June 10, 2026
Audit obligations in Saudi Arabia are not one-size-fits-all. Some companies must appoint an external auditor every year, others are formally exempt, and the line between the two sits in the Companies Law and its implementing regulations. For business owners, finance directors, and foreign investors entering the Kingdom, knowing which side of that line you fall on prevents both unnecessary cost and serious compliance gaps.
This article sets out who must be audited in KSA, who qualifies for exemption, the deadlines that apply, and what happens when a required audit is missed. The position reflects the Companies Law in force for 2025 and 2026.
For many companies in Saudi Arabia, an annual external audit is mandatory. It applies automatically to joint stock companies and to limited liability companies that pass certain size thresholds. Micro and small companies can be exempt from appointing an auditor, provided they meet defined conditions. So the honest answer is that it depends on your legal form and your size, not on preference.
This distinction matters commercially. An audited set of accounts signals reliability to banks, partners, and the Capital Market Authority, while an exempt company that later seeks investment or a credit line often finds itself needing an audit anyway. Treating the requirement as a planning question, rather than a year-end surprise, usually serves a growing business better.
Audit and financial reporting in the Kingdom are governed by the Companies Law issued under Royal Decree M/132, which took effect in February 2023 and replaced the earlier 2015 statute. Several authorities share oversight. The Ministry of Commerce supervises incorporation, governance filings, and financial statement submission. The Capital Market Authority regulates listed joint stock companies. The Saudi Organization for Chartered and Professional Accountants, known as SOCPA, sets the accounting and auditing standards that apply.
Companies prepare financial statements using SOCPA-endorsed standards, which are aligned with IFRS, and audits follow rules consistent with the International Standards on Auditing. This framework, and SOCPA’s role within it, is documented in the IFAC country profile for Saudi Arabia. The Ministry of Commerce confirms that statements must be filed through the Qawaem platform, as set out in its official guidance on financial statement submission.
Mandatory audit typically applies to the following:
Foreign-owned entities sit firmly inside the audited group. A company formed through MISA licensing for full foreign ownership is generally expected to maintain audited financial statements, regardless of the small-company exemption that applies to some domestic businesses. If you are planning a business setup in Saudi Arabia, building audit readiness into the structure from day one avoids costly retrofitting later.
The Companies Law, under Article 19, exempts micro and small companies from the obligation to appoint an external auditor. A company can claim this exemption when it meets at least two of three criteria:
The exemption is not unconditional. It does not apply to foreign entities, to companies issuing debt instruments, or where the articles of association require an auditor. It also falls away if partners representing a defined share of capital ask for one. When a company is exempt, its manager or board chairman must attach a declaration confirming this when filing financial statements. Importantly, exemption from audit does not release the business from its obligations to ZATCA, GOSI, or other authorities.
A statutory audit in KSA must be carried out by an auditor licensed by SOCPA. For listed companies, the auditor must also be acceptable to the CMA. Unlicensed practitioners cannot sign a statutory audit report, which is why companies work with SOCPA-registered firms or the Saudi member firms of international networks. The auditor expresses an opinion on whether the financial statements present a fair view in line with the applicable reporting framework. Choosing a firm with sector experience also matters, since banks, insurers, and listed entities each carry specific regulatory expectations that a generalist may miss.
Timing is set by the Companies Law. Companies must prepare and submit their financial statements within six months of the end of their fiscal year, under Article 17, through the Qawaem platform. For joint stock companies, the annual general meeting that approves the audited statements is held within the same six-month window. Listed companies face additional CMA disclosure timelines on top of this.
Strong financial reporting and analysis during the year keeps these deadlines manageable, because the audit becomes a verification of clean records rather than a reconstruction exercise under time pressure.
Skipping a mandatory audit, or filing late, carries consequences. The Companies Law provides for administrative penalties, and persistent non-compliance can lead to suspension of the commercial registration or civil liability for responsible officers. Beyond the legal exposure, unaudited or late statements weaken tax filings with ZATCA, complicate financing applications, and erode investor confidence. For a foreign parent relying on consolidated reporting, a missing Saudi audit can disrupt group accounts at year-end.
For most companies operating at scale in the Kingdom, the question is less about avoiding audit and more about meeting it efficiently and on time. Reliable external audit services in saudi arabia turn a statutory obligation into a source of assurance for boards, lenders, and investors.
Infinity Horizons supports businesses across Riyadh, Jeddah, and the wider Kingdom with audit and assurance work backed by a 100 percent compliance track record and deep grounding in Saudi business law. From confirming whether the audit requirement applies to your structure, to delivering a SOCPA-compliant statutory audit, the focus stays on filings that hold up to regulatory and investor scrutiny.
Not sure if your company crosses the audit threshold? Request an audit applicability assessment and get a clear, documented answer for your legal structure.
Need a statutory audit handled end to end? Talk to our team, one of the trusted external audit companies in KSA, to schedule your engagement.
Is an audit mandatory for all companies in Saudi Arabia?
No. An annual external audit is mandatory for joint stock companies, listed and CMA-regulated entities, banks, insurers, branches of foreign companies, and larger limited liability companies. Micro and small companies that meet defined size criteria can be exempt from appointing an auditor, though sector rules or their own articles of association may still require one.
Are small companies exempt from audit in KSA?
Yes, in many cases. Under Article 19 of the Companies Law, a company can be exempt from appointing an external auditor if it meets at least two of three thresholds: annual revenue under SAR 10 million, total assets under SAR 10 million, and fewer than 49 employees. The exemption does not apply to foreign entities or debt-issuing companies, and a declaration must accompany the filing.
Who can perform a statutory audit in Saudi Arabia?
Only an auditor licensed by SOCPA can sign a statutory audit report in the Kingdom. For listed companies, the auditor must also be acceptable to the Capital Market Authority. Audits follow standards aligned with the International Standards on Auditing, and the auditor issues an opinion on whether the financial statements give a fair view under the applicable framework.
When must audited financial statements be filed in Saudi Arabia?
Companies must prepare and submit their financial statements within six months of their fiscal year-end, under Article 17 of the Companies Law, through the Ministry of Commerce Qawaem platform. Joint stock companies hold their annual general meeting to approve the audited statements within the same window, and listed companies meet additional CMA disclosure deadlines.
Do foreign-owned companies in Saudi Arabia need an audit?
Generally yes. Foreign-owned entities, including companies set up through MISA licensing and branches of overseas companies, are expected to maintain audited financial statements and are not covered by the small-company exemption. Audited accounts also support tax filings, investor reporting, and consolidation into a foreign parent’s group financial statements.
What is the penalty for not auditing financial statements in KSA?
Failing to audit when required, or filing late, can trigger administrative penalties under the Companies Law. Persistent non-compliance may lead to suspension of the commercial registration or civil liability for responsible officers. There are knock-on effects too, including weaker ZATCA tax positions, harder access to financing, and reduced investor confidence.
Contact Us
