Audit requirements in the UAE by entity type, explained simply

What are audit requirements in the UAE by entity type?

Audit requirements in the UAE by entity type are the rules that decide whether your company must have its annual financial statements reviewed by a licensed external auditor. The rules depend on where the entity is licensed: mainland, a specific free zone, or a financial free zone like DIFC or ADGM. Some entities must audit by law, others only when their free zone authority demands it.

Most UAE businesses now sit closer to a mandatory audit than they did a few years ago. Corporate tax, free zone tax incentives, and tighter licensing rules have pushed audited accounts from a nice-to-have to a baseline expectation. This guide breaks down the audit requirements in the UAE by entity type so you know what applies to you, when reports are due, and what happens if you skip it. For the wider picture, see our Auditing in the UAE hub.

Who decides if a UAE entity needs an audit?

Three layers of rules decide audit obligations in the UAE.

• Federal law: the Commercial Companies Law and Federal Decree-Law 47 of 2022 on corporate tax set baseline duties for record keeping and, in many cases, audited statements.
• Free zone regulations: each free zone authority issues its own rules. DMCC, DIFC, JAFZA, ADGM, and others have separate manuals.
• Tax position: Qualifying Free Zone Persons (QFZPs) that want the 0% corporate tax rate on qualifying income must keep audited financial statements.

The result: even if your trade license does not force an audit, your tax position or your bank often does. Read What Is Statutory Audit UAE for a deeper look at the statutory base.

Key definitions

• External audit: an independent review by a licensed audit firm that issues an opinion on the financial statements.
• Internal audit: an internal control review, not a substitute for an external audit. See Internal Audit vs External Audit UAE.
• QFZP: Qualifying Free Zone Person, a free zone company that meets the conditions for the 0% corporate tax rate on qualifying income.
• FTA: the UAE Federal Tax Authority.
• MoF: the UAE Ministry of Finance.

Audit requirements in the UAE by entity type, at a glance

The table below summarises the main UAE entity types and whether an annual external audit is required. Always confirm with your specific free zone or regulator, since rules can be updated.

Mainland UAE companies

Mainland companies are licensed by an emirate-level Department of Economic Development. The Commercial Companies Law (Federal Decree-Law 32 of 2021) requires LLCs and joint stock companies to keep proper books for at least 5 years and to appoint a licensed auditor in most cases.

LLCs and joint stock companies

An LLC is expected to prepare annual financial statements following international standards and to have them audited. Joint stock companies, both private and public, must appoint an auditor approved by the regulator. Public companies also face Securities and Commodities Authority oversight.

Sole establishments and civil companies

Federal law does not always force a sole establishment to file audited accounts. In practice, three pressures push them toward audits: corporate tax filings, bank loan covenants, and visa or tender requirements. If revenue grows past AED 3 million, small business relief no longer applies and an audit becomes very useful evidence for the FTA.

Branches of foreign companies

A branch of a foreign company licensed in the UAE generally must file audited financial statements for its UAE operations. The branch is not a separate legal entity, but UAE authorities treat its local accounts as auditable.

Free zone companies

The UAE has more than 40 free zones. Each has its own commercial regulations, but the trend across major zones is the same: annual audited financial statements are mandatory and must be filed with the authority within a set window after year end.

DMCC

DMCC requires every company to submit audited financial statements each year through its member portal. Filing is tied to license renewal, so missing it can block renewal. For the detailed rules, see DMCC Audit Requirements.

DIFC

DIFC companies follow DIFC Companies Law and must appoint a registered auditor. Regulated financial firms have extra audit and prudential reporting duties under the DFSA. See DIFC Audit Requirements.

JAFZA

JAFZA FZCOs and FZEs file audited statements with the Jebel Ali Free Zone Authority each year. Branches of foreign companies in JAFZA follow the same rule. Details are in JAFZA Audit Requirements.

Other free zones

IFZA, SHAMS, RAKEZ, Meydan, Dubai South, KIZAD, and others each set their own timing and thresholds. Some accept audited statements only on request, others demand them every year. Our overview of Free Zone Audit Requirements compares the main zones.

Corporate tax and audit: what changed

Federal Decree-Law 47 of 2022 introduced UAE corporate tax. The headline rates are 0% on taxable income up to AED 375,000 and 9% above that. Large multinationals with global revenue of EUR 750 million or more face a 15% Domestic Minimum Top-up Tax (DMTT) from January 2025.

Small business relief applies for revenue up to AED 3 million through the 2026 tax periods. Corporate tax returns are due within 9 months of the financial year end.

When audited accounts become mandatory for tax

• Revenue above AED 50 million in the tax period: audited financial statements are required.
• QFZP status: audited financial statements are required to claim the 0% rate on qualifying income, regardless of revenue.
• Tax groups: the parent must prepare audited consolidated or aggregated statements as required by the FTA.

Even where audit is not strictly required by tax law, audited accounts make filing safer. The FTA can request supporting records and can issue penalties for incorrect returns.

VAT, record keeping, and audits

VAT has applied at 5% since January 1, 2018 under Federal Decree-Law 8 of 2017. Businesses must register if taxable supplies exceed AED 375,000 a year. Voluntary registration is allowed from AED 187,500. VAT returns are due within 28 days of the end of each tax period.

The FTA can audit any VAT-registered business. While a VAT audit is not the same as a financial statement audit, having clean audited accounts and matching VAT records reduces risk and shortens FTA queries.

Penalties and consequences of skipping an audit

The consequences of failing to meet audit and record-keeping rules can stack up quickly.

• License renewal blocks: free zones like DMCC, DIFC, and JAFZA tie renewal to audit submission.
• Tax penalties: the FTA can impose fines for incorrect records or returns under tax procedure rules.
• Loss of QFZP status: a free zone company that cannot produce audited statements may lose the 0% rate and pay 9% instead.
• Banking issues: UAE banks routinely ask for audited statements before approving facilities or large transactions.
• E-invoicing readiness: with the UAE Peppol 5-corner DCTCE (Decentralized Continuous Transaction Control and Exchange) model rolling out from 2026, clean books make compliance easier.

Timing: when audits and filings are due

How to pick the right auditor

Each free zone keeps an approved auditors list. DMCC, DIFC, JAFZA, and ADGM only accept reports from firms on their list. For mainland and corporate tax filings, the auditor must hold a valid UAE Ministry of Economy license.

Checklist before you sign an engagement

1. Confirm the firm is on your free zone's approved list, if applicable.
2. Confirm the firm holds a Ministry of Economy audit license.
3. Agree the audit standard: usually International Standards on Auditing (ISA).
4. Agree the financial reporting framework: IFRS or IFRS for SMEs.
5. Set a clear timetable that meets your license renewal and corporate tax deadlines.
6. Ask about their experience with QFZP positions if you are a free zone company.

Useful official sources include the UAE Ministry of Finance and the UAE Federal Tax Authority websites. For e-invoicing rules that interact with your records, see the MoF e-invoicing portal.

Practical examples

Example 1: a Dubai mainland LLC

A trading LLC in Dubai with AED 12 million revenue must keep audited accounts for corporate tax purposes if it exceeds the AED 50 million threshold over time, and almost always needs them for its bank. Even below the threshold, audited accounts help defend the tax return.

Example 2: a DMCC trading company

A DMCC company with AED 8 million revenue must file audited statements within the DMCC window each year. Audited statements are also needed if it wants to claim QFZP status.

Example 3: a small free zone services firm

An IFZA services firm with AED 1 million revenue may qualify for small business relief on corporate tax through 2026. It still benefits from a basic audit when banks, landlords, or investors ask for it. Read more on the Auditing in the UAE hub.

Getting ready for an audit

The work that makes an audit smooth is mostly bookkeeping. Reconcile bank accounts monthly. Keep contracts, invoices, and credit notes in one place. Track related party transactions clearly, because the FTA looks at them closely. Match VAT returns to the general ledger.

If you plan to claim QFZP status, document your qualifying and non-qualifying income separately from day one. Trying to split them after the year end is painful and risky.

Need help structuring audit-ready records and e-invoicing in one place? Get UAE e-invoicing pricing and see how EInvoice Direct supports tax firms and finance teams across the UAE.