Statutory Audit for Private Companies: What Auditors Check

Short answer: A statutory audit is a legally required annual examination of a company's financial records by an independent Chartered Accountant. The auditor verifies the accuracy of financial statements, checks for compliance with Accounting Standards and the Companies Act, 2013, and issues an opinion on whether the accounts provide a "true and fair view" of the company's financial position and performance. This audit is mandatory for all registered companies in India.

What is a statutory audit and is it mandatory for private companies?

Yes, a statutory audit is mandatory for every company registered under the Companies Act, 2013, including all private limited companies, one-person companies (OPCs), and even small companies. This requirement, governed by Section 139 of the Act, applies irrespective of the company's turnover, profit, or business activity. The primary purpose is to provide an independent verification of the company's financial health, enhancing credibility for stakeholders like investors, lenders, and government authorities.

Who can conduct a statutory audit?

Only a practising Chartered Accountant (CA) or a firm of Chartered Accountants holding a valid Certificate of Practice from the Institute of Chartered Accountants of India (ICAI) can be appointed as a statutory auditor. The auditor must be independent and cannot be an employee or have certain other relationships with the company. The company's board recommends an auditor, who is then formally appointed by the shareholders at the Annual General Meeting (AGM) and notified to the Registrar of Companies (ROC) via Form ADT-1. You can find more details in our guide on auditor appointment in Form ADT-1.

What documents do auditors primarily check?

Auditors require access to a wide range of financial and non-financial records to form their opinion. A well-organized company can significantly smoothen the audit process. The auditor's goal is to gather sufficient and appropriate audit evidence for every material item in the financial statements.

Document Category	Key Documents Required	What Auditors Verify
Financial Records	Trial Balance, General Ledger, Cash Book, Bank Books	Mathematical accuracy, correct posting of entries.
Revenue	Sales Invoices, Service Agreements, GST Returns (GSTR-1, GSTR-3B)	Correctness of revenue recognition, proper invoicing.
Expenses	Purchase Invoices, Expense Vouchers, Payroll records	Genuineness of expenditure, proper authorization.
Assets & Liabilities	Bank Statements, Fixed Deposit Receipts, Fixed Asset Register	Existence and valuation of assets, completeness of liabilities.
Statutory Records	Memorandum & Articles of Association (MOA/AOA), Board Minutes, Shareholder Registers	Compliance with the Companies Act, 2013, proper authorizations.
Taxation Records	TDS/TCS Challans & Returns, GST Payment Challans, Income Tax Returns	Timely payment and filing of statutory dues, correct calculations.
Legal & Operational	Key Contracts, Loan Agreements, Property Deeds, Leases	Obligations, contingent liabilities, terms and conditions.

What specific areas receive the most scrutiny?

While the entire financial landscape is audited, certain areas are examined with greater intensity. These include:

• Revenue Recognition: Auditors verify that revenue is booked in the correct financial period and in accordance with applicable Accounting Standards (AS) or Indian Accounting Standards (Ind AS). They check for fake sales or premature booking of income.
• Expense Verification: All significant expenses are tested. Auditors look for supporting evidence like invoices and authorisations to ensure they are legitimate business expenses and not personal expenses of directors or employees.
• Verification of Assets and Liabilities: Auditors confirm the existence, ownership, and valuation of assets. For liabilities, they ensure all obligations, including loans and creditors, are fully and accurately recorded.
• Statutory Compliance: This is a critical area. Auditors verify the timely deposit of statutory dues like GST, TDS, Provident Fund (PF), ESI, and Professional Tax. Non-compliance is required to be reported in the audit report.
• Internal Financial Controls (IFC): For many companies (excluding certain private companies below a threshold), the auditor must also report on the adequacy of the internal financial controls system and its operating effectiveness.
• Related Party Transactions: Any transaction with directors, their relatives, or associated companies is scrutinised to ensure it is conducted at 'arm's length' and with proper approvals, as required by Section 188 of the Companies Act.

What happens after the audit is completed?

Upon completion, the auditor issues a formal Audit Report, which contains their opinion on the financial statements. This opinion can be:

1. Unqualified Opinion (Clean Report): Issued when the auditor is satisfied that the financial statements present a true and fair view.
2. Qualified Opinion: Issued when the auditor finds a material misstatement that is not pervasive. The auditor will state that except for a specific issue, the financial statements are true and fair.
3. Adverse Opinion: Issued when misstatements are so material and pervasive that the financial statements as a whole are misleading.
4. Disclaimer of Opinion: Issued when the auditor is unable to obtain sufficient evidence to form an opinion.

This audit report is attached to the financial statements (Balance Sheet, Profit & Loss Account, etc.) and filed with the ROC as part of the company's annual ROC filings in Form AOC-4.

What are the consequences of not conducting an audit?

Failing to conduct a mandatory statutory audit is a serious violation of the Companies Act, 2013. The consequences include:

• Penalties on the Company: The company is liable for a penalty of ₹25,000.
• Penalties on Officers: Every officer in default (which typically includes directors) is liable for a penalty of ₹10,000.
• Inability to File Annual Returns: Without an audited financial statement, a company cannot complete its annual filings (Form AOC-4 and MGT-7/7A) with the ROC, leading to additional daily penalties until the default is rectified.
• Loss of Credibility: Unaudited financials are not trusted by banks, investors, or for government tenders, severely hampering business operations and growth.

Worked example

Scenario: Let's consider 'Bengaluru Tech Innovations Pvt. Ltd.', a startup in its second year of operations, undergoing a statutory audit for the financial year 2025-26.

• Transaction: The auditor is verifying the 'Software and Subscriptions' expense ledger and finds a payment of ₹5,00,000 to an overseas entity.
• Auditor's Query: The auditor requests the invoice, the service agreement, and proof of TDS compliance. Specifically, they ask for Form 15CA/CB, which is required for foreign remittances, and evidence that TDS was deducted at the applicable rate under Section 195 of the Income-tax Act or a lower rate as per the relevant tax treaty.
• Management's Position: The company provides the invoice but admits they were unaware of the TDS and Form 15CA/CB requirements and made the remittance without any tax deduction.
• Audit Impact: The auditor will quantify the potential liability for non-deduction of TDS, including the tax amount, interest under Section 201(1A), and potential penalties. They will insist that the company provide for this liability in its books. Furthermore, this non-compliance will be specifically mentioned in the main audit report and also reported in the Tax Audit Report (Form 3CD), if applicable. This highlights a weakness in the company's financial compliance process.

Common mistakes

1. Inadequate Documentation: Failing to maintain proper supporting documents like tax invoices, signed agreements, and expense vouchers for all transactions.
2. Mixing Business and Personal Finances: Using the company's bank account for personal expenses of directors. Auditors are required to identify and report such transactions.
3. Ignoring Statutory Due Dates: Late payment of TDS, GST, PF, and other dues. Auditors must report any delays in these payments in their report.
4. Poor Maintenance of Statutory Registers: Not keeping minutes of board meetings or the register of members updated. This is a primary compliance check. See our guide on statutory registers for companies.
5. Delaying the Start of the Audit: Providing information to the auditor just before the filing deadline, which leads to a rushed process, potential errors, and risk of missing the ROC filing due dates.

How SP & SC helps

At SP & SC, we manage the end-to-end annual compliance for private limited companies. Our service includes maintaining your books of accounts, preparing financial statements, coordinating with the statutory auditor to ensure a smooth and efficient audit process, and filing all necessary forms like AOC-4 and MGT-7A with the ROC. We help you proactively address compliance issues, ensuring your company remains in good standing and avoids costly penalties. You can explore our services for company annual filings.

Frequently asked questions

Is audit required for a loss-making or dormant company?

Yes. The requirement for a statutory audit under the Companies Act, 2013, is based on the company's registration status, not its profitability or level of activity. Even a company with no transactions during the year must have its 'nil' accounts audited.

What is the difference between a statutory audit and a tax audit?

A statutory audit is mandated by the Companies Act, 2013, to ensure the financial statements provide a 'true and fair' view for all stakeholders. A tax audit under Section 44AB of the Income-tax Act, 1961, is required when turnover exceeds a certain threshold, and its purpose is to verify the computation of taxable income.

How is an auditor appointed?

The first auditor is appointed by the Board of Directors within 30 days of incorporation. Subsequent auditors are appointed by the shareholders at the Annual General Meeting (AGM) for a term of five years, subject to ratification at every AGM.

What is a 'small company' and is it exempt from audit?

A 'small company' is defined under Section 2(85) of the Companies Act based on paid-up capital and turnover thresholds. While small companies enjoy certain exemptions (e.g., regarding cash flow statements or board report content), they are not exempt from the mandatory statutory audit.

Can a company's director be its auditor?

No. Section 141 of the Companies Act, 2013, lists the disqualifications for an auditor. An officer or employee of the company, or a person who is a partner or in the employment of an officer or employee of the company, is disqualified from being appointed as an auditor to ensure independence.

Get a fixed-fee quote

Ensuring your company's statutory audit is handled correctly is critical for compliance and stakeholder confidence. To get a written fixed-fee quote for our end-to-end annual compliance services, please share your company's documents with us. Contact SP & SC or message us on WhatsApp at +91 90356 74566. We take care of the entire process, from bookkeeping to final filing, so you can focus on your business.