Statutory Audit under Companies Act

Yes. Unlike a tax audit, which is triggered only above specified turnover thresholds under Section 44AB of the Income-tax Act, the Companies Act statutory audit under Section 139/143 applies to every company registered under the Act — Private Limited, Public Limited, One Person Company, Section 8 Company, and Producer Company — regardless of turnover, profit, or even whether the company has commenced business. There is no small-company or low-turnover exemption from the audit requirement itself, though the reporting format (such as CARO applicability) can differ by company size and class.

They are governed by entirely different laws and serve different purposes. The statutory audit under the Companies Act examines whether the financial statements give a true and fair view and comply with applicable Accounting Standards, and the report is filed with the RoC alongside AOC-4. The tax audit under Section 44AB of the Income-tax Act examines whether the business's accounts comply with income-tax provisions, is triggered by turnover/receipt thresholds, and results in Form 3CA/3CB and Form 3CD filed with the Income-tax Department. A company above the tax-audit threshold needs both audits — they are not substitutes for each other, though PNPC often performs both for efficiency where we are engaged for both.

Only a Chartered Accountant holding a valid Certificate of Practice from the Institute of Chartered Accountants of India (ICAI), or a firm where the majority of partners are practising CAs, can be appointed as statutory auditor under Section 141 of the Companies Act. The appointee must not be disqualified under Section 141(3) — which includes being an officer or employee of the company, holding a business relationship with the company beyond what is permitted, being indebted to the company beyond prescribed limits, or providing certain prohibited non-audit services to the company under Section 144.

The first auditor is appointed by the Board of Directors within 30 days of incorporation, holding office until the conclusion of the first AGM. Thereafter, the auditor is appointed by shareholders at the AGM, typically for a term of five consecutive years, subject to conditions under Section 139. The appointment (or reappointment) must be intimated to the Registrar of Companies in Form ADT-1 within 15 days of the AGM at which the appointment was made.

Section 139(2) mandates rotation of the statutory auditor for listed companies and certain classes of unlisted public companies and private companies meeting specified paid-up capital or borrowing thresholds prescribed under the Companies (Audit and Auditors) Rules. Where it applies, an individual auditor cannot be reappointed for more than one term of five consecutive years, and an audit firm cannot be reappointed for more than two terms of five consecutive years each, with a mandatory cooling-off period thereafter. Most small and mid-sized private companies fall below the prescribed thresholds and are not subject to mandatory rotation, but this should be confirmed for your specific company, not assumed.

The Companies (Auditor's Report) Order 2020 (CARO 2020) requires statutory auditors to report on specific matters — fixed asset verification, inventory, loans and guarantees, deposits, cost records, statutory dues, defaults in repayment of loans, utilisation of funds raised through IPO/further issue, fraud reporting, and several other clauses — as an annexure to the main audit report. CARO 2020 applies to most companies but has specific exemptions, including for One Person Companies, small companies (as defined under Section 2(85)), and certain private companies meeting specified paid-up capital, borrowings, and turnover thresholds simultaneously.

Under Section 143(3)(i), the statutory auditor must report on whether the company has adequate internal financial controls with reference to financial statements, and whether such controls are operating effectively. This reporting requirement has an exemption for private companies that meet specific conditions on turnover, borrowings, and are not a subsidiary/holding of a public company, as notified through amendments to the reporting requirements. Where it does apply, IFC reporting requires the auditor to test control design and operating effectiveness formally, not just express a general opinion.

Non-compliance with the audit requirement is a serious default under the Companies Act. The company cannot validly adopt its financial statements at the AGM, cannot file AOC-4 (which requires the auditor's report as an annexure), and accumulates RoC late-filing penalties of ₹100 per day per form with no cap under Section 403. Beyond the direct filing consequence, non-audited or non-filed financial statements over multiple years can trigger director disqualification under Section 164(2) and expose the company to MCA strike-off action under Section 248.

This requires careful handling under Section 141 and Section 144 independence provisions. A statutory auditor is restricted from providing certain 'not permitted' services — including book-keeping and accounting — to the company it audits, to preserve the independence that gives the audit opinion its value. PNPC structures engagements so that where we provide accounting/bookkeeping services to a client, the statutory audit for that entity is either performed by a different independent engagement team within our practice with appropriate safeguards, or we recommend an independent CA firm for the audit — whichever properly preserves independence for your specific situation.

For a mid-sized private company with reasonably organised books, PNPC typically completes the audit — from engagement letter to signed report — in 6 to 8 weeks. This should be planned backward from your AGM date. Under Section 96, subsequent AGMs must generally be held within 6 months of the financial year end (so by 30 September for a 31 March year-end, subject to any extension the RoC may grant); a company's very first AGM has a longer window — up to 9 months from the end of its first financial year. We recommend starting audit planning at least 8-10 weeks before the intended AGM date. First-time audits, or audits of companies with disorganised books or incomplete reconciliations, need a longer runway.

UDIN (Unique Document Identification Number) is an 18-digit unique number generated by the Chartered Accountant on the ICAI's UDIN portal for every audit report, certificate, and specified document signed in their capacity as a practising CA. Mandated by ICAI since 2019, UDIN allows regulators, banks, and other stakeholders to verify the authenticity of a CA-signed document and check it was not forged or issued by an unauthorised person. An audit report without a valid UDIN can be treated as invalid by the authority relying on it.

An unqualified ("clean") opinion means the auditor concludes the financial statements give a true and fair view without exception. A qualified opinion means the auditor found a specific, material issue — a departure from an Accounting Standard, insufficient audit evidence for a particular item, or a scope limitation — that is significant enough to flag, but not pervasive enough to invalidate the entire financial statements. An adverse opinion or disclaimer of opinion are more serious outcomes, used when misstatements or scope limitations are pervasive. A qualification is disclosed in the audit report and can affect loan covenants, investor confidence, and regulatory scrutiny.

Yes, unless the company has formally obtained dormant company status under Section 455 of the Companies Act — which itself requires a specific MCA application (Form MSC-1) and comes with its own conditions and periodic renewal. Absent that formal status, a company with zero transactions during the year still requires a full statutory audit resulting in nil (or near-nil) financial statements, and the auditor's report and CARO annexure (where applicable) must still be issued and filed.

Section 143(12) requires the statutory auditor, if during the audit they have reason to believe that an offence involving fraud has been or is being committed against the company by its officers or employees, to report the matter. Where the amount involved is at or above the threshold prescribed under the Rules, the auditor reports directly to the Central Government via Form ADT-4 within the prescribed timeline. Below that threshold, the matter is reported to the Audit Committee or Board, and disclosed in the Board's Report.

The Companies Act does not automatically disqualify a director's relative from being the statutory auditor purely on the basis of the relationship — the disqualifications under Section 141(3) are specifically about business relationships, employment, indebtedness, and holding of securities, not familial relationship per se. However, appointing a director's close relative as auditor raises independence concerns that sophisticated investors, banks, and regulators will scrutinise closely during due diligence, even where it is technically permitted.

At a minimum: the trial balance and general ledger for the year, bank statements and reconciliations, the fixed asset register, GST and TDS returns filed during the year, details of related party transactions and loans, Board/AGM minutes, and the prior year's signed audited financial statements for comparatives. The full document checklist is more extensive and depends on your business — PNPC provides a tailored document request list at the engagement letter stage based on your company's specific transaction types and complexity.

Under Section 134(5) and the standard audit report format, management (the Board of Directors) is responsible for the preparation and fair presentation of the financial statements, for maintaining adequate accounting records, safeguarding assets, and preventing and detecting fraud. The auditor's responsibility is to express an independent opinion on those financial statements based on the audit evidence obtained — the auditor does not prepare the financial statements and is not responsible for detecting every instance of fraud or error, only for planning and performing the audit to obtain reasonable (not absolute) assurance that the statements are free of material misstatement.

Statutory audit fees are structured based on the complexity and scale of the engagement — transaction volume, number of related party transactions, whether CARO and IFC reporting apply, quality of books provided, number of locations/branches, group structure, and whether this is a first-time or continuing audit. PNPC provides a written scope and fee estimate before the engagement letter is signed — there are no surprise charges once the fee is agreed, except for genuinely out-of-scope work identified and separately agreed during the audit.

The Auditor's Report is prepared and signed by the independent statutory auditor and expresses an opinion on the financial statements. The Director's Report is prepared and signed by the Board of Directors (management) and covers the company's operational performance, state of affairs, dividend recommendation, related party transaction disclosures, and various other statutory disclosures required under Section 134. Both are annexed to the financial statements filed in AOC-4, but they are authored by different parties with different responsibilities and perspectives.

No — a Companies Act statutory audit covers only the Indian company registered under the Act. A UAE entity (Mainland LLC or Free Zone company) is governed by UAE Commercial Companies Law and, where applicable, UAE Corporate Tax audit/assurance requirements, which are entirely separate from the Indian Companies Act framework. Where the two entities have intercompany transactions, both audits need to be aware of and consistently reflect those transactions, including any transfer pricing documentation required under Section 92C of the Indian Income-tax Act.

Indian Accounting Standards (Ind AS), converged with IFRS, are mandatory for specified classes of companies based on net worth and listing status — broadly, listed companies and larger unlisted companies meeting prescribed net worth thresholds, along with their holding, subsidiary, joint venture, and associate companies. Companies not covered by the Ind AS roadmap continue to follow the older Accounting Standards (AS) notified under the Companies (Accounting Standards) Rules. Most small and mid-sized private companies currently follow AS rather than Ind AS, but this changes as the company's net worth grows or if it becomes part of a group where a holding/subsidiary company is Ind AS-applicable.

Generally, this should be approached carefully. While not always an absolute Section 141/144 disqualification depending on the specific facts, valuation work for a company by its own statutory auditor can raise independence and objectivity concerns, particularly where the valuation feeds directly into related-party or FEMA pricing-guideline compliance that the same auditor will later need to independently assess. PNPC typically recommends a valuation be performed by a different qualified professional — a SEBI-registered Merchant Banker or a separate CA — from the entity's statutory auditor, to keep both engagements independent and defensible in due diligence.

A limited review is a lower-assurance engagement — typically used for quarterly financial results of listed companies under SEBI's Listing Obligations and Disclosure Requirements (LODR) — involving inquiry and analytical procedures rather than the full substantive testing of a statutory audit. It provides negative assurance ("nothing has come to our attention...") rather than the positive opinion ("gives a true and fair view") of a full audit. Most private companies do not require limited reviews unless they have listed debt securities or other specific regulatory triggers.

Prior period errors are addressed under the applicable Accounting Standard (AS-5 or Ind AS 8, as applicable) — material prior period errors are generally corrected by restating the comparative figures presented, with appropriate disclosure of the nature and amount of the correction, rather than being run through the current year's profit and loss as an ordinary item. The current year's auditor will assess the materiality of the error and the adequacy of its correction and disclosure as part of forming the current year's opinion.

Not additional statutory requirements beyond the standard Companies Act audit, but in practice, VC-funded companies typically have more related party transactions (with the founders, ESOP trusts, or affiliated entities), more complex share capital structures (CCPS, multiple funding rounds), and investor-nominee directors who scrutinise the financial statements closely — all of which naturally increase the audit's substantive testing focus in those specific areas, even though the underlying legal framework is the same as for any other company.

If the statutory auditor resigns before completing their term, the outgoing auditor must file Form ADT-3 with the RoC within 30 days, stating the reasons for resignation. The Board must then fill the casual vacancy — for a reason other than disqualification, the Board can appoint a new auditor within 30 days, subject to approval by shareholders within 3 months at a general meeting; if the vacancy is due to disqualification, only the shareholders in general meeting can fill it, within 3 months.

Yes, in a modified sense. A company applying for voluntary strike-off under Section 248(2) via Form STK-2 must submit a statement of accounts reflecting assets and liabilities, made up to a date not more than 30 days before the date of application, and this statement must be certified by a Chartered Accountant. While this is not necessarily the full annual statutory audit process, it requires a CA-certified financial position, and any outstanding regular statutory audits for prior years generally need to be current and filed before a clean strike-off application can proceed.

Every PNPC statutory audit follows documented audit planning with risk assessment specific to the client's business, substantive testing sized to actual materiality rather than a fixed template percentage, formal working papers supporting every conclusion in the report, and a partner-level review before any report is signed. We generate UDIN for every signed report on the ICAI portal, maintaining the traceability and accountability the profession requires. We treat the audit as a genuine independent examination — not a formality performed to unlock the AOC-4 filing.

Yes. For companies with operations across multiple states — common for GST-registered businesses with multiple state registrations, warehouses, or branch offices — PNPC coordinates audit fieldwork across locations, either through our own teams across Chennai, Bangalore, and Hyderabad or through appropriately supervised local verification where a branch does not have a dedicated PNPC office nearby. Branch-level verification is consolidated into a single company-wide audit opinion.

Materiality is the threshold above which a misstatement, individually or in aggregate, could reasonably be expected to influence the economic decisions of users relying on the financial statements. Auditors set a materiality benchmark at the planning stage — commonly a percentage of revenue, total assets, or profit before tax, adjusted for qualitative factors specific to the business — and use it to determine sample sizes, the significance of identified misstatements, and which items warrant more intensive testing.

The auditor's role is to form an independent opinion, not to simply accept management's preferred accounting treatment. Where PNPC and a client's management genuinely disagree on the correct treatment under applicable Accounting Standards, we first work through the technical position with supporting documentation and, where relevant, cite the specific Standard provision. If disagreement persists on a material item, the audit report will be appropriately qualified to reflect it — we do not sign an unqualified opinion on a treatment we believe is not compliant, regardless of client preference.

Yes, with the additional regulatory layer that applies to RBI-regulated entities such as NBFCs — including RBI-specific reporting requirements, prudential norm compliance verification (capital adequacy, asset classification, provisioning), and any RBI-mandated auditor eligibility criteria that go beyond the standard Companies Act requirements. NBFC audits require the auditor to be familiar with RBI Master Directions in addition to the Companies Act framework.

We recommend engaging your statutory auditor — whether PNPC or otherwise — at the start of the financial year, or at minimum 8-10 weeks before your intended AGM date, particularly for a first-time audit or a company with any degree of transactional complexity. Early engagement allows for planning-stage risk assessment, interim testing during the year rather than compressing everything into a post-year-end sprint, and materially reduces the chance of audit delays affecting your AGM and AOC-4 filing deadlines.