A company can meet its accounting obligations in Saudi Arabia and still misunderstand whether it must appoint an external auditor. The answer depends on its legal structure, size, ownership and specific regulatory position. Under the Saudi Companies Law, certain micro and small companies may qualify for an exemption, while listed companies, foreign companies, and businesses covered by other laws may not.
External Audit Saudi Arabia requirements also need to be considered separately from the obligation to prepare and file financial statements through Qawaem. Recent 2026 changes to financial statement filing penalties make this distinction even more important. Audit Services KSA provides External Audit Services KSA support to help businesses understand which requirements apply to their company and where an audit exemption may or may not apply.
When Does a Company Have to Appoint an External Auditor Under Saudi Companies Law?
Under the Saudi Companies Law, the starting point for Statutory Audit Saudi Arabia is Article 18, which requires companies to appoint one or more auditors where the law applies. However, Article 19 creates an exemption for qualifying micro and small companies, subject to specific exceptions. This means a company should not decide its audit position only by looking at its revenue or employee count. It must also check its legal form, ownership structure, articles of association and any other law that may require an auditor.
Article 18: The General Auditor Appointment Rule
Article 18 provides the general legal basis for appointing an auditor. Where a company does not qualify for the exemption in Article 19, the applicable auditor appointment requirements continue to apply.
Article 19: When the Auditor Appointment Requirement Does Not Apply
Article 19 allows qualifying micro and small companies to fall outside the general auditor appointment requirement. The exemption is subject to conditions and does not apply in every situation. A company therefore needs to assess both the size criteria and the statutory exceptions before relying on it.
Which Companies Are Excluded From the External Audit Saudi Arabia Exemption?
The small-company exemption is not available to every business that meets the size thresholds. Article 19 identifies situations where the exemption does not apply.
Foreign Companies
A foreign company operating in Saudi Arabia cannot automatically claim the same exemption available to a qualifying Saudi company. Its specific legal position should be checked against the Companies Law and rules applying to foreign companies.
Listed Companies
Listed companies are subject to additional capital-market requirements. The small-company exemption does not provide a route for a listed company to avoid the external audit rules that apply to it.
Companies Issuing Debt or Certain Securities
A company involved in issuing debt instruments or certain securities may fall outside the exemption. The nature of the instrument and the applicable regulatory rules should be checked before relying on the exemption.
Companies Subject to Another Auditor Requirement
Another Saudi law or regulation may require an auditor even when a company meets the micro or small company criteria. Sector-specific rules therefore need to be checked separately.
Parent and Subsidiary Companies
The relationship between companies can affect eligibility. A company should check whether it owns another company or operates as a subsidiary before treating the small-company exemption as applicable.
Articles of Association Requiring an Auditor
A company’s own articles may require an auditor. Where this applies, the company cannot simply rely on its size to disregard that requirement.
How Is a Micro or Small Company Determined for Audit Exemption?
The exemption depends on meeting the applicable size test rather than simply describing a business as “small.” Saudi guidance uses three measures: revenue, total assets and employee numbers.
- Annual revenue: The company has annual revenue of no more than SAR 10 million.
- Total assets: Total assets do not exceed SAR 10 million.
- Employees: The company has no more than 49 employees.
- Two-out-of-three test: The company generally needs to meet at least two of the three measures.
- Current figures matter: The company should assess the relevant figures for the applicable financial period rather than rely on an old classification.
- Exceptions still apply: Meeting two criteria does not remove the need to check the Article 19 exceptions.
Why Do Two of the Three Criteria Matter?
The three measures prevent a company from being classified only because of one aspect of its operations. For example, a business could have fewer than 50 employees but revenue above the permitted threshold. The company should assess all three measures and then check whether another statutory condition prevents the exemption.
Can Shareholders Still Require an External Auditor?
An audit exemption does not necessarily mean that shareholders or partners lose the ability to request an auditor. Article 19 provides a mechanism under which partners or shareholders representing at least 10% of the interests or voting shares can request the appointment of an auditor in accordance with the applicable regulations.
This gives qualifying owners a route to seek an external review even where the company otherwise falls within the exemption. The point is separate from the normal company-size test, so management should not treat an exemption as an absolute bar against an auditor being requested.
Does an Audit Exemption Remove the Requirement to File Financial Statements?
No. An exemption from appointing an external auditor does not remove the company’s responsibility to prepare and file its financial statements. A Financial Audit KSA is a separate matter from financial reporting, and Saudi companies remain subject to financial reporting and Qawaem filing requirements according to the applicable rules. The Ministry of Commerce states that financial statements must be prepared using the accounting standards approved in Saudi Arabia and filed electronically through Qawaem within six months from the end of the financial year.
This means two separate questions must always be asked: Does the company need an external auditor? And does the company need to file its financial statements? For an exempt company, the first answer may be no while the second remains yes.
Who Is Responsible for Financial Statements When There Is No External Auditor?
When an eligible company does not appoint an external auditor, responsibility for preparing the financial statements does not disappear. The responsible person depends on the company’s legal structure.
- LLC: The manager or board of managers has the relevant responsibility.
- Unlisted joint-stock company: The board is responsible for the company’s financial statements.
- Simplified joint-stock company: Responsibility follows the management structure established under the applicable rules.
- Partnership structures: The responsible partners or management structure should be identified according to the company’s form.
- Management records: The responsible persons must still maintain proper accounting information and meet applicable filing obligations.
What Are the Financial Statement Filing Deadlines Under the Current Saudi Rules?
The current general filing timeline can be understood as a sequence rather than as an isolated deadline:
Financial year ends → financial statements are prepared → audit is completed where required → required annual meeting process takes place → financial statements are filed through Qawaem within six months of the financial year-end.
For companies subject to an external audit, the SOCPA Audit must be completed in time for the company to meet its wider reporting and filing obligations. For an audit-exempt company, the audit stage may not apply, but the financial statement preparation and Qawaem filing obligations remain. The Ministry of Commerce also provides timing requirements concerning the availability of financial statements before the annual general assembly, depending on the company’s legal form and circumstances.
What Changed for Financial Statement Filing Penalties in 2026?
The financial statement filing framework became more important in 2026 following the Ministry of Commerce’s announcement of Ministerial Decision No. 236 concerning direct penalties for failure to file financial statements.
- Direct penalties: Companies can face direct financial penalties for failure to meet applicable filing obligations.
- Company factors: The fine can depend on factors such as company form and capital.
- Listed companies: Separate treatment applies to listed companies under the relevant framework.
- Management structure: The number of responsible managers or directors can affect the applicable penalty.
- Repeated non-filing: Where the relevant conditions are met, repeated failure for two consecutive financial years can result in a 50% increase after the first violation decision becomes final.
When Does a Company Need to Reassess Its Audit Exemption?
A company should not assume that an exemption automatically continues every year. Changes in the business can alter its position under the Companies Law, and a Financial Audit KSA may become necessary if any of the following occurs:
- Revenue moves above the applicable threshold.
- Total assets move above the applicable threshold.
- Employee numbers change.
- Ownership or group structure changes.
- The company becomes a parent or subsidiary in circumstances covered by the law.
- The company issues debt or certain securities.
- Another law, regulation or the company’s articles creates an auditor requirement.
External Audit Saudi Arabia Requirements for Different Companies Are Different
There is no single audit rule that should be applied to every company operating in Saudi Arabia. An eligible small private company may qualify for the Article 19 exemption, while a listed company remains subject to capital-market requirements and may need a Statutory Audit Saudi Arabia. A foreign company may fall under separate rules, and a business operating in a regulated sector may have additional obligations imposed by its regulator.
Company structure therefore needs to be checked before deciding whether an auditor is required. This approach also prevents businesses from confusing the general Companies Law with the additional requirements that can apply to listed or regulated entities.
What Should a Saudi Company Check Before Claiming an Audit Exemption?
Before relying on an exemption, the company should work through the following checks:
1. Confirm the Legal Structure
Identify whether the business is an LLC, joint-stock company, simplified joint-stock company, partnership or another form.
2. Check Revenue
Review the relevant annual revenue against the applicable SAR 10 million threshold.
3. Check Total Assets
Review the company’s total assets against the applicable SAR 10 million threshold.
4. Check Employee Numbers
Confirm the number of employees and assess it against the 49-employee threshold.
5. Check Article 19 Exceptions
Review foreign ownership/company status, listed status, securities, group structure, articles of association and other legal requirements.
6. Confirm Filing Obligations
Even if the auditor exemption applies, confirm the company’s financial statement preparation and Qawaem filing requirements.
Common Mistakes Companies Make When Assessing External Audit Saudi Arabia Requirements
Companies can make compliance decisions incorrectly when they treat the exemption as a simple size test.
- Assuming every company must appoint an external auditor.
- Assuming an audit exemption means companies don’t need to file their financial statements.
- Checking only employee numbers instead of all three size criteria.
- Ignoring the exceptions listed under Article 19.
- Assuming a previous year’s exemption will automatically continue.
Need Help With External Audit Saudi Arabia Requirements?
Understanding the audit exemption is only one part of compliance. Companies also need to check their legal structure, financial thresholds, ownership position, filing obligations and any sector-specific requirements. Audit Services KSA offers External Audit Services KSA to help businesses review their requirements and understand the rules that apply to their specific company.
Contact Audit Services KSA for guidance on your company’s audit requirements.
Phone: +966 54 865 6146
Email: info@auditservicesksa.com
FAQs
Can a small company in Saudi Arabia be exempt from appointing an external auditor?
Yes. A qualifying micro or small company may be exempt if it meets the applicable criteria and none of the statutory exceptions applies.
What are the three criteria for the Saudi small-company audit exemption?
The criteria relate to annual revenue, total assets and employee numbers, with the applicable exemption generally based on meeting two of the three measures.
Does an audit exemption remove Qawaem filing requirements?
No. A company may be exempt from appointing an auditor while still being required to prepare and file its financial statements through Qawaem.
Can shareholders request an auditor even when a company is exempt?
Yes. Partners or shareholders meeting the statutory threshold can request an auditor in accordance with the applicable Companies Law provisions.
What happens if a company no longer qualifies for an audit exemption?
The company should reassess its position and comply with the external auditor appointment requirements that apply to its new circumstances, including arranging a SOCPA Audit where required.