Statutory Audit in Dubai: Who Needs One and How to Choose Approved Auditors

Example: a DMCC company uploads its annual accounts for licence renewal and the portal rejects them. The numbers balance, the report is signed, and the fee is paid. The firm that signed isn’t on DMCC’s approved auditor list, so the company pays for a second audit and renews late.

That kind of rejection is avoidable. A statutory audit in Dubai follows rules that depend on where your company is registered, how much revenue it earns and whether it claims the 0% corporate tax rate. Most owners learn those rules at renewal time, when there’s little room to fix anything.

Here’s how those rules work, from who needs an audit to who is allowed to sign it.

What A Statutory Audit Is?

A statutory audit is an independent examination of your annual financial statements, required by law or by a regulator. A licensed auditor tests your accounts against evidence such as bank confirmations, contracts, invoices and stock counts. The auditor then gives a written opinion on whether the statements give a true and fair view under IFRS.

Two other terms get mixed up with it. An internal audit reviews your controls for management and no law requires it for most SMEs. An FTA audit is the Federal Tax Authority checking your VAT or corporate tax position. Neither replaces a statutory audit, and a statutory audit doesn’t protect you from an FTA review. Our post on internal vs external audit in Dubai covers the difference in more detail.

Who Needs A Statutory Audit In Dubai?

The requirement comes from three places: company law, free zone regulations and the corporate tax regime. Your company can be caught by more than one.

These requirements stack. A mainland LLC with AED 60 million in revenue needs the company law audit and the corporate tax audit, and one engagement normally covers both.

A mainland LLC with AED 2 million in revenue still needs its annual audit. Electing small business relief for corporate tax doesn’t switch off the company law requirement.

Free zone rules differ between authorities and change over time. If you think an exemption applies to you, confirm it with your authority first.

Statutory Audit Deadlines In Dubai

Each regulator sets its own clock, and the corporate tax clock runs separately.

• Mainland companies: the shareholders normally approve audited accounts at the annual general meeting, which company law expects within 4 months of year-end. Licence renewal can also depend on audited accounts.
• DMCC: the authority’s current guideline asks for audited statements through the Member Portal within 6 months of year-end. DMCC has moved its date before, so check the portal for the current notice.
• DIFC: non-regulated companies file audited accounts with the Registrar of Companies within 6 months of year-end. DFSA-regulated firms face a shorter window.
• JAFZA and other free zones: each sets its own deadline. JAFZA has historically asked for audited accounts about 90 days after year-end, with extensions available on request.
• Corporate tax: the return is due 9 months after the end of the tax period. For a 31 December year-end, that’s 30 September. Audited statements must be ready before you file.

Work backwards from your earliest deadline. If your authority wants accounts by 31 March, fieldwork should start by early February and your books should be closed before that.

Late filing has real costs. Free zone authorities charge fines that vary by authority and can build up month by month, and they can hold up licence renewal until the file is in.

How A Statutory Audit Works?

A small or mid-sized company with tidy books usually needs 4 to 8 weeks from engagement to signed report. You sign an engagement letter, the auditor plans the work and sends a document request, and fieldwork tests your balances. You approve any adjustments, the directors sign a representation letter, and the auditor issues the report.

The document request is where most audits slow down. Papers arrive piecemeal and fieldwork waits for them. Our guide to external audit services in Dubai has the week-by-week timeline and a full checklist.

Choosing An Auditor Who Can Sign

Who can sign your report depends on your regulator. Mainland audits need an auditor licensed by the Ministry of Economy. DMCC companies need a firm on DMCC’s approved auditor list. DIFC companies need an auditor the Registrar of Companies or the DFSA accepts. Most other free zones keep their own approved lists.

Verify approval before you sign an engagement letter. Check the authority’s published list or ask the firm for its current approval evidence. Our guide to auditors in Dubai covers how to check, and our post on choosing an audit firm in the UAE covers fit, fees and service.

Common Statutory Audit Mistakes

• Starting after year-end with books that haven’t been reconciled for months
• Hiring an auditor before checking the authority’s approved list
• Treating the audit and the corporate tax return as separate projects, when both use the same trial balance
• Leaving shareholder current account balances undocumented, so the auditor can’t confirm them
• Skipping the end-of-service benefit provision, which auditors test for every employee on a UAE contract
• Filing VAT returns that don’t reconcile to the revenue in the financial statements

Qualifying Free Zone Persons carry extra risk. If a company claims the 0% rate without audited statements, it loses the claim. The conditions are covered in our post on whether free zone companies really pay 0% tax.

How AMD Audit Handles Statutory Audits

AMD Audit is a Dubai leading chartered accountants firm working across audit service, accounting and bookkeeping service, VAT and corporate tax service. On a statutory audit, our first question is where your company is registered, because that decides which approved list and deadline apply.

We then plan backwards from your earliest filing date and send one consolidated document request instead of a string of emails. Because the same financial statements feed your VAT and corporate tax filings, we check that the numbers agree across all three. If your books are behind, we say so at the start and agree what needs fixing before fieldwork begins.

FAQs

Does a dormant company need a statutory audit?

Usually yes. DMCC asks for audited statements even from inactive companies, and some free zones accept a simplified audit for dormant entities. A mainland LLC remains subject to the company law requirement. Ask your authority which format it accepts.

Can the firm that does my bookkeeping also audit my accounts?

Independence rules limit this. An auditor shouldn’t audit accounts it prepared without safeguards, and some regulators restrict the combination. Many firms use separate teams. Ask the firm how it handles the separation.

Is the audit report filed with my corporate tax return?

The FTA doesn’t require you to attach it automatically, but you must prepare and keep audited statements if you’re a QFZP or your revenue exceeds AED 50 million. The FTA can ask for them during a review.

Can I change auditors?

Yes. Shareholders pass a resolution to appoint the new firm. The new auditor will ask the previous one for handover information before accepting the work, so tell the outgoing firm early.

Plan your statutory audit

Find 3 dates: your financial year-end, your authority’s filing deadline and your corporate tax return deadline. Count back 8 weeks from the earliest one and book your auditor then.

If you’re not sure which requirements apply to your company, talk to the AMD Audit team. We’ll confirm the rules for your licence type before any fieldwork starts.