Statutory Audit vs Tax Audit vs Internal Audit in India

By Vikram Mehta | Updated March 2026

Foreign companies operating in India through a subsidiary or branch office inevitably encounter three types of audits: the statutory audit under the Companies Act 2013, the tax audit under Section 44AB of the Income Tax Act 1961, and the internal audit under Section 138 of the Companies Act. Each serves a different purpose, is governed by different legislation, has different applicability thresholds, and carries different penalties for non-compliance.

The confusion arises because all three overlap in timing (July-September each year), all involve Chartered Accountants, and the reports feed into each other. But they are not interchangeable. Every Indian private limited company needs a statutory audit regardless of turnover; a tax audit becomes mandatory only above INR 1 crore turnover (or INR 10 crore with low cash transactions); and an internal audit kicks in only for larger companies with turnover above INR 200 crore or borrowings above INR 100 crore.

Quick Comparison Table

When Is Each Audit Mandatory?

Statutory Audit — Every Company, Every Year

Under Section 139(1) of the Companies Act 2013, every company must appoint an auditor at its first AGM, and the auditor holds office from the conclusion of that AGM until the conclusion of the sixth AGM. This applies to every private limited company, public limited company, one-person company, and Section 8 company — regardless of whether the company has zero revenue or INR 1,000 crore revenue.

For LLPs, the threshold is lower: statutory audit is mandatory if the LLP's annual turnover exceeds INR 40 lakh or its capital contribution exceeds INR 25 lakh (Section 34(4) of the LLP Act, 2008).

For foreign company subsidiaries in India, this means your Indian entity needs a statutory audit from Day 1 — even before it earns its first rupee of revenue. The statutory auditor must be an independent practicing CA or CA firm, not an employee of the company. The auditor examines the financial statements (balance sheet, profit and loss account, cash flow statement) and issues an opinion on whether they present a true and fair view in accordance with Ind AS/Indian GAAP.

Tax Audit — Turnover-Triggered

Section 44AB mandates a tax audit when:

• Business turnover exceeds INR 1 crore in the financial year — this is the base threshold
• Higher threshold of INR 10 crore applies if the assessee's cash receipts and cash payments each do not exceed 5% of total receipts and payments respectively (amended by Finance Act 2020)
• Professional gross receipts exceed INR 50 lakh (INR 75 lakh if 95%+ of receipts are through digital/banking channels)
• Presumptive taxation under Section 44AD/44ADA — if the assessee claims profits lower than the presumptive rate (8% for business, 50% for professionals), tax audit is triggered regardless of turnover

The tax audit is conducted by a practicing CA who examines whether taxable income has been correctly computed. The CA issues Form 3CA (if the entity is already subject to statutory audit under any law) or Form 3CB (if not), along with Form 3CD — a detailed statement of 44 prescribed particulars covering depreciation, GST compliance, TDS deductions, related party transactions, and more.

For a foreign subsidiary in India that is a private limited company, both statutory audit and tax audit typically apply — statutory audit by default (it is a company) and tax audit once turnover crosses INR 1 crore.

Internal Audit — Size-Triggered

Section 138 of the Companies Act 2013, read with Rule 13 of the Companies (Accounts) Rules 2014, mandates internal audit for larger companies:

Unlike statutory and tax audits, internal audit can be conducted by an employee of the company — not just external CAs. The Companies Act permits CAs, Cost Accountants, or any other professional as determined by the Board. The scope is broader: evaluating internal financial controls, operational efficiency, fraud detection, and compliance processes.

Most foreign subsidiary companies in India — unless they are very large operations — will not trigger the internal audit requirement. A typical WOS with INR 50-100 crore turnover needs statutory audit and tax audit but not a mandatory internal audit. However, many MNEs voluntarily conduct internal audits to satisfy parent company governance requirements (SOX compliance, J-SOX, etc.).

Timeline and Coordination

The three audits cluster in the April-October window each year, creating a busy compliance season:

For foreign subsidiaries, the statutory audit and tax audit are often conducted by the same CA firm (though technically they can be different). This is efficient because the statutory audit feeds directly into the tax audit — Form 3CA is the tax audit report format used when a statutory audit already exists.

Which Should You Choose?

You need a statutory audit if:

• Your Indian entity is a company (private, public, OPC) — mandatory regardless of turnover
• Your LLP has turnover above INR 40 lakh or capital above INR 25 lakh
• You need audited financial statements for filing AOC-4 with the ROC
• Your parent company requires audited financials for consolidation

You need a tax audit if:

• Your business turnover exceeds INR 1 crore (or INR 10 crore with less than 5% cash transactions)
• Your professional receipts exceed INR 50 lakh
• You are claiming profits below the presumptive rate under Section 44AD/44ADA
• You want to claim specific deductions that require a tax audit certificate

You need an internal audit if:

• Your company is listed on any stock exchange
• Your turnover exceeds INR 200 crore
• Your outstanding bank/FI borrowings exceed INR 100 crore
• Your parent company mandates internal audit for corporate governance (SOX, J-SOX)
• You want proactive fraud detection and control environment assessment

Common Mistakes

• Assuming the statutory auditor covers the tax audit — The statutory audit verifies financial statements under the Companies Act. The tax audit is a separate report under the Income Tax Act. Even if the same CA firm conducts both, they are separate engagements with separate reports, separate forms, and separate filing deadlines.
• Missing the INR 10 crore safe zone for tax audit — Many companies with turnover between INR 1 crore and INR 10 crore unnecessarily get a tax audit done. If your cash receipts and cash payments are each below 5% of total transactions, the threshold is INR 10 crore, not INR 1 crore. Check before you spend INR 50,000-1,50,000 on an unnecessary audit.
• Appointing an employee as statutory auditor — Section 141(3) disqualifies any person who is an officer or employee of the company from being its statutory auditor. For internal audit, an employee is fine. For statutory audit, it must be an independent external CA. Foreign parent companies sometimes try to deploy their global internal audit team for this — it does not work under Indian law.
• Ignoring the penalty asymmetry — Tax audit penalty is capped at INR 1,50,000. But the real cost of missing a tax audit is the cascading effect: your ITR due date is 31 October (audit cases), and if the ITR is also late, you face interest under Section 234A (1% per month on unpaid tax) and a late filing fee of INR 5,000-10,000 under Section 234F. The total exposure far exceeds INR 1,50,000.
• Not budgeting for all three audits — A mid-size foreign subsidiary (INR 50-200 crore turnover) typically pays INR 3-8 lakh for statutory audit, INR 1-3 lakh for tax audit, and INR 5-15 lakh for internal audit (if applicable). Total audit cost of INR 9-26 lakh per year should be budgeted from the outset.

Practical Example

TechBridge Ltd, a UK-based SaaS company, has a wholly owned Indian subsidiary — TechBridge India Pvt Ltd — incorporated under the SPICe+ route. In FY 2025-26, TechBridge India has turnover of INR 85 crore, 150 employees, and outstanding bank loans of INR 45 crore. All transactions are digital (zero cash).

Statutory Audit

Mandatory from Day 1 of incorporation. TechBridge India appoints a CA firm at its first AGM. The firm audits the Ind AS financial statements (balance sheet, P&L, cash flow, notes) and issues an unmodified opinion. Cost: approximately INR 4-6 lakh. The audited financials are filed with the ROC via AOC-4 within 30 days of the September AGM.

Tax Audit

Turnover of INR 85 crore exceeds INR 1 crore but is below INR 10 crore. Since cash transactions are zero (well below 5%), the higher threshold of INR 10 crore applies. Tax audit is mandatory. The same CA firm issues Form 3CA (since statutory audit already exists) + Form 3CD with all 44 particulars. Cost: approximately INR 1.5-2.5 lakh (lower because the statutory audit has already verified the books). Uploaded to the IT e-filing portal by 30 September 2026.

Internal Audit

Turnover of INR 85 crore is below the INR 200 crore threshold. Outstanding bank loans of INR 45 crore are below INR 100 crore. Internal audit is not mandatory under Section 138. However, TechBridge UK requires an annual internal audit for SOX compliance across all subsidiaries. TechBridge India voluntarily appoints a Cost Accountant to conduct quarterly internal audits focused on revenue recognition, vendor payments, and employee reimbursement controls. Cost: approximately INR 6-10 lakh for quarterly reviews.

Total annual audit cost for TechBridge India: INR 11.5-18.5 lakh (statutory + tax + voluntary internal audit).

Key Takeaways

• Statutory audit is mandatory for every Indian company from incorporation — no turnover threshold. It verifies financial statements under the Companies Act.
• Tax audit under Section 44AB triggers at INR 1 crore turnover (or INR 10 crore if cash transactions are below 5%). It verifies taxable income computation under the Income Tax Act.
• Internal audit under Section 138 applies only to larger companies — turnover above INR 200 crore or borrowings above INR 100 crore for private companies.
• All three audits are separate engagements with different reports, different regulators, and different deadlines — even if the same CA firm conducts multiple audits.
• For a typical mid-size foreign subsidiary (INR 50-200 crore turnover), budget INR 10-25 lakh annually for all audit-related compliance.
• The statutory auditor must be an independent external CA; the internal auditor can be an employee or any professional appointed by the Board.

Need help managing your Indian subsidiary's audit and compliance calendar? Beacon Filing's compliance outsourcing service coordinates all three audits and ensures every deadline is met.