Digital Signature explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
Form 3CD is signed by the person competent to sign Form 3CA or 3CB, with a digital signature where the report is issued in soft copy — then uploaded by the auditor and accepted by the assessee.
From the ICAI Guidance Note on Tax Audit (Revised 2026), the Eleventh and, by ICAI's own statement, concluding edition under the Income-tax Act, 1961. For tax years under the Income-tax Act, 2025 the audit report is furnished under section 63 in Form No. 26 prescribed by rule 47 of the Income-tax Rules, 2026, and the electronic furnishing rule must be read from that rulebook.
Signature and stamp of the signatory
Paragraph 80.1: Form No. 3CD has to be signed by the person competent to sign Form No. 3CA or Form No. 3CB, as the case may be. He has also to give:
- full name;
- address;
- membership number;
- firm registration number, wherever applicable; and
- place and date.
And: where the audit report is issued in soft copy, the tax auditor is to affix his digital signature.
Paragraph 80.2: the tax auditor should issue such signed copy of the tax audit report in Form No. 3CA or 3CB and particulars in Form No. 3CD to the assessee. The auditor's obligation is to issue a signed report to his client — uploading is a separate step and does not discharge it.
The statutory basis for electronic furnishing
Paragraph 81.1: section 44AB provides that every person required to get his accounts audited for any previous year by an Accountant before the specified date should furnish by that date the report of such audit in the prescribed form, duly signed and verified by such accountant, setting forth such particulars as may be prescribed.
Paragraph 81.2 traces where the electronic requirement actually comes from:
"It is important to note that these forms do not state that they have to be signed digitally or electronically. It is only proviso to Rule 12(2) of Income-tax Rules, 1962 which prescribes that where an assessee is required to furnish a report of audit specified under Section 44AB, he shall furnish the same electronically. Thus, the primary responsibility of furnishing the report electronically lies with the assessee."
The auditor's duty under paragraph 80.2 is to issue a signed report to the assessee. The assessee's duty under the proviso to rule 12(2) is to furnish it electronically. In practice the forms are uploaded by the auditor and approved by the assessee (paragraph 81.3), but the statutory responsibility for furnishing remains the assessee's — which matters when a report is signed in time and accepted late.
Digital signature under the IT Act
Paragraph 81.2: Form 3CA or 3CB and Form 3CD are required to be uploaded on the website of the Income-tax Department and should be digitally signed by the auditors. The assessee is required to accept the tax audit report under his digital signature.
| Provision | Effect |
|---|---|
| Sections 5 and 6, Information Technology Act, 2000 | Give legal recognition to the electronic or digital signature |
| Section 2(1)(ta), IT Act | Defines electronic signature — the wider term, which includes digital signature |
| Section 2(1)(p), IT Act | Defines digital signature separately |
And the practical warning: "the time and date of signature is automatically captured whenever the electronic signature is affixed, and this date should tally with the manual date, if any, written in the hard copy of the Form No 3CA, 3CB and 3CD." A hard copy dated 20 September and a digital signature dated 3 October are a contradiction the portal itself records.
The schema does not match the Rules
Paragraph 81.3: particulars of Form 3CD as per law — that is, under the Income-tax Rules, 1962 — are different from those available at the Income Tax Department website. Thus, the form available at the website is not as per provisions of law.
Paragraph 81.4 draws the conclusion for the auditor: where the report has been furnished in accordance with the forms in the Income-tax Rules, 1962, answers to certain clauses may not be an exact response to the clause as stated in the Schema. However:
"this variation cannot be held against the Tax Auditor, as development of schema is not within his control and there is no specific option to issue the Tax Audit Report by the auditor as per the notified Form 3CD. Moreover, this fact has been brought to the notice of the CBDT by the DTC. Thus, where there is variation in any clause, it would be impossible to respond as per Form prescribed in the Rules."
Paragraph 81.7 supplies the legal principle behind that protection: the Supreme Court in Life Insurance Corporation of India v. CIT (219 ITR 410) held that the law does not contemplate or require the performance of an impossible act — lex non cogit ad impossibilia. The same view was taken in State of Rajasthan v. Shamsher Singh [(1985) AIR 1082], State of MP v. Narmada Bachao Andolan [(2011) 7 SCC 1019], and by the Allahabad High Court in CIT v. Prem Kumar [(2008) 214 CTR All 452].
Joint auditors, UDIN and SA 700
Paragraph 81.5: in the case of joint auditors, the present income-tax filing options do not provide for modalities of uploading of the report by all the joint auditors. In such a situation it will be appropriate that:
- the hard copy of the report, duly signed in the manner above, is given to the assessee client; and
- a consolidated report is uploaded by one of the auditors, with a disclosure in this regard from the joint auditor or auditors.
Paragraph 81.6 records two further gaps in the utility:
- there is no specific place to mention paragraphs expected of SA 700; and
- there is no mechanism to compulsorily insert UDIN prior to uploading the forms — thus UDIN should be written in the hard copy of Form 3CA or 3CB, and that copy given to the auditee.
Three separate paragraphs — 80.2, 81.5 and 81.6 — converge on the same instruction: the signed hard copy issued to the client carries what the portal cannot hold. The UDIN, the joint auditors' signatures, and the SA 700 paragraphs all live there. Treating the uploaded PDF as the complete record leaves the auditor without evidence of any of the three.
Worked example
| Situation | Correct handling |
|---|---|
| Report signed 22 September, uploaded 30 September | Manual date on the hard copy must tally with the captured signature date, or the difference must be explicable |
| Two joint auditors | Both sign the hard copy; one uploads a consolidated report with a disclosure from the other |
| UDIN generated after signing | Written on the hard copy of Form 3CA or 3CB given to the auditee |
| A clause in the utility schema does not match the notified Form 3CD | Answer per the notified form; the variation cannot be held against the auditor |
| Assessee has not accepted the uploaded report by the specified date | Furnishing is incomplete — the primary responsibility to furnish is the assessee's |
| Report issued only in soft copy | Digital signature affixed by the tax auditor |
Audit checklist
- Sign Form 3CD through the person competent to sign Form 3CA or 3CB.
- Give name, address, membership number, FRN, place and date.
- Affix a digital signature on any soft-copy report and on the uploaded forms.
- Issue a signed copy to the assessee — do not treat the upload as delivery.
- Make the manual date tally with the captured electronic signature date.
- Ensure the assessee accepts the report under his own digital signature.
- For joint audits, sign the hard copy jointly and upload one consolidated report with a disclosure.
- Write the UDIN on the hard copy and hand it to the auditee.
- Answer per the notified Form 3CD where the schema differs.
- Refer to Appendix XXI and XXII for the useful websites and reference material listed at paragraph 82.
Common mistakes
- Not issuing a signed hard copy to the client.
- A manual date that does not match the digital signature date.
- Omitting the UDIN because the portal does not ask for it.
- Uploading a joint audit report without a disclosure from the other joint auditors.
- Treating a schema mismatch as the auditor's reporting failure.