Corporate Audit Requirements in the UAE 2026: Who Needs One, When, and Under What Rules

Mandatory audit in the UAE typically follows from three independent sources of obligation: Federal Decree-Law No. 32 of 2021 (Commercial Companies Law) for mainland companies, PJSCs, and PrJSCs; the internal rules of the specific free zone for licence renewal; and Ministerial Decision No. 84 of 2025 for Corporate Tax purposes. An audit is mandatory for Qualifying Free Zone Persons (regardless of revenue), for any taxable person with revenue exceeding AED 50 million in the tax period, for all Tax Groups, and for most companies in major free zones (DMCC, JAFZA, DIFC, ADGM, and others) — independently of the tax rules, as a condition of licence renewal.

⚠ IMPORTANT: even if your company is below the AED 50 million threshold and is not a QFZP, this does not exempt you from audit if the free zone itself requires one for licence renewal. These are two separate, independent grounds.

1. The Legal Basis: Three Separate Sources of Obligation

The main mistake when assessing audit obligations is looking for one “single” rule. In the UAE, three independent sources operate simultaneously, and a company can fall under all three at once.

•       Federal Decree-Law No. 32 of 2021 (Commercial Companies Law). The corporate law requires an annual audit for mainland companies (LLCs), and mandatorily for PJSCs and PrJSCs — the auditor must be approved by the regulator (the SCA for listed companies). Article 27 of the law states this unconditionally: “every Joint Stock Company or Limited Liability Company shall have one or more auditors to audit the accounts of the Company on a yearly basis” — with no revenue or shareholder-count threshold. A threshold of “20 shareholders or AED 50 million” cited in some secondary sources could not be confirmed against the primary text and appears to conflate this with the Corporate Tax threshold.

•       The rules of the specific free zone. Each zone (DMCC, JAFZA, DIFC, ADGM, and others) sets its own deadlines and submission format. Here, audit is a condition of annual licence renewal, not a tax requirement.

•       Ministerial Decision No. 84 of 2025 (for Corporate Tax purposes). Historically independent of revenue for QFZPs; mandatory for anyone with revenue exceeding AED 50 million, and for all Tax Groups regardless of revenue. Effective 1 January 2025, replacing Ministerial Decision No. 82 of 2023 (the latter continues to apply only to periods that began before that date).

⚠ Until Ministerial Decision No. 84 of 2025 was issued, the threshold for Tax Groups was also tied to AED 50 million. The threshold for Tax Groups has since been removed: audit is now mandatory in every case.

An Additional Layer: Who Regulates the Auditors Themselves

Federal Decree-Law No. 41 of 2023 separately regulates the auditing and accounting profession itself (effective 28 March 2024, replacing the old 2014 law). Auditors and audit firms must hold a licence from the Ministry of Economy. Importantly, this also applies to auditors based in DIFC/ADGM if they provide services onshore — this federal regime extends to them as well.

ℹ Disciplinary sanctions for auditors under this law: fines from AED 10,000 to AED 1,000,000, licence suspension from 1 month to 3 years. This matters when choosing an auditor — verify their licence.

2025 Update to the Commercial Companies Law

Federal Decree-Law No. 20 of 2025 (effective 15 November 2025) amends Federal Decree-Law No. 32 of 2021. Among the changes: strengthened financial reporting and audit requirements for larger or cross-border groups, with closer alignment to international accounting standards, and increased penalties for breaches of disclosure and record-keeping rules. The specific thresholds and criteria defining a “larger or cross-border” group have not yet been detailed in publicly available sources — monitor guidance from the Ministry of Economy.

Need an audit or advisory support for your UAE company? UPPERSETUP corporate and tax services →

2. Who Is Required to Conduct an Audit

Entity / category	Audit required?	Basis
Mainland LLCs and branches of foreign companies	Yes	Federal Decree-Law No. 32 of 2021 (CCL)
PJSC and PrJSC	Yes, annually, SCA-approved auditor	Federal Decree-Law No. 32 of 2021 (CCL)
Free zones (DMCC, JAFZA, DAFZA, Dubai South, etc.)	Yes, in most zones — for licence renewal	Rules of the specific free zone
DIFC and ADGM	Yes, with virtually no exemptions	DFSA / FSRA regulation
QFZP (Qualifying Free Zone Person)	Yes, mandatory, regardless of revenue	Ministerial Decision No. 84 of 2025
Business with revenue > AED 50 million in the tax period	Yes	Ministerial Decision No. 84 of 2025
Tax Groups	Yes, standalone special purpose FS, regardless of revenue	FTA Decision No. 7 of 2025
Free zone business < AED 50 million, not a QFZP, not in a tax group	Not for CT purposes, but the free zone itself may still require it	Free zone rules apply, not CT

ℹ A company can simultaneously fall under its free zone’s own rules and under the Corporate Tax requirement through one of three criteria (QFZP / >AED 50 million / Tax Group). These are often two distinct audits in concept, though in practice one report may serve both purposes.

Qualifying Free Zone Person: a special case

For a free zone company applying the 0% rate on qualifying income as a QFZP, audited financial statements are a mandatory part of the regime itself, not a separate requirement layered on top. Without an audit, the company loses QFZP status and the preferential rate.

3. Submission Deadlines: by Zone and Regime

Free zone / regime	Submission deadline
DIFC / ADGM	Typically up to 6 months after financial year-end
JAFZA, DAFZA, Dubai South	90 days after financial year-end
DMCC	Disputed: official regulation states 90 days; several advisory sources cite 180 days — see note below
Mainland (CCL)	Presentation to shareholders within 4 months; formal submission to DET is not typically required
Corporate Tax return (CT)	Audited financials must be ready before the CT return deadline — 9 months after the tax period ends

⚠ A CONFLICTING CONSENSUS ON DMCC: a number of advisory sources cite a 180-day deadline (30 June for a financial year ending 31 December), while others cite 90 days (31 March). One source explicitly states that 180 days reflects general international practice rather than DMCC’s own rule. We cannot confirm with certainty which deadline currently applies without a direct query to DMCC. For safety, treat 90 days as the working assumption and verify the exact current deadline in the DMCC Member Portal before planning your audit.

The Corporate Tax deadline runs independently of the zone deadline. The Corporate Tax return is due within 9 months of the end of the tax period — audited financials (where required) must be ready by that date even if the free zone allows more time for its own internal submission.

4. How the Audit Process Works in Practice

1.     Prepare accounting records and source documents for the full tax/financial year.

2.     Select an auditor from the free zone’s approved auditors list — for mainland audits, the auditor must be licensed by the Ministry of Economy.

3.     IFRS-based audit review: balance sheet, profit and loss statement, cash flow.

4.     Receive the audit opinion — the auditor’s independent view on the reliability of the financial statements.

5.     Submit through the relevant portal: DMCC Member Portal, JAFZA, DIFC Client Portal, etc. — document format and composition vary by zone.

6.     Figures from the audit feed into Corporate Tax liability calculations and the Corporate Tax return.

5. How Audit Connects to the Tax Return

Audited financial statements are not submitted to the FTA automatically together with the tax return, but must be ready and retained — the FTA increasingly requests them during reviews and audits of the return itself. Record retention is 7 years for Corporate Tax purposes and 5 years for VAT purposes.

✅ Individuals and companies with revenue ≤ AED 3 million can elect Small Business Relief (available until 31 December 2026) and pay 0% tax without a mandatory audit — but proper bookkeeping and proof of eligibility remain necessary regardless.

6. Penalties for Non-Compliance

Violation	Consequence
Failure to maintain accounting records / documents	AED 10,000 for a first offence, AED 20,000 for a repeat offence (from 14 April 2026, Cabinet Decision No. 129 of 2025)
Failure to submit a free zone audit	License renewal refusal, visa processing block, possible fines (amount depends on the zone)
No audit for a QFZP claiming 0% CT	Loss of QFZP status and the 0% preferential rate on qualifying income
Tax return error discovered by the FTA	15% fixed penalty on the tax difference plus 14% per annum, calculated monthly (from 14 April 2026)

Two separate penalty regimes apply. Corporate Tax penalties are set by Cabinet Decision No. 75 of 2023. General administrative penalties for VAT, excise, and tax procedures are governed by Cabinet Decision No. 129 of 2025, effective 14 April 2026, replacing Cabinet Decision No. 108 of 2021.

⚠ Penalties for failing to meet a free zone’s own internal audit requirement are set by the zone itself — these are not federal fines. In practice, the consequence is a block on licence renewal rather than a mandatory cash penalty.

7. Common Mistakes

•       Assuming a free zone exempts audit below AED 50 million revenue. AED 50 million is the Corporate Tax threshold. The free zone can require an audit regardless of revenue.

•       Submitting a report from an auditor not on the zone’s approved list. A report from an unapproved auditor is automatically rejected.

•       Relying on the Corporate Tax deadline for the free zone audit submission. The Corporate Tax deadline (9 months) and the zone deadline (90–180 days) are not synchronised.

•       Assuming a QFZP with low income can skip the audit. For a QFZP, revenue level is irrelevant — audit is mandatory from the first dirham of qualifying income.

•       Treating the free zone audit and the Corporate Tax audit as identical. These are often distinct requirements with different timing, even when one report ultimately serves both purposes.

FAQ

Must a new UAE company conduct an audit in its first year?

Yes, if required by the free zone or the mainland regime. Most zones (DMCC, JAFZA, and others) require an audit even from dormant and newly incorporated companies regardless of revenue.

Is an audit needed if revenue is below AED 50 million?

Not mandatory for Corporate Tax purposes, unless you are a QFZP or part of a Tax Group. But the free zone or mainland regime may still require an audit independently of revenue.

What happens if a QFZP does not submit an audit?

The company loses Qualifying Free Zone Person status and the right to the 0% rate on qualifying income. Income becomes subject to the standard 9% rate.

Is an audit required for DIFC or ADGM companies?

Yes, with virtually no exemptions. Audit is required under the regulatory rules of the DFSA (DIFC) and FSRA (ADGM), regardless of size or revenue.

What accounting standard applies in the UAE?

IFRS (International Financial Reporting Standards) is the single standard for the vast majority of mainland and free zone companies.

Key Takeaways

•       Three independent sources of audit obligation: the law (CCL), free zone rules, and Corporate Tax rules (MD 84/2025).

•       A QFZP always undergoes an audit, regardless of revenue — it is the price of the 0% rate.

•       AED 50 million is the audit threshold only for standalone taxpayers, not for QFZPs or members of a Tax Group.

•       Free zone deadlines and Corporate Tax deadlines are not synchronised — track both.

•       Without an audit, a free zone can refuse licence and visa renewal.

Summary

Mandatory corporate audit in the UAE in 2026 follows from three distinct sources: Federal Decree-Law No. 32 of 2021 (Commercial Companies Law) for mainland companies, PJSCs, and PrJSCs; the internal rules of the specific free zone (DMCC, JAFZA, DIFC, ADGM, and others) for annual licence renewal; and Ministerial Decision No. 84 of 2025 for Corporate Tax purposes. Audited financial statements are mandatory for Qualifying Free Zone Persons regardless of revenue, for taxable persons with revenue exceeding AED 50 million in the tax period, for all Tax Groups, and for most companies in major free zones for licence renewal. Deadlines vary: DIFC/ADGM up to 6 months, JAFZA/DAFZA 90 days, DMCC officially 90 days though several advisory sources cite 180 days. The Corporate Tax return is due within 9 months of the end of the tax period.

Sources

• Federal Decree-Law No. 32 of 2021 — Commercial Companies Law (uaelegislation.gov.ae)

• Federal Decree-Law No. 41 of 2023 — Regulation of the Accounting and Auditing Profession, effective 28 March 2024 (uaelegislation.gov.ae)

• Federal Decree-Law No. 20 of 2025 — amendments to the Commercial Companies Law, effective 15 November 2025 (Gibson Dunn, Lexology, December 2025)

• Ministerial Decision No. 84 of 2025 — Audited Financial Statements for Corporate Tax purposes, effective 1 January 2025 (pwc.com)

• Deloitte — New Ministerial Decision No. 84 of 2025 issued by the Ministry of Finance (June 2025) (deloitte.com)

• FTA Decision No. 7 of 2025 — Special Purpose Financial Statements requirements for Tax Groups (abbasaccounting.com)

• DLA Piper — Cabinet Decision amends the administrative penalties for violation of UAE tax laws (December 2025) (dlapiper.com)

• Lexology — UAE Tax Penalties Reform: What Cabinet Decision No. 129 of 2025 Means for Businesses (November 2025) (lexology.com)

• Kayrouz & Associates — FTA Audit UAE 2026: Penalties, Process and How to Respond (April 2026) (kayrouzandassociates.com)

• Reyson Badger — UAE Audit Requirements 2026 | Complete Compliance Guide (reyson.ae)

• Success Business Advisors — UAE Statutory Audit Requirements: Who Needs One (April 2026) (sbadvisors.ae)

• OneDesk Solution — Guide to Statutory Audit Requirements in Dubai 2026 (March 2026) (onedesksolution.com)

Disclaimer

This material is for informational purposes only and does not constitute legal, tax, financial, investment, or consulting advice. Before making any decisions, obtain individual professional advice tailored to your specific situation, jurisdiction, company status, and current regulatory requirements. Information is accurate as of June 2026.