Statutory Audit of Companies explained: this guide covers what Statutory Audit of Companies means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
Statutory audit is a mandatory independent examination of a company's financial records under Section 138-148 of the Companies Act 2013. Unlike tax audit (income tax) or GST audit, a statutory audit is required for all companies registered under the Companies Act.
Appointment of Auditor (Section 139)
First Auditor
- Appointed by Board of Directors within 30 days of incorporation
- If Board fails: Members appoint at an EGM within 90 days
- Holds office until conclusion of first AGM
Subsequent Auditors
- Appointed at each AGM by shareholders (ordinary resolution)
- Individual auditor: one term of 5 consecutive years
- Audit firm: one or two terms of 5 consecutive years each (maximum 10 years)
- After completing maximum term: cooling-off period of 5 years before re-appointment
Companies Required to Follow Mandatory Rotation
- All listed companies
- Unlisted public companies with paid-up capital ≥ Rs.10 crore
- Private companies with paid-up capital ≥ Rs.50 crore
- All companies with public borrowings ≥ Rs.50 crore from banks/FIs
Filling Vacancy — Casual Vacancy
- Caused by resignation: Board can fill within 30 days; subject to shareholder ratification in next 3 months
- Caused by death/removal: EGM of shareholders to fill
Auditor Duties (Section 143)
Access Rights
Auditor has right to access all books of account, vouchers, documents (including in electronic form) at all times. Can require any director/officer/employee to provide information.
Mandatory Reporting Items
- Whether financial statements give true and fair view as per accounting standards
- Whether proper books of accounts maintained
- Whether balance sheet and P&L agree with books
- Adequacy of internal financial controls (IFC) over financial reporting
- Any material uncertainty about going concern
- Fraud reporting: If fraud > Rs.1 crore — report immediately to Central Government (within 60 days); below Rs.1 crore — report to audit committee/Board
CARO 2020 — Key Reporting Requirements
Companies Auditor's Report Order (CARO) 2020 requires the auditor to comment on:
| Area | What Auditor Reports |
|---|---|
| Fixed Assets | Maintenance of records, physical verification, title deeds |
| Inventory | Physical verification frequency; discrepancies > 10% |
| Loans and Advances | Loans to directors/companies; prejudicial to company interest |
| Deposits | Compliance with Section 73-76 deposit rules |
| Internal Audit | Whether internal audit conducted as required by Section 138 |
| Fraud | Any fraud noticed by auditor or reported to them |
| Statutory Dues | Regularity in payment of TDS, PF, ESI, GST, customs, income tax |
| Loans from Banks/FIs | Default in repayment; end-use of term loans |
| Share Capital/Public Issue | Utilization of funds raised through IPO/FPO/preferential allotment |
Prohibited Services (Section 144)
To ensure auditor independence, a statutory auditor (and its network firms) cannot provide to the same audit client:
- Bookkeeping/accounting/payroll
- Internal audit
- Design/implementation of financial information systems
- Actuarial services
- Investment banking/investment advisory
- Rendering outsourced financial services
- Management/consulting services (other than audit-related)
ROC Filings
- ADT-1: Intimation of auditor appointment — filed by company within 15 days of AGM
- ADT-3: Resignation statement by auditor — filed within 30 days of resignation
Need Expert Help?
Our CA and legal experts at TaxClue are ready to assist you with compliance, filings, and advisory.
Book a Consultation