By Manu Rao | Updated March 2026
What Is a Statutory Audit?
A statutory audit is a legally required examination of a company's financial statements and accounting records by an independent Chartered Accountant (CA) or a firm of CAs. Every company registered in India — whether owned by Indian residents, NRIs, or foreigners — must undergo a statutory audit every financial year. There are no exceptions based on company size or turnover for Companies Act compliance.
The auditor checks whether the company's books reflect a true and fair view of its financial position. The resulting audit report accompanies the financial statements placed before shareholders at the Annual General Meeting.
Legal Framework
The statutory audit regime is governed by multiple provisions:
- Section 139 — Appointment of auditors (first auditor within 30 days of incorporation, subsequent auditors at the AGM)
- Section 141 — Qualifications and disqualifications of auditors
- Section 143 — Powers and duties of auditors, including the duty to report fraud
- Section 144 — Services the auditor is prohibited from providing (management consulting, actuarial services, etc.)
- Section 147 — Penalties for non-compliance
- CARO 2020 — Companies (Auditor's Report) Order 2020 prescribes additional reporting on 21 specific matters
The auditor must be a member of the Institute of Chartered Accountants of India (ICAI) holding a Certificate of Practice. Foreign accounting firms cannot directly audit Indian companies.
Standards on Auditing (SAs)
Indian auditors follow Standards on Auditing issued by ICAI, which are largely aligned with International Standards on Auditing (ISAs). The 2023 revision to SA 600 now governs group audits — relevant when a foreign parent has an Indian subsidiary.
Why It Matters for Foreign-Owned Companies
Foreign entrepreneurs sometimes assume their Indian company can follow the accounting norms of their home country. It cannot. Here is what foreign promoters need to know:
- Indian GAAP or Ind AS applies — Companies must prepare accounts under Indian Accounting Standards. A UK parent company using IFRS will find Ind AS similar but not identical.
- Auditor must be Indian — Only ICAI members can perform the statutory audit. Your home-country auditor cannot sign off on Indian company accounts.
- Related party scrutiny — When the Indian company transacts with a foreign parent or sister concern, the auditor pays close attention. Transfer pricing documentation must be in order.
- Foreign currency transactions — Capital inflows from abroad, repatriation of profits, and foreign currency loans all require proper accounting treatment under AS 11 / Ind AS 21.
- FEMA compliance reporting — The auditor may include observations on whether the company has complied with RBI regulations on foreign investment, annual reporting on foreign liabilities and assets (FLA return), and ECB filings.
The Statutory Audit Process
- Appointment — The first auditor is appointed by the Board within 30 days of incorporation. Subsequent auditors are appointed at the AGM for a 5-year term (individual) or 10-year term (audit firm). Section 139(2) imposes rotation requirements for listed and large companies.
- Planning — The auditor assesses risk, understands the business, and plans audit procedures. For foreign-owned companies, the auditor specifically evaluates FEMA compliance and cross-border transactions.
- Fieldwork — The audit team examines vouchers, bank statements, ledgers, invoices, contracts, board resolutions, and statutory registers. They verify inventory, confirm receivables, and test internal controls.
- Management Representations — The auditor obtains written representations from management on matters that cannot be independently verified.
- Reporting — The auditor issues an audit report containing an opinion — unqualified (clean), qualified, adverse, or disclaimer. The report is addressed to shareholders.
- Filing — The audited financials are filed with the MCA via AOC-4 within 30 days of the AGM.
Deadlines
| Item | Deadline |
|---|---|
| First auditor appointment | Within 30 days of incorporation |
| Ratification/appointment at AGM | At each AGM (by September 30 for March FY companies) |
| Completion of audit | Before the AGM — typically by August |
| Filing AOC-4 with audited accounts | Within 30 days of AGM |
| Tax audit (if applicable, Sec 44AB) | September 30 of the assessment year |
Penalties for Non-Compliance
Section 147 sets out the penalty structure:
- Company — Fine of INR 25,000 to INR 5,00,000 if it does not comply with audit provisions
- Officers in default — Imprisonment up to 1 year and/or fine of INR 10,000 to INR 1,00,000
- Auditor contravention — Fine of INR 25,000 to INR 5,00,000. Repeated default can lead to refund of remuneration and debarment.
Beyond MCA penalties, the Income Tax Department can also impose penalties if the company fails to get its tax audit done under Section 44AB of the Income Tax Act — a penalty of 0.5% of turnover or INR 1,50,000, whichever is lower.
Common Mistakes
- Delaying auditor appointment — Some companies operate for months without an auditor. The first auditor must be appointed within 30 days of incorporation.
- Using the same auditor indefinitely — Rotation rules under Section 139(2) apply to certain classes of companies. Even where rotation is not mandatory, changing auditors every few years is good practice.
- Not providing FEMA documents — Foreign-owned companies must provide FC-GPR filings, FLA returns, and RBI approvals to the auditor. Missing documents lead to qualifications in the audit report.
- Confusing statutory audit with tax audit — The statutory audit is under the Companies Act. The tax audit under Section 44AB of the Income Tax Act is a separate requirement with its own threshold (turnover above INR 1 crore for business, INR 50 lakhs for profession).
- Late appointment of auditor at AGM — If the AGM itself is delayed, the auditor appointment also gets delayed, creating a cascading compliance failure.
Practical Example
A US citizen registers a Private Limited Company in Bangalore in June 2025. The board appoints a local CA firm as the first auditor by July 15 (within 30 days). The company's first financial year runs from June 2025 to March 2026. By July 2026, the auditor completes fieldwork — examining bank statements from the Indian bank account, verifying share capital inflow from the US (confirmed against the FC-GPR filed with RBI), and checking GST returns. The auditor issues an unqualified opinion. At the AGM held on August 20, 2026, the shareholders adopt the accounts and reappoint the auditor for a 5-year term. AOC-4 is filed by September 19, 2026.
Connected Obligations
- AOC-4 Filing — Audited financials are filed on this form
- AGM — Audit report is presented here
- Income Tax Return — Filed using audited financials
- Transfer Pricing — Auditor reviews related party transactions
Need a qualified auditor for your foreign-owned Indian company? Beacon Filing connects you with ICAI-registered CAs experienced in cross-border compliance.