# UAE Commercial Companies Law audit clauses: a plain English guide

> UAE Commercial Companies Law audit clauses cover auditor appointment, records, reports, and shareholder rights.

Source: https://einvoicedirect.ae/auditing-uae/uae-commercial-companies-law-audit-clauses  
Last updated: 2026-06-05  
Publisher: EInvoice Direct (Massive FZCO), UAE e-invoicing software.

## What are the UAE Commercial Companies Law audit clauses?

The UAE Commercial Companies Law audit clauses are the articles in Federal Decree-Law 32 of 2021 that require most onshore companies to keep accounting records, appoint an external auditor, and file audited financial statements. They set who must be audited, how auditors are appointed, what records to keep, and how the audit report is presented to shareholders.

If you run a UAE mainland company, these clauses shape your annual close. They also connect to VAT, corporate tax, and the new e-invoicing rules. This guide walks through each clause group in plain English, with a deadline table, a checklist, and answers to the questions UAE finance teams ask most. For the wider picture, see our hub on [Auditing in the UAE](https://einvoicedirect.ae/auditing-uae).

## Which law contains the UAE audit clauses?

The main source is Federal Decree-Law 32 of 2021 on Commercial Companies, which replaced the older 2015 law. It applies to companies set up on the UAE mainland. Most free zones have their own company regulations, but they usually mirror the same audit duties.

Two other laws sit alongside it. Federal Decree-Law 47 of 2022 on Corporate Tax requires audited or prepared financial statements for many taxpayers. Federal Decree-Law 8 of 2017 on VAT requires accounting records that support VAT returns. Together they form the audit and recordkeeping baseline for UAE business.

### Mainland versus free zone

Mainland LLCs, private joint stock, and public joint stock companies follow the Commercial Companies Law directly. Free zone entities follow their zone's companies regulations, which in most zones require annual audited accounts as a license renewal condition. Offshore companies in some jurisdictions also require audits if they hold UAE assets or accounts.

## Which companies must appoint an auditor?

Under the Commercial Companies Law, joint stock companies must appoint an auditor. Limited Liability Companies (LLCs) must also appoint one or more auditors each year. In practice, this means nearly every mainland LLC needs an external auditor approved by the Ministry of Economy.

Small Sole Proprietorships and civil companies sit outside the Commercial Companies Law, but they may still need audits for corporate tax, VAT, or bank covenants. Anyone earning above the Federal Tax Authority (FTA) VAT registration threshold of AED 375,000 must keep records that an auditor or tax officer can review.

### Who can act as the auditor?

The auditor must be a UAE-licensed audit firm registered with the Ministry of Economy. The firm must be independent of the company, its directors, and major shareholders. Foreign-only firms cannot sign a UAE statutory audit report unless they hold a local license.

## The main audit clause groups, in order

The Commercial Companies Law groups its audit rules into four blocks. Reading them in this order makes the duties easier to follow.

### 1. Books, records, and accounting

The law requires every company to keep accounting books at its head office for at least 5 years. Books must show daily transactions and the company's financial position. They must be prepared using International Financial Reporting Standards (IFRS). For more on this, see our page on [IFRS UAE Companies Must Follow](https://einvoicedirect.ae/auditing-uae/ifrs-uae-companies-must-follow).

### 2. Auditor appointment and term

Shareholders appoint the auditor at the annual general meeting (AGM) for a renewable term of one year. The auditor's fee is fixed at the same meeting. For joint stock companies, the same auditor cannot serve for more than 6 consecutive years, so partner rotation is required.

### 3. Auditor duties and access

The auditor has the right to inspect all books, contracts, and records at any time. Directors and staff must give any information the auditor asks for. The auditor signs the audit report and is liable for negligence. Work follows International Standards on Auditing, covered in our guide to [UAE Audit Standards ISA](https://einvoicedirect.ae/auditing-uae/uae-audit-standards-isa).

### 4. Audit report and shareholder rights

The auditor prepares a written report on the financial statements. The report is read at the AGM and must be available to every shareholder before the meeting. Shareholders can ask questions and request clarifications. The board cannot approve final accounts without the audit report.

## What must the audit report contain?

The Commercial Companies Law sets a minimum content list for the audit report. It is short, but each item matters. The report must state:

- Whether the auditor obtained the information needed to perform the audit.
- Whether the company keeps proper accounting records.
- Whether the financial statements agree with those records.
- Whether the financial statements show a true and fair view under IFRS.
- Whether any violations of the law or the company's articles came to light during the audit.
- Whether the company's stocktake followed accepted rules.

The auditor's opinion is one of four types. See [Audit Opinion Types](https://einvoicedirect.ae/auditing-uae/audit-opinion-types) for how each one reads and when it is used.

## Deadlines under the Commercial Companies Law and related rules

The audit is only one piece of the annual cycle. The table below shows the main UAE deadlines a finance team must track.

| Filing or event | Deadline | Source |
| --- | --- | --- |
| AGM and audit report presentation | Within 4 months of financial year end | Commercial Companies Law |
| Accounting records retention | At least 5 years | Commercial Companies Law, VAT Law |
| VAT return filing | Within 28 days of tax period end | Federal Decree-Law 8 of 2017 |
| Corporate tax return and payment | Within 9 months of financial year end | Federal Decree-Law 47 of 2022 |
| Trade license renewal with audited accounts | Annually, before license expiry | Free zone and DED rules |
| E-invoicing ASP appointment, large taxpayers | October 30, 2026 | Ministry of Finance |
| E-invoicing go-live, AED 50M+ revenue | January 1, 2027 | Ministry of Finance |

Missing the AGM deadline can trigger administrative fines and questions during license renewal. Missing the corporate tax filing date carries separate FTA penalties.

## What evidence does the auditor need from you?

Most disputes between UAE companies and auditors come from missing evidence, not from accounting opinions. The auditor must collect enough support to sign a clean report. Our guide on [Audit Evidence UAE Requirements](https://einvoicedirect.ae/auditing-uae/audit-evidence-uae-requirements) covers this in detail.

### Core evidence checklist

- Trial balance, general ledger, and sub-ledgers for the full year.
- Bank statements and confirmations for every account.
- Signed contracts with customers, suppliers, and lenders.
- Fixed asset register with invoices and depreciation working.
- Inventory count sheets and a year-end stocktake report.
- VAT returns, payment proofs, and Tax Registration Number (TRN) details.
- Payroll registers, employee contracts, and end-of-service workings.
- Board and shareholder meeting minutes.
- Tax invoices that meet FTA format rules.

From 2027, the auditor will also expect Peppol PINT AE e-invoice records for in-scope companies. Plan your systems now so the audit trail is clean.

## Internal controls and anti-money laundering

The Commercial Companies Law does not write out a full internal control code, but it expects directors to keep proper books and to protect company assets. Auditors test the control environment as part of their risk work. Read [Internal Control Audit UAE](https://einvoicedirect.ae/auditing-uae/internal-control-audit-uae) for how this looks in practice.

Companies in regulated sectors must also meet anti-money laundering duties under Federal Decree-Law 20 of 2018. This includes Designated Non-Financial Businesses and Professions, such as real estate brokers, dealers in precious metals, and corporate service providers. See [AML Audit Requirements UAE](https://einvoicedirect.ae/auditing-uae/aml-audit-requirements-uae) for the testing scope.

## Penalties for non-compliance

The Commercial Companies Law sets administrative fines for failing to keep books, appoint an auditor, or hold the AGM. Fines vary by company type and offence. They can run from a few thousand dirhams to several hundred thousand for serious or repeated breaches.

Tax-side penalties bite harder. The FTA can apply fines for late VAT and corporate tax filings. Under Cabinet Decision 106 of 2025, e-invoicing breaches carry fines from AED 2,500 to AED 50,000 per violation once the rules apply to your business.

## How audit clauses connect to corporate tax

Corporate tax in the UAE took effect for financial years starting on or after June 1, 2023. The headline rate is 0% on taxable income up to AED 375,000 and 9% above that. A 15% Domestic Minimum Top-up Tax (DMTT) applies to large multinationals with global revenue of EUR 750 million or more, from January 2025.

Many taxpayers must submit audited financial statements with their corporate tax return, in particular those with revenue above set thresholds and Qualifying Free Zone Persons (QFZPs) that want to keep the 0% rate on qualifying income. Your Commercial Companies Law audit is the same set of statements used here. One audit, two regulators.

## Practical timeline for a UAE annual audit

Smaller companies can compress the timeline. Larger groups should give themselves more buffer.

- Month 1, year end. Close the books, run inventory count, send confirmations.
- Month 2. Auditor performs fieldwork on revenue, payables, and controls.
- Month 3. Resolve audit adjustments, finalise IFRS disclosures.
- Month 4. Sign audit report, hold AGM, approve dividends.
- Months 5 to 9. File corporate tax return with audited statements.

## Common mistakes to avoid

- Appointing an auditor only when the license is about to expire.
- Storing records on personal laptops with no backup.
- Using Excel-only books with no audit trail.
- Ignoring related party transactions in the disclosures.
- Treating free zone audits as optional just because no one asked last year.
- Forgetting that e-invoicing logs will become statutory records from 2027.

For a fuller view of the UAE audit landscape, our [Auditing in the UAE](https://einvoicedirect.ae/auditing-uae) hub links every related topic in one place.

## Sources and further reading

The official texts and updates are published by the regulators below.

- [UAE Ministry of Finance](https://mof.gov.ae)
- [UAE Federal Tax Authority](https://tax.gov.ae)
- [UAE MoF e-invoicing portal](https://einvoicing.mof.gov.ae)

If your firm runs UAE audits and you want a partner that keeps your clients' invoicing records clean, audit-ready, and aligned with the upcoming Peppol PINT AE rules, [get UAE e-invoicing pricing](https://einvoicedirect.ae/for-tax-firms#contact) from EInvoice Direct and bring one more compliance line under control.

## Frequently asked questions

### Is an audit mandatory for all UAE companies?

An audit is mandatory for joint stock companies and Limited Liability Companies under Federal Decree-Law 32 of 2021. Most free zones also require annual audited accounts for license renewal. Sole proprietorships sit outside this rule, but they may still need audits for corporate tax, bank loans, or large customer contracts. In practice, almost every active UAE business needs an external auditor.

### How often must a UAE company appoint an auditor?

Shareholders appoint an auditor each year at the annual general meeting. The term is one year and can be renewed. For joint stock companies, the same audit firm cannot serve for more than 6 consecutive years, so the firm or audit partner must rotate. LLCs follow the same yearly appointment but face fewer rotation limits in practice.

### What is the deadline for the audit report in the UAE?

The audit report must be ready in time for the annual general meeting, which the Commercial Companies Law requires within 4 months of the financial year end. For a December year end, this means the AGM and signed audit report must be done by the end of April. Missing this deadline can trigger fines and complications at license renewal.

### How long must accounting records be kept in the UAE?

Under the Commercial Companies Law, accounting books must be kept at the company's head office for at least 5 years. The VAT Law and the Corporate Tax Law also require records to be kept for at least 5 years from the end of the relevant tax period, with longer periods for real estate. Most auditors recommend keeping records for 7 years.

### Do free zone companies follow the Commercial Companies Law audit clauses?

Free zone companies follow their own zone regulations, not the Commercial Companies Law directly. However, most UAE free zones require annual audited financial statements as a license renewal condition, and they apply the same IFRS and International Standards on Auditing. So in practice, the audit obligations match those of mainland companies very closely.

### What are the penalties for not having a UAE audit?

The Commercial Companies Law sets administrative fines for failing to keep proper books, appoint an auditor, or hold the AGM. Amounts vary by company type and offence. License renewal can also be blocked until audited accounts are filed. Tax-side penalties from the Federal Tax Authority apply separately if missing audits lead to wrong VAT or corporate tax filings.

### Does the UAE audit need to follow IFRS?

Yes. The Commercial Companies Law requires financial statements to be prepared under International Financial Reporting Standards, or IFRS for SMEs where eligible. The auditor's report must state whether the statements give a true and fair view under these standards. Free zones and the Federal Tax Authority apply the same expectation, so IFRS is the default reporting framework across the UAE.

### Who can sign a UAE statutory audit report?

Only an audit firm licensed by the UAE Ministry of Economy can sign a statutory audit report. The signing partner must be a registered auditor with the right experience and continuing professional development. The firm must be independent of the company and its major shareholders. Foreign-only firms cannot sign UAE audit reports without a local license and registration.


---
This content is informational and is not tax, legal, or financial advice.
For UAE e-invoicing pricing, see https://einvoicedirect.ae/for-businesses#contact