TRW & Co · Accounting, audit and bookkeeping
Documents Required for an Audit in the UAE and How to Stay Audit-Ready
The documents required for audit UAE companies must produce cover constitutional records, ledgers, bank, sales, purchases, payroll, fixed assets, inventory, tax filings and related-party records. This guide gives a full checklist, a monthly close routine that keeps the business audit-ready, the red flags auditors probe and the retention periods set by company and tax law.
Key pointThe longest retention period usually comes from corporate tax, not company law: records supporting a return must be kept for seven years after the tax period ends, so a five-year destruction policy is no longer safe.
At a glance
Eight document groups
Constitutional, ledgers, banking, sales, purchases, payroll, fixed assets and inventory, and tax, plus related-party records that auditors and tax authorities both scrutinise.
Five years minimum
The Commercial Companies Law requires accounting records to be kept at the head office for at least five years from the financial year-end.
Seven years for tax
Article 56 of the Corporate Tax Law requires records supporting a return to be kept for seven years after the end of the tax period.
Monthly close pays off
Monthly bank, receivables, payroll, intercompany and VAT reconciliations turn the year-end audit into a review rather than a reconstruction exercise.
Red flags drive testing
Year-end manual journals, unexplained related-party balances, uncounted inventory and unreconciled VAT returns trigger extra audit work and possible qualifications.
Swipe or scroll →
Documents required for audit UAE: the short answer
The documents required for audit UAE companies must produce fall into eight groups: constitutional and licensing documents, the general ledger and trial balance, bank records, sales and receivables, purchases and payables, payroll, fixed assets and inventory, and tax filings, together with records of related-party transactions. The auditor tests the draft financial statements against these records, so the faster and more complete the pack, the shorter and cheaper the audit.
The deeper point is that an audit file is also a legal record. The Commercial Companies Law requires companies to keep accounting records at their head office for at least five years, and the Corporate Tax Law requires records supporting a tax return to be kept for seven years after the end of the tax period. A company that cannot produce documents for the auditor will probably not be able to produce them for the Federal Tax Authority, a court or a buyer either.
This guide sets out a full document checklist, a monthly close routine that keeps a business audit-ready, the red flags auditors probe, and the retention periods that apply. The bookkeeping and audit work itself is delivered with our group company A&A Consultancy; TRW & Co, as a law firm, covers the legal and regulatory side.
Why the law cares about your audit documents
Four sets of rules drive what must be kept and produced.
- Company law. The Commercial Companies Law (Federal Decree-Law No. 32 of 2021, as amended, including by Federal Decree-Law No. 20 of 2025 in force since late 2025) requires every company to keep accounting records that show its financial position accurately, kept at its head office for at least five years from the end of the financial year. LLCs and joint stock companies must be audited annually, and the auditor may review all registers and documents and require explanations from management.
- Corporate tax. Article 56 of the Corporate Tax Law requires a taxable person to keep all records and documents supporting its tax return for seven years after the end of the tax period to which they relate. Ministerial Decision No. 84 of 2025 requires audited financial statements from standalone taxpayers with revenue above AED 50 million, qualifying free zone persons and tax groups.
- VAT and tax procedures. VAT-registered businesses must keep invoices, credit notes, import and export records and other tax records for the periods set by the tax procedures rules, generally at least five years and longer for certain real estate records.
- Free zone and regulator rules. Free zones set their own audit filing rules. Some, such as DMCC, require the auditor to confirm bank balances directly with banks and to validate share capital against the company's articles. Regulated firms face additional record-keeping rules from their supervisor, and AML-regulated businesses must keep customer due diligence and transaction records.
Our guide to bookkeeping requirements in the UAE covers the ongoing record-keeping duties in more depth, and our note on statutory audit requirements explains which entities must be audited.
The complete documents required for audit UAE checklist
Use the table as the backbone of the audit pack. The auditor will issue its own request list, but most items below will appear on it.
| Category | Typical documents | What the auditor checks |
|---|---|---|
| Constitutional and licensing | Trade licence, memorandum and articles, share register, beneficial owner register, board and shareholder resolutions, minutes, powers of attorney | Legal existence, share capital, ownership, authorised activities, approval of significant transactions |
| Ledgers | General ledger, trial balance, chart of accounts, journal listing, prior-year audited accounts | Completeness, unusual journals, opening balances agree to last year |
| Banking | Statements for every account, year-end reconciliations, loan and facility agreements, guarantees, bank confirmation authority | Cash existence, undisclosed accounts, covenants, security |
| Sales and receivables | Sales invoices, contracts, credit notes, customer ledger, ageing, delivery evidence | Revenue recognition and cut-off, recoverability, credit losses |
| Purchases and payables | Supplier invoices, purchase orders, goods received notes, supplier statements, accruals | Completeness of liabilities, cut-off, VAT recovery |
| Payroll | Employment contracts, payroll registers, Wage Protection System records, end-of-service gratuity calculation, leave balances | Existence of employees, accuracy of pay, gratuity provision |
| Fixed assets and inventory | Fixed asset register, purchase invoices, depreciation schedule, stock count sheets, inventory valuation | Existence, ownership, impairment, valuation |
| Tax | VAT returns and reconciliations, corporate tax registration and returns, transfer pricing files, FTA correspondence | Tax balances, exposure, consistency with the accounts |
| Related parties | List of related parties, intercompany agreements, balance confirmations, director and shareholder loan accounts | Disclosure, arm's length terms, recoverability |
Constitutional and ownership records
Auditors increasingly check that ownership in the share register, the beneficial owner register and the trade licence all agree, because mismatches can indicate unrecorded share transfers or nominee arrangements. UAE companies must maintain beneficial owner registers and file them with the registrar. See our page on beneficial ownership and registers.
Payroll and employment
Mainland employers pay salaries through the Wage Protection System, which gives auditors a clean external record to compare with the payroll register. The end-of-service gratuity provision is a frequent audit adjustment: it should be calculated employee by employee using each contract's basic salary and service period under the labour law. Our team advising on wages and payroll can review contract terms where the calculation is disputed.
Tax filings
Auditors reconcile VAT returns to recorded revenue and expenses, and check corporate tax balances and disclosures. For groups, the related-party documentation behind transfer pricing matters both for the audit and for the tax return. Keep copies of all FTA submissions and correspondence in the audit pack.
A monthly close routine that keeps you audit-ready
Most audit delays are caused by a year-end catch-up. A disciplined monthly close spreads the work and gives the auditor a clean trail.
- Reconcile every bank account. Match each statement to the ledger, clear unreconciled items within the month and keep signed reconciliations.
- Close sales and purchases. Post all invoices and credit notes for the month, accrue goods and services received but not invoiced, and check cut-off at month-end.
- Reconcile receivables and payables. Agree major customer and supplier balances to statements, review the ageing and chase disputed items.
- Run payroll checks. Agree the payroll register to the Wage Protection System file and update gratuity and leave accruals.
- Update fixed assets and inventory. Record additions and disposals, post depreciation and, for inventory businesses, perform cycle counts.
- Reconcile intercompany and related-party balances. Agree balances with each related party and document the basis of charges.
- Prepare tax reconciliations. Reconcile VAT to the ledger for each return period and track items that will need corporate tax adjustments.
- Review and file. A senior reviewer signs off the month, and supporting documents are stored in a structured digital folder that mirrors the audit request list.
Build the audit pack as you go. A shared folder with one sub-folder per checklist category, filled monthly, turns the documents required for audit UAE companies scramble to collect in February into a link sent on the first day of fieldwork. With phase 2 of the national e-invoicing programme going live on 1 July 2027, structured digital records will become the norm anyway.
Red flags auditors probe
Auditors are required to consider the risk of fraud and to respond to unusual items. These are the patterns that typically lead to extra questions, extended testing or a modified opinion:
- Manual journal entries posted at or after year-end, particularly round sums or entries by senior staff.
- Revenue spikes in the last weeks of the year followed by credit notes after year-end.
- Large or growing balances with related parties, directors or shareholders without agreements or confirmations.
- Suspense or clearing accounts with old, unexplained items.
- Bank reconciliations with long-outstanding reconciling items, or accounts that are not in the ledger.
- Cash-heavy transactions or payments to parties without clear commercial substance.
- Inventory that was not counted, or counts that do not match the ledger.
- VAT returns that do not reconcile to recorded revenue.
- Gross margins or expense ratios that move sharply without a business explanation.
Some of these patterns can also indicate fraud, sanctions or AML problems. If the auditor raises a concern of that kind, handle it through a structured process with legal input; see our guide to fraud and internal investigations.
Record retention periods under UAE law
Different rules set different minimum periods, and the longest applicable period wins. In practice, many groups adopt a single policy that meets the longest period across their entities.
| Source | Records covered | Minimum period |
|---|---|---|
| Commercial Companies Law | Accounting records showing the company's financial position | At least five years from the end of the financial year, kept at the head office |
| Corporate Tax Law, Article 56 | Records supporting tax returns and taxable income | Seven years after the end of the tax period |
| VAT and tax procedures rules | Tax invoices, credit notes, import and export records, tax records | Generally at least five years; longer for certain real estate records |
| AML legislation | Customer due diligence and transaction records (for regulated entities) | As set by the AML rules and the relevant supervisor |
| Free zone and regulator rules | Varies by zone and sector | Check the specific regulations |
Retention runs from the end of the relevant period, not from the document date, and a pending tax audit or dispute can justify keeping records longer. Digital storage is acceptable if records are complete, readable and retrievable on request.
Extra documents required for audit UAE entities in special situations
The core checklist applies to almost every company, but some situations add items that are easy to overlook.
- First-year audits and changes of auditor. The auditor must be satisfied with opening balances. Provide the prior-year audited accounts, the previous auditor's contact details and authority to communicate, and evidence for any balances carried forward from an unaudited period.
- Groups and tax groups. Group audits need consolidation workings, intercompany elimination schedules and component reporting packs. A tax group must also prepare audited special purpose financial statements for corporate tax, which need aggregation workings for each member.
- DIFC and ADGM entities. Their own companies regimes set filing deadlines and audit exemptions. Keep registry filings and any small-company exemption analysis in the pack.
- Real estate developers and property managers. Escrow account statements, project cost reports and service charge accounts are audited under Dubai's real estate rules, often by auditors approved by the Dubai Land Department.
- Regulated firms. Banks, insurers, payment firms and investment managers must also provide regulatory returns, capital calculations and correspondence with their supervisor.
Mapping these extra documents required for audit UAE entities in each situation at the planning meeting avoids late requests that push the audit past filing deadlines. Where a group contains entities in different jurisdictions, agree a single timetable that meets the earliest deadline across the group.
Illustrative scenario
This scenario is illustrative and does not describe a real client.
A mainland services company with a free zone subsidiary appoints a new auditor after its previous bookkeeper leaves. The auditor's request list asks for bank reconciliations, a related-party listing and the gratuity calculation. None exist in usable form.
The company engages accountants to rebuild reconciliations and recalculate gratuity from employment contracts. The rebuilt intercompany reconciliation shows that the free zone subsidiary has been invoicing the mainland parent for services without a written agreement. The auditor accepts the reconstructed records, but the related-party issue goes to the tax team because it affects the subsidiary's free zone tax position and the transfer pricing documentation. Counsel puts a written intercompany services agreement in place for the future and the company adopts a monthly close routine.
Common mistakes
Keeping records only on a former employee's laptop or email
Documents held in personal mailboxes or on unmanaged devices are often lost when staff leave, and they are hard to produce in an audit, a tax inspection or litigation. The legal duty to keep records belongs to the company, not the employee. Use a company-controlled accounting system and document repository, restrict access by role, back up regularly and include the return of records in exit procedures. Where records have already been lost, reconstruct them promptly and document how they were rebuilt.
Destroying records after five years
Many businesses still apply a five-year rule taken from company law or VAT. For corporate tax, the period is seven years after the end of the tax period, and the clock may effectively extend if the FTA opens a review. A document destruction policy should take the longest applicable period across company law, tax, AML and sector rules, and should be suspended for any matter that is under audit, investigation or dispute.
No agreements behind related-party transactions
Intercompany charges, shareholder loans and payments to directors are a constant audit focus, and undocumented arrangements can lead to qualifications, tax adjustments and later disputes between shareholders. Each recurring related-party arrangement should have a written agreement, board or shareholder approval where the constitution or law requires it, and pricing that can be supported under the arm's length principle. Confirm balances at year-end.
Leaving the stock count to the auditor
Inventory existence is one of the most common reasons for a qualified opinion in trading businesses. The count is management's responsibility; the auditor attends to observe it. Plan the count before year-end, invite the auditor in advance, freeze movements or document them precisely, and reconcile results to the ledger promptly. A missed count is expensive to repair through roll-back procedures, and sometimes cannot be repaired at all.
How we help and what to do next
Bookkeeping, monthly close support, audit preparation and the audit itself are delivered with our group company A&A Consultancy. TRW & Co is a law firm: we advise on record-keeping obligations, related-party agreements, corporate records and registers, document retention policies, and the legal side of issues an audit uncovers. For the audit stages, see our guide to the external audit process.
Checklist before the auditor arrives:
- Is every item in the documents required for audit UAE checklist available in one shared location?
- Are all bank accounts reconciled and confirmed?
- Do the share register, beneficial owner register and licence agree?
- Are related-party balances reconciled and supported by agreements?
- Is the gratuity provision calculated employee by employee?
- Do VAT returns reconcile to the ledger?
- Does the retention policy meet the seven-year corporate tax period?
To discuss your records, registers or audit findings, contact TRW & Co at info@trw.co or +971 58 942 1012.
Frequently asked questions
01What documents are required for an audit of a company in the UAE?
Expect to provide the trade licence, memorandum and articles, share and beneficial owner registers and minutes; the general ledger, trial balance and prior-year accounts; bank statements, reconciliations and facility agreements; sales and purchase invoices, contracts, customer and supplier ledgers; payroll registers, Wage Protection System records and the gratuity calculation; fixed asset registers and stock count records; VAT and corporate tax filings; and a related-party listing with agreements and confirmations. The auditor will issue a specific request list, but these categories cover most of it.
02How long must UAE companies keep accounting records?
Under the Commercial Companies Law, accounting records must be kept at the company's head office for at least five years from the end of the financial year. Under Article 56 of the Corporate Tax Law, records supporting a tax return must be kept for seven years after the end of the tax period to which they relate. VAT records are generally subject to at least five years, with longer periods for certain real estate records. Apply the longest relevant period and suspend destruction where a matter is under audit or dispute.
03What are the most common red flags auditors look for?
Auditors focus on manual journal entries near or after year-end, unusual revenue at year-end followed by credit notes, large related-party or director balances without agreements, old items in suspense accounts, long-outstanding bank reconciling items, cash-heavy transactions, uncounted inventory, VAT returns that do not reconcile to revenue, and sharp unexplained changes in margins. Each triggers additional testing, and unresolved items can lead to a qualified opinion or, in serious cases, an investigation.
04How can a small business stay audit-ready all year?
Run a monthly close: reconcile bank accounts, post and cut off sales and purchases, reconcile key customer and supplier balances, agree payroll to the Wage Protection System file, update fixed asset and inventory records, reconcile related-party balances and prepare VAT reconciliations. File supporting documents monthly in folders that mirror the audit request list. Small businesses that outsource bookkeeping should agree this routine in the engagement terms so the year-end audit becomes a review rather than a reconstruction.
05Do free zone companies need different audit documents?
The core documents are the same, but free zones add their own requirements. Some require the auditor to confirm bank balances directly, validate share capital against the articles or complete a summary sheet in the zone's format, and they set filing deadlines for audited accounts. Qualifying free zone persons also need audited financial statements for corporate tax, so records that support qualifying income and transactions with mainland related parties become particularly important. Check your zone's current audit rules at the start of the year.
06What happens if records are missing at audit time?
The auditor will try alternative procedures, such as third-party confirmations or analysis of later transactions. If sufficient evidence still cannot be obtained, the result may be a qualified opinion or, where the gaps are pervasive, a disclaimer. Missing records can also breach company law and tax record-keeping duties, which carry penalties, and weaken the company's position in any tax review or dispute. Reconstruct records promptly with qualified accountants and document how they were rebuilt.
Sources and official materials
- Federal Decree-Law No. 32 of 2021 on Commercial Companies — Accounting records, retention and annual audit
- Federal Decree-Law No. 47 of 2022 (Corporate Tax Law) — Article 56 record keeping for seven years
- Ministerial Decision No. 84 of 2025 on Audited Financial Statements — Which corporate taxpayers must prepare audited financial statements
- Federal Tax Authority — VAT and corporate tax guides, returns and record-keeping guidance
General information only, current as at 27 October 2026. It is not legal advice and does not create a lawyer–client relationship. UAE law differs between the onshore jurisdiction, the DIFC, ADGM and the free zones, and changes frequently; check current official sources and take advice on the facts of your matter.
