordinating with free zone authorities. To request a consultation, contact: info@vlolawfirm.com