Audit working papers in the UAE explained for business owners
What are audit working papers in the UAE?
Audit working papers UAE are the documents, schedules, and notes an external auditor prepares and retains to support the audit opinion on a company's financial statements. They record the evidence gathered, tests performed, judgments made, and conclusions reached. Under International Standards on Auditing (ISA) 230, they form the audit file that must be assembled within 60 days of the auditor's report.
For UAE businesses, working papers matter for two reasons. First, they prove that the audit followed professional standards. Second, they support the figures filed with the Federal Tax Authority (FTA) for value added tax (VAT) and corporate tax. A weak audit file can trigger questions during an FTA review or a free zone licence renewal. For a wider view of the audit process, see our hub on Auditing in the UAE.
Why audit working papers matter for UAE companies
The UAE requires audited financial statements for most mainland companies, all free zone entities that want Qualifying Free Zone Person (QFZP) status under corporate tax, and entities flagged by their licensing authority. The auditor's file is the bridge between your accounting records and the signed opinion.
Working papers also protect the business. If the FTA opens a corporate tax or VAT review, well organised files help you respond within deadlines. Corporate tax returns are due within 9 months of the financial year end. VAT returns are due within 28 days of the period end. Late or unsupported figures can lead to penalties.
Who relies on the working papers
- The audit firm's engagement partner and reviewer.
- The FTA, if it requests evidence during a tax audit.
- Banks and investors performing due diligence.
- Free zone authorities checking compliance for licence renewal.
- Successor auditors in future years.
The regulatory framework behind UAE audit files
UAE auditors apply ISAs as issued by the International Auditing and Assurance Standards Board. The key standards for working papers are ISA 230 on documentation, ISA 315 on understanding the entity, ISA 330 on responses to assessed risks, and ISA 500 on audit evidence.
On top of ISAs, UAE law adds record keeping rules. Federal Decree-Law 47 of 2022 on corporate tax and Federal Decree-Law 8 of 2017 on VAT both require taxable persons to keep records that allow tax authorities to verify reported figures. Auditors review these records and copy or reference the relevant items into their working papers. For more on the documentary side, read our guide to Audit Documentation UAE Requirements.
What goes into an audit file
A complete UAE audit file is usually split into a permanent file and a current file. The permanent file holds information that stays relevant year after year. The current file holds work specific to the audit period.
Permanent file contents
- Trade licence, memorandum of association, and shareholder register.
- Group structure and related party list.
- Long term contracts, leases, and loan agreements.
- Chart of accounts and accounting policy manual.
- Prior year signed financial statements and management letters.
- Tax registration certificates, including Tax Registration Number (TRN).
Current file contents
- Signed engagement letter for the year. See our template guide on the UAE Audit Engagement Letter.
- Planning memo, materiality calculation, and risk assessment.
- Trial balance, lead schedules, and journal listings.
- Test of controls and substantive procedures with sample selections.
- Bank, debtor, creditor, and legal confirmations.
- Stock count attendance notes.
- Going concern review and subsequent events checklist.
- Signed management representation letter.
- Final review notes and the signed audit report.
Sample index of a UAE audit working paper file
The table below shows a typical index that small and mid sized UAE audit firms use. Section codes vary, but the structure is similar across firms.
| Section | Code | Typical contents |
|---|---|---|
| Completion | A | Audit report, financial statements, partner review notes |
| Planning | B | Engagement letter, materiality, risk assessment, audit plan |
| Controls | C | Walkthroughs, controls testing, IT general controls review |
| Revenue and receivables | D | Sales testing, debtor confirmations, ageing review |
| Purchases and payables | E | Cut off tests, creditor confirmations, accruals review |
| Inventory | F | Stock count notes, valuation testing, slow moving review |
| Fixed assets | G | Additions, disposals, depreciation, impairment review |
| Cash and bank | H | Bank confirmations, reconciliations, treasury controls |
| Payroll and HR | I | Payroll tests, WPS files, end of service benefit calculations |
| Tax | J | VAT reconciliations, corporate tax workings, FTA filings |
| Equity and reserves | K | Share capital, dividends, related party transactions |
| Permanent | P | Licence, MoA, long term contracts, group structure |
Evidence types auditors collect
ISA 500 lists the kinds of evidence auditors gather. In a UAE engagement you will typically see a mix of these inside the working papers.
External evidence
This is the strongest type. Bank confirmations, debtor and creditor confirmations, legal letters, and FTA correspondence all fall here. Our guide on the Audit Confirmation Letter UAE explains the standard format.
Internal evidence
Invoices, contracts, board minutes, payroll registers, and system reports generated by the client. Auditors test the controls around these documents before relying on them.
Auditor generated evidence
Recalculations, analytical review, ratio analysis, and observation notes from stock counts or site visits.
Management representations
A formal letter from management confirming responsibility for the financial statements and disclosing any known issues. See the Management Representation Letter UAE guide for the standard wording.
Retention rules for UAE audit working papers
ISA 230 requires audit firms to keep working papers for a minimum of 5 years from the date of the auditor's report. UAE tax law goes further. Article 78 of the VAT Executive Regulations and the Tax Procedures Law require taxable persons to keep records for at least 5 years after the end of the tax period, extended to 15 years for real estate records.
Although these retention rules apply to the client's books, auditors usually align their file retention with the longer period to support any future FTA review. For the client side view, see Audit Trail UAE Record Keeping.
| Record type | Minimum retention | Source |
|---|---|---|
| Audit working papers | 5 years from report date | ISA 230 |
| VAT records | 5 years from end of tax period | VAT Executive Regulations |
| Real estate records | 15 years | VAT Executive Regulations |
| Corporate tax records | 7 years after the end of the tax period | Federal Decree-Law 47 of 2022 |
| Commercial books | 5 years | Commercial Transactions Law |
How working papers are reviewed
A typical UAE audit goes through three review layers before the report is signed. Each layer leaves notes on the file.
Senior or manager review
The senior reviews junior work paper by paper, signs off each section, and clears review notes before passing the file up.
Engagement partner review
The partner focuses on planning, risk areas, significant judgments, and the financial statements. Partner review notes are documented and cleared.
Engagement quality review
For listed entities and higher risk engagements, an independent partner performs a second review under ISA 220. This review is documented on the file.
Most firms aim to finalise the file within the 60 day assembly window in ISA 230. Delays often extend the overall audit. For a realistic schedule, see Audit Completion Timeline UAE.
Common weaknesses in UAE audit files
- Missing or unsigned engagement letters.
- Sample selections without a documented sampling method.
- Walkthroughs that do not cover the full transaction cycle.
- Review notes left open at the time of signing.
- Tax reconciliations that do not tie to the VAT returns filed with the FTA.
- Stock count notes without the auditor's own count sheets.
- Going concern conclusions with no supporting cash flow forecast.
Electronic working papers and e-invoicing
Most UAE firms now keep audit files in electronic form using audit software. Source documents are scanned or pulled directly from accounting systems. The shift to mandatory e-invoicing changes how auditors gather evidence for revenue and purchases.
The UAE will use a Peppol 5-corner Decentralized Continuous Transaction Control and Exchange (DCTCE) model in the PINT AE format. Phase 1 large taxpayers, with revenue of AED 50,000,000 or more, must appoint an Accredited Service Provider (ASP) by October 30, 2026 and go live on January 1, 2027. Small and medium enterprises follow on July 1, 2027 and government entities on October 1, 2027. From those dates, structured electronic invoices become primary audit evidence for sales and purchases.
For details on official policy, the UAE Ministry of Finance and the UAE Federal Tax Authority publish updates, with technical guidance on the MoF e-invoicing portal.
How to prepare your team for the auditor
- Close the books and lock the trial balance before fieldwork starts.
- Run VAT reconciliations between the general ledger and filed returns.
- Prepare a corporate tax workings file showing the move from accounting profit to taxable income.
- Pull bank statements and confirmations for every account.
- List related parties and the year's transactions with each.
- Prepare a fixed asset register with additions, disposals, and depreciation.
- Reconcile inventory in the system to the physical count.
- Gather signed contracts for major customers, suppliers, and leases.
The cleaner your file, the lighter the auditor's working papers, and the faster the sign off.
Get UAE e-invoicing ready before audit season
EInvoice Direct helps UAE businesses connect their accounting system to the Peppol network so every B2B (business to business) and B2G (business to government) invoice becomes structured audit evidence from day one. An accredited service provider is included with the software at no extra charge. To plan your rollout before the 2026 and 2027 deadlines, get UAE e-invoicing pricing.
Questions, answered
What are audit working papers?
Audit working papers are the records an external auditor keeps to support the opinion on a company's financial statements. They include the planning memo, risk assessment, evidence gathered, tests performed, judgments made, and conclusions reached. Under ISA 230, the file must be assembled within 60 days of the auditor's report and retained for at least 5 years.
How long must UAE audit working papers be kept?
ISA 230 requires audit firms to keep working papers for at least 5 years from the date of the auditor's report. UAE tax law requires taxable persons to keep underlying records for 5 years after the end of the tax period, and 15 years for real estate records. Most UAE audit firms align their retention with the longer tax period to support future FTA reviews.
Are audit working papers the property of the auditor or the client?
Audit working papers are the property of the audit firm, not the client. ISA 230 makes this clear. The client owns the source documents, accounting records, and any reports the auditor delivers, such as the signed audit report and management letter. Clients can usually request copies of confirmations and reconciliations they originally provided.
What is the difference between a permanent file and a current file?
The permanent file holds information that stays relevant across multiple audits, such as the trade licence, memorandum of association, long term contracts, and group structure. The current file holds work specific to the audit year, including the engagement letter, planning memo, test results, confirmations, and the signed audit report. Both sit inside the overall audit file.
Can the FTA ask to see audit working papers?
The FTA can request the client's accounting records and tax documents during a tax audit. It does not normally ask the audit firm directly for working papers, although it can request information from third parties under the Tax Procedures Law. In practice, the FTA reviews the client's books and the signed financial statements, then raises queries the client must answer.
Do small UAE companies need audit working papers?
If a UAE company is audited, the auditor must prepare working papers regardless of company size. Many mainland companies and most free zone entities require audited financial statements. Free zone businesses that want Qualifying Free Zone Person status under corporate tax also need an audit. Companies that are not legally required to be audited do not have audit working papers, but still need accounting records under the Commercial Transactions Law.
What evidence is strongest in audit working papers?
External evidence is the strongest. This includes bank confirmations, debtor and creditor confirmations, legal letters, and direct correspondence with regulators such as the FTA. Internal evidence prepared by the client is weaker because management could influence it. Auditor generated evidence, such as recalculations and analytical review, sits in between and is most reliable when based on independent source data.
Keep reading
UAE audit engagement letter explained for business owners and finance teams
A UAE audit engagement letter sets scope, fees and responsibilities before fieldwork starts. See clauses, ISA 210 rules and a sample checklist inside.
Read the guide →Auditing in the UAEAudit documentation UAE requirements every finance team should know
Audit documentation UAE requirements explained: what auditors must keep, retention periods, ISA 230 rules, and FTA expectations. Read the full guide.
Read the guide →Auditing in the UAEManagement representation letter UAE: what it is and how to sign it
A management representation letter UAE auditors require confirms key facts before sign-off. See what it covers, who signs, and timing.
Read the guide →This content is informational and does not constitute tax, legal, or financial advice. Consult an FTA-registered tax agent or a licensed UAE audit firm before acting on this information.
Get UAE e-invoicing pricing for your business
Tell us about your setup and we reply with clear pricing within one UAE business day. Accredited ASP included at no extra charge.
Get Pricing →