"Do we need an audit?" is one of the first questions a new DIFC company asks and one of the last it gets a straight answer to, because the answer depends on the entity type, its size and whether the DFSA regulates it. This guide sets out the rules as the DIFC Registrar of Companies publishes them, in the order the question is usually asked.
The small private company exemption
The DIFC Companies Law carves out a small private company from the audit requirement. The Registrar's Private Company Non-Financial and Retail Handbook defines it as a private company with 20 or fewer shareholders or annual turnover of USD 5 million or less, subject to the conditions in the Law and the Companies Regulations.
Most holding companies, advisory firms and early stage businesses in the centre fall inside that definition and are not required to have their accounts audited. Three things to check before relying on it:
- Turnover is annual and measured against the financial year, so a company that crosses USD 5 million part way through a year loses the exemption for that year.
- Shareholders means shareholders of record, so a company held by a single holding company is inside the test even if that holding company has many owners.
- Regulated status overrides size. A DFSA-authorised firm with two shareholders and no revenue still needs an auditor.
Who must be audited
Outside the exemption, the following must appoint an auditor and file audited accounts:
| Entity | Audit position |
|---|---|
| Private company outside the small company definition | Audited accounts required |
| Public company (PLC) | Audited accounts required |
| Non-profit incorporated organisation | Audited accounts required |
| DFSA-authorised firm, any size | Audited accounts required, plus DFSA reporting |
| Foundations and LLPs | Depends on the entity's constitution and activity; confirm against the relevant handbook |
| Small private company | Exempt from audit; accounts still prepared |
When accounts are due
For a non-small private company, audited accounts must be filed with the Registrar within seven months of the financial year end. A company with a 31 December year end therefore files by 31 July. Seven months sounds generous until the audit is planned backwards: an auditor engaged in June for a July deadline will not have the time to do the work properly, and the Registrar does not extend the deadline because the auditor was late.
The appointment or cessation of an auditor is its own filing, due within 30 days of the change. Companies that switch auditors frequently miss this one.
Other entity types have their own accounts periods. Confirm the period for yours against the current Registrar handbook rather than assuming the private company rule applies.
Who can act as auditor
A DIFC audit report must be signed by an auditor registered with the DIFC Registrar of Companies. UAE mainland audit licences do not carry across; a firm that audits a company's mainland subsidiary cannot audit the DIFC parent unless it also holds the DIFC registration. For DFSA-authorised firms, the auditor must additionally satisfy the DFSA's registration, independence and quality management requirements, and the DFSA publishes an annual audit monitoring report on the firms it oversees.
What the DFSA adds for regulated firms
A regulated firm's audit is not only a company law exercise. The DFSA Rulebook requires financial statements under IFRS, or US GAAP where permitted, prudential returns on a separate timetable, and an auditor's report that addresses the firm's regulatory capital and client money arrangements as well as the financial statements. The company filing with the Registrar and the regulatory filing with the DFSA are two obligations, not one, and they can fall due at different points. Our guide to the DIFC fund manager licence covers the capital reporting side for asset managers.
Exempt from audit is not exempt from accounts
The exemption removes the auditor. It does not remove the accounting. Every DIFC company must keep accounting records sufficient to show and explain its transactions, prepare financial statements for each financial year, and file a confirmation statement with its annual licence renewal. Separately, every DIFC company registers for UAE corporate tax and files a return with the Federal Tax Authority within nine months of its year end, whether or not it qualifies for Qualifying Free Zone Person treatment. A company that treats "audit exempt" as "accounts optional" discovers the difference at licence renewal, at the bank's next KYC refresh, or when the corporate tax return needs numbers that do not exist. Our DIFC annual compliance calendar sets out how the accounts, the confirmation statement and the tax return fit together across the year.
A working calendar for a 31 December year end
- January to February: close the books, reconcile bank accounts, agree the audit scope with the auditor if one is required.
- March to May: audit fieldwork; corporate tax computation in parallel, because the auditor will want to see it.
- By 31 July: audited accounts filed with the Registrar (non-small private companies).
- By 30 September: corporate tax return and payment to the Federal Tax Authority.
- At licence renewal: confirmation statement, with the accounts position confirmed.
How Atlas can help
Atlas prepares IFRS financial statements for DIFC entities, confirms whether the small company exemption applies, and where an audit is required coordinates the process with a DIFC-registered auditor from engagement through to filing. Accounting and tax work is delivered through the wider Atlas group. Speak with the team about your year end before it arrives.
This article is general information and does not constitute legal, tax or regulatory advice. DIFC and ADGM rules change; confirm the current position with a qualified adviser for your specific case.
Frequently Asked Questions
Does every DIFC company need an audit?
No. A small private company is exempt, subject to conditions. The Registrar's handbook defines a small private company as one with 20 or fewer shareholders or annual turnover of USD 5 million or less. A private company outside that definition, a public company, a non-profit incorporated organisation and any DFSA-authorised firm must appoint an auditor and file audited accounts.
When are DIFC audited accounts due?
For a non-small private company, within seven months of the end of the financial year, so a 31 December year end files by 31 July. The audit needs to be complete well before that, and the appointment or cessation of the auditor is a separate filing due within 30 days of the change. Confirm the period for your entity type against the current Registrar handbook, because other entity types run on their own timelines.
Who can audit a DIFC company?
An auditor registered with the DIFC Registrar of Companies. For a DFSA-authorised firm the auditor must also meet the DFSA's registration, independence and quality management requirements under the DFSA Rulebook. An auditor licensed only on the UAE mainland cannot sign a DIFC audit report unless it also holds the DIFC registration.
Which accounting standards apply in the DIFC?
IFRS in practice for almost every entity. The DFSA Rulebook requires authorised firms to prepare financial statements under IFRS, or US GAAP where permitted. Non-regulated companies are not bound by that rule but IFRS is what auditors, banks and the Registrar expect to see.
Does an audit-exempt company still have to file accounts?
It still has to keep proper accounting records and prepare financial statements, and it files a confirmation statement each year with its licence renewal. What it does not have to do is have those statements audited. Corporate tax registration and the annual corporate tax return with the Federal Tax Authority apply regardless of the DIFC audit position.
What happens if a DIFC company files its accounts late?
The Registrar can impose fines for late filing under the DIFC's corporate actions framework, and a company with outstanding filings will find licence renewal, bank refreshes and any corporate action harder until it is brought current. The practical fix is a calendar that works backwards from the seven month deadline to the audit start date, which for most companies means engaging the auditor within the first quarter of the new year.
Key Takeaways
- A small private company, which the DIFC Registrar's Private Company Handbook defines as one with 20 or fewer shareholders or annual turnover of USD 5 million or less, is exempt from the audit requirement, subject to the conditions in the Companies Law.
- A non-small private company must have its accounts audited and file them with the Registrar within seven months of its financial year end. Public companies, NPIOs and DFSA-regulated firms must appoint an auditor regardless of size.
- The appointment or cessation of an auditor is itself a filing, due within 30 days.
- DFSA-authorised firms carry additional obligations under the DFSA Rulebook: IFRS (or US GAAP where permitted), DFSA-registered auditors and prudential reporting on top of the company filing.
- Exemption from audit is not exemption from accounts. Every DIFC company keeps accounting records, prepares financial statements and files a confirmation statement.