UAE Audit Requirements 2026: Who Must Be Audited and by When

Knowing your company’s annual audit obligations matters more than ever now that corporate tax has made audited financial statements a prerequisite for filing and for keeping preferential free zone tax rates. UAE audit requirements come mainly from the UAE Commercial Companies Law (Federal Decree-Law No. 32 of 2021) and, for corporate tax purposes, from the Corporate Tax Law (Federal Decree-Law No. 47 of 2022) read alongside Ministerial Decision No. 84 of 2025. Whether you run a mainland LLC in Dubai or a DMCC free zone company, where you stand on these rules drives your filing calendar, your bank relationships, and your exposure to FTA scrutiny. This guide explains who must be audited and by when; when it’s time to get your records into shape, our audit assistance in the UAE prepares the schedules, reconciliations and IFRS statements your appointed external auditor will expect — we don’t sign the audit opinion ourselves.

So what counts as a statutory audit here?

A statutory audit is an independent examination of a company’s financial statements by a licensed external auditor. The auditor issues a formal opinion — unqualified, qualified, adverse or a disclaimer, as explained in our guide to types of audit opinion in the UAE — on whether the statements give a true and fair view of where the company stands financially, prepared under IFRS. Our guide to statutory audit requirements in the UAE sets out which mainland and free zone companies must appoint an approved auditor and the record-keeping rules that sit behind it. In the UAE, the obligation to be audited flows from two sources.

The first is the UAE Commercial Companies Law, which requires every company incorporated in the UAE to appoint an auditor and hold an AGM within four months of the financial year-end, with the audited financials presented there. The DED doesn’t ask mainland LLCs to submit audited accounts to a central authority — free zones and their portals run their own submission requirements. This rule predates corporate tax and applies across all mainland business structures.

The second is the Corporate Tax Law read with Ministerial Decision No. 84 of 2025, which added more precise rules for when audited statements are mandatory for CT purposes. Those overlap with the Commercial Companies Law requirements but aren’t identical, so a business has to satisfy both frameworks, and whichever sets the stricter standard is the one that governs.

Free zone authorities add a third layer: each free zone in the UAE sets its own audit submission rules as a condition of licence renewal. DMCC, IFZA, JAFZA, RAKEZ and DAFZA all maintain their own timelines and formats — our comparison of DMCC, JAFZA and DIFC audit requirements sets the three biggest regimes side by side.

Who actually has to file one

If you earn more than AED 50 million in a tax period, Ministerial Decision No. 84 of 2025 makes audited financial statements mandatory for corporate tax purposes. That threshold doesn’t care whether you sit on the mainland or in a free zone, and it doesn’t care what industry you’re in.

Qualifying Free Zone Persons are the other big group. A QFZP is a free zone company that meets the substance and income tests to access the 0% corporate tax rate on qualifying income, and audited statements every year are a hard condition of keeping that status — no revenue floor at all. A QFZP turning over AED 1 million a year still has to produce them.

Mainland companies come under the Commercial Companies Law. LLCs, PJSCs, branches of foreign companies and the other mainland structures all have to appoint a licensed auditor under Federal Decree-Law No. 32 of 2021, and enforcement has tightened: licensing authorities now routinely ask for audit reports at renewal, and the corporate tax framework has made compliant financials non-negotiable for the larger businesses.

Free zone companies face their own version. Most of the major zones require annual audited financials from every licence holder as part of renewal. DMCC wants them within 180 days of the financial year-end (30 June 2026 for a 31 December 2025 close), measured from year-end and not from the renewal date, while IFZA mandates them for every licence. None of this depends on the CT threshold.

Sole establishments and civil companies sit in a grey zone people ask about often. Audit requirements in the UAE for a sole establishment aren’t triggered by the legal form itself — a sole establishment above AED 50 million in revenue, or one carrying a regulated licence activity, still needs audited statements, while a small owner-run sole establishment below the thresholds usually only needs auditable books rather than a signed statutory audit. The trigger is revenue, QFZP status and licence activity, not whether you’re an LLC or a sole trader.

Small businesses are the one place a genuine exemption exists. A business with taxable revenue below AED 3 million can elect UAE Small Business Relief under the CT framework and step out of the audit requirement for corporate tax purposes. The relief is temporary, though — only for tax periods ending on or before 31 December 2026 — and Qualifying Free Zone Persons are shut out of electing it entirely. It also doesn’t get you out of record-keeping or free zone audit rules.

Triggers by entity type in 2026

The “is an audit mandatory?” answer changes depending on where your company is registered and what activity it conducts. The federal Corporate Tax Law sets the AED 50 million threshold and the QFZP condition. On top of that, every licensing authority (mainland DED, each free zone, each financial services regulator) sets its own rules. The matrix below is the operational reality for 2026.

Mainland LLC (DED-licensed)

Two parallel rules apply. The Corporate Tax Law triggers a mandatory audit if revenue exceeds AED 50 million or if the company is a QFZP. The Commercial Companies Law requires every LLC to appoint a licensed auditor and present audited financials at the AGM within four months of year-end, irrespective of revenue.

In practice, mainland LLCs below AED 50M are not asked by DED to file audited accounts centrally, but the CCL obligation to prepare them exists. Banks, suppliers, prospective investors and the FTA can demand them. Regulated activities — financial services, insurance, real estate brokerage, audit firms, education, healthcare, specific industrial categories — require audited financials at licence renewal regardless of revenue.

DMCC

DMCC operates the strictest mainstream free zone audit regime. Every active DMCC company must submit audited financial statements every year, prepared under IFRS by an auditor on DMCC’s Approved Auditors List. Submission is via the DMCC Member Portal; the deadline is 180 days after year-end (30 June 2026 for a 31 December 2025 year-end). No revenue threshold, no carve-out. Failure to submit blocks licence renewal and triggers escalating fines. DMCC rejects reports from non-approved firms.

JAFZA

JAFZA requires annual audited statements from every licensed entity — FZE, FZCO, branches and offshore alike. JAFZA maintains its own approved auditor list. Submission is part of the annual licence renewal package and is typically required before the trade licence can be reissued. Missed submissions trigger renewal delays, penalties and, in extended cases, suspension of the immigration card and visa quota.

DIFC and ADGM (financial free zones)

DIFC and ADGM are separate common-law jurisdictions regulated by the DFSA and FSRA respectively. Both require annual audited statements from every registered entity — financial and non-financial — prepared under IFRS and audited by a regulator-registered firm. Regulated firms (banks, asset managers, brokers, insurers, payment institutions) face additional layers: client money audits, regulatory capital reports, AML compliance audits and prudential filings. Late or qualified audits here can trigger regulatory action, not just administrative fines.

IFZA, RAKEZ, SHAMS and the smaller zones

IFZA, RAKEZ, DAFZA, SHAMS, Hamriyah, Ajman Free Zone, Fujairah Creative City and the smaller zones each set their own rules. The 2026 pattern has been tightening — zones that previously accepted unaudited management accounts are increasingly demanding audited statements at renewal. The safe planning assumption is that every free zone now requires annual audited financials. Verify the specific deadline and approved auditor list with your zone before each renewal cycle.

The mainland activity carve-outs nobody mentions

Even below the AED 50M federal threshold, DED-licensed entities in certain activities must produce audited financials annually as a licensing condition. These include — without being exhaustive — financial services, insurance brokerage and intermediaries, real estate brokerage (in some emirates), auditors and accountants themselves, healthcare providers, private education institutions, contracting companies above defined capital tiers, gold and precious metals dealers, and any entity with foreign shareholding above the specified threshold for that activity. Visa quota expansions and capital increases also commonly trigger an audit requirement.

Full IFRS vs IFRS for SMEs

UAE statutory audits are conducted under International Standards on Auditing (ISA) issued by the IAASB, and the underlying financial statements have to be prepared under one of two recognised frameworks — full IFRS or IFRS for SMEs. The choice isn’t open-ended; there’s a regulatory hierarchy behind it.

Full IFRS is required where the company is publicly accountable (listed, holds public deposits, or is a financial institution), where a free zone or licensing authority specifies IFRS explicitly, as most do, where the parent reports under IFRS and consolidates the UAE entity, or where the business expects to seek external financing, transact with banks at scale, or eventually attract a trade buyer or investor. IFRS for SMEs is permitted for smaller, privately-held entities that fall into none of those categories. It strips out roughly 90% of the disclosure burden — simpler financial instruments treatment, no segment reporting, no earnings per share, fair value optional in many areas, simplified deferred tax — and for an owner-managed SME that doesn’t need external reporting comparability, it delivers a credible audited statement without the documentation overhead.

In practice, most UAE free zones and most UAE banks default to expecting full IFRS. DMCC, DIFC, ADGM and JAFZA effectively require it for all but the smallest entities, so if you elect IFRS for SMEs, confirm in advance with your free zone authority and your principal bank that they’ll accept the report. The wrong framework choice is one of the more common reasons an audit report gets rejected at submission.

For corporate tax purposes, the FTA accepts financial statements prepared under IFRS or IFRS for SMEs, and the realisation basis election under the CT Law allows certain unrealised gains and losses to be deferred. The accounting framework you pick has direct tax consequences — particularly around revenue recognition, lease accounting under IFRS 16, expected credit losses on receivables, and the treatment of intangibles. Discuss the framework choice with your accountant and your auditor before the financial year begins, not after the books are closed.

What your auditor will actually ask for

The audit fieldwork is where most preparation pays off or fails. Auditors test a defined set of assertions against your books — completeness, accuracy, valuation, existence, rights and obligations, cut-off and presentation — and to do that efficiently they need a documented audit trail behind every material balance and every material class of transaction. Here is what that looks like in practice across UAE audit firms in 2026.

Start with the trial balance and lead schedules. You need a signed trial balance that agrees to the general ledger, with lead schedules tying each financial statement line back to account codes, and last year’s comparatives have to agree to the prior signed report. On cash, expect the auditor to want reconciliations for every bank account at year-end with reconciling items aged and explained; they will also send independent confirmations straight to the bank rather than take your word for the balance.

Receivables get an aged listing that agrees to the ledger and an IFRS 9 expected credit loss provision policy behind it. The auditor circularises a sample of customers, and anything over 365 days without evidence it can be recovered usually gets provided in full. On the other side, payables and accruals need an aged listing, supplier statements reconciled to the ledger, and a search for unrecorded liabilities — invoices that landed after year-end but relate to the audit period — with accruals backed by calculation schedules.

If inventory is material the auditor attends a physical count at or near year-end, so you need count sheets, cut-off procedures for goods received and despatched, and a valuation at the lower of cost and net realisable value under IAS 2. Fixed assets run on a similar logic: a register that ties to the ledger, additions backed by purchase invoices, disposals backed by sale documentation, and a depreciation schedule that matches your stated policy, with high-value assets physically verified as standard.

Revenue recognition draws close attention — sales contracts, evidence that performance obligations were satisfied, cut-off testing, and a clear IFRS 15 policy, with project-based businesses documenting their percentage-of-completion workings. Payroll ties back through registers reconciled to the ledger, employment contracts for a sample of staff, WPS payment confirmations, and an end-of-service gratuity calculation under UAE Labour Law.

Related party transactions are heavily tested in 2026 because of transfer pricing scrutiny. You need a complete register naming every related party and every transaction — sales, purchases, loans, guarantees, leases — with each material balance supported by an agreement. Tax gets its own scrutiny: VAT returns reconciled to the revenue ledger, VAT control accounts cleared, current and deferred CT provision calculations, and copies of filed returns, since a VAT-to-revenue gap is a routine FTA trigger. And where there’s material uncertainty about the business continuing, the auditor will want a cash flow forecast and a management assessment supporting the going concern basis.

“

An audit is not graded on how clever your bookkeeping looks. It is graded on how quickly and completely you can produce the document behind every number.

For a deeper view of the underlying record-keeping requirements, see our guide on financial record keeping in the UAE.

Picking an audit firm that won’t get your report rejected

Choosing the right audit firm is a more consequential decision than most owners give it credit for. Three filters apply in order. First, the firm must be licensed by the UAE Ministry of Economy and registered with the FTA. Second, the firm must be on the approved auditor list of your specific free zone — DMCC, JAFZA, DIFC, ADGM and the larger zones all maintain their own lists, and reports from non-approved firms will be rejected at submission. Third, the firm must have credible experience in your sector — trading, real estate, financial services, healthcare and contracting each have technical IFRS quirks that an unfamiliar auditor will spend (your) hours learning.

Beyond the regulatory filters, the practical questions are: turnaround time during peak season (March–June), partner availability for sign-off, fee structure (fixed fee vs hourly — fixed-fee engagements have become the norm for SMEs), out-of-scope work charging policy, and willingness to provide a management letter with internal control observations. A cheap audit with a long delay is usually more expensive than a moderately-priced audit delivered on schedule. For the fee bands themselves and what pushes an engagement up or down them, see our guide to the cost of an audit in the UAE.

We have published detailed selection guides specific to each emirate’s market, including auditor categories, typical fee bands and questions to ask before signing the engagement letter: Auditors in Dubai — how to choose and Auditors in Abu Dhabi — how to choose. If you are considering setting up your own practice, see opening an audit firm in the UAE for the licensing pathway.

Planning backwards from the filing deadline

The audit calendar should be planned backwards from your filing deadlines, not forwards from your year-end. For a 31 December year-end with a DMCC submission deadline of 30 June and a corporate tax return deadline of 30 September, the realistic working timeline is the following.

What breaks this timeline most often isn’t the auditor. It’s the client sitting on information requests. Auditors block out fieldwork tightly because peak season is brutal, and every 48-hour delay on your side bumps the engagement to the back of the queue. Honestly, the single most useful thing a business owner can do here is name one internal point of contact for the audit — someone with the authority to pull documents and answer questions without checking upstairs first.

For ongoing support across the year — bookkeeping, monthly close, IFRS statement preparation and auditor liaison — see our audit assistance service.

The six-step prep, end to end

First, confirm the obligation actually applies to you. Check whether your revenue clears AED 50 million, whether you hold QFZP status, and what your free zone or licensing authority requires — and do it in the first month of your new financial year, not the last.

Second, appoint a licensed external auditor early. The firm has to be registered with the UAE Ministry of Economy and, where it applies, approved by your free zone — our guide to how to choose an approved auditor in the UAE sets out the checks worth running before you sign. Availability tightens badly in the March–June window, so engage three to six months before your deadline.

Third, keep the bookkeeping current. An audit doesn’t create your financial records, it verifies them, which means bank reconciliations, AR confirmations, AP verifications and intercompany balances all want reconciling monthly rather than in a year-end scramble. Our accounting and bookkeeping service keeps your books audit-ready year-round.

Fourth, prepare IFRS-compliant statements — a profit and loss, balance sheet, cash flow, statement of changes in equity, and full disclosure notes, with related party transactions disclosed and documented. See financial record keeping in the UAE for the documentation specifics.

Fifth, organise the supporting documents before fieldwork begins: invoices, contracts, bank statements, fixed asset registers, loan agreements, payroll records and related party agreements, with a source document sitting behind every balance. Our step-by-step guide on how to prepare for a company audit in the UAE walks through assembling that evidence pack so the auditor’s request list is answered from folders that already exist.

Finally, line the audit up against your corporate tax return. Audited figures feed straight into your corporate tax return, so reconcile the two before filing — discrepancies are what trigger FTA queries.

Standards and thresholds at a glance

Deadlines you cannot miss

[[chart:audit-deadline-timeline]]

When things go wrong

For a full breakdown of FTA-administered penalties across the tax framework, see our guide to UAE tax penalties in 2026.

An IFZA trader skips the audit — what it costs

A free zone trading company in IFZA is registered as a Qualifying Free Zone Person. Its annual qualifying income is AED 4.2 million. Under QFZP status, its effective corporate tax on qualifying income is 0%.

The company fails to submit audited financial statements for the financial year ending 31 December 2025. As a result, it is disqualified from QFZP status for five years.

Tax impact under disqualification:

• Year 1 (2026): AED 4,200,000 qualifying income — now taxable.
  • First AED 375,000 @ 0% = AED 0
  • Remaining AED 3,825,000 @ 9% = AED 344,250 in corporate tax
• Five-year total additional tax exposure: approximately AED 1,721,250

The cost of an annual statutory audit for a company this size: typically AED 8,000–20,000.

So the audit was never the expensive part. Skipping it was.

[[chart:qfzp-cost-comparison]]

This is why even smaller free zone companies must treat the audit obligation seriously. For more on how corporate tax is calculated, see our UAE corporate tax guide.

Where we see SMEs slip up

Velmont’s take on internal controls

Weak internal controls — unauthorised payment approvals, no segregation of duties between bookkeeping and bank access, no fixed asset register, manual journal entries without review — do not always prevent an audit being signed, but they generate management letter findings that banks, investors and future auditors will ask about. Businesses that invest in documented approval workflows, monthly close checklists and a proper chart of accounts consistently get cleaner reports and faster turnarounds. Our internal audit checklist for UAE SMEs walks through the controls worth putting in place before the external auditor arrives.

If your year-end is December, do this

If your revenue is approaching or above AED 50 million, or if your free zone company holds or is considering QFZP status, the steps to take now are:

1. Confirm your audit obligation with your tax adviser and free zone authority.
2. Appoint a licensed, zone-approved audit firm before the competitive booking window closes.
3. Ensure your bookkeeping is current and your reconciliations are up to date before the auditor begins fieldwork.
4. Confirm your CT filing timeline so the audit feeds the return without a last-minute rush.

If you are a smaller mainland or free zone business below the AED 50 million threshold, check your licensing authority’s renewal requirements — zone rules often mandate an audit regardless of the CT threshold. If you are still at the structuring stage and weighing free zone options, our guide on Dubai free zone company formation in 2026 covers the audit profile of each major zone.

Velmont Crest’s accounting services in Dubai provides audit preparation and liaison support alongside year-round bookkeeping, VAT compliance and corporate tax services for UAE SMEs. We do not conduct audits ourselves, but we ensure your records are in the condition a licensed external auditor expects to find them. To discuss your 2026 audit calendar, get in touch with our team.

References:

• Federal Tax Authority (FTA) — Official Portal
• UAE Ministry of Finance — Corporate Tax Law and Ministerial Decisions
• UAE Official Portal — Commercial Companies Law
• Velmont Crest — Financial Record Keeping UAE
• Velmont Crest — Corporate Tax Filing Guide 2026
• Velmont Crest — UAE Tax Penalties 2026
• Velmont Crest — Auditors in Dubai: How to Choose
• Velmont Crest — Auditors in Abu Dhabi: How to Choose
• Velmont Crest — Open an Audit Firm in the UAE