By Sneha Iyer | Updated March 2026
What Is XBRL Filing, Internal Audit & Secretarial Audit?
XBRL filing, internal audit, and secretarial audit are three distinct but interconnected compliance obligations under the Companies Act, 2013 that every foreign-invested Indian company must understand. XBRL (eXtensible Business Reporting Language) filing requires certain companies to submit their financial statements to the Ministry of Corporate Affairs (MCA) in a standardized, machine-readable format using Form AOC-4 XBRL. Internal audit under Section 138 mandates the appointment of an internal auditor to evaluate internal controls, risk management, and governance processes. Secretarial audit under Section 204 requires a practicing Company Secretary to certify that the company has complied with all applicable laws, rules, and regulations.
For foreign investors setting up an Indian subsidiary or joint venture, these three requirements often kick in simultaneously once the company crosses certain size thresholds. A subsidiary of a listed foreign parent, for example, may be required to file in XBRL format, appoint an internal auditor, and undergo a secretarial audit all within its first or second year of operations if it meets the prescribed criteria. Failure to comply attracts penalties ranging from INR 10,000 to INR 5 lakh per violation, plus daily default fines.
Legal Basis
- Section 134 of the Companies Act, 2013 — Requires the Board of Directors to authenticate financial statements before filing. XBRL-filed statements must include signed PDF copies of the Board's Report, Auditor's Report, and financial statements authenticated under this section.
- Section 137 of the Companies Act, 2013 — Mandates filing of financial statements with the Registrar of Companies within 30 days of the AGM. Non-compliance attracts a penalty of INR 10,000 plus INR 100 per day of continuing default on both the company and officers in default.
- Companies (Filing of Documents and Forms in XBRL) Rules, 2015 — Prescribes which companies must file in XBRL format and the applicable MCA taxonomy.
- Section 138 of the Companies Act, 2013 — Requires prescribed classes of companies to appoint an internal auditor. Read with Rule 13 of the Companies (Accounts) Rules, 2014, which sets the applicability thresholds.
- Section 204 of the Companies Act, 2013 — Requires prescribed classes of companies to obtain a secretarial audit report in Form MR-3 from a Company Secretary in Practice. Read with Rule 9 of the Companies (Appointment and Remuneration of Managerial Personnel) Rules, 2014.
- SEBI LODR Regulation 24A — Requires listed companies and their material unlisted subsidiaries to annex a secretarial audit report with the annual report, conducted by a peer-reviewed Company Secretary.
Who Must Comply? Applicability Thresholds
The three requirements apply to different categories of companies based on distinct thresholds. Understanding which obligations apply to your Indian entity is the critical first step.
| Requirement | Listed Companies | Unlisted Public Companies | Private Companies |
|---|---|---|---|
| XBRL Filing (AOC-4 XBRL) | All listed companies + their Indian subsidiaries | Paid-up capital ≥ INR 5 crore OR turnover ≥ INR 100 crore OR Ind-AS applicable | Same thresholds as unlisted public companies |
| Internal Audit (Section 138) | All listed companies | Turnover ≥ INR 200 crore OR paid-up capital ≥ INR 50 crore OR loans ≥ INR 100 crore OR deposits ≥ INR 25 crore | Turnover ≥ INR 200 crore OR loans ≥ INR 100 crore |
| Secretarial Audit (Section 204) | All listed companies | Paid-up capital ≥ INR 50 crore OR turnover ≥ INR 250 crore OR loans ≥ INR 100 crore | Not applicable (unless material subsidiary of a listed entity) |
A foreign-invested private limited company with turnover exceeding INR 200 crore will need both XBRL filing and internal audit. If it is also a material subsidiary of a listed parent (income or net worth exceeding 10% of the listed entity's consolidated figures), it additionally requires secretarial audit under SEBI LODR Regulation 24A.
XBRL Filing: Which Companies and How
XBRL filing through Form AOC-4 XBRL is mandatory for:
- All companies listed on any Indian stock exchange (NSE, BSE) and their Indian subsidiaries
- Companies with paid-up capital of INR 5 crore or more
- Companies with turnover of INR 100 crore or more
- Companies required to prepare financial statements under Indian Accounting Standards (Ind-AS)
The filing deadline is 30 days from the date of the AGM. If the AGM is not held, the filing must be completed within 30 days from the AGM's due date.
XBRL Filing Process
- Determine the applicable taxonomy: Companies reporting under Ind-AS use Annexure-II A taxonomy; companies under older Accounting Standards use Annexure-II taxonomy
- Tag financial data: Use MCA-approved XBRL software to map each financial line item to the correct taxonomy element. Include metadata such as unit of measurement, reporting period, and scale
- Validate the instance document: Run the tagged file through MCA's XBRL Validation Tool to check for errors
- Attach signed PDFs: From July 14, 2025, companies must attach signed PDF copies of the financial statements, Board's Report, and Auditor's Report alongside the XBRL file
- File on MCA portal: Submit eForm AOC-4 XBRL with a Digital Signature Certificate (DSC) of the director and practicing professional
Internal Audit: Scope and Reporting
The internal auditor can be a Chartered Accountant, a Cost Accountant, or any other professional as decided by the Board. The auditor may be an employee or an external appointee. The scope of internal audit is determined by the Board of Directors in consultation with the Audit Committee and typically covers:
- Evaluation of internal financial controls and risk management systems
- Verification of transactions for propriety and compliance with policies
- Assessment of operating efficiency and effectiveness
- Review of compliance with applicable laws and regulations
Companies crossing the prescribed thresholds must appoint an internal auditor within 6 months from the start of the financial year in which the threshold is crossed. Public companies must file Form MGT-14 with the Registrar of Companies within 30 days of the Board resolution appointing the internal auditor.
Secretarial Audit: Form MR-3 and Qualifications
The secretarial audit can only be conducted by a Company Secretary in Practice (PCS) holding a Certificate of Practice from the Institute of Company Secretaries of India (ICSI). For listed companies and their material unlisted subsidiaries, the PCS must additionally hold a valid Peer Review Certificate from ICSI, as mandated by SEBI LODR Regulation 24A.
The secretarial audit report is issued in Form MR-3 and must be annexed to the Board's Report filed with the ROC. The report covers compliance with:
- The Companies Act, 2013 and its rules
- FEMA regulations and RBI directions (critical for foreign-invested companies)
- SEBI regulations (if listed)
- Industry-specific laws applicable to the company
- Secretarial Standards issued by ICSI
Comparison: XBRL Filing vs Internal Audit vs Secretarial Audit
| Parameter | XBRL Filing | Internal Audit | Secretarial Audit |
|---|---|---|---|
| Governing Section | Section 137 read with XBRL Rules 2015 | Section 138 read with Rule 13 | Section 204 read with Rule 9 |
| Who Performs It | Company (using XBRL software/consultant) | CA, Cost Accountant, or Board-approved professional | Company Secretary in Practice (PCS) only |
| Output | eForm AOC-4 XBRL (tagged instance document + signed PDFs) | Internal audit report to Board/Audit Committee | Form MR-3 (annexed to Board's Report) |
| Deadline | 30 days from AGM | As determined by Board (typically quarterly reports) | Before Board's Report is finalized (pre-AGM) |
| Penalty (Company) | INR 10,000 + INR 100/day of default | No specific penalty under Section 138; general penalties under Section 450 (INR 10,000) | INR 1 lakh to INR 5 lakh |
| Penalty (Officers) | INR 10,000 + INR 100/day of default | General penalties under Section 450 | INR 1 lakh to INR 5 lakh |
| Frequency | Annual (with financial statements) | Continuous/periodic (quarterly or as Board decides) | Annual |
How This Affects Foreign Investors in India
Foreign-invested Indian companies face specific challenges with these three requirements:
XBRL Filing Challenges
Indian subsidiaries of listed foreign parents are automatically subject to XBRL filing requirements. The MCA taxonomy is India-specific and does not map directly to IFRS or US GAAP taxonomies. Foreign parent companies accustomed to SEC XBRL or ESEF filings cannot reuse those tagged files for Indian MCA filings. A separate Indian XBRL tagging exercise is required, typically costing INR 50,000 to INR 2 lakh per filing depending on the complexity of the financial statements.
Internal Audit for Foreign Subsidiaries
Many foreign-invested companies trigger the internal audit threshold through the loans/borrowings criterion (INR 100 crore from banks or public financial institutions). External Commercial Borrowings (ECBs) from foreign parent companies may count toward this threshold if routed through authorized dealer banks. The internal audit scope should specifically include FEMA reporting compliance and transfer pricing documentation review, as these are high-risk areas for foreign-invested entities.
Secretarial Audit for Foreign-Invested Companies
The secretarial audit under Form MR-3 is particularly valuable for foreign-invested companies because it covers FEMA compliance, which is the single largest area of regulatory risk. The PCS will verify that all FC-GPR filings, downstream investment reporting, and FLA returns have been filed correctly and on time. Any qualifications or adverse observations in the MR-3 report are red flags that must be addressed before the next funding round or exit.
Common Mistakes
- Using the wrong XBRL taxonomy for Ind-AS vs old AS. Companies that have transitioned to Ind-AS but continue filing under the old Accounting Standards taxonomy will have their filings rejected by MCA's validation tool, causing delays and additional fees for re-tagging.
- Treating internal audit as a statutory audit substitute. The internal audit under Section 138 is separate from the statutory audit under Section 143. Both are required. The internal auditor reports to the Board and Audit Committee, while the statutory auditor reports to the shareholders. Appointing the same firm for both roles creates independence conflicts.
- Missing the 6-month appointment window for internal auditor. Companies that cross the threshold during a financial year must appoint an internal auditor within 6 months from the start of the next financial year. Missing this window exposes the Board to penalties and, for listed companies, triggers stock exchange compliance flags.
- Assuming secretarial audit is only for listed companies. Unlisted public companies meeting any one of the three thresholds (paid-up capital INR 50 crore, turnover INR 250 crore, or loans INR 100 crore) must also obtain a secretarial audit. Many foreign-invested unlisted companies miss this because they associate Form MR-3 only with listed entities.
- Not addressing MR-3 qualifications before fundraising. Qualified or adverse observations in the secretarial audit report are visible in the company's annual return filed with the ROC. Prospective investors and acquirers routinely review these during due diligence. A qualified MR-3 report can delay or derail a funding round.
Practical Example
NovaTech Japan KK sets up NovaTech India Pvt Ltd, a wholly-owned subsidiary, in 2024. In its second year of operations (FY 2025-26), NovaTech India reports the following:
- Paid-up capital: INR 8 crore (initial FDI of USD 960,000)
- Turnover: INR 210 crore (from IT services contracts with the parent)
- Outstanding ECB from NovaTech Japan: INR 120 crore (routed through an authorized dealer bank)
XBRL filing: Required because paid-up capital exceeds INR 5 crore and turnover exceeds INR 100 crore. NovaTech India must file AOC-4 XBRL within 30 days of its AGM using the Ind-AS taxonomy. Cost of XBRL tagging: approximately INR 1.5 lakh.
Internal audit: Required because turnover exceeds INR 200 crore AND outstanding borrowings exceed INR 100 crore. NovaTech India must appoint an internal auditor within 6 months from April 1, 2026 (start of FY 2026-27). The Board appoints a CA firm at an annual fee of INR 8 lakh, with quarterly audit reports covering transfer pricing documentation, FEMA compliance, and internal financial controls.
Secretarial audit: Not required under Section 204 (NovaTech India is a private company, and the thresholds apply only to public companies). However, if NovaTech Japan is listed on the Tokyo Stock Exchange and NovaTech India's income exceeds 10% of the consolidated income, SEBI LODR Regulation 24A may require a secretarial audit as a material subsidiary.
Total annual compliance cost for all three: approximately INR 12 to 15 lakh, including XBRL filing fees, internal auditor fees, and secretarial auditor fees (if applicable).
Key Takeaways
- XBRL filing is mandatory for listed companies, their Indian subsidiaries, and companies with paid-up capital of INR 5 crore or more or turnover of INR 100 crore or more, with a filing deadline of 30 days from the AGM
- Internal audit under Section 138 applies to all listed companies and private companies with turnover exceeding INR 200 crore or loans exceeding INR 100 crore, with appointment required within 6 months of crossing the threshold
- Secretarial audit under Section 204 applies to listed companies and public companies with paid-up capital of INR 50 crore or more, turnover of INR 250 crore or more, or loans of INR 100 crore or more, with the report issued in Form MR-3
- From July 2025, XBRL filings must include signed PDF copies of financial statements alongside the tagged instance document
- Penalties range from INR 10,000 plus INR 100/day (XBRL/Section 137) to INR 1-5 lakh (secretarial audit/Section 204)
- Foreign-invested companies should specifically ensure internal audit scope covers FEMA reporting and transfer pricing, and should treat MR-3 qualifications as urgent action items before fundraising
Need help with XBRL filing, internal audit coordination, or secretarial audit compliance for your Indian subsidiary? Beacon Filing provides end-to-end accounting, bookkeeping, and audit coordination services for foreign-invested companies in India.