Statutory Audit for Foreign Subsidiaries: Requirements & Timeline

Introduction: Why Statutory Audit Is Different for Foreign Subsidiaries

This article is part of our Complete Guide to Annual Compliance for Foreign-Owned Companies in India. Here we dive deep into the statutory audit process that every foreign subsidiary must complete each year.

Every company incorporated in India — regardless of size, revenue, or ownership structure — must undergo a statutory audit of its financial statements every financial year. This is not optional. Under Section 139 of the Companies Act 2013, failure to appoint a statutory auditor and get your books audited is a compoundable offence that exposes both the company and its directors to financial penalties and, in extreme cases, criminal prosecution.

For wholly-owned subsidiaries of foreign companies, the statutory audit carries additional complexity. The Indian subsidiary's financial statements must comply with Indian Accounting Standards (Ind AS) or Indian GAAP, which differ materially from IFRS, US GAAP, and other frameworks the parent company may use. The audit timeline must align with the AGM deadline. And the auditor's report must address specific matters under CARO 2020 that apply to companies with foreign direct investment.

Auditor Appointment: Rules and Restrictions

First Auditor — Within 30 Days of Incorporation

Under Section 139(6) of the Companies Act 2013, the Board of Directors must appoint the first auditor within 30 days of the company's incorporation. This first auditor holds office until the conclusion of the first Annual General Meeting (AGM). If the board fails to appoint within 30 days, the members (shareholders) must appoint the auditor within 90 days at an Extraordinary General Meeting.

For foreign subsidiaries, this means the parent company — as the sole or majority shareholder — must ensure a qualified Indian Chartered Accountant or CA firm is appointed immediately after receiving the Certificate of Incorporation from the SPICe+ process.

Subsequent Auditor — 5-Year Term

At the first AGM, the statutory auditor is appointed for a term of 5 consecutive years (Section 139(1)). This appointment must be filed with the Registrar of Companies using Form ADT-1 within 15 days of the AGM. The auditor can be reappointed for one additional term of 5 years, after which mandatory rotation applies.

Who Can Be the Statutory Auditor?

Only a practicing Chartered Accountant or a firm of Chartered Accountants registered with the Institute of Chartered Accountants of India (ICAI) can serve as statutory auditor. The auditor must hold a valid Certificate of Practice and must not have any disqualifications under Section 141 of the Act, including:

• Being a director, officer, or employee of the company
• Having a business relationship with the company
• Holding securities of the company (or its subsidiary/holding company) with face value exceeding INR 1 lakh
• Being indebted to the company for more than INR 5 lakh

For foreign subsidiaries, the auditor cannot be the same firm that serves as the parent company's statutory auditor in India, unless they maintain separate engagement teams to avoid conflicts of interest.

Auditor Rotation Requirements

Mandatory auditor rotation applies to certain classes of companies. For companies (including private limited companies) meeting specified thresholds, an individual auditor can serve for one term of 5 consecutive years, and an audit firm can serve for two consecutive terms of 5 years each (10 years total). After the maximum term, there must be a cooling-off period of 5 years before the same auditor or firm can be reappointed.

Scope of Statutory Audit: What Gets Audited

Financial Statements

The statutory auditor audits the company's financial statements for the financial year (April 1 to March 31), which comprise:

• Balance Sheet: Statement of assets, liabilities, and equity as at March 31
• Statement of Profit and Loss: Revenue, expenses, and net profit/loss for the year
• Cash Flow Statement: Mandatory for all companies except One Person Companies (OPCs) and small companies
• Statement of Changes in Equity: Required for companies following Ind AS
• Notes to Accounts: Significant accounting policies, contingent liabilities, related party transactions, and other disclosures

CARO 2020 Reporting

The Companies (Auditor's Report) Order 2020 (CARO 2020) requires the statutory auditor to report on 21 specific clauses covering areas such as:

• Fixed assets: existence, title deeds, revaluation, and benami property
• Inventory: physical verification and valuation
• Loans and advances: terms, conditions, and reporting to RBI
• Related party transactions: compliance with Sections 177 and 188 (critical for foreign subsidiaries with intercompany transactions)
• Deposits and borrowings from public
• Cost records maintenance under Section 148
• Statutory dues: GST, TDS, income tax, PF, ESI — whether deposited on time
• Undisclosed income and transactions
• Default on loans from banks or financial institutions
• Whistle-blower complaints

CARO 2020 applies to all companies except banking companies, insurance companies, companies registered under Section 8, OPCs, and small companies (paid-up capital up to INR 4 crore and turnover up to INR 40 crore). Most foreign subsidiaries exceed these thresholds and are therefore subject to CARO.

Internal Financial Controls (IFC) Reporting

Under Section 143(3)(i), the auditor must also report on the adequacy of internal financial controls with reference to the financial statements. For foreign subsidiaries, this often requires coordination between the Indian auditor and the parent company's group auditor, who may have their own internal controls requirements (e.g., SOX compliance for US-listed parents).

Month-by-Month Audit Timeline

The statutory audit must be completed before the AGM, which is due by September 30 each year. Here is the practical timeline for a foreign subsidiary with a March 31 financial year-end:

Consolidated Financial Statements

If the Indian subsidiary itself has any subsidiaries, it must also prepare and file consolidated financial statements (CFS) using Form AOC-4 CFS. This requires the subsidiary's auditor to issue a separate audit opinion on the consolidated accounts.

Tax Audit: An Additional Layer

In addition to the statutory audit under the Companies Act, foreign subsidiaries are almost always subject to a tax audit under Section 44AB of the Income Tax Act. The tax audit is required if:

• Business turnover exceeds INR 1 crore (INR 10 crore if cash transactions are less than 5% of total turnover), or
• Professional gross receipts exceed INR 50 lakh

The tax audit report (Form 3CD) must be filed by September 30 of the assessment year. For companies with international transactions requiring transfer pricing documentation, the due date extends to November 30, and the transfer pricing audit report (Form 3CEB) must be filed by the same date.

Special Compliance for Foreign Subsidiaries

FLA Return

Every Indian company that has received foreign direct investment must file the Annual Return on Foreign Liabilities and Assets (FLA Return) with the RBI by July 15 each year. This is separate from the statutory audit but requires audited financial data, so the audit timeline must accommodate this earlier deadline.

Transfer Pricing Documentation

Foreign subsidiaries with international transactions (intercompany payments, royalties, management fees, cost allocations) must maintain contemporaneous transfer pricing documentation. The transfer pricing study should be completed alongside the statutory audit so that related party transaction disclosures in the financial statements are consistent with the transfer pricing positions.

FEMA Compliance Certificate

The statutory auditor of a foreign subsidiary is often required to issue a FEMA compliance certificate confirming that the company has complied with all foreign exchange regulations during the year, including FDI pricing guidelines, downstream investment norms, and external commercial borrowing rules.

Penalties for Non-Compliance

The penalty framework for statutory audit failures is significant and applies to the company, its officers, and the auditor separately:

For foreign subsidiaries, the practical risk extends beyond financial penalties. If the ROC filings are significantly overdue, the company risks being marked as a "defaulting company," which can trigger director disqualification under Section 164(2). Once a director is disqualified, they cannot serve on any company board for 5 years — a devastating outcome when the disqualified director is a foreign national appointed by the parent company.

Choosing the Right Audit Firm

Foreign subsidiaries should consider these factors when selecting a statutory auditor:

• Network affiliation: A local firm affiliated with the parent company's global audit network can streamline group reporting, but must maintain independence as required by the Companies Act
• CARO experience: Ensure the firm has experience with CARO 2020 reporting requirements specific to companies with foreign investment
• FEMA knowledge: The auditor must understand FEMA and RBI compliance requirements to issue the required certificates
• Transfer pricing coordination: The statutory auditor should coordinate with the transfer pricing consultant to ensure consistency between financial statement disclosures and transfer pricing positions
• Cost: Statutory audit fees for foreign subsidiaries typically range from INR 50,000 to INR 3,00,000 annually, depending on the company's size, complexity of transactions, and number of intercompany arrangements

Companies should also consider engaging their statutory auditor for annual compliance advisory to ensure all deadlines are met throughout the year.

Key Takeaways

• Appoint early: The first auditor must be appointed within 30 days of incorporation; subsequent appointments are for 5-year terms filed via ADT-1 within 15 days of the AGM.
• Plan the timeline: The statutory audit must be completed before the September 30 AGM deadline. FLA Return (July 15) requires audited data even earlier — so audit fieldwork should start in May.
• CARO 2020 applies: Most foreign subsidiaries exceed the small company thresholds and must comply with the 21-clause CARO 2020 reporting framework.
• Penalties escalate: Late filings attract INR 100/day with no cap, and prolonged non-compliance can trigger director disqualification — particularly problematic for foreign-appointed directors.
• Coordinate with group reporting: The Indian statutory audit timeline must align with the parent company's group audit calendar to avoid delays in consolidated reporting.