When a foreign company enters India or an Indian company expands overseas, the audit landscape shifts. Suddenly there are three distinct audit types in play: statutory audit, tax audit, and internal audit. Each serves a different purpose, follows different rules, and sits at a different point in your compliance calendar. Many finance teams treat them as variations on a theme—they are not. Conflating them, or worse, skipping one in the belief that another covers it, can create compliance gaps that regulators notice.
This guide unpacks what each audit is, when it is legally required, what it costs in time and resource, and how they fit together in a cross-border structure. Whether you are a multinational with an Indian subsidiary, a foreign company with a branch office, or an Indian startup with overseas operations, understanding this framework is essential.
The rules for all three are set by Indian law, but the triggers, scope, and stakeholders differ materially. Getting the mix right means compliance, credibility, and confidence in your financial reporting—without audit theatre or wasted expense.
Statutory Audit: The Legal Foundation
Statutory audit is the mandatory annual financial statement audit required by the Companies Act, 2013. If your entity is incorporated in India—whether a private limited company, public company, or LLP—statutory audit is not optional.
The threshold is turnover. As the rules currently stand, a company must appoint a statutory auditor if its turnover (net of returns) exceeds the prescribed limit in the preceding financial year. Even if you fall below the threshold in one year, you must re-evaluate each year. A company that has never crossed the threshold may not require statutory audit, but the moment it does, the obligation begins in the next financial year.
The statutory auditor—a chartered accountant in practice—examines your books, verifies assets and liabilities, tests transactions for compliance with law and accounting standards, and issues an audit report that accompanies your financial statements filed with the Registrar of Companies. This report is public record. The auditor also certifies your internal financial controls and compliance with accounting standards (Ind AS or IFRS, depending on your classification).
For foreign companies with a branch office or representative office in India, statutory audit requirements vary. A branch engaged in business in India is typically required to maintain books and file financial statements; the audit obligation depends on turnover and the nature of the branch. A representative office (not conducting business) has lighter compliance. Our team can advise on the specifics for your structure when you contact AeTx.
Statutory audit is non-negotiable and time-sensitive. It must be completed, and financial statements filed, within the deadline set by law—usually by the end of the month following the close of the financial year.
Tax Audit: The Revenue Authority’s Check
Tax audit is separate from statutory audit and is mandated by the Income Tax Act. It is triggered by turnover thresholds—if your total income or turnover (for certain professions and businesses) exceeds the prescribed limit, you must get a tax audit done by a chartered accountant or cost accountant.
The tax auditor verifies that your accounting records align with your tax return. They examine invoices, receipts, bank statements, and ledger entries to confirm that income and expenses are correctly recorded and reported. The auditor signs a Tax Audit Report (Form 10B) which you file with your tax return.
A key difference: the tax auditor works from the perspective of the Revenue authority, not the company. They are checking whether your tax return is honest and whether you have claimed deductions and exemptions correctly. They do not issue a public report; the report goes to the tax department.
For foreign companies with Indian income, tax audit obligations depend on the type of income and the jurisdiction’s tax treaty with India. A foreign company earning royalties, fees, or profits from a permanent establishment in India may be liable to Indian tax and thus require a tax audit. Understanding transfer pricing, if you are moving funds or services between your Indian and overseas arms, is also critical—our guide on transfer pricing basics covers the essentials.
Tax audit deadlines are typically strict and aligned with tax return filing deadlines. Missing or mishandling a tax audit can trigger penalties and attract scrutiny.
Internal Audit: Your Own Eyes and Ears
Internal audit is not mandated by law for most private companies, but it is often required by boards, lenders, group policies, or regulatory frameworks. It is an independent function—either an in-house team or an external firm—that evaluates your internal controls, operational efficiency, and risk management.
Unlike statutory or tax audit, internal audit does not produce a report filed with the government. Instead, it reports to your board, audit committee, or management. The scope is flexible and tailored to your business. An internal audit might examine procurement processes, cash handling, IT security, compliance with company policies, or the accuracy of cost allocations within a group.
Internal audit is particularly valuable for cross-border groups. If you are an Indian subsidiary of a foreign parent, your parent company’s governance framework may require internal audit as part of group-wide risk management. Conversely, if you are an Indian company with overseas operations, internal audit can verify that inter-company transactions (royalties, management fees, shared services) are properly documented and comply with local law.
Many multinationals embed internal audit as part of ongoing financial control and do it quarterly or semi-annually, not just annually. It is a tool for management, not a compliance checkbox.
Thresholds and Overlaps
A company can trigger two or all three audits in the same financial year. A growing Indian company might have:
- Statutory audit (triggered by turnover limit)
- Tax audit (triggered by business income limit)
- Internal audit (mandated by the board or parent group)
The three audits run on parallel timelines but with different deadlines and deliverables. They can share audit procedures (the same invoices are examined by both statutory and tax auditors) but have different conclusions. The statutory auditor certifies compliance with accounting standards; the tax auditor certifies compliance with tax law.
For foreign companies with Indian subsidiaries, the overlap is even more complex. Your Indian subsidiary may be subject to Indian statutory and tax audit, while your parent company requires consolidated financial statements under its home country law, possibly triggering additional consolidation audit or review procedures.
Practical Implications for Cross-Border Structures
If you are setting up an Indian company or subsidiary, plan for all three audits from day one. Do not assume one audit covers the others. Conversely, if you are below the statutory audit threshold but above the tax audit threshold, you need a tax audit even if statutory audit is not yet required.
Maintain clean, contemporaneous records. All three audits rely on the same source documents—invoices, bank statements, GST filings, payroll records, and inter-company agreements. A single error in record-keeping can be caught by any of the three audits and create remedial work.
If your group operates across India and abroad, coordinate your audits. A foreign parent’s consolidation audit, your Indian subsidiary’s statutory audit, and your tax audit must all tell the same story. Discrepancies invite questions from multiple authorities.
Our team regularly guides multinationals and cross-border startups through the audit landscape. Understanding your AeTx services for compliance and audit can help you align all three audit types and avoid duplication or gaps.
When to Engage Professional Support
Each audit type requires domain expertise. A statutory auditor must be a practising chartered accountant registered with the Institute of Chartered Accountants of India. A tax auditor must be a chartered accountant or cost accountant with specific qualifications. An internal auditor can be in-house or external but must understand your business model and risk landscape.
For cross-border companies, do not default to a single auditor for all three functions. While it is convenient, a single auditor can create conflicts of interest and may miss nuances. For example, an internal audit conducted by your statutory auditor might pull punches to avoid embarrassment during statutory audit.
The investment in separate auditors—or at least clear protocols when using the same firm—pays off in credibility and risk mitigation.
Ready to Get This Right
If you are uncertain about which audits apply to your Indian entity or cross-border structure, reach out. Our team can map your obligations against your turnover, income, and group policies, and help you build an audit calendar that meets all deadlines without waste.
Message us on WhatsApp at +91 9810 555 783 with a brief overview of your structure, and we will advise on next steps.
Related reading
- India Tax Audit Thresholds for Foreign-Owned Companies
- India CSR Compliance for Subsidiaries Crossing the Threshold
- Monthly Compliance Calendar for Foreign Companies Operating in India