Table of Contents
- UAE Tax Audit: The Short Answer
- What a UAE Tax Audit Is and Who Decides
- How a UAE Tax Audit Runs, Step by Step
- Unannounced UAE Tax Audit Visits and Your Rights
- Which Records a UAE Tax Audit Can Ask For
- How Long to Keep Records for a UAE Tax Audit
- How Far Back a UAE Tax Audit Can Go
- An Audit-Readiness File for a Foreign-Owned Company
- What to Do in the First 10 Business Days of a UAE Tax Audit
- After a UAE Tax Audit: Assessment, Penalties and Review
- Limits of This Article
- FAQ
- Your Next Step
UAE Tax Audit: The Short Answer
A UAE tax audit is a check by the Federal Tax Authority (FTA) of your books, records and systems against what you declared. The FTA decides whether to audit, it must normally give you 10 business days’ written notice, and it can look at your premises, your files and your accounting software. Most of the work happens before the notice arrives.
Foreign-owned companies tend to be exposed in three places. Their records sit with an outsourced accountant or in another country. Their contracts are not in Arabic. And nobody inside the company knows who would answer the FTA. Each of these can be fixed in advance for far less than it costs to fix under a deadline.
This guide explains how a UAE tax audit works under the Tax Procedures Law, what you must keep, how far back the FTA can look and what to do when a notice arrives. It is written for founders and finance leads, not tax specialists.
What a UAE Tax Audit Is and Who Decides
The Tax Procedures Law (Federal Decree-Law No. 28 of 2022) defines a UAE tax audit as a procedure by the FTA to inspect a person’s commercial records, information, data or goods to see whether they have met their tax obligations. I read the consolidated English text of the Tax Procedures Law and the Executive Regulation (Cabinet Decision 74 of 2023) for this article.
Article 16 gives the FTA the right to audit any person to verify compliance with the Tax Procedures Law and the relevant tax law. That covers corporate tax, VAT and excise tax. It is not limited to companies that made a mistake. The Executive Regulation lists what the FTA weighs before it decides: protecting the integrity of the tax system, the person’s record of compliance, the tax expected to be collected, and the burden on both sides.
The same article adds a point many founders miss. The decision to audit is at the FTA’s sole discretion and cannot be objected to or challenged. You can contest the result of an audit. You cannot contest the fact that it is happening.
My view, and it is an opinion rather than a statement of FTA practice: late filings, repeated corrections, large refund claims and thin supporting records are the situations in which an audit is most uncomfortable. The law itself links refund claims and voluntary disclosures to the audit window, which I explain below. The FTA does not publish a list of audit triggers, so treat any “audit red flag” list you see online as a guess.
How a UAE Tax Audit Runs, Step by Step
The table follows the Tax Procedures Law and its Executive Regulation. Periods are in business days, which the law counts in the Gregorian calendar and excludes the day of notification.
| Stage | What happens | Period |
|---|---|---|
| 1. Notice | The FTA notifies you in writing and sets out the consequences of obstructing the auditor | At least 10 business days before the audit |
| 2. Audit | The auditor inspects premises, documents, electronic data and the accounting systems, at the FTA’s office or where you work or keep records | No fixed maximum in the law |
| 3. Results | The FTA tells you the result of the audit | Within 10 business days of the audit ending |
| 4. Evidence request | You may ask for the documents behind the FTA’s figures; the FTA supplies them | You ask within 20 business days; the FTA replies within 10 |
| 5. Assessment | The FTA issues a tax assessment and, where relevant, an administrative penalties assessment | Notified within 10 business days (tax) or 5 (penalties) of issue |
| 6. Review | You request a review or reconsideration, stating your reasons | 40 business days to ask; 40 for the FTA to decide |
Two details matter in practice. The law says the audit must be done during the FTA’s official working hours, except where the Director General approves otherwise in a case of necessity. It also lets the FTA audit a matter again if new information surfaces that could change the outcome. A clean UAE tax audit result is therefore not a permanent clearance.
The Executive Regulation lets the FTA ask a person for information or documents about itself or about another person. So a supplier, a landlord or a related company can be asked about you. Your own file should be consistent with what they hold.
Unannounced UAE Tax Audit Visits and Your Rights
The 10-business-day notice is the rule for a UAE tax audit, not an absolute guarantee. Article 16 allows an auditor to enter a business place without prior notice and to close it temporarily for up to 72 hours in three cases: serious grounds to suspect evasion, serious grounds to believe that not closing it would hinder the audit, or an attempt to stop a notified auditor from entering.
Safeguards apply. The auditor needs the prior written consent of the Director General, and a permit from the Public Prosecution if the place is a residence. A closure beyond 72 hours needs a Public Prosecution permit. For a normal operating company these cases are rare. They are worth knowing because the person at the front desk may be the first to meet the auditor.
The person being audited has rights under Article 21. You can ask the auditor to show a job identification card, obtain a copy of the notification, attend an audit held outside the FTA’s premises and obtain copies of original documents that the FTA takes. Staff should know these four points and who to call.
You also have a duty. Article 20 requires you, your tax agent or your legal representative to help the auditor do the job. In the Ministry of Finance’s Cabinet Decision No. 40 of 2017 as consolidated in November 2025, failing to give that help carried a penalty of AED 20,000. Cabinet Decision No. 129 of 2025 has since amended parts of the penalty schedule, so confirm the current figure before relying on it.
Which Records a UAE Tax Audit Can Ask For
Article 2 of the Executive Regulation says what you must keep. It has two layers: the books themselves, and the documents that support each entry. Auditors test the second layer, because that is where mistakes and gaps show up.
| Layer | Examples named in the Executive Regulation |
|---|---|
| Books and accounts | Balance sheet and profit and loss accounts; payments and receipts; purchases and sales; revenues and expenditure |
| Staff and assets | Records of wages and salaries; fixed asset records |
| Inventory | Inventory statements with quantities and values at period end, and stock-count records |
| Supporting documents | Correspondence, invoices, licences and contracts related to the business |
| Tax judgements | Documents showing any election, assessment or calculation you made on tax affairs, including the basis or method used |
The last row is the one I would stress. A tax position you took without writing down why is hard to defend two years later. A one-page memo that records the facts and the reasoning, dated at the time, often matters more than the spreadsheet behind it.
The Executive Regulation also lets the FTA inspect data stored electronically and the accounting systems you use. If your finance team works in a cloud platform managed by someone else, check that you hold administrator access and can export the data on request. Our guide on running a UAE company from abroad covers the wider governance question.
How Long to Keep Records for a UAE Tax Audit
There is no single retention period for a UAE tax audit. The Executive Regulation sets defaults and says they apply unless the tax law states otherwise. The Corporate Tax Law does state otherwise. Article 56 of the Corporate Tax Law as consolidated by the Ministry of Finance requires a taxable person to keep records for seven years following the end of the tax period they relate to. The same period applies to an exempt person, for the records that show its status.
| Record type | Minimum period | Source |
|---|---|---|
| Corporate tax records of a taxable person | 7 years after the end of the tax period | Corporate Tax Law, Article 56 |
| Other records of a taxable person (default) | 5 years after the tax period | Executive Regulation, Article 3 |
| Records of other persons (default) | 5 years from the end of the calendar year the document was created | Executive Regulation, Article 3 |
| Real estate records | 7 years from the end of the calendar year the document was created | Executive Regulation, Article 3 |
| If an audit is notified or ongoing | Additional 4 years | Executive Regulation, Article 3 |
| If a dispute with the FTA is open | Additional 4 years or until it is finally settled, whichever is later | Executive Regulation, Article 3 |
I have not confirmed the VAT-specific periods in this article, so check them before you shred anything. As a rule, keep corporate tax and supporting records for at least seven years and do not destroy a record that is linked to an open question. Storage is cheap. A missing contract is not.
The language rule is easy to overlook. Article 5 of the Tax Procedures Law requires tax documents to be submitted in Arabic. The FTA may accept another language if you supply an Arabic translation on request, and you bear the cost and the responsibility for its accuracy. According to the FTA announcement on Cabinet Decision No. 129 of 2025, the penalty for failing to submit records in Arabic when requested was cut from AED 20,000 to AED 5,000 from 14 April 2026.
How Far Back a UAE Tax Audit Can Go
Article 46 sets a statute of limitation. The default is that the FTA may not start a UAE tax audit or assess after five years from the end of the relevant tax period. The limit does not apply in exceptional cases. Examples are an audit notified before the five years end, a voluntary disclosure filed in the fifth year, and a refund claim filed in the fifth year.
Federal Decree-Law No. 17 of 2025 amended these rules from 1 January 2026. According to KPMG’s summary of Federal Decree-Law No. 17 of 2025, an audit or assessment connected with a refund claim filed in the fifth year must now be completed within two years of the claim. The same summary says voluntary disclosure is now required only for the cases the FTA specifies, while other errors are corrected through the tax return.
Two consequences follow. First, the practical look-back for any period is five years, and longer if you give the FTA a reason to extend it. Second, the law says tax and penalties you have already been notified of do not lapse with time. The FTA may claim them at any time. Our voluntary disclosure guide explains when correcting an error is wise, and the corporate tax penalties guide shows how penalties are built.
An Audit-Readiness File for a Foreign-Owned Company
I use an engineering approach here: find the cause of the risk, then remove it. The causes are not exotic. They are missing documents, unclear ownership of the file and positions nobody explained. The framework below is my own, not an FTA template, and it works for most small and mid-sized companies.
| Block | What to hold | Common gap |
|---|---|---|
| 1. Identity | Trade licence, constitutional documents, tax registration certificates, authorised signatory list | Expired or superseded versions only |
| 2. Ledger to return | General ledger reconciled line by line to each filed return | Return prepared from a summary, not the ledger |
| 3. Source documents | Invoices, bank statements, contracts and payment proof for every material entry | Contracts held by a partner abroad |
| 4. People and assets | Payroll, fixed asset register, stock counts | Asset register not updated after purchases |
| 5. Judgement memos | Short dated notes on elections, estimates and unusual treatments | The reason sits in one person’s memory |
| 6. Related parties | Shareholder and group agreements, loan terms, pricing support | Informal arrangements with no paper |
| 7. Free zone evidence | Proof of qualifying activity, substance and revenue split if you claim 0% | Revenue not split by type |
If you hold free zone status, block 7 deserves most attention, because the status can be lost for the period and the years that follow. See the Qualifying Free Zone Person guide and our free zone audited accounts guide for what the records should show.
Then name one coordinator. This person receives the FTA’s messages, knows where every file is and decides who answers. In a company run from abroad, the coordinator should be in the UAE or have a clear local representative. The authority notifies the person in charge at the premises if the owner is absent, so the person at your office needs instructions too. If you have no one in the UAE for this role, our business setup service can help you set up a compliant local structure.
What to Do in the First 10 Business Days of a UAE Tax Audit
The notice period is the only preparation time a UAE tax audit gives you. Use it in this order.
- Read the notice for scope. Note the tax type, the periods and the documents named. Do not guess what the FTA “really” wants.
- Freeze the records. Stop deletions and automatic archiving. Do not rewrite or backdate anything. Changing records after a notice is the one move that turns a manageable audit into a serious problem.
- Appoint one point of contact and brief the front desk on the auditor’s rights and your own.
- Build the file for the named periods. Reconcile ledger to returns, collect support and list open items honestly.
- Translate what matters. Prepare Arabic versions of key contracts, because the FTA can ask for them.
- Take advice on any known error. The timing of a correction affects the penalty, so get a view before you act.
After a UAE Tax Audit: Assessment, Penalties and Review
If the FTA finds an incorrect return, a missed filing or a payment shortfall, it issues a tax assessment under Article 23. Where it cannot determine the exact tax, it may issue an estimated assessment and amend it later when new information appears. Separate administrative penalties may follow, for example for failing to keep required records or to provide documents in Arabic.
You can challenge the outcome. Article 28 lets you request a review of an assessment and its penalties within 40 business days of being notified, with your reasons. The FTA decides within 40 business days and informs you within five more. A reconsideration request under Article 29 and an objection to the Tax Disputes Committee are the later steps. Diarise every date on the day you receive the document.
Limits of This Article
I read the Tax Procedures Law and its Executive Regulation in an unofficial English consolidated copy. I could not open the Ministry of Finance’s official PDFs of those two texts, so check the exact wording against the official Arabic text on the FTA or Ministry of Finance website. Some articles carry the Decree-Law No. 17 of 2025 amendments, and I relied on KPMG’s summary for those. I did not verify the VAT-specific retention periods or the amended penalty amounts for audit cooperation.
I have not described any client audit, because none is part of this guide. This is general information, not legal or tax advice. Ask a UAE-licensed tax adviser to confirm your position before you act on a notice.
FAQ
How long does the FTA give notice before a UAE tax audit?
The Federal Tax Authority must notify you at least 10 business days before a UAE tax audit begins. The notice must also explain the consequences of obstructing the auditor. The exception is a visit without prior notice, which the law allows where there are serious grounds to suspect evasion or where notice would hinder the audit.
How many years back can the FTA audit a UAE company?
The default limit is five years from the end of the relevant tax period. Exceptions exist, for example where the FTA notified you of an audit before the five years ended, or where a refund claim is filed in the fifth year. Decree-Law No. 17 of 2025 revised these rules from 1 January 2026, so check the current text.
How long must a UAE company keep tax records?
A corporate tax taxable person must keep records for seven years after the end of the tax period they relate to. The Executive Regulation sets other defaults, such as five years for taxable persons and seven years for real estate records, plus four extra years if an audit is notified or ongoing. Where two rules apply, keep to the longer one.
Can I send the FTA documents in English?
The law requires documents to be submitted in Arabic, but the FTA may accept another language if you provide an Arabic translation when asked. You pay for the translation and you are responsible for its accuracy. The FTA may rely on the translation you supply, so have important contracts translated carefully.
Can I disagree with the result of a tax audit?
Yes. You may ask the FTA to review a tax assessment and its penalties within 40 business days of being notified, stating your reasons. The FTA then has 40 business days to decide. A reconsideration request and an appeal to the Tax Disputes Committee follow in the process. Keep every deadline in your diary.
Should I file a voluntary disclosure once I receive an audit notice?
Ask an adviser first. Correcting an error before the FTA notifies you of an audit is treated more leniently in the penalty rules than correcting it afterwards. Once a notice arrives, the position is different, so do not change records or file anything until you have taken advice on the audit scope.
Your Next Step
The cheapest UAE tax audit is the one you are ready for before the notice arrives. If you want a second pair of eyes on your records, your ownership of the file and your free zone position, we can review your company’s compliance set-up with our team and tell you where the gaps are.
