Private Limited Company Audit: Requirements & Tax Guide FY 2025-26

Q: What is the tax audit due date for a private limited company for AY 2026-27?

The tax audit report (Form 3CA with Form 3CD) is due by 21 October 2026 and the company's ITR-6 by 21 November 2026. CBDT Circular No. 07/2026 extended these from the original 30 September and 31 October dates. Companies required to file Form 3CEB (transfer pricing) remain on 31 October and 30 November 2026.

Introduction: Why This Audit Needs More Than a Checklist

A Private Limited Company is the most heavily audited entity type in India by volume — and also the one where auditors most often default to a templated checklist instead of asking what's genuinely changed this year. This piece skips the basics and goes straight to what's currently moving: a December 2025 rule change that quietly rewrites CARO exemption for thousands of companies, the MSME payment trap that keeps catching finance teams off guard, and the related-party reporting gap between two different laws that rarely gets reconciled properly.

This is Part 1 of our entity-wise audit series. For the full applicability picture across all entity types, see our Tax Audit Applicability Guide, and for what every clause of the audit report itself requires, see our Form 3CA/3CB/3CD Guide.

Snapshot

Statutory audit under the Companies Act, 2013 is mandatory every year, regardless of turnover, profit, or dormancy.
Tax audit under Section 44AB (new Act: Section 63) is an additional, separate requirement that kicks in only once turnover crosses ₹1 crore/₹10 crore.
CARO 2020 applicability now hinges on the revised small-company thresholds effective 1 December 2025.
A company can be pulled into secretarial audit purely on the basis of ₹100 crore+ borrowings, even as a private company.

The Compliance Stack

Every Pvt Ltd company sits under at least two, and often three, separate audit-type obligations. Missing one layer because another was completed is the single most common structural error in Pvt Ltd engagements.

Layer 1

Statutory Audit

Companies Act, 2013 Sec. 139 — mandatory every year, no turnover exemption. Includes CARO 2020 unless exempt.

Layer 2

Tax Audit

Sec. 44AB / New Sec. 63 — only once turnover crosses ₹1 crore (₹10 crore with digital-transaction relief).

Layer 3

GST Reconciliation

GSTR-9C, self-certified once aggregate turnover crosses ₹5 crore — numbers still need to tie out.

Layer 4

Secretarial Audit

Sec. 204, conditional — triggered for a private company via the ₹100 crore+ borrowings limb alone.

Issue 1: The December 2025 Small-Company Reset

Just NotifiedHigh Impact

On 1 December 2025, the MCA notified the Companies (Specification of Definition Details) Amendment Rules, 2025, raising the "small company" thresholds under Section 2(85) from ₹4 crore paid-up capital / ₹40 crore turnover to ₹10 crore paid-up capital / ₹100 crore turnover. Both conditions must be met together, based on the immediately preceding financial year's figures.

This one change ripples through several exemptions at once:

CARO 2020 — small companies are unconditionally exempt, regardless of borrowings or related-party activity.
Cash flow statement preparation exemption.
Board meeting frequency relaxation (two meetings a year instead of four).
Auditor rotation exemption under Section 139(2).
Lower penalty caps under Section 446B for certain defaults.
Internal financial controls (IFC) reporting under Section 143(3)(i) is not required for a private company that is an OPC or small company, or whose turnover is below ₹50 crore and whose borrowings stay below ₹25 crore throughout the year, provided it has not defaulted in filing its financial statements or annual return (MCA Notification G.S.R. 583(E), 13 June 2017).

⚠️ Why This Trips Up Auditors A company that was firmly outside "small company" status under the old ₹4cr/₹40cr limits — and was therefore reporting full CARO every year — may now qualify as small under the revised ₹10cr/₹100cr limits, purely because the definition moved, not because the company changed. Auditors carrying forward last year's applicability conclusion without re-testing it against the new thresholds risk both over-reporting and under-reporting.

✅ Reporting Impact Re-test small-company status fresh for every FY 2025-26 audit — don't assume last year's conclusion still holds. The definition excludes a company that is a subsidiary or holding company of another company, and excludes public companies entirely, irrespective of size.

Issue 2: Section 43B(h) – The MSME Trader Trap

Recurring Error

Since AY 2024-25, any amount payable to a registered micro or small enterprise beyond the Section 15 MSMED Act timeline (45 days with a written agreement, 15 days without) is disallowed under Section 43B(h) until actually paid — reported under Clause 22 of Form 3CD.

⚠️ The Practical Trap Since 2021, wholesale and retail traders can obtain Udyam registration for priority-sector lending purposes — but the MSMED Act's payment-timeline protection under Section 15 was designed around enterprises engaged in manufacturing or service activity, not trading. Auditors who treat every Udyam-registered vendor as automatically covered by Section 43B(h) risk disallowing payments to vendors the provision was never meant to protect.

✅ Reporting Impact Build a vendor-classification working paper that captures Udyam registration status and the nature of the enterprise (manufacturing/service vs. trading) before applying Section 43B(h). This exact clause is unpacked further in our Form 3CD guide.

Issue 3: Related-Party Reporting Under Two Laws

A Pvt Ltd company's related-party transactions get tested twice, under two entirely different frameworks, and the two registers rarely match automatically:

Income Tax

Section 40A(2)(b)

Disclosure-only test (Clause 23 of Form 3CD): every payment to a specified person must be reported, regardless of reasonableness. No approval mechanism.

Companies Act

Section 188

Approval-based test: contracts above prescribed thresholds need Board (and sometimes shareholder) approval, disclosed in Form AOC-2.

Practical Point Build one consolidated related-party master list covering both the Section 2(76) Companies Act definition and the broader Section 40A(2)(b) Income Tax definition (which pulls in a wider circle — any person with a "substantial interest"). Cross-check every large-value transaction against both registers before finalising Clause 23 and Form AOC-2 together.

Issue 4: Deemed Dividend on Inter-Corporate Deposits

Group Structure Risk

Where a closely-held company advances funds to a shareholder holding 10%+ voting power (or to a concern in which such a shareholder has a substantial interest), Section 2(22)(e) can deem the payment a dividend to the extent of accumulated profits — a frequent flashpoint in multi-entity group structures with common promoters and cross-lending between group companies.

Tribunals have consistently distinguished an inter-corporate deposit (ICD) from a "loan or advance" for Section 2(22)(e) purposes — an ICD is a placement of surplus funds for a return, not a loan with the borrower's need in mind. See P.C. Chandra Holdings v. DCIT and the line of cases following Bombay Oil Industries Ltd. v. Dy. CIT. Separately, CBDT Circular No. 19/2017 accepts that trade advances made in the ordinary course of commercial transactions do not fall within "advance or loan" under Section 2(22)(e), directing officers not to press this ground in appeal.

✅ Reporting Impact Where a group entity has received funds from an associate company, document at the time of the transaction whether it is genuinely a deposit/trade advance (with commercial terms, interest, and a repayment structure) rather than reconstructing that characterisation only after a query is raised. This structuring risk shows up at larger scale in our Real Estate JV & JDA Audit Guide.

Issue 5: Sections 185/186 – Loans, Guarantees & Investments

Section 185 restricts loans/guarantees/security to directors and entities in which directors are interested; Section 186 caps and conditions inter-corporate loans, guarantees, and investments made by the company itself. Both surface in CARO 2020 clause (iv), which requires the auditor to comment on compliance with Sections 185 and 186.

Before concluding on Section 185, check whether the conditional private-company exemption notified on 5 June 2015 (G.S.R. 464(E)) is available. All three conditions must be met: no other body corporate has invested in the company's share capital; borrowings from banks, financial institutions or bodies corporate are below twice the paid-up capital or ₹50 crore, whichever is lower; and there is no subsisting default in repaying such borrowings. Record the test in the working papers.

⚠️ Common Reporting Error Director current-account balances and informal advances to promoter-controlled group entities are frequently treated as routine related-party transactions and reported only under Clause 23 of Form 3CD, without a separate Section 185/186 compliance assessment for the CARO annexure.

Issue 6: ESOP & Sweat Equity Valuation

Where a company grants ESOPs, the accounting expense is the grant-date fair value of the options, measured under Ind AS 102 or the ICAI Guidance Note on Accounting for Share-based Payments (usually with an option-pricing model such as Black-Scholes or a binomial model) and amortised over the vesting period. Tax valuations are separate exercises: the employee's perquisite is valued on exercise under Rule 3(8), and share issues or transfers may need a Rule 11UA or FEMA pricing valuation. The company's deduction for the ESOP expense, and its timing and quantum, are frequently disputed on assessment, especially where these valuations diverge.

Practical Point Retain the valuation report used for the ESOP accounting entry as a separate, dated working paper distinct from any valuation obtained later for a funding round or share transfer — using the wrong valuation date's report to justify the P&L charge is a recurring documentation gap.

Practical Audit Tips

Re-test small-company and CARO applicability fresh every year — don't roll forward last year's conclusion.
Maintain a single related-party master list that satisfies both the Companies Act and Income Tax definitions, cross-referenced.
For any intercompany fund flow, capture documented terms (interest, tenor, purpose) at the time of the transaction, not retrospectively.
Build a vendor register that separately flags Udyam status and enterprise nature for Section 43B(h) purposes.
Check the ₹100 crore borrowings limb for secretarial audit independently — it applies to private companies too.

Commonly Missed Items

Small-company status re-tested against the revised (post-1 Dec 2025) thresholds, not the old ₹4cr/₹40cr limits
DIN KYC and disqualification status of directors verified before signing the audit report
Registered office address in the audit report matching MCA records exactly
CSR applicability under Section 135(1) tested on the immediately preceding financial year's (FY 2024-25) net worth, turnover and net profit, with current-year figures flagged for next year's obligation
Statutory registers (related party, charges, share transfers) physically inspected, not just certified by management
Form AOC-2 related-party disclosures cross-checked against Clause 23 of Form 3CD
Deposit-vs-loan classification documented for every material inter-company balance

Reference Table

Item	Threshold / Rule
Small company (Section 2(85))	Paid-up capital ≤ ₹10 crore AND turnover ≤ ₹100 crore (w.e.f. 1 Dec 2025); not a subsidiary/holding company
CARO 2020 private-company exemption	Capital + reserves ≤ ₹1 crore, borrowings ≤ ₹1 crore, revenue ≤ ₹10 crore — all three together
Tax audit (Section 44AB/63)	Turnover > ₹1 crore (₹10 crore with 95%+ digital transactions)
Secretarial audit (private company)	Outstanding borrowings from banks/PFIs ≥ ₹100 crore
GSTR-9C reconciliation	Aggregate turnover > ₹5 crore (self-certified)
Section 43B(h) MSME payment	45 days (written agreement) / 15 days (no agreement) under MSMED Act Section 15

Frequently Asked Questions

Does a private company with ₹0 turnover still need a statutory audit?

Answer: Yes. Every Pvt Ltd company must appoint an auditor and get its accounts audited every year under the Companies Act, regardless of turnover, profit, or business activity.

Is my company automatically exempt from CARO if it's small under the new December 2025 definition?

Answer: Yes, provided it independently qualifies as a "small company" under Section 2(85) — small companies get an unconditional CARO exemption. But re-test this every year, since the thresholds and the company's own figures both move.

Are inter-corporate deposits always safe from the deemed dividend provision?

Answer: Not automatically — the "ICD, not loan" characterisation depends on the transaction genuinely having deposit-like terms (documented interest, tenor, and commercial purpose). A loosely documented current-account balance between group companies is exactly what gets recharacterised as a loan on scrutiny.

What is the tax audit due date for a private limited company for AY 2026-27?

Answer: The tax audit report (Form 3CA with Form 3CD) is due by 21 October 2026 and the company's ITR-6 by 21 November 2026. CBDT Circular No. 07/2026 extended these from the original 30 September and 31 October dates. Companies required to file Form 3CEB (transfer pricing) remain on 31 October and 30 November 2026.

📞 Need Help With Your Company's Audit? Shahnawaz & Associates handles statutory and tax audits together for private limited companies across Mumbai, including NRI-promoted entities. Contact us before your audit season starts to get ahead of the CARO and related-party reconciliation work.
Book a Consultation →

Audit of a Private Limited Company