Skip to content

Services

Statutory Audit & Assurance

Rigorous financial statement audits under the Companies Act and Income Tax Act — 100% ledger scanned via Python, CARO 2020 covered clause by clause, and IFC assessment issued alongside the signed report.

What you get

Outcomes

  • Statutory audit report signed and filed ahead of ROC and Income Tax deadlines
  • 100% general ledger tested algorithmically — zero reliance on random sampling
  • CARO 2020 report covering all 21 sub-clauses, each backed by a tested working paper
  • Internal Financial Controls (IFC) assessment with a written remediation roadmap
  • AIS / TIS / Form 26AS three-way reconciliation verified before Form 3CD is signed
  • Board-ready audit pack accepted by lenders, investors, and the MCA without revision requests

A statutory audit is not a transaction with a CA firm. It is the mechanism through which a company’s accounts become evidence — credible to the MCA, the Income Tax Department, lenders, and investors. The report we sign carries our UDIN and our liability.

What we bring to it is an engineering layer most audit firms do not have. We extract the complete general ledger programmatically and run the audit against every transaction, not a random sample. Python scripts run duplicate-payment detection, cut-off tests, related-party flags, and bank reconciliation across all accounts simultaneously. The finding rate is higher not because we are more thorough in theory — it is higher because full-population testing surfaces what 3% sampling conceals.

Scale of coverage

What the analytical layer changes

Ledger coverage

100%

Full general ledger tested — no random sampling, no structural gaps.

CARO 2020 clauses

21

Each sub-clause addressed with working paper references, not boilerplate.

Form 3CD clauses

44

Computed and cross-referenced end-to-end before the report is signed.

Methodology

Random sampling vs. full-population audit

The conventional approach

Manual vouching on a sample

  • Random selection of 3–5% of transactions — structural anomalies go undetected
  • Weeks of physical file requests and repeated interruptions to the finance team
  • CARO clauses completed from management representation alone, not independently tested
  • Report delivered as a compliance artifact — no operational insight for the board

Our approach

Algorithmic full-population testing

  • 100% general ledger extracted via API — every transaction in scope, no exceptions
  • Exception reports generated overnight; field queries resolved asynchronously
  • Each CARO 2020 sub-clause backed by a tested working paper, not a representation
  • Findings memo issued before sign-off — management sees qualifications early enough to act

Scope

Four areas where the audit goes deep

Our statutory audit covers all mandatory requirements. These four are where the analytical approach produces findings that matter to the board, not just the regulator.

Financial statement audit

Ind AS and Schedule III compliance verified at line-item level. Related-party disclosures, segment reporting, and going-concern assessment are documented as working papers — not completed from management prompts.

CARO 2020 reporting

All 21 sub-clauses tested independently. Fixed asset register reconciled against physical verification records, loans verified against sanction letters, inventory counts cross-checked against the ERP. No clause is marked “not applicable” without documented evidence.

Internal Financial Controls

IFC assessment under Section 143(3)(i) tests the design and operating effectiveness of controls over financial reporting. Weaknesses are graded by severity and a written remediation roadmap issued alongside the report — not as a separate engagement billed separately.

Tech-enabled assurance stack

Python reconciliation across bank, vendor, inter-company, and GST ledgers. AIS and TIS data downloaded from the Income Tax portal and reconciled against books before Form 3CD is signed. Variance of zero is the target, not an aspiration.

A statutory audit that only catches what management presents is not an audit — it is an endorsement.

CA Pardeep Jha · Founding Partner

Applicable thresholds

The statutory audit mandate is absolute for every registered company. The tax audit obligation under Section 44AB is turnover-linked and category-specific.

Business categoryTax audit thresholdApplicable form
Trading / manufacturing (cash transactions > 5%)Turnover > ₹1 croreForm 3CB + 3CD
Trading / manufacturing (≥ 95% digital transactions)Turnover > ₹10 croreForm 3CB + 3CD
Professionals under Sec 44ADAGross receipts > ₹50 lakhForm 3CB + 3CD
F&O / derivatives traders (absolute turnover basis)Absolute turnover > ₹10 croreForm 3CB + 3CD
Companies already under Companies Act auditAll turnover levelsForm 3CA + 3CD

Methodology

How we work

  1. Engagement scoping & risk planning

    We review prior-year financials, CARO observations, MCA filings, and any existing audit notes. The output is a written scope memo and a risk-ranked audit plan — before any testing begins.

  2. Data access & algorithmic extraction

    We connect to your ERP — Tally, Zoho Books, SAP B1, or QuickBooks — via API or TDL bridge and extract the complete general ledger. Python scripts normalise the data for full-population testing, not sampling.

  3. Ledger scan, reconciliation & IFC testing

    Automated scripts run duplicate-payment checks, related-party flags, cut-off tests, and bank reconciliation across every account simultaneously. IFC controls are tested against ICAI and RBI frameworks.

  4. Management representation & findings review

    We issue a findings memo before the report is drafted. Qualified observations are discussed with management so corrections can be made — boards are not surprised on sign-off day.

  5. Report finalisation, UDIN, and filing

    Audit report (Form 3CA or 3CB), Form 3CD with all 44 clauses, CARO 2020 commentary, and the management representation letter are finalised, UDIN-generated, and filed electronically.

Scope

What's included

  • Signed statutory audit report — Form 3CA or 3CB as applicable
  • Form 3CD — all 44 clauses completed and cross-referenced to working papers
  • CARO 2020 report covering all 21 sub-clauses (for applicable companies)
  • Internal Financial Controls (IFC) assessment memorandum with severity grading
  • Management representation letter
  • AIS / TIS / Form 26AS three-way reconciliation summary
  • Python-generated exception report — duplicates, outliers, related-party flags
  • Audit working papers index (client copy)
  • Tax computation and MAT / AMT workings (for combined statutory + tax audit)
  • List of audit observations with remediation recommendations
  • Board presentation summarising key findings and IFC control status

Common questions

Frequently asked

Which entities are required to get a statutory audit under the Companies Act?
Every company registered under the Companies Act 2013 — public or private, profit-making or loss-making, regardless of turnover — must have its financial statements audited by a practising Chartered Accountant each financial year. There is no turnover exemption for statutory audit under the Companies Act; threshold-based exemptions apply only to tax audit under Section 44AB. LLPs with capital contribution or turnover above prescribed limits also require audit under the LLP Act.
What is CARO 2020 and does it apply to our company?
CARO 2020 (Companies Auditor's Report Order) requires the statutory auditor to report on 21 specific matters — loans, fixed assets, inventory, related-party transactions, internal audit systems, and more — in a separate section of the audit report. It applies to all companies except small private companies that simultaneously meet three thresholds: paid-up capital ≤ ₹1 crore, borrowings ≤ ₹1 crore, and turnover ≤ ₹10 crore. The scoping call will confirm applicability in the first session.
What is the difference between a statutory audit and a tax audit under Section 44AB?
A statutory audit is mandated by the Companies Act 2013 and examines whether the financial statements give a true and fair view under Ind AS or Schedule III. A tax audit under Section 44AB is mandated by the Income Tax Act when business turnover crosses ₹1 crore — or ₹10 crore if 95% of transactions are digital — and results in Form 3CB-3CD. The two audits overlap significantly; the same general ledger underpins both. We routinely conduct them as a combined engagement to eliminate duplication and compress your team's disruption window.
What penalties apply for missing the statutory audit or tax audit deadline?
Under the Companies Act, filing financial statements without an audit triggers MCA inquiry and can lead to director disqualification proceedings. Under Section 271B of the Income Tax Act, failing to complete a tax audit carries a penalty of 0.5% of total turnover, capped at ₹1,50,000. The UDIN-linked filing infrastructure means defaults are flagged automatically — there is no administrative grace window. We recommend engaging at least six weeks before the September 30 deadline to allow for books-closure, data access, and a revision cycle.
How long does the audit take, and how disruptive is it for our finance team?
For a mid-market company with turnover up to ₹50 crore, fieldwork typically runs four to eight working days once books are closed and data access is confirmed. Because we use API-based extraction and algorithmic testing rather than manual vouching, the load on your team is concentrated in the first two days — data access setup and representation letter. After that, most queries are resolved asynchronously via a shared task tracker rather than repeated team interruptions.
Can you conduct the audit if we use Tally, Zoho Books, or a cloud ERP?
Yes. Our stack covers Tally Prime and ERP9 (via TDL bridge), Zoho Books, QuickBooks, SAP Business One, and NetSuite. For less common ERPs we fall back to exported trial balance and ledger CSVs, which still support full-population testing in Python. One hard constraint: we need read-only access to the books at least two weeks before the planned report date. Late data access is the single most common source of deadline pressure — everything else is controllable.

Next step

Ready to begin?

Book a 30-minute discovery call. We'll scope the engagement, confirm deliverables, and give you a fixed-fee proposal within 48 hours.