Cyprus Annual Audit Requirements: Who Needs an Audit and What It Involves

The statutory audit requirement is one of the most significant ongoing obligations for Cyprus companies. Unlike some jurisdictions where small companies can file simplified unaudited accounts, Cyprus historically required all companies to be audited. Recent reforms introduced a small company exemption — but many international founders still need an audit. This guide explains the rules.

The Statutory Audit Requirement

Under the Cyprus Companies Law, every Cyprus private limited company must have its annual financial statements audited by a registered Cyprus statutory auditor (a member of the Institute of Certified Public Accountants of Cyprus — ICPAC).

The auditor:

• Reviews the company’s accounting records
• Verifies that the financial statements give a “true and fair view” of the company’s financial position
• Issues an audit opinion
• Signs the audited financial statements

The audited financial statements, together with the directors’ report, form the basis for the company’s annual return to the Registrar (for public filing purposes — Cyprus does not require small private companies to file financial statements publicly, unlike the UK).

The Small Company Audit Exemption

In 2022, Cyprus introduced an audit exemption for “small companies” — aligned with EU Directive 2013/34/EU. A private limited company qualifies for the audit exemption if it meets at least two of the following three criteria for the current financial year:

First year of incorporation: A newly incorporated company qualifies for the exemption in its first financial year regardless of size (there is no prior-year comparison available).

Important caveats:

• A company that exceeds the thresholds for two consecutive years loses the exemption from the third year
• Banks and financial institutions cannot use the exemption regardless of size
• A company may still be required to audit if its constitution requires it (e.g., by shareholder agreement), or if a lender requires audited accounts
• The exemption applies to the statutory audit requirement only — the company still needs to prepare full financial statements and file a corporation tax return

Who Typically Needs an Audit

Based on the thresholds:

Audit exemption available (typically):

• Newly incorporated holding companies with minimal revenue
• IP companies with licensing income below €700,000
• Single-purpose vehicles with few or no employees
• Most companies in their first 1–3 years of operation

Audit required (typically):

• Operating companies with revenue above €700,000
• Companies with total assets over €350,000 (common for holding companies with significant investments)
• Companies with 11+ employees
• Companies that have exceeded the thresholds in two consecutive years

Practical note on the assets threshold: A Cyprus holding company that holds shares in subsidiaries worth €2–3 million has total assets well above €350,000 — even if it has zero turnover and zero employees. Such companies typically fail the assets test and require an audit despite being otherwise inactive.

What the Audit Process Involves

1. Engagement

The company appoints a registered Cyprus statutory auditor. The auditor and company enter into an engagement letter setting out the scope of the audit, timeline, fees, and responsibilities.

Independence: An auditor cannot audit their own work — if the same firm does the company’s bookkeeping, a separate firm should conduct the audit (though in practice, many small Cyprus firms do both, with internal independence measures).

2. Year-End Accounts Preparation

Before the audit can start, the company’s accountant prepares the full annual financial statements — balance sheet, income statement, cash flow, equity statement, and notes. These are typically prepared under IFRS.

3. Audit Fieldwork

The auditor:

• Reviews the accounting records and supporting documentation
• Reconciles the financial statements to the trial balance
• Verifies bank balances (via bank confirmation letters)
• Reviews significant contracts, intercompany agreements, and unusual transactions
• Tests a sample of transactions for completeness and accuracy
• Reviews the director’s declaration of solvency/going concern
• Checks compliance with Cyprus Companies Law (e.g., share capital, distributions)

For a simple holding or IP company, audit fieldwork may be completed in a few days. For a complex operating company, it can take several weeks.

4. Audit Opinion

The auditor issues one of four types of opinion:

• Unqualified (clean) opinion: The financial statements give a true and fair view. This is what every company aims for.
• Qualified opinion: The statements are true and fair except for a specific matter.
• Adverse opinion: The statements do not give a true and fair view.
• Disclaimer of opinion: The auditor cannot form an opinion due to scope limitations.

A qualified, adverse, or disclaimed opinion is a significant red flag — it will be noticed by the Tax Department, any banks, and future counterparties.

5. Filing and Use

Audited financial statements are:

• Used to prepare the corporate tax return (IR4)
• Provided to the Tax Department if requested
• Provided to the company’s bank on request
• Signed by the directors and auditor
• Kept in the company’s statutory records

Cyprus does not require most private companies to file their financial statements publicly with the Registrar (unlike the UK). The HE32 annual return is filed, but financial statements are not publicly accessible.

Audit Costs

Audit fees depend on the complexity of the accounts, the volume of transactions, and the auditor’s experience. Fees in Limassol are typically lower than equivalent work in London or Amsterdam.

Audit Timeline

The audit must be completed before the financial statements are signed and filed. Typical timeline:

For a 31 December year end:

• Accounts should be ready by April–May
• Audit completed by June–August
• Tax return filed by 31 March of the following year

Avoid leaving the audit until the last minute. Late filing of the IR4 results in penalties, and auditors have seasonal capacity constraints (busy period is March–August).

Director’s Responsibilities

Directors are responsible for:

• Maintaining proper accounting records
• Preparing financial statements that give a true and fair view
• Preventing fraud and error
• Ensuring the audit can be conducted (providing records and information)
• Signing the directors’ report and financial statements

An audit does not transfer responsibility from directors to the auditor. The auditor provides independent assurance; the directors remain responsible for the accounts.

Related: Accounting services overview → · Corporate tax return deadline → · Bookkeeping requirements →