UAE Audit Requirements for Companies in 2026: Corporate Tax, Free Zones and Mainland

Which UAE companies need an audit in 2026?

A UAE company needs audited accounts if any one of three separate tests applies: the corporate tax rules, the Commercial Companies Law or its free zone’s regulations. The tests are independent. A mainland LLC with AED 5 million of revenue needs no audit for corporate tax but must still appoint an auditor under company law. A free zone company taxed at 0% as a Qualifying Free Zone Person (QFZP) needs an audit for tax whatever its size.

Two other federal regimes rarely trigger an audit on their own. VAT has no audit requirement, although the FTA can examine VAT returns, so the turnover declared for VAT should reconcile to the financial statements. Under Cabinet Decision No. 98 of 2024, economic substance requirements no longer apply for financial years ending after 31 December 2022, so they no longer drive audits.

Article 5 of the Commercial Companies Law disapplies it to free zone companies where the zone’s own rules cover the matter. A free zone company’s branch on the mainland is subject to it.

Corporate tax: who needs audited statements and which accounting standard

For tax periods starting on or after 1 January 2025, Ministerial Decision No. 84 of 2025 requires audited financial statements from three groups: taxable persons with revenue above AED 50 million in the tax period, every QFZP, and every tax group. It replaced Ministerial Decision No. 82 of 2023, which still governs tax periods that began before 1 January 2025. The power comes from Article 54(2) of the Corporate Tax Law, Federal Decree-Law No. 47 of 2022.

Revenue means the gross income derived during the tax period (Article 1 of the Corporate Tax Law), not profit or taxable income. The test applies to each taxable person separately; for a non-resident, only revenue through its UAE permanent establishment or nexus counts. A tax group needs audited special purpose financial statements whatever its revenue, and FTA Decision No. 7 of 2025 sets their form. The FTA does not pro-rate thresholds when a first tax period runs for 6–18 months.

Ministerial Decision No. 114 of 2023 sets the accounting standard. The default is full IFRS. A taxable person with revenue not exceeding AED 50 million may use IFRS for SMEs, and one with revenue not exceeding AED 3 million may use the cash basis; others need FTA approval in exceptional circumstances. Tax group statements aggregate members’ standalone statements, eliminating intra-group transactions. Tax records must be kept for 7 years after the end of the tax period.

Commercial Companies Law: auditors, accounts and the general assembly

Every mainland LLC and joint stock company must have one or more auditors for an annual audit, under Article 27(1) of Federal Decree-Law No. 32 of 2021 on Commercial Companies, with no revenue or size exemption. Article 27 also requires annual accounts, including a balance sheet and a profit and loss account, prepared under international accounting standards. Under Article 102, an LLC’s auditors are elected every year by the general assembly of partners, and the rules for joint stock company auditors apply to them.

The LLC timetable is tight. The manager must prepare the balance sheet, profit and loss account and annual report within 3 months of the year end (Article 87). The general assembly must meet at least once a year within 4 months of the year end (Article 92), on at least 21 days’ notice (Article 93). Accounting records must be kept for at least 5 years (Article 26). Federal Decree-Law No. 20 of 2025 amended the law in late 2025, mainly on share classes and re-domiciliation.

Auditors must be licensed. Federal Decree-Law No. 41 of 2023 on the Regulation of the Accounting and Auditing Profession, which repealed Federal Law No. 12 of 2014, bars anyone from practising without a professional licence from the Ministry of Economy and Tourism, formerly the Ministry of Economy. Firms auditing public joint stock companies also need accreditation from the Securities and Commodities Authority.

Free zone audit rules: DMCC, JAFZA, DAFZA, RAKEZ, IFZA and ADGM

Most free zone authorities require an annual audit by an auditor they approve, under their own regulations. Some set a deadline after the year end; others link it to licence renewal. DIFC and ADGM have their own companies laws: the DIFC Companies Law (DIFC Law No. 5 of 2018) and the ADGM Companies Regulations 2020. ADGM exempts some small, subsidiary and dormant companies from audit, but its Registration Authority says a QFZP still needs audited statements for the 0% rate.

Free zone rules change more often than federal law. Check your authority’s current rulebook before the year end.

Worked example: three UAE companies and their 2026 audits

Three companies show how the answers diverge. Each has a financial year ending 31 December 2026, so its corporate tax return is due by 30 September 2027. Companies A and B are mainland Dubai LLCs. Company C is a DMCC company that meets the QFZP conditions and earns only qualifying income. None of the three is in a tax group or a multinational group.

1. Company A, mainland LLC, revenue AED 30,000,000. Corporate tax: 30,000,000 does not exceed 50,000,000, so no tax audit. Company law: Articles 27 and 102 still require an auditor. Standard: IFRS for SMEs is allowed; the cash basis and Small Business Relief are not, because revenue exceeds AED 3,000,000.
2. Company B, mainland LLC, revenue AED 80,000,000. Corporate tax: 80,000,000 − 50,000,000 = AED 30,000,000 over the threshold, so an audit is required. Company law: required anyway, so one audit serves both. Standard: full IFRS, because IFRS for SMEs stops at AED 50,000,000.
3. Company C, DMCC QFZP, revenue AED 10,000,000. Corporate tax: audit required because it is a QFZP. Free zone: audited statements uploaded to DMCC by 30 June 2027, 6 months after year end. DMCC rules displace the company law audit articles (Article 5). Standard: IFRS for SMEs is allowed.
4. Mainland timetable for A and B: accounts by 31 March 2027 (3 months); assembly notice by 9 April 2027 (21 days); general assembly by 30 April 2027 (4 months); tax return by 30 September 2027 (9 months).
5. Cost to C of skipping the audit, with taxable income of AED 2,000,000 a year: as a QFZP, 2,000,000 × 0% = AED 0. Taxed as an ordinary company for 2026 and the next 4 tax periods: (2,000,000 − 375,000) × 9% = 1,625,000 × 9% = AED 146,250 a year.

Assumptions: all of Company C’s income is qualifying income and every other QFZP condition is met. Company A could still need an audit for a bank, a lender or its shareholders.

How to go from year end to a filed return: step by step

Plan the audit around the earliest deadline, not the tax return. For a mainland LLC that is the general assembly at 4 months; for DMCC and RAKEZ companies it is 6 months; the tax return comes last, at 9 months. Because the return is prepared from the financial statements, and the FTA can ask for them under Article 54(1), the audit should be signed before the return is filed.

1. Early in the year, test each entity: forecast revenue against AED 50 million, confirm any QFZP or tax group position, and check the zone’s rule.
2. Appoint the auditor: at the general assembly for a mainland LLC, or by resolution where the zone requires it, as JAFZA does. Check the Ministry licence and the zone’s list.
3. Close the books and prepare the statements under the right standard; the manager of a mainland LLC has 3 months.
4. Complete the audit; tax groups also need audited aggregated special purpose statements.
5. Hold the mainland general assembly within 4 months, on 21 days’ notice, to approve the accounts and elect next year’s auditor.
6. Submit to the free zone: DMCC and RAKEZ within 6 months, IFZA at licence renewal, JAFZA through its annual audit report service.
7. File the corporate tax return and pay within 9 months, then keep the records for 7 years.

What changed in 2025–2026 for UAE audits

The main change is that tax groups now need an audit at any size, and the first calendar-year returns under the new rules fell due on 30 September 2026. Tax procedures and VAT penalties were revised in 2026, and IFZA has asked for financial statements at licence renewal since September 2025. The corporate tax revenue test stays at AED 50 million and the QFZP rule is unchanged.

Penalties for missing an audit or keeping poor records

Corporate tax has no stand-alone fine for a missing audit; the cost comes through record-keeping and incorrect-return penalties and, for a QFZP, loss of QFZP status for that tax period and the next 4 (Ministerial Decision No. 229 of 2025, Article 5(2)). Company law fines follow Cabinet Decision No. 102 of 2022: a first violation brings a written warning with up to 30 days to correct, the table amount applies to a second, and it doubles on a third.

RAKEZ also fines AED 2,500 for late audited statements, and obstructing an FTA tax audit costs AED 20,000.

UAE audit and records checklist

Auditors and the FTA ask for the same core evidence, so build one file that serves the tax return, the general assembly and the free zone, and keep it for 7 years after the tax period. The FTA can ask for records in Arabic, and FTA Decision No. 4 of 2026, published in August 2026, sets rules for keeping accounting records and electronic copies.

• General ledger, trial balance and bank reconciliations for the full period
• Sales and purchase invoices, contracts and the fixed asset register
• For a QFZP: a split of qualifying and non-qualifying revenue and evidence of substance in the zone
• For a tax group: each member’s standalone statements and the elimination schedule
• Auditor appointment resolution, engagement letter and the auditor’s licence and zone approval
• Signed audited statements and the auditor’s report, approved by the general assembly where required
• A reconciliation of revenue across the statements, VAT returns and the corporate tax return

Common UAE audit mistakes

Most audit failures in the UAE come from applying one test and forgetting the other two, or from planning the audit around the 9-month tax deadline when company law or the free zone sets an earlier date. The errors below most often lead to penalties, a lost 0% rate or an audit rushed through just before a deadline.

• Treating AED 50 million as the only test: QFZPs and tax groups need an audit at any revenue.
• Assuming a small mainland LLC needs no audit: company law requires an auditor at any size.
• Starting the audit in the summer: an LLC’s general assembly is due within 4 months, DMCC and RAKEZ within 6.
• Staying on IFRS for SMEs after revenue passes AED 50 million.
• Relying on ADGM’s small company exemption while claiming the QFZP 0% rate.
• Hiring an auditor who is not on the zone’s approved list.
• Pro-rating the AED 50 million test for a long or short first tax period.

UAE audit terms explained

These terms appear in the Corporate Tax Law, its ministerial decisions, the Commercial Companies Law and free zone audit guidance. Between them they decide which audit test applies to a particular entity and which accounting standard it may use. Each definition restates the official wording in plain English.

• Revenue: the gross amount of income derived during a tax period, before costs.
• Qualifying Free Zone Person (QFZP): a free zone person meeting the conditions for 0% tax on qualifying income.
• Tax group: a parent and resident subsidiaries owned at least 95%, taxed as one person; QFZPs cannot join.
• Special purpose financial statements: the tax group’s audited aggregation of its members’ standalone statements.
• IFRS for SMEs: a simplified version of IFRS, allowed for corporate tax where revenue is AED 50 million or less.
• Approved auditor: an audit firm accepted by a free zone authority to audit companies in that zone.
• General assembly: the meeting of an LLC’s partners that approves the accounts and elects the auditor.