Audit Requirements in UAE: Which Free Zones Require It and When the FTA Does

Audit requirements in UAE confuse business owners because there is no single rule to look up. Two entirely separate authorities can each impose an audit obligation on the same company: your free zone authority, which usually wants an audit report before it will renew your trade licence, and the Federal Tax Authority, which requires audited financial statements once Corporate Tax thresholds are met. Neither cancels the other, and satisfying one does not satisfy the other by default. This guide maps the free zone position zone by zone, sets out the Corporate Tax triggers with the exact figures, and explains how a single audit engagement can cover both. If you want the answer for your specific licence, our team will confirm the audit requirements in UAE that apply to your licence the same day.

Is audit mandatory in the UAE in 2026?

Yes for most companies — but the obligation comes from one of two directions, and you need to test both. Framework one is your free zone authority: most major UAE free zones make an annual audited financial statement a condition of trade licence renewal, and many restrict you to an auditor on their approved list. Framework two is UAE Corporate Tax under Federal Decree-Law No. 47 of 2022, which requires audited financial statements where revenue exceeds AED 50 million in a tax period, or where the company claims Qualifying Free Zone Person status at the 0% rate.

The two frameworks are cumulative, not alternative. A DMCC company with AED 60 million of revenue claiming QFZP status is caught by both — the zone wants the report for renewal, and the tax law wants it for the return. The good news is that the same IFRS audited financial statements will normally do both jobs, so the cost is not doubled. The bad news is that a company in a zone with no audit requirement often assumes it has no audit obligation at all, which is wrong the moment either Corporate Tax trigger applies.

Separately from both, every UAE business must keep proper books of account. The absence of a free zone audit requirement never means accounting records are optional — the FTA can request records for any tax period, and a company that cannot produce them is exposed regardless of whether an audit was ever mandated.

Which free zones have mandatory annual audit requirements in UAE?

Most of them. The table below sets out the position for the zones Fastlane is approved in, whether the zone restricts you to an approved auditor list, and where to go for the zone-specific service. The pattern is consistent: if the zone mandates an audit, the report is a renewal document — no report, no licence.

Two structural points the matrix cannot show. First, DIFC and ADGM are separate legal jurisdictions with their own companies and insolvency legislation, their own registrars and their own courts — their audit rules sit in that framework, not in the standard Dubai free zone process. Second, the approved-auditor restriction is the practical trap: appointing an auditor who is not on your zone's list means the report is rejected and the work is repeated at your cost. Confirm the list before you sign an engagement letter.

When do UAE Corporate Tax rules make an audit mandatory?

Corporate Tax imposes its own audit obligation independently of any free zone rulebook. Under Federal Decree-Law No. 47 of 2022 and the ministerial decisions issued under it, a taxable person must prepare and maintain audited financial statements in two situations: where revenue exceeds AED 50,000,000 in the tax period, and where the company is a Qualifying Free Zone Person claiming the 0% rate. Neither depends on where the licence was issued.

The Corporate Tax return itself is due within nine months of the end of the tax period, so a company with a 31 December year end files by 30 September. Audits should be planned backwards from that date and from the licence renewal date, whichever falls first — not started in the month the deadline lands. Our UAE corporate tax filing service works to both dates together.

What does the AED 50 million revenue threshold actually cover?

The test is revenue, not profit, and it is measured for the tax period rather than averaged or annualised. A trading company turning over AED 62 million with a AED 400,000 net loss is caught; a consultancy earning AED 4 million of revenue and AED 3 million of profit is not. That catches out low-margin businesses in particular — commodity traders, distributors and logistics operators routinely cross AED 50 million of revenue on thin margins and are surprised to find themselves in mandatory audit territory.

Two practical points. A short first tax period is tested on the revenue actually recorded in that period, so a company incorporated mid-year may fall below the threshold in year one and above it in year two. And revenue means revenue as determined under the applicable accounting standards — not the cash collected, not the invoiced total net of credit notes you never issued. If you are close to the line, get the books closed properly before deciding you are outside it, because guessing wrong means discovering in month eight that you needed an audit you never commissioned.

Why must every QFZP be audited, whatever its revenue?

Because the 0% rate is a claim, and the audit is the evidence. A free zone company is a taxable person under UAE Corporate Tax like any other — there is no free zone tax exemption. The 0% rate applies only to qualifying income of a Qualifying Free Zone Person that meets every condition in Article 18 of Federal Decree-Law No. 47 of 2022, as expanded by Cabinet Decision No. 100 of 2023 and Ministerial Decision No. 265 of 2023. Audited financial statements are one of those conditions, and there is no revenue floor: a company with AED 500,000 of revenue claiming QFZP status still needs an audit.

The conditions the audit supports are adequate substance in the free zone, income that actually qualifies, compliance with the arm's length principle and transfer pricing documentation, not having elected for the standard rate, and staying within the de minimis limit for non-qualifying revenue — the lower of AED 5,000,000 or 5% of total revenue. Management accounts do not substitute; the FTA expects audited numbers behind a 0% claim.

Getting the de minimis test wrong is expensive, because failure is not a one-year problem:

A single AED 50,000 overshoot on non-qualifying revenue converts a 0% position into roughly AED 731,000 of tax across five years on these numbers. That is why the audit is worth commissioning early enough to catch the problem inside the year, while the revenue mix can still be managed — not in month nine when the figures are fixed.

Do mainland companies have audit requirements in UAE too?

Yes, and this is the most widely misunderstood point in the whole area. Under Federal Decree-Law No. 32 of 2021 on Commercial Companies, UAE companies are required to appoint one or more auditors and have their annual accounts audited. Dubai Economy and Tourism (DET) does not routinely demand the report at licence renewal the way DMCC or JAFZA do, which is why mainland owners so often conclude that no audit is needed — but the company law obligation exists whether or not anyone asks to see the output.

Layer the Corporate Tax triggers on top and the picture is clear: a mainland LLC above AED 50 million of revenue must have audited financial statements, and any mainland company may be asked to evidence its return. Audited accounts are also what banks, investors and buyers ask for first in a financing round, a credit review or a sale, and reconstructing three years of unaudited history under deal pressure is far more expensive than auditing each year as it closes. Keeping monthly bookkeeping current is what makes the annual audit routine instead of a project.

Who is exempt from audit requirements in UAE?

Exemption is narrower than most owners assume, and it is always partial — nobody is exempt from keeping records. In practice a company avoids a mandatory audit only if it is licensed in a zone that does not require one for renewal and stays below the Corporate Tax triggers.

1. Companies in non-mandating zones — Shams and RAK ICC do not require an audit report at licence renewal, but the Corporate Tax triggers still apply if revenue exceeds AED 50 million or QFZP status is claimed.
2. Businesses below the Corporate Tax thresholds — below AED 50 million of revenue and not claiming QFZP status, audited statements are not mandated by tax law. Proper books of account still are.
3. Small Business Relief claimants — businesses electing relief at revenue of AED 3,000,000 or below are, by definition, far under the audit threshold. Check the current availability window for the relief before relying on it in a forward plan — see our Small Business Relief page.
4. Resident natural persons below AED 1,000,000 of UAE business turnover in a calendar year fall outside the Corporate Tax net altogether, so no audit obligation arises from tax law.

One caution on relying on any of these: an exemption assessed at the start of the year can evaporate by the end of it. Revenue growth past AED 50 million, or a late decision to claim QFZP status, creates an audit requirement retrospectively for a period whose books you may already have closed on a management-accounts basis.

Which accounting standards must UAE audited financial statements follow?

UAE Corporate Tax requires financial statements prepared under IFRS, with a lighter option for smaller businesses. Where revenue is AED 50,000,000 or below, IFRS for SMEs may be applied instead, and a cash basis of accounting is available where revenue is AED 3,000,000 or below. Free zone authorities generally expect full IFRS in the audit report they receive, so check before choosing the lighter framework.

Switching basis mid-stream is where problems start. A company that has been on a cash basis and then crosses a threshold has to restate onto an accrual basis before an auditor can sign anything, which turns a routine engagement into a reconstruction exercise. If growth is likely to take you past AED 50 million, move to accrual IFRS early rather than at the point the threshold bites.

Can one audit report satisfy both the free zone and the FTA?

In almost every case, yes. A single set of IFRS audited financial statements prepared by an auditor approved for your zone will serve the licence renewal submission and stand behind the Corporate Tax position. You are not paying for two audits — you are paying for one audit scoped correctly.

"Scoped correctly" is doing the work in that sentence. An audit commissioned purely to tick the renewal box may not test the things a QFZP claim depends on: whether income actually qualifies, whether non-qualifying revenue stays inside the de minimis limit, whether substance in the zone is adequate, and whether related-party transactions meet the arm's length standard with documentation behind them. Tell the auditor at engagement stage that a QFZP claim is being made, so those tests are inside the scope from day one rather than added as an afterthought.

What happens if you miss the audit deadline — and what does it cost?

In a mandating free zone, a missing audit report stops the licence renewal, and everything downstream of the licence stops with it. The sequence is predictable and it escalates on a monthly clock:

1. Licence renewal blocked — the authority withholds approval until the report is filed. Without a valid licence the company cannot lawfully trade, invoice or sponsor visas.
2. Monthly penalties accrue — once the licence lapses, monthly charges run on the trade licence and the establishment card until either the licence is renewed with the audit report or the company is fully liquidated.
3. Visa renewals stop — employee and shareholder visas depend on a valid licence, so an expired licence puts every visa holder at risk of overstay and its own fines.
4. Involuntary deregistration — sustained non-compliance can prompt the authority to start forced deregistration, which is slower, costlier and messier than a voluntary liquidation.

Note that the Corporate Tax penalties above sit under Cabinet Decision No. 75 of 2023 as amended. VAT and Excise penalties are governed separately and should never be quoted interchangeably with these figures — different decision, different amounts, different due dates.

Annual audit vs liquidation audit — what is the difference?

They are different documents prepared at different times for different readers. The annual audit report keeps an operating company licensed. The liquidation audit report closes one down. Owners regularly assume the last annual audit will serve for cancellation; it will not.

If you are closing a company, the sequence matters: outstanding annual audits generally have to be brought up to date before a liquidation audit can be signed, because the liquidator is reporting on a position that has to reconcile back to audited numbers. Our UAE liquidation audit report service covers both legs where prior years are outstanding.

How do you catch up on missed audit years?

By reconstructing and auditing each outstanding year in sequence, oldest first. Zones will normally accept a catch-up submission covering several years at once, but they want a signed report for each financial year — not a single combined report spanning the gap.

The cost of catching up rises the longer it is left, mainly because records get harder to retrieve, not because the audit fee changes much. If two or more years are outstanding, deal with it in the current quarter — the monthly penalties keep running while you decide.

What do the UAE audit and Corporate Tax terms mean?