Statutory Audit: The Full Process, Timeline and Document List
- A statutory audit is legally mandatory under the Companies Act 2013 for all registered companies, regardless of size or profit, and must be completed before the AGM deadline.
- The audit follows a fixed five-stage process: appointment, planning, fieldwork, reporting, and filing — missing any stage creates compliance penalties.
- Having your documents ready before the auditor walks in can cut the audit timeline by 30-40% and reduce the chance of a qualified audit report.
If your company receives a statutory audit notice and you have no idea what documents to gather or how long the process takes, you are not alone. A statutory audit is a legally mandated independent examination of a company's financial statements and records, required under Section 139 of the Companies Act 2013 for every registered company — private limited, public limited, or OPC — every single financial year, regardless of whether you made a profit or even had revenue. The auditor's job is to verify that your books show a "true and fair view" of the company's financial position. Here is the full process, realistic timeline, and exact document list you need for FY 2026-27.
Who Must Get a Statutory Audit Done?
Every company incorporated under the Companies Act 2013 is required to appoint a statutory auditor. This is non-negotiable. It does not matter if your private limited company had zero turnover. It does not matter if you are a one-person company (OPC). The moment you are incorporated, you are in the audit loop every year.
LLPs and sole proprietorships are not covered under statutory audit provisions — they may be subject to tax audit under Section 44AB of the Income Tax Act, which is a separate requirement. If you are unsure which audit applies to your business, our Tax Audit Services page explains the difference clearly.
The Five Stages of the Statutory Audit Process
Stage 1 — Auditor Appointment
A new company must appoint its first auditor within 30 days of incorporation via a Board resolution. For subsequent years, the auditor is appointed or ratified at the Annual General Meeting (AGM). The appointment is filed with the Registrar of Companies using Form ADT-1 within 15 days of the AGM. Under the Companies Act, an individual auditor can hold office for a maximum of five consecutive years; an audit firm can hold office for up to ten years before mandatory rotation kicks in for certain classes of companies.
Stage 2 — Audit Planning and Engagement Letter
Before fieldwork begins, the auditor issues an engagement letter outlining the scope, responsibilities, and fee. The auditor then performs a risk assessment — understanding your business model, internal controls, and areas where errors or fraud are most likely. For a trading company with high-volume cash sales, for example, revenue recognition and inventory valuation will be high-risk areas demanding deeper scrutiny.
Stage 3 — Fieldwork (Document Collection and Verification)
This is the main working phase. The auditor examines your books of account, verifies supporting documents, physically verifies assets where required, and tests internal controls. This stage typically takes the longest and is where most delays happen — usually because companies are not document-ready.
Stage 4 — Audit Report Drafting
After fieldwork, the auditor drafts the report. If everything checks out, you receive an unqualified (clean) report. If there are material misstatements or non-compliances, the report may be qualified, adverse, or a disclaimer of opinion. A qualified report is a red flag for banks, investors, and regulators — so resolving issues before the report is issued is critical.
Stage 5 — Filing and AGM
The audited financial statements are placed before shareholders at the AGM. For FY 2026-27, the AGM must be held within six months of the financial year end — i.e., by 30 September 2027 for most companies. Audited financials are then filed with the ROC via Form AOC-4 and Form MGT-7/MGT-7A within the prescribed timelines after the AGM.
Realistic Timeline for FY 2026-27
| Activity | Typical Window | Deadline / Trigger |
|---|---|---|
| Books closed and trial balance prepared | April – May 2027 | Before audit starts |
| Provide documents to auditor | May – June 2027 | As early as possible |
| Auditor fieldwork | May – July 2027 | 2–8 weeks depending on size |
| Management representation letter signed | July – August 2027 | Before audit report issued |
| Board meeting to approve financials | August – September 2027 | Before AGM |
| AGM held | By 30 September 2027 | Statutory deadline |
| ROC filing (AOC-4 and MGT-7) | October – November 2027 | Within 30/60 days of AGM |
Complete Document Checklist for Statutory Audit
- Accounting records: Trial balance, general ledger, cash book, bank book, journal entries with narrations
- Bank documents: All bank statements for the full year, bank reconciliation statements as at 31 March 2027, loan sanction letters and repayment schedules
- Sales and revenue: GST returns (GSTR-1, GSTR-3B), sales invoices, debtors ledger, ageing analysis of debtors
- Purchases and expenses: Purchase invoices, expense vouchers, creditors ledger, ageing analysis of creditors
- Fixed assets: Fixed asset register, purchase invoices for additions, disposal documents, depreciation workings
- Inventory: Stock-taking report as at 31 March 2027, valuation basis (cost or NRV, whichever is lower as per AS-2)
- Statutory compliances: TDS returns (Form 26Q, 24Q), TDS payment challans, PF and ESI payment records, GST reconciliation between books and returns
- Corporate documents: MOA, AOA, Certificate of Incorporation, Board resolutions, shareholder register, Form ADT-1 of current auditor
- Loans and advances: Agreements for all inter-company loans, director loans, related-party transactions register
- Tax documents: Advance tax payment challans, Form 26AS and AIS from Income Tax portal, previous year's audited financials
Worked Example: How Auditors Verify a Revenue Figure
Say your company reported total sales of ₹48,00,000 for FY 2026-27. The auditor will not simply accept this number. Here is what happens:
- The auditor pulls your GSTR-1 — total taxable turnover reported: ₹47,80,000. Difference of ₹20,000 noted.
- You explain that ₹20,000 is an exempt supply not reported in GSTR-1. Auditor asks for the invoice and exemption basis.
- Auditor then tests a sample of invoices — say 25 invoices totalling ₹12,00,000 — and traces each one to the bank statement to confirm receipt. If ₹1,50,000 of those invoices are not reflected in the bank statement by year-end, the auditor asks: was payment received in cash? Was it a credit note? Is the debtor genuine?
- Finally, the auditor compares gross profit margin — if your margin this year is 18% versus 28% last year, that triggers questions about either inflated purchases or understated sales.
This granular verification is why vague or unsupported entries in your books are a serious problem — the auditor will flag them.
Common Mistakes That Derail Statutory Audits
- Mismatch between books and GST returns: Many companies pass year-end adjustment entries in the books but forget to reconcile them with their GST returns filed. A ₹5 lakh difference between GSTR-1 and book sales with no explanation is an instant red flag and may lead to a qualified report.
- Missing TDS compliance records: If your company deducted TDS but delayed filing returns or payment, the auditor is required to report this under CARO 2020. Many companies discover old TDS defaults only when the auditor asks — by then, interest and penalties have already accumulated.
- Treating director's personal expenses as business expenses: Mobile bills, personal travel, and home rentals charged to the company account are routinely disallowed. Auditors test high-value miscellaneous expenses specifically for this reason.
- No physical stock count performed: If you cannot produce a signed stock-taking report as at 31 March 2027, the auditor cannot verify inventory — and will either qualify the report or ask you to arrange a count, which delays everything.
- Late appointment of auditor: Not filing Form ADT-1 within 15 days of the AGM attracts an ROC penalty on the company and every officer in default. Many small companies ignore this annual filing entirely until an ROC notice arrives.
Do it yourself in minutes — free to try, no login needed.
Open Tax Audit Services →Frequently asked questions
Is statutory audit mandatory for a private limited company with zero turnover?
Yes. Every company registered under the Companies Act 2013 must get its accounts audited by a Chartered Accountant every year, irrespective of turnover, profit, or whether it conducted any business during the year.
What is the difference between a statutory audit and a tax audit?
A statutory audit is required under the Companies Act 2013 and applies to all companies. A tax audit under Section 44AB of the Income Tax Act applies to businesses or professionals whose turnover or gross receipts cross specified thresholds — it is not limited to companies and has different objectives and reporting formats.
What happens if my company misses the AGM deadline of 30 September 2027?
Failure to hold the AGM by the statutory deadline attracts penalties under the Companies Act 2013 on the company and its directors. You can apply to the Registrar of Companies for an extension before the deadline — but extensions are not guaranteed and penalties apply for lapses.
How long does a statutory audit typically take for a small private limited company?
For a small company with clean books, one active bank account, and all documents ready, the fieldwork can be completed in two to four weeks. If records are incomplete, reconciliations are missing, or there are complex transactions, it can stretch to two to three months — which puts the AGM deadline at risk.
General information for FY 2026-27, not professional advice for your specific case. Rules change — verify against the latest notification or ask a KyaTax expert.
Related: All free tools · More guides · Virtual CFO