UAE audit engagement letter explained for business owners and finance teams

What is a UAE audit engagement letter?

A UAE audit engagement letter is the written contract between a company and its external auditor that confirms the scope of the audit, the responsibilities of each side, the fee, and the reporting timeline. It is required under International Standard on Auditing (ISA) 210 and is the first formal document signed at the start of every statutory audit in the UAE.

The letter protects both parties. The company knows exactly what the auditor will deliver, and the auditor confirms the basis for the work, the standards used, and the limits of the engagement. In the UAE, this matters because audits feed into corporate tax filings, Value Added Tax (VAT) checks, free zone renewals, and bank reporting. Getting the letter right at the start avoids disputes later. For the wider context, see our hub on auditing in the UAE.

Why UAE companies need an engagement letter

The UAE Commercial Companies Law requires limited liability companies and joint stock companies to appoint a licensed auditor and produce audited financial statements each year. Many free zones, including DMCC, JAFZA, ADGM, and DIFC, repeat this requirement in their own rules. Banks ask for audited accounts before extending credit. The Federal Tax Authority (FTA) can request audited figures during a corporate tax or VAT review.

An engagement letter turns a verbal agreement into evidence. It records the agreed terms before any fieldwork starts. If the scope changes mid-audit, the letter is the reference point for a written amendment.

Legal and regulatory drivers

• UAE Federal Decree-Law 32 of 2021 on Commercial Companies, which requires audited accounts.
• Federal Decree-Law 47 of 2022 on Corporate Tax, which applies a 0% rate up to AED 375,000 of taxable income and 9% above, with audited statements expected for many taxable persons.
• Federal Decree-Law 8 of 2017 on VAT, with a 5% standard rate since January 1, 2018.
• Federal Decree-Law 17 of 2024 on tax procedures, which sets record-keeping obligations.
• Free zone authority rules, which often require the engagement letter to be filed at licence renewal.

When the letter must be signed

The letter should be signed before any audit work begins. In practice, most UAE companies sign within 30 days of appointing the auditor at the annual general meeting. For a December 31 year end, this usually means signing between January and March. Late signing is a common audit finding and can delay the corporate tax return, which must be filed within 9 months of the financial year end.

What goes inside a UAE audit engagement letter

ISA 210 lists the minimum content, and most UAE audit firms add local clauses on top. The letter is usually 4 to 8 pages and is signed by the auditor and an authorised company representative, typically the chairman, managing director, or chief financial officer.

Core clauses required by ISA 210

1. Objective and scope of the audit, naming the financial statements covered and the period.
2. Responsibilities of the auditor, including the duty to express an opinion under International Standards on Auditing.
3. Responsibilities of management, including preparing the financial statements under International Financial Reporting Standards (IFRS) and maintaining internal controls.
4. Applicable financial reporting framework, almost always IFRS or IFRS for SMEs in the UAE.
5. Form and content of the audit report, with a note that the wording may change if findings require it.

UAE-specific clauses to look for

• Reference to the trade licence number and the issuing authority, such as the Department of Economic Development or a free zone.
• Confirmation that the auditor is registered with the UAE Ministry of Economy.
• Treatment of corporate tax and VAT advisory work, which must be separated from the audit fee.
• Use of the audited accounts for FTA filings, bank submissions, and shareholder reporting.
• Language of the report, usually English with an Arabic translation available on request.
• Data protection terms aligned with UAE Federal Decree-Law 45 of 2021 on Personal Data Protection.

Fees, billing, and out-of-pocket costs

Fees are usually quoted as a fixed amount in AED, with VAT at 5% added. Some firms break the fee into stages: planning, interim, year end, and reporting. The letter should state whether travel, translation, and printing are billed separately. It should also explain what happens if the scope expands, for example if a subsidiary is added or if the FTA opens a tax audit during fieldwork.

Sample engagement letter structure

Below is a typical structure used by UAE audit firms. Use it as a checklist when you review a draft.

How the engagement letter fits into the wider audit file

The signed letter is the first document in the audit file. From there, the auditor builds out the rest of the evidence. Each item below links to a deeper guide.

• The audit working papers record planning, testing, and conclusions.
• The audit documentation requirements set what must be kept and for how long.
• The management representation letter confirms key assertions at the end of the audit.
• The audit confirmation letter is sent to banks, customers, and lawyers for independent evidence.
• The audit trail and record-keeping rules link transactions to source documents.
• The audit completion timeline shows how each stage maps to the corporate tax and VAT calendar.

Record retention

UAE tax law requires most accounting records to be kept for 5 years from the end of the relevant tax period, and 7 years for real estate records. The engagement letter should reference this and confirm that the auditor will hold their working papers for the period required by the Ministry of Economy, usually a minimum of 5 years.

Common mistakes in UAE engagement letters

Vague scope

A letter that says only audit of financial statements is too thin. The scope should name each entity, each branch, and any consolidated subsidiaries. If the group has free zone and mainland entities, list them by trade licence.

Mixing audit and advisory work

Tax filings, transfer pricing studies, and Economic Substance Regulations (ESR) reports are not part of the statutory audit. Bundling them into one fee can raise independence questions and confuse the FTA if records are reviewed later. Keep advisory work in a separate engagement letter.

No mention of corporate tax

Since corporate tax became effective for financial years starting on or after June 1, 2023, audit letters should confirm whether the auditor will review the corporate tax disclosures within the financial statements. This is part of the audit, but the preparation of the tax return is a separate service.

Missing electronic delivery terms

Most UAE audit reports are now signed and shared electronically. The letter should state whether digital signatures are accepted and how the final PDF will be delivered. With UAE e-invoicing moving to a Peppol 5-corner Decentralized Continuous Transaction Control and Exchange (DCTCE) model from January 1, 2027, audit firms are updating clauses on electronic document handling.

Key UAE deadlines that depend on the engagement letter

Practical checklist before you sign

1. Confirm the auditor is on the Ministry of Economy register.
2. Check the licence numbers of every entity covered.
3. Read the responsibilities of management section carefully.
4. Match the reporting deadline to your corporate tax filing date.
5. Separate the audit fee from any tax or advisory fee.
6. Confirm the data protection and confidentiality clauses.
7. Check the limitation of liability cap, often expressed as a multiple of the fee.
8. Confirm that the working papers will be retained for at least 5 years.
9. Get sign-off from a board member or the managing director, not just the finance manager.
10. Keep a signed PDF and a hard copy in your audit file.

How the letter is used by regulators

The FTA may ask to see the engagement letter during a tax audit to confirm that statutory accounts were independently reviewed. Free zones often request it at renewal. Banks reviewing loan applications use the letter to confirm that the audit is current and that the auditor is appointed for the year under review. For the official position on tax procedures, see the Federal Tax Authority and on companies law see the UAE Ministry of Finance.

If you outsource audit support to a tax firm, our team helps finance leaders prepare the records auditors expect before fieldwork starts. To talk to the team, get UAE e-invoicing pricing and we will share next steps.