Enquire now with Startup Advisory

Blog

Compliance

Statutory Audit 2026: A Complete Preparation Checklist for Company Boards & Management

Reviewed by CA Neeraj Rohilla, FCA — Chartered Accountant, Startup Advisory, Saket, New Delhi. Last reviewed: June 2026.

Statutory audit 2026 preparation checklist for company boards and management under the Companies Act 2013

In short

Every company registered under the Companies Act, 2013 — private, public, OPC or "small" — must get its accounts statutorily audited every year, regardless of turnover, profit or activity. For FY 2025-26 (year ended 31 March 2026), most of the work and most of the risk sits with management and the board: closing the books, getting applicability right (CARO 2020, Ind AS vs AS, the audit trail, internal/cost/secretarial audit, consolidation), adopting the accounts at the AGM by 30 September 2026, and filing the correct ROC forms — AOC-4 within 30 days and MGT-7/MGT-7A within 60 days of the AGM. This is the practical checklist so nothing slips.

A statutory audit feels like the auditor's job — but in practice the auditor can only move as fast as your books, schedules and approvals allow, and the filing obligations are squarely the company's. This guide is the end-to-end checklist we run with boards and founders across Delhi NCR so that no compliance, no form, no Companies Act provision and no accounting-standard applicability gets missed.

First, confirm what applies to you

Four facts about your company drive almost everything below — fix them before anything else:

  • Are you listed, unlisted public, private, or OPC? (Drives rotation, internal financial controls, secretarial audit.)
  • What are your net worth, paid-up capital, turnover and borrowings for FY 2025-26 and the preceding year? (Drives Ind AS vs AS, CARO exemption, internal audit, cost audit, certification of the annual return.)
  • Do you have any subsidiary, associate or joint venture? (Drives consolidation, AOC-1 and consolidated CARO.)
  • Are you a "small company" under Section 2(85) — paid-up up to ₹4 crore and turnover up to ₹40 crore? Small companies get relief on CARO, rotation, internal audit, cash-flow statement and board-meeting frequency — but they still need a statutory audit and still file AOC-4 and MGT-7A.

The FY 2025-26 audit & filing calendar at a glance

Assuming a 31 March 2026 year-end and the AGM on the last permissible day (30 September 2026):

MilestoneForm / SectionDue date (FY 2025-26)
Books closed & financials draftedSec 128, 129Target by June–July 2026
Statutory audit completed, report signed (with UDIN)Sec 143Before AGM notice goes out
Board meeting to approve accounts & Board's reportSec 134, 173Before AGM (allow 21 clear days' notice)
Annual General MeetingSec 96On or before 30 Sep 2026 (first AGM: within 9 months of first year-end)
Director KYCDIR-3 KYC / KYC-Web30 Sep 2026
Auditor appointment / re-appointment intimationADT-1 (Sec 139)Within 15 days of the AGM
Financial statements filingAOC-4 / AOC-4 XBRL / AOC-4 CFS (Sec 137)Within 30 days of AGM (≈ 29–30 Oct 2026). OPC: by 27 Sep 2026
Annual returnMGT-7 / MGT-7A (Sec 92)Within 60 days of AGM (≈ 28–29 Nov 2026)
Return of deposits / outstanding moneyDPT-330 June 2026
Dues to MSME vendors outstanding > 45 daysMSME-1 (half-yearly)31 Oct / 30 Apr

Sequencing trap: MGT-7 can only be filed after AOC-4 is accepted, and the MCA-21 V3 portal won't let you file FY 2025-26 if a prior year is still pending — clear any backlog oldest-first. See our full ROC annual compliance calendar for every form and penalty.

Step 1 — Pre-audit readiness (management & finance team)

This is where most audit delays come from. Finish it before fieldwork starts.

A. Books of account & closing (Sec 128)

  • All FY 2025-26 transactions recorded; cut-off respected at the year-end.
  • Books kept on accounting software with an audit trail (edit log) that was switched on and operated throughout the year — mandatory since 1 April 2023, and the auditor must report on it under Rule 11(g).
  • Records retained and accessible (minimum 8 years).
  • Trial balance finalised and frozen for audit.

B. Reconciliations (auditors ask for these first)

  • Bank reconciliations for every account, including closed/dormant ones, as at 31 March 2026.
  • GST reconciliation: books vs GSTR-1 vs GSTR-3B vs GSTR-2B; ITC and RCM checked.
  • TDS/TCS reconciliation: books vs Form 26AS/TRACES; challans deposited; returns filed.
  • Inter-company / related-party balances confirmed both sides.
  • Statutory dues (PF, ESI, PT, GST, TDS, advance tax) reconciled and paid; arrears listed with periods.
  • Vendor and customer balance confirmations initiated.

C. Schedules & supporting documents

  • Fixed asset register updated; depreciation as per Schedule II; physical verification done with discrepancies recorded.
  • Title deeds of all immovable property held in the company's name (a CARO point).
  • Inventory count sheets, valuation basis, and slow/non-moving provision.
  • Trade receivables ageing and expected-credit-loss / bad-debt provision.
  • Loans & advances schedule (check Sec 185/186 for loans to directors/related parties).
  • Borrowings schedule with sanction letters; where working-capital limits exceed ₹5 crore, the quarterly returns/stock statements filed with banks must reconcile to the books.
  • Provisions, contingent liabilities and a litigation summary.

D. Governance & registers

  • Minutes of all board and committee meetings for the year.
  • MBP-1 (directors' interest) and DIR-8 (non-disqualification) on file.
  • Statutory registers updated, including the related-party register under Sec 189.
  • All charges (CHG-1/CHG-4) created or satisfied during the year are filed; BEN-2 updated for any change in significant beneficial ownership.

Step 2 — Get your applicability right (so no provision or standard is missed)

Run your company against every row — this is the part boards most often under-do.

Which accounting standards apply?

Your companyFrameworkSchedule III
Listed (non-SME exchange), or unlisted with net worth ≥ ₹250 crore, or a holding/subsidiary/JV/associate of such a companyInd AS (2015 Rules)Division II
Everyone else (most private companies)AS (2021 Rules)Division I
NBFCs meeting the NBFC Ind AS roadmapInd AS (NBFC)Division III

Once Ind AS becomes applicable it is permanent — you cannot revert even if you later fall below the threshold. Net worth is tested on standalone audited accounts.

Which audits and reports additionally apply?

RequirementTriggerOutput
CARO 2020 (Sec 143(11), 21 clauses)Every company except banking, insurance, Sec 8, OPC, small company, and a private company meeting all of: paid-up + reserves ≤ ₹1 cr, borrowings ≤ ₹1 cr anytime in the year, revenue ≤ ₹10 cr, and not a holding/subsidiary of a public companyAnnexure to the auditor's report
Internal Financial Controls reporting (Sec 143(3)(i))All companies, except the private-company carve-out: OPC/small company, or a private company with turnover < ₹50 cr and borrowings < ₹25 crAuditor's opinion on IFCoFR
Internal audit (Sec 138, Rule 13)Private co: turnover ≥ ₹200 cr or borrowings > ₹100 cr (preceding year). Unlisted public: paid-up ≥ ₹50 cr / turnover ≥ ₹200 cr / borrowings > ₹100 cr / deposits ≥ ₹25 cr. Listed: alwaysInternal auditor appointed by the board
Cost records & cost audit (Sec 148)Only specified regulated/non-regulated industries above turnover thresholdsCRA-1, CRA-2, CRA-3, CRA-4
Secretarial audit (Sec 204)Every listed company; public co with paid-up ≥ ₹50 cr or turnover ≥ ₹250 cr or borrowings ≥ ₹100 cr; and prescribed private subsidiariesMR-3 annexed to Board's report
Consolidated financials (Sec 129(3)) + AOC-1Any subsidiary, associate or JVCFS, AOC-4 CFS, consolidated CARO
Auditor rotation (Sec 139(2), Rule 5)Listed; unlisted public ≥ ₹10 cr paid-up; private ≥ ₹50 cr paid-up; any company with public borrowings/deposits ≥ ₹50 cr. Individual: one 5-year term; firm: two 5-year terms; 5-year cooling-offPlan the auditor change in advance

Step 3 — During the audit: what management must furnish

  • Prior-year signed financials, audit report, tax returns and assessment status.
  • Complete trial balance, ledgers and all the schedules and reconciliations from Step 1.
  • Access to the accounting software's audit-trail/edit-log report for Rule 11(g) testing.
  • Bank statements, confirmations, FD certificates and loan statements.
  • Board/committee minutes and statutory registers.
  • Related-party transaction details and Section 188 approvals (feeds AOC-2).
  • Details for the auditor's Rule 11 reporting: end-use of borrowed funds / share premium and ultimate beneficiaries (Rule 11(e)), dividend compliance with Sec 123 (Rule 11(f)), and the audit trail (Rule 11(g)).
  • A signed Management Representation Letter, plus the going-concern and subsequent-events assessment.

Step 4 — Financial statements & Schedule III disclosures

The 2021 Schedule III amendments added disclosures auditors now check specifically. Confirm your financials include, where applicable:

  • Ageing schedules for trade receivables, trade payables, capital work-in-progress and intangibles under development.
  • Promoter shareholding and changes during the year.
  • Title deeds of immovable property not held in the company's name.
  • Reconciliation with quarterly returns filed with banks (where borrowing against current assets).
  • Specified ratios with explanations for variances above 25%.
  • Disclosures on CSR, crypto/virtual currency, undisclosed income, benami property, dealings with struck-off companies, loans to/from related parties, and the number-of-layers rule.
  • Cash-flow statement (not required for an OPC, small company or dormant company).

Step 5 — Board approval & AGM

  • Board meeting to approve the audited financials and Board's report and to take the auditor's report on record.
  • Board's Report (Sec 134) with all annexures: Directors' Responsibility Statement, AOC-2 (related-party transactions), particulars of loans/guarantees/investments (Sec 186), CSR report (if applicable), secretarial audit report MR-3 (if applicable), and the annual-return web-link.
  • Financials signed as required, and the auditor generates the UDIN on the audit report.
  • AGM notice with 21 clear days' notice; AGM held by 30 September 2026 where members adopt the financials, declare any dividend, and appoint/re-appoint the auditor.
  • AGM minutes and resolutions recorded. (Not holding the AGM on time is an offence under Sec 99.)

Step 6 — The post-audit ROC filing chain (so no form is missed)

FormWhat it isTiming
ADT-1Auditor appointment / re-appointment intimationWithin 15 days of AGM; pre-certified by CA/CS/CMA
AOC-4 (and XBRL / CFS / NBFC variants)Financial statements + Board's report + auditor's report + AOC-1/AOC-2Within 30 days of AGM
MGT-7 / MGT-7AAnnual return (7A for small co & OPC); MGT-8 (PCS certification) if paid-up ≥ ₹10 cr or turnover ≥ ₹50 crWithin 60 days of AGM
DIR-3 KYCKYC for every DIN holderBy 30 Sep 2026
DPT-3Return of deposits & outstanding moneyBy 30 Jun 2026
MSME-1Half-yearly dues to MSME vendors outstanding > 45 days31 Oct / 30 Apr

Don't forget the adjacent filings

  • Tax audit (Sec 44AB, Income-tax Act): if turnover/receipts cross the threshold — Forms 3CA/3CB and 3CD. Separate from the statutory audit. See who needs a tax audit.
  • GST annual return & reconciliation: GSTR-9 / GSTR-9C where applicable — track it on our GST & TDS compliance calendar.
  • The company's income tax return for AY 2026-27.
  • Cost audit / secretarial audit filings (CRA-4 / MR-3) if applicable per Step 2.

Penalties for getting it wrong

  • AOC-4 / MGT-7 late filing: ₹100 per day, per form, with no cap.
  • Three consecutive years of default: director disqualification under Sec 164 and possible strike-off.
  • No AGM: fine up to ₹1 lakh on the company and officers in default (Sec 99).
  • ADT-1 late: per-day additional fee.
  • Secretarial audit default: up to ₹2 lakh per defaulter (Sec 204(4)).

The five mistakes we see most often

  • Treating "small company" as "no audit." Statutory audit applies to every company; only the reliefs differ.
  • Audit trail switched on mid-year — an instant reportable exception under Rule 11(g).
  • Missing the applicability matrix — discovering CARO, IFC, internal audit or consolidation applies only after the auditor flags it.
  • AGM held late, which silently breaches every downstream filing deadline.
  • Bank quarterly returns not reconciled to books where borrowing against current assets — a common CARO qualification.

How Startup Advisory Can Help

Startup Advisory is a CA-led firm in Saket, New Delhi that takes companies across Delhi NCR through the statutory audit end-to-end — so you are ready, compliant and filed on time:

  • Audit-ready bookkeeping with a compliant audit trail, clean reconciliations and complete schedules.
  • An applicability review — CARO, Ind AS vs AS, internal/cost/secretarial audit and consolidation — so nothing is discovered late.
  • Board's report, AGM and the full ROC filing chain (ADT-1, AOC-4, MGT-7) filed correctly and on time.
  • A named Chartered Accountant who owns the timeline with you — supported by our Virtual CFO service where you need ongoing finance leadership.

Call 9311972982 or book a free consultation to get your FY 2025-26 audit on track.

This article is general information, not professional advice. Thresholds, forms and due dates are set by the MCA / Government of India and can change — confirm the current position for your company's specific facts with a Chartered Accountant before acting.

Frequently Asked Questions

Yes. Every company registered under the Companies Act, 2013 — private, public, OPC or small — must have its accounts audited every financial year, regardless of turnover, profit or activity. Even a company with nil activity must complete a statutory audit and still file AOC-4 and MGT-7 or MGT-7A with the Registrar of Companies.

A statutory audit is mandatory for every company under the Companies Act, 2013, irrespective of size. A tax audit under Section 44AB of the Income-tax Act applies only when turnover or receipts cross prescribed thresholds and results in Form 3CA/3CB and 3CD. They are separate exercises, though often done together for a company.

Since 1 April 2023, companies must maintain their books on accounting software that has an audit trail (edit log) feature, which must remain switched on throughout the year for all relevant transactions. The statutory auditor is required to report on it under Rule 11(g) of the Companies (Audit and Auditors) Rules, 2014. A mid-year activation is a reportable exception.

CARO 2020 (issued under Section 143(11)) applies to most companies, but exempts banking, insurance and Section 8 companies, OPCs, small companies, and a private company that meets all of these: paid-up capital plus reserves not exceeding ₹1 crore, borrowings not exceeding ₹1 crore at any time during the year, revenue not exceeding ₹10 crore, and which is not a holding or subsidiary of a public company.

Ind AS applies if you are a listed company (other than on the SME exchange), or an unlisted company with net worth of ₹250 crore or more, or a holding, subsidiary, joint venture or associate of such a company. Everyone else follows the Accounting Standards under the Companies (Accounting Standards) Rules, 2021. Once Ind AS becomes applicable it is permanent.

For a company with a 31 March 2026 year-end, the AGM must be held by 30 September 2026. AOC-4 (financial statements) is due within 30 days of the AGM — around 29–30 October 2026 if the AGM is on 30 September. MGT-7 or MGT-7A (annual return) is due within 60 days of the AGM — around 28–29 November 2026. An OPC files AOC-4 within 180 days of the year-end, i.e. by 27 September 2026.

Close and freeze the books, complete bank, GST, TDS and inter-company reconciliations, and prepare key schedules — fixed assets, inventory, receivables ageing, borrowings and related-party transactions. Keep the accounting software's audit-trail report, board minutes, statutory registers and prior-year financials ready, and have the going-concern and subsequent-events position assessed.

Late filing of AOC-4 and MGT-7 attracts an additional fee of ₹100 per day, per form, with no upper cap. Continued default for three consecutive financial years can lead to director disqualification under Section 164 and possible strike-off of the company. Not holding the AGM on time is itself an offence under Section 99.
KM

About the author: CA Kunal Mehta, FCA

Co-Founder & Chartered Accountant, Startup Advisory — Saket, New Delhi

CA Kunal Mehta is a Fellow Chartered Accountant (FCA) and a co-founder of Startup Advisory who focuses on the finance and growth side of a startup's journey — fundraising readiness, cash-flow planning, corporate tax and GST for founders across Delhi NCR.

Our Testimonials

Our Clients

Latest Updates

Fresh guides on tax, GST and startup compliance from our CA team.

View All Articles

Get a Free Consultation

Share your details — our experts call you back.