Audit of a Cyprus company: rules and process

For a Cyprus company, the audit is the default, not the exception. Under the Companies Law, companies prepare financial statements and have them assured by a licensed auditor regardless of size or activity — dormant companies included. What has changed recently is the relief valve: the smallest private companies may replace the full audit with a lighter review engagement, and the turnover limit for that option rose to €300,000 for financial years beginning on or after 6 February 2026.

Who needs a full audit — and who can take the review

The baseline rule is simple: essentially every Cyprus company needs its financial statements audited. The carve-out works like this:

Three honest footnotes. First, the review is lighter assurance, not a free pass — it is performed by the same licensed profession, and the statements still get prepared and filed. Second, a further increase of the turnover limit to €400,000 has been discussed in parliament; as of July 2026 the threshold actually in force is €300,000, and we will update this page if that changes. Third, many companies that qualify for a review keep the full audit anyway, because banks, investors and future buyers ask for audited statements — downgrading to save a little assurance work can cost you elsewhere.

What the audit involves — and what we prepare

The auditor is independent; the file is ours to build. A statutory audit in practice means evidence: ledgers reconciled to bank statements, sales and purchase documentation, loan and related-party agreements, support for judgment areas like revenue recognition and going concern, and formal confirmations from banks. Our accounting team prepares the financial statements, assembles that file, answers the auditor’s queries and keeps the exchange moving.

Most of the difference between a quick audit and a painful one is the state of the file, not the strictness of the auditor. Books that were reconciled every month produce a short question list; books reconstructed in February produce a long one.

When does it have to be done?

There is no single “audit day” in the calendar — the pressure arrives through the filings that need the audited statements:

• The corporate income tax return is prepared from the audited financial statements — the tax side of the chain is covered on the corporate tax page.
• The HE32 annual return to the Registrar of Companies is filed within 28 days of the company’s return date and carries the previous year’s financial statements. Late filing triggers Registrar penalties — the exact figures are on the HE32 page.

Miss the audit, and the delay cascades into both. That is why we plan the audit backwards from the filing calendar rather than treating it as a spring surprise.

Our model: independent ICPAC firms

We are not an audit firm, and we consider that a feature. Statutory audits and review engagements for our clients are performed by licensed Cyprus audit firms — ICPAC members — that we work with regularly. You get one accountable contact who owns the deadline and the preparation, while the opinion itself stays independent. We do not promise “an audit by Friday”; we promise a file the auditor can actually sign off without drama.

How we run it

1. Pre-year-end check. Around the financial year end we review the books for issues — missing documents, unreconciled balances, related-party loose ends — while they are still fixable.
2. Statements and file prepared. IFRS financial statements plus the supporting schedules and confirmations, assembled into an audit-ready pack.
3. Auditor engaged. A licensed ICPAC firm runs the audit or, where the company qualifies and it genuinely makes sense, the review engagement.
4. Queries handled. We answer the auditor’s questions directly, involving you only where a decision is genuinely yours.
5. Statements put to work. The signed statements flow into the tax return and the HE32 — on time, because the whole chain was planned backwards.