Who needs an audit, when it is mandatory, which forms to file, and how to prepare — everything a business owner must know about audit compliance.
Audit is one of those words that makes most business owners uneasy. Yet it is one of the most important compliance requirements in India, and getting it wrong can lead to significant penalties, scrutiny notices, and reputational damage. Over more than two decades of practice, I have conducted hundreds of audits across businesses of every size, and I can tell you this with certainty: understanding what audit means, who it applies to, and how to prepare for it saves you both money and stress.
This guide breaks down the two most important types of audit for Indian businesses — Statutory Audit and Tax Audit — in plain language. Whether you run a small trading firm or a mid-size company, this is everything you need to know.
A Statutory Audit is an independent examination of an entity's financial statements to form an opinion on whether those statements present a true and fair view of the entity's financial position. The requirement for statutory audit arises from the law itself — hence the word "statutory."
Under the Companies Act, 2013, every company registered in India — whether private limited, public limited, one person company, or section 8 company — must get its accounts audited by a practicing Chartered Accountant. There is no turnover threshold. Even if your company had zero revenue in the year, the statutory audit is mandatory.
The statutory auditor examines the books of accounts, verifies assets and liabilities, reviews internal controls, checks compliance with applicable accounting standards (Ind AS or Indian GAAP), and issues an audit report that is filed with the Registrar of Companies along with the annual financial statements.
The scope of a statutory audit goes well beyond taxation. It covers:
Tax Audit is an audit of the books of accounts of a taxpayer, conducted by a Chartered Accountant, as required under Section 44AB of the Income Tax Act, 1961. The purpose of tax audit is to ensure that the taxpayer has maintained proper books, that the income reported in the return is computed correctly, and that all relevant tax provisions have been complied with.
Unlike a statutory audit that examines the fairness of financial statements, a tax audit is specifically designed to assist the Income Tax Department. The tax auditor verifies deductions claimed, checks for disallowances under various sections, reports on specified transactions, and certifies the correctness of the particulars furnished in the tax audit report.
Tax audit applies to both individuals and entities — it is not limited to companies. If you are a proprietor, a partnership firm, an LLP, or an HUF, and your turnover crosses the prescribed threshold, tax audit is mandatory for you.
Many business owners confuse the two, so let me be direct about the differences:
A company will almost always need both — the statutory audit under company law and the tax audit under income tax law (if turnover thresholds are crossed). A partnership firm or proprietorship, on the other hand, needs only a tax audit if it meets the turnover criteria.
Section 44AB prescribes the following thresholds for mandatory tax audit:
Key Insight: The Rs. 10 crore threshold is not automatic. You must ensure that both cash receipts and cash payments are within 5% of the respective totals. I have seen cases where businesses assumed they qualified for the higher limit but had a single large cash receipt that pushed them over the 5% mark. Always verify this before the deadline.
Under the Companies Act, 2013, the following entities require a statutory audit:
The statutory auditor of a company is appointed at the Annual General Meeting (AGM) and holds office from the conclusion of that AGM until the conclusion of the sixth consecutive AGM (a term of five years for an individual auditor). The first auditor is appointed by the Board of Directors within 30 days of incorporation.
Understanding which form applies to you is critical. Here is the breakdown:
This is the audit report filed when the accounts of the taxpayer have already been audited under any other law — typically, the Companies Act. So if you are a company or an LLP that has undergone statutory audit, the tax auditor files Form 3CA as the audit report.
This is the audit report filed when the accounts are not required to be audited under any other law. This applies to proprietorships, partnership firms, and other entities that do not have a separate statutory audit obligation. The tax auditor files Form 3CB in such cases.
This is the detailed statement of particulars that accompanies either Form 3CA or Form 3CB. Form 3CD is where the real substance lies — it contains 44 clauses covering everything from the nature of the business to details of depreciation, deductions claimed, amounts disallowable under various sections, GST compliance, TDS compliance, loans and advances, related party transactions, and much more.
In practice, Form 3CD is the document that the Income Tax Department scrutinizes most closely. Every clause must be answered accurately, and any discrepancy between Form 3CD and the income tax return will almost certainly trigger a notice.
Certain classes of companies are required to appoint an internal auditor under Section 138 of the Companies Act, 2013. This includes every listed company and every unlisted public company that meets prescribed turnover, paid-up capital, or borrowing thresholds. Private companies meeting specified criteria are also covered under the Companies (Accounts) Rules, 2014.
An internal audit is an ongoing assessment of operational efficiency, risk management, and internal controls. Unlike statutory or tax audit, internal audit is not a year-end compliance exercise — it runs throughout the year and provides management with continuous feedback.
Bank audit refers to the statutory audit of banking institutions conducted by Chartered Accountants empanelled with the Reserve Bank of India (RBI). This includes the audit of branches of nationalized banks, cooperative banks, and other financial institutions. Bank audit has its own set of guidelines issued by ICAI through the Banking and Finance Committee, and it involves detailed verification of advances, NPAs, income recognition, provisioning norms, and compliance with RBI circulars.
For most business owners, bank audit is not directly relevant — but if your business has significant banking relationships, understand that the bank's auditor may seek confirmations and documentation from you during their audit cycle.
Missing audit deadlines is one of the most common and costly mistakes. Here are the critical dates:
In practice, I strongly advise clients to complete their accounts finalization by July, start the audit process in August, and have the audit report uploaded by mid-September. Last-week filings are a recipe for errors.
The consequences of failing to get a tax audit conducted or filing it late are clearly laid out in the law:
If a person who is required to get their accounts audited under Section 44AB fails to do so before the specified date, the Assessing Officer may impose a penalty of:
whichever is lower.
To put this in perspective: if your turnover is Rs. 5 crore, the penalty could be Rs. 1,50,000 (since 0.5% of Rs. 5 crore is Rs. 2,50,000, but the cap of Rs. 1.5 lakh applies). For a business with Rs. 2 crore turnover, the penalty would be Rs. 1,00,000.
Additionally, if the tax audit report is not filed, the due date for filing the income tax return remains 31st October, and missing that deadline invites further penalties under Section 234A (interest), Section 234F (late filing fee of Rs. 5,000 or Rs. 1,000), and potential loss of certain deductions and carry-forward of losses.
For statutory audit non-compliance, the company and its officers in default face penalties under the Companies Act. Failure to appoint an auditor, obstructing audit proceedings, or not filing audited financial statements with the ROC can result in fines, prosecution, and in severe cases, disqualification of directors.
Preparation is where most businesses either save time or waste it. Here is a practical checklist that I share with every audit client:
In my years of practice, I have seen the same mistakes repeated across businesses of all sizes. Here are the ones that cause the most trouble during audit:
Let me share a few things I tell every client before audit season begins:
Start early. The best audits I have conducted are the ones where the client's books were finalized by July. You have a clean two months to conduct the audit thoroughly, address queries, and file the report well before the deadline.
Appoint your auditor well in advance. Do not wait until August to engage a Chartered Accountant for your tax audit. Good CAs have limited bandwidth during peak season, and a last-minute engagement means rushed work on both sides.
Invest in good accounting software. Whether it is Tally, Zoho Books, or any other tool, maintain your accounts digitally with proper voucher-level entries. Manual books of accounts in 2026 are not just inconvenient — they increase the risk of errors that become audit issues.
Respond to auditor queries promptly. When your auditor raises a query, respond within 48 hours. Delayed responses push the audit timeline and create last-minute pressure that benefits no one.
Do not hide transactions. This should be obvious, but it bears repeating. Auditors are trained to find discrepancies. Unreported income, suppressed sales, and inflated expenses are far more likely to cause damage when discovered during audit than if disclosed upfront.
Keep your auditor informed about unusual transactions. If you sold a property, entered into a large contract, received a gift, or had any transaction that is out of the ordinary course of business, inform your auditor proactively. These items require specific reporting and handling.
Review Form 3CD before it is filed. Yes, the CA prepares it, but you should review the particulars — especially clauses relating to your turnover, deductions claimed, and details of loans and advances. You are signing the tax return based on these reported figures.
From the Desk of CA Kuldeep Pandey: In my experience, the businesses that treat audit as a partnership with their CA — rather than as an adversarial compliance burden — consistently have smoother audits, fewer notices, and better financial health overall. An audit is not just about compliance; it is an opportunity to understand your business better and identify areas for improvement.
If you have questions about your specific audit requirements, or if you need assistance getting your audit completed on time and done right, do not hesitate to reach out. At Tax Pandey, we handle audits with the thoroughness and attention they deserve.
Disclaimer: This article is for informational purposes only and reflects tax laws as understood in April 2026. Tax legislation changes frequently. Always verify current provisions on official government portals and consult a qualified Chartered Accountant before making financial decisions.