Statutory Audit: Choosing an Auditor & Timelines

Why Statutory Audit Matters for Foreign Subsidiaries

Every company incorporated in India -- whether a wholly owned subsidiary, joint venture, or private limited company with foreign shareholding -- must undergo an annual statutory audit under the Companies Act, 2013. There are no exemptions based on size, revenue, or foreign ownership. Even a dormant subsidiary with zero revenue must appoint an auditor and file audited financial statements.

For foreign parent companies, the Indian statutory audit serves multiple purposes beyond mere compliance. It provides the numbers that flow into consolidated group reporting. It validates transfer pricing documentation. It identifies compliance gaps before regulators do. And increasingly in 2025-2026, the audit trail connects directly to automated enforcement systems across the MCA, Income Tax, GST, and banking platforms.

Getting the auditor choice right and understanding the timeline is not optional -- it is a strategic decision that affects the quality of your India compliance for the next five years.

Auditor Qualifications: Who Can Audit Your Indian Subsidiary

Mandatory Qualifications

Only a Chartered Accountant (CA) holding a valid Certificate of Practice (COP) from the Institute of Chartered Accountants of India (ICAI) can serve as a statutory auditor. This is non-negotiable under Section 141 of the Companies Act, 2013. Specifically:

• Individual auditor: Must be a practicing CA with valid ICAI membership and COP
• Audit firm: Must be a firm registered with ICAI where the majority of partners are practicing CAs
• LLP firm: An LLP of CAs registered with ICAI is eligible

Foreign audit firms (Big 4 global networks like Deloitte, PwC, EY, KPMG) cannot directly audit an Indian company. Their Indian affiliate firms -- which are separately registered with ICAI -- perform the audit. This distinction matters when coordinating group audits.

Disqualifications (Section 141)

The following persons cannot be appointed as auditor:

• A body corporate (except LLPs of CAs)
• An officer or employee of the company
• A person who is a partner or employee of an officer/employee of the company
• A person who holds securities of the company with face value exceeding INR 1 lakh
• A person indebted to the company for more than INR 5 lakh
• A person who has given a guarantee or security for the company's indebtedness exceeding INR 1 lakh
• A person or firm having a business relationship with the company
• A relative of any director or key managerial personnel of the company

How to Choose the Right Auditor for a Foreign Subsidiary

Selection Criteria That Matter

For foreign-owned Indian subsidiaries, the auditor selection should weigh these factors:

1. IFRS/Ind AS Capability: If the parent company reports under IFRS, the Indian auditor must be proficient in Ind AS (Indian Accounting Standards converged with IFRS) to ensure seamless consolidation
2. Transfer Pricing Experience: The auditor will sign off on Form 3CEB (transfer pricing report) if applicable. Choose a firm with dedicated TP capability rather than outsourcing this to another firm
3. Industry Expertise: A CA firm specializing in manufacturing audits will catch inventory valuation issues that a generalist firm might miss. Similarly, IT companies need auditors familiar with revenue recognition under Ind AS 115
4. Group Audit Coordination: The Indian auditor must work with the group auditor under SA 600 (Using the Work of Another Auditor). Ensure they have experience responding to group audit instructions and questionnaires
5. FEMA Compliance Awareness: Foreign subsidiaries have unique FEMA reporting obligations (FC-GPR, FLA Return, Form FC-TRS). The auditor should flag missed filings during the audit process
6. Firm Size and Bandwidth: Firms with 3-5 partners and 20-50 staff often provide better partner attention than the largest firms, while maintaining sufficient resources for quality audit work

Fee Benchmarks (2025-2026)

Note: These fees cover the statutory audit. Tax audit under Section 44AB and internal audit are separate engagements, often with additional fees.

Appointment Process: Step-by-Step Timeline

First Auditor (New Company)

For a newly incorporated subsidiary, the first auditor must be appointed by the Board of Directors within 30 days of the date of incorporation. This auditor holds office until the conclusion of the first Annual General Meeting (AGM).

If the Board fails to appoint within 30 days, the members (shareholders) must convene an Extraordinary General Meeting (EGM) within 90 days of incorporation to appoint the first auditor. For foreign subsidiaries, this means the parent company's nominee directors must act quickly post-incorporation.

Subsequent Auditors

The appointment process for ongoing auditors follows this timeline:

1. Board Meeting: The Board recommends an auditor to the shareholders, typically 2-3 months before the AGM
2. Auditor's Written Consent: The proposed auditor must provide written consent in Form ADT-1 confirming eligibility and willingness to accept
3. AGM Resolution: Shareholders appoint the auditor at the AGM by ordinary resolution
4. Form ADT-1 Filing: The company must file Form ADT-1 with the Registrar of Companies (ROC) within 15 days of the AGM
5. Tenure: The auditor holds office from the conclusion of one AGM to the conclusion of the next (or up to 5 consecutive AGMs)

Mandatory Rotation Rules

Certain companies must rotate their auditors to ensure independence. The rotation rules under Section 139(2) apply to:

• All listed companies
• Unlisted public companies with paid-up share capital of INR 10 crore or more
• Private companies with paid-up share capital of INR 50 crore or more
• All companies with public borrowings from banks/financial institutions of INR 50 crore or more

Most foreign subsidiaries structured as private limited companies with paid-up capital below INR 50 crore are exempt from mandatory rotation. However, if the subsidiary raises its capital or takes significant bank borrowings, rotation requirements may trigger mid-tenure.

Audit Timeline: Critical Deadlines

The statutory audit sits within a fixed annual compliance calendar. Missing any deadline creates a cascading effect on all subsequent filings.

Special Consideration: Aligning Indian and Parent FY

If the parent company's financial year differs from India's April-March cycle, the Indian subsidiary must still follow the Indian financial year. However, for IFSC (International Financial Services Centre) private companies that are subsidiaries of foreign companies, the financial year can match the parent's fiscal year without Tribunal approval -- a useful exception for GIFT City IFSC entities.

Auditor Removal and Casual Vacancies

Removal Before Term Expiry

Removing an auditor before their term expires requires:

1. Special resolution at a general meeting
2. Prior approval of the Central Government (MCA) before passing the resolution
3. The auditor must be given a reasonable opportunity to be heard

This process is intentionally difficult to prevent management from removing auditors who raise uncomfortable findings.

Casual Vacancy

• Due to resignation: Must be filled by the Board within 30 days, followed by shareholder approval at an EGM within 3 months of the Board's recommendation
• Due to reasons other than resignation (death, disqualification): Board can fill the vacancy, and the new auditor serves until the next AGM

When an auditor resigns, they must file Form ADT-3 with the ROC within 30 days, stating the reasons for resignation.

Scope of the Statutory Audit: What the Auditor Examines

Financial Statement Audit

The statutory auditor examines the company's Balance Sheet, Statement of Profit and Loss, Cash Flow Statement, and Statement of Changes in Equity along with all notes and schedules. For foreign subsidiaries reporting under Ind AS, the auditor verifies compliance with all applicable Indian Accounting Standards, including fair value measurements, revenue recognition under Ind AS 115, and lease accounting under Ind AS 116.

The auditor issues an opinion in one of four forms: unqualified (clean), qualified, adverse, or disclaimer. Any opinion other than unqualified creates complications for group consolidation and may trigger additional scrutiny from the parent company's auditors. Foreign parent companies should understand that an Indian statutory audit opinion carries legal weight under Indian law and cannot be overridden by the group auditor's assessment.

CARO Reporting (Section 143(11))

The Companies (Auditor's Report) Order, 2020 (CARO) requires the auditor to report specifically on 21 matters including fixed asset records, inventory valuation, loans to related parties, internal controls, statutory dues compliance, inter-corporate transactions, and whistle-blower complaints. For foreign subsidiaries, the CARO requirements on related party transactions and inter-corporate loans are particularly relevant because intercompany transactions with the foreign parent constitute the bulk of scrutiny.

CARO applies to all companies except one-person companies, small companies (paid-up capital below INR 50 lakh and turnover below INR 2 crore), and certain banking/insurance companies. Most foreign subsidiaries of any meaningful size will fall under CARO reporting requirements.

Fraud Reporting (Section 143(12))

If during the audit the auditor discovers evidence of fraud being committed against the company by its officers or employees, they are required to report the matter to the Central Government (MCA). For frauds below INR 1 crore, reporting is to the Audit Committee or Board. For frauds of INR 1 crore or above, reporting must be made to MCA within 60 days. Failure to report fraud carries penalties of INR 1 lakh to INR 25 lakh on the auditor.

Coordinating with the Group Audit: Practical Considerations

For foreign subsidiaries, the Indian statutory audit does not exist in isolation. The parent company's group auditor will issue Group Audit Instructions (GAI) that the Indian auditor must comply with. Key coordination areas include:

• Reporting Package: The Indian auditor typically prepares a reporting package in the parent company's format (US GAAP adjustments, IFRS reconciliations, or local GAAP mapping) in addition to the Indian statutory audit report
• Management Letter: The group auditor expects a management letter from the Indian auditor highlighting internal control deficiencies, which feeds into the group's assessment of material weaknesses
• Confirmation Letters: Intercompany balance confirmations, related party transaction confirmations, and bank confirmations must be coordinated across time zones and fiscal years
• Timeline Alignment: If the parent's fiscal year ends in December, the Indian auditor must provide interim financial data for the October-December quarter well before the Indian March 31 year-end

Choosing an auditor who has experience working with international group auditors and understands SA 600 (Using the Work of Another Auditor) and ISA 600 (Special Considerations -- Audits of Group Financial Statements) is critical. A mid-tier Indian firm that has never responded to a Big 4 Group Audit Instruction will struggle with the format, timelines, and level of documentation expected.

Tax Audit vs. Statutory Audit: Understanding the Distinction

Foreign companies often confuse the statutory audit (under the Companies Act) with the tax audit (under Section 44AB of the Income Tax Act). These are distinct obligations:

Many foreign subsidiaries appoint the same CA firm for both statutory and tax audits for efficiency, but this is not mandatory. The annual compliance process typically involves coordinating both audits to run concurrently during July-September.

Penalties for Non-Compliance

By 2026, the MCA's enforcement system has become automated. Late filings trigger auto-generated penalty notices, and non-compliant companies are flagged for scrutiny across the MCA, Income Tax, and GST systems simultaneously.

Key Takeaways

• Only ICAI-registered Chartered Accountants with a valid Certificate of Practice can serve as statutory auditors in India -- foreign audit firms cannot directly audit Indian companies
• Appoint the first auditor within 30 days of incorporation and file Form ADT-1 within 15 days of each AGM appointment
• Choose an auditor with Ind AS capability, transfer pricing experience, and FEMA awareness -- these three factors matter more than brand name for foreign subsidiaries
• The audit must be completed before the September 30 AGM deadline, with AOC-4 filed within 30 days and MGT-7 within 60 days of the AGM
• Mandatory auditor rotation (5 years individual, 10 years firm) applies only if the subsidiary's paid-up capital exceeds INR 50 crore or public borrowings exceed INR 50 crore -- most foreign subsidiaries are exempt