Company Statutory Audit in India: Who Needs It and When?

Every company registered in India, whether it earned ₹1 crore or ₹1 lakh in revenue, must get its financial statements audited by an independent Chartered Accountant each year. This is the company statutory audit in India, and it is not optional. The Companies Act, 2013 makes it mandatory for every Private Limited Company, One Person Company, Public Limited Company, Section 8 Company, and Nidhi Company. LLPs face a different threshold: only those with turnover above ₹40 lakh or contribution above ₹25 lakh need one. The penalties for skipping it range from ₹25,000 to ₹5 lakh for the company and up to ₹10 lakh for the auditor. Here is a clear breakdown of who needs a statutory audit, when it is due, how the auditor is appointed, and what happens if you miss the deadline.

What is a Statutory Audit?

A statutory audit is a legally required examination of a company's financial statements, books of accounts, and financial records by an independent, external Chartered Accountant. The purpose is to verify that the company's financial statements present a "true and fair view" of its financial position. It is governed by Section 139 to Section 148 of the Companies Act, 2013 and administered through the Ministry of Corporate Affairs (MCA).

Unlike a management review or internal check, a statutory audit carries legal weight. The auditor's report is filed with the Registrar of Companies (ROC) as part of the company's annual return, and stakeholders ranging from shareholders to lenders to tax authorities rely on it. If the auditor finds irregularities, they are required to report them. If the company's books are fabricated, the auditor faces personal liability. This is not a formality; it is a legal checkpoint that keeps the financial reporting system honest.

Who Needs a Statutory Audit? Entity-Wise Breakdown

One of the most common questions business owners ask is whether their entity actually needs a statutory audit. The answer depends on the type of entity, and for some entity types, on turnover or contribution thresholds. Here is the complete picture.

The critical distinction: if your entity is a "company" under the Companies Act, the audit is mandatory regardless of revenue. Many first-time founders of Private Limited Companies are surprised to learn they need an audit even when revenue is zero in the first year. The Companies Act does not care about your revenue; it cares that your financial statements are verified.

Statutory Audit for LLPs: The Threshold Rule

LLPs operate under a different regime. Unlike companies, an LLP is not automatically subject to statutory audit. Section 34 of the LLP Act, 2008 requires audit only when either of two thresholds is crossed in a financial year.

When Does an LLP Need Statutory Audit?

An LLP must appoint an auditor and complete a statutory audit if its annual turnover exceeds ₹40 lakh or if the total contribution of partners exceeds ₹25 lakh in any financial year. Both thresholds are evaluated independently; crossing either one triggers the audit requirement. An LLP with ₹30 lakh turnover but ₹30 lakh in partner contribution still needs an audit because the contribution threshold is breached.

What Happens If an LLP Crosses the Threshold Mid-Year?

The audit requirement is assessed based on the figures for the entire financial year. If your LLP crosses ₹40 lakh turnover in January but had low revenue earlier, the full-year turnover at March 31 determines whether audit is needed. Practically, if there is any chance of crossing either threshold, appoint an auditor at the start of the year. Doing it retroactively in September is stressful and expensive.

LLPs that do not meet either threshold are not required to have a statutory audit but must still file their annual compliance including Statement of Accounts and Solvency (Form 8) and Annual Return (Form 11).

Statutory Auditor Appointment: Process and Rules

Getting the audit done is one thing. Appointing the auditor correctly is another compliance requirement entirely, and getting it wrong triggers its own set of penalties. The Companies Act lays out a specific process for both first-time and ongoing auditor appointments.

First Auditor Appointment (New Companies)

Within 30 days of incorporation, the Board of Directors must appoint the company's first statutory auditor. This first auditor serves until the conclusion of the first Annual General Meeting (AGM). The appointment is made through a Board Resolution. If the Board fails to appoint within 30 days, the members of the company must appoint an auditor within 90 days at an Extraordinary General Meeting (EGM).

Subsequent Auditor Appointment (At AGM)

After the first auditor's term ends at the first AGM, subsequent auditors are appointed by shareholders at each AGM. The auditor holds office from the conclusion of that AGM until the conclusion of the sixth AGM (a term of approximately 5 years for individuals). Within 15 days of the AGM, the company must file Form ADT-1 with the Registrar of Companies to notify the appointment.

Auditor Qualifications Under Section 141

Not just anyone can audit a company. The statutory auditor must be a Chartered Accountant holding a valid Certificate of Practice (COP) issued by the Institute of Chartered Accountants of India (ICAI). A firm can be appointed if the majority of its partners hold COP. Disqualified persons include: officers or employees of the company, anyone with a business relationship with the company, relatives of directors, and anyone holding securities of the company exceeding a prescribed limit.

Auditor Tenure and Rotation Rules

The Companies Act, 2013 introduced mandatory auditor rotation to prevent the kind of cozy auditor-company relationships that undermine audit independence. If you have had the same auditor since your company was incorporated in 2015, you need to check these rules carefully.

Maximum Tenure

Under Section 139(2), the maximum tenure is structured as follows:

• Individual auditor: Maximum of one term of 5 consecutive years
• Audit firm: Maximum of two consecutive terms of 5 years each (10 years total)
• Cooling-off period: After the maximum tenure, the auditor or firm cannot be reappointed for 5 years

These rotation requirements apply mandatorily to listed companies and prescribed classes of unlisted companies (those meeting specified paid-up capital or borrowing thresholds). For smaller companies, auditor rotation is not mandatory but is considered good governance practice. Companies planning to grow, raise funding, or list on a stock exchange benefit from establishing rotation early.

Changing Your Auditor Mid-Term

If you need to change your auditor before the term ends, the process requires Central Government approval through an application to the NCLT, preceded by a special resolution at a general meeting. The outgoing auditor must be given a chance to be heard. Casual vacancies caused by auditor resignation require Board approval and the new appointee serves until the next AGM.

Statutory Audit vs Tax Audit vs Internal Audit

These three audits serve different purposes, are governed by different laws, and apply to different entities. Confusing them is common, especially for business owners managing compliance for the first time. Here is how they compare.

Many companies end up needing both statutory audit and tax audit. The good news: the same Chartered Accountant can perform both. For companies also requiring internal audit, a separate auditor must be appointed. If your company qualifies for all three, plan your audit calendar to sequence them efficiently, starting with the internal audit, followed by the statutory audit, and wrapping up with the tax audit before the September 30 deadline.

Statutory Audit Report: What It Contains

The statutory audit report is not a pass/fail certificate. It is a structured document that communicates the auditor's findings to shareholders, regulators, and other stakeholders. Understanding what goes into the report helps you prepare better and avoid surprises.

Key Components of the Audit Report

1. Auditor's opinion: The core conclusion: whether the financial statements give a true and fair view
2. Basis for opinion: The evidence and audit standards (Standards on Auditing) the auditor relied on
3. Key audit matters: Areas of significant risk or complexity that the auditor focused on
4. Management's responsibility: Statement that preparation of financial statements is the company's responsibility
5. Auditor's responsibility: Statement clarifying the scope and limitations of the audit
6. Report on other legal requirements: Comments on matters required by the Companies Act (maintenance of books, compliance with accounting standards)
7. CARO report (if applicable): Additional reporting on fixed assets, loans, inventory, and related matters

Types of Audit Opinions

The opinion paragraph is what everyone reads first. It tells you whether your books are clean or whether there are problems. Four possible outcomes exist:

• Unqualified opinion (clean report): Financial statements are accurate and comply with accounting standards. This is what every company wants
• Qualified opinion: Financial statements are mostly accurate, but the auditor found specific matters that deviate from standards. The exceptions are clearly stated
• Adverse opinion: Financial statements contain material misstatements and do not present a true and fair view. This is a serious red flag for investors, lenders, and regulators
• Disclaimer of opinion: The auditor could not obtain enough evidence to form any opinion. This typically happens when the company restricted access to records or when records are severely incomplete

A qualified opinion is not the end of the world; it means you have specific items to fix. An adverse opinion or disclaimer, on the other hand, can trigger scrutiny from the ROC and make future fundraising or loan applications significantly harder.

CARO 2020: Additional Reporting Requirements

For companies above certain thresholds, the statutory auditor must also report under the Companies (Auditor's Report) Order, 2020 (CARO 2020). This is not a separate audit but an additional layer of reporting within the statutory audit. CARO requires the auditor to comment on specific operational and financial matters that the standard audit report may not cover in detail.

CARO Applicability

CARO 2020 applies to all companies except:

• Banking companies, insurance companies, and other specified financial institutions
• Private Limited Companies that satisfy all three conditions: paid-up capital ≤ ₹50 lakh, turnover ≤ ₹10 crore, and total borrowings ≤ ₹25 crore at any point during the year
• Section 8 (not-for-profit) Companies
• One Person Companies

If your Private Limited Company has borrowed ₹30 crore from a bank but has turnover of only ₹5 crore, CARO still applies because the borrowing threshold is breached. The conditions are cumulative: all three must be satisfied for the exemption.

Key CARO Reporting Areas

Under CARO 2020, the auditor must specifically comment on: title deeds of immovable property, physical verification of inventory, loans and advances to related parties, compliance with Sections 185 and 186 (related party loans and investments), utilization of public deposits, maintenance of cost records, statutory dues payments (GST, PF, ESI, TDS), default on loan repayments, use of funds raised through public issue or private placement, and detection of fraud or whistleblower complaints.

Statutory Audit Timeline and Due Dates

Missing audit deadlines triggers penalties and creates a paper trail with the ROC that follows your company for years. Here is the complete timeline for a company with a standard April-March financial year.

Most companies treat August as the effective deadline for completing the statutory audit, giving themselves a buffer before the September 30 AGM deadline. Companies that wait until September to start audio preparation often find themselves paying rush fees to auditors and scrambling for documents. If you have not started your accounting and bookkeeping for the current year, now is the time.

Penalties for Non-Compliance with Statutory Audit

The Companies Act takes a zero-tolerance approach to audit defaults. Section 147 prescribes penalties for both the company and its officers (directors) personally, and separate penalties for auditors who fail in their duties.

Note that penalties for officers mean directors are personally liable. The company pays a fine, and each director in default pays a separate personal fine. For a company with 2 directors that fails to conduct its statutory audit, the total penalty exposure is the company fine plus two individual director fines. This is why compliance health checks matter: the cost of proactive compliance is always lower than the cost of penalties and recovery filings.

How Much Does a Statutory Audit Cost?

Audit fees are not fixed by law. They are determined by the company and auditor based on the complexity and volume of work involved. However, ICAI provides minimum fee guidelines, and market rates fall within predictable ranges based on company size.

The audit fee is separate from the cost of accounting and bookkeeping. If your books are not maintained during the year and need to be reconstructed at audit time, expect the auditor to charge significantly more. Maintaining clean books throughout the year (or outsourcing bookkeeping) keeps audit costs at the lower end of the range.

Documents Required for Statutory Audit

Preparation is half the work done. Having these documents organized before the auditor arrives saves time, reduces audit fees (less time spent chasing documents = lower bills), and results in a cleaner audit report.

Financial Documents

• Balance Sheet and Profit & Loss Account (draft)
• Cash Flow Statement
• Notes to Accounts
• Trial Balance
• Bank statements for all accounts (full financial year)
• Bank reconciliation statements
• Fixed Asset Register with depreciation schedule

Transaction Records

• Sales and purchase invoices (with GST details)
• Expense vouchers and receipts
• Journal entries with supporting documents
• Loan agreements and repayment schedules
• Investment certificates and statements
• Payroll records including PF and ESI contributions

Corporate Documents

• Certificate of Incorporation and Memorandum of Association
• Board meeting minutes for the financial year
• AGM minutes (previous year)
• Register of Members and Directors
• Previous year's audit report and financial statements
• Income Tax returns (previous years)
• GST returns filed during the year
• ROC filings from previous years

Role of the Audit Committee

Larger companies are required to constitute an Audit Committee under Section 177 of the Companies Act, 2013. This committee plays a critical role in the statutory audit process.

Who Needs an Audit Committee?

An Audit Committee is mandatory for all listed companies and specified classes of public companies meeting prescribed thresholds (paid-up capital of ₹10 crore or more, turnover of ₹100 crore or more, or aggregate outstanding loans exceeding ₹50 crore). Most small Private Limited Companies are exempt, but companies planning to raise institutional funding or pursue an IPO should consider forming one early.

What Does the Audit Committee Do?

The Audit Committee oversees the financial reporting process, reviews the auditor's findings, recommends auditor appointment and remuneration to the Board, monitors related party transactions, and evaluates the internal financial controls. During the statutory audit, the auditor reports directly to the Audit Committee, which creates a layer of independence from the management. The committee must have a minimum of 3 directors, with a majority being independent directors, and at least one member with financial expertise.

Recent Changes in Auditing Standards and Rules

Auditing standards in India have evolved significantly over the past few years. Staying current matters because auditors apply the latest standards, and your financial team needs to prepare accordingly.

• CARO 2020 (effective from FY 2020-21): Expanded reporting requirements, including comments on unregistered property title deeds, Benami Property transactions, and borrowings not used for stated purposes
• Standards on Auditing (SA) updates: ICAI has aligned Indian auditing standards with International Standards on Auditing (ISA), including SA 700 (Revised) on forming an audit opinion and SA 701 on communicating Key Audit Matters
• Section 143(3)(i) integration: The statutory auditor now evaluates the adequacy of internal financial controls with reference to financial statements, making internal controls review a standard part of every statutory audit
• Digital audit trails: The Companies (Accounts) Amendment Rules, 2021 require companies using accounting software to maintain an audit trail (edit log) from April 1, 2023. The statutory auditor must now report on whether the company maintained an audit trail throughout the year

The trend is clear: statutory audits are becoming more detailed, more technology-focused, and more demanding of both auditors and the companies being audited. Companies that maintain clean, digitized, and well-organized financial records throughout the year will find the process significantly smoother than those that dump a year's worth of receipts on the auditor's desk in August.

Sole Proprietorship and Partnership Firm Audit Requirements

If you run a sole proprietorship or a partnership firm, you are not subject to statutory audit under the Companies Act. However, you may still need a tax audit under the Income Tax Act.

Tax Audit Under Section 44AB

Section 44AB of the Income Tax Act, 1961 requires a tax audit when:

• Business turnover exceeds ₹1 crore in a financial year
• Professional receipts exceed ₹50 lakh in a financial year
• The higher threshold of ₹10 crore applies if at least 95% of all transactions (receipts and payments) are conducted through banking channels (digital transactions)
• The taxpayer has opted for presumptive taxation under Section 44AD or 44ADA and their income exceeds the prescribed limits

A tax audit examines the taxpayer's books of accounts to verify the correctness of income computation, tax deductions claimed, and compliance with tax provisions. The report is filed in Form 3CA/3CD (for businesses with audited accounts) or Form 3CB/3CD (for others) before the due date of September 30 of the assessment year.

Summary

Statutory audit is a non-negotiable compliance requirement for every company registered under the Companies Act, 2013, from the first financial year, regardless of revenue. LLPs face it once they cross ₹40 lakh turnover or ₹25 lakh contribution. The process involves appointing a qualified Chartered Accountant, providing access to financial records, and presenting the audit report at the AGM before September 30. Getting it wrong attracts penalties up to ₹5 lakh for the company and ₹10 lakh for the auditor. Getting it right requires year-round bookkeeping discipline, timely auditor appointment with ADT-1 filing, and organized documentation. If your company has not yet appointed an auditor for the current year or is behind on financial statement preparation, start now. The cost of compliance is a fraction of the cost of penalties and recovery.