Due Diligence Audit (UAE)

It is an independent investigation into a company's true financial, tax, legal, and operational position before you commit to buying it, investing in it, partnering with it, or lending to it significant money. It goes beyond what the seller tells you or what the audited financial statements show on the surface, and instead verifies, quantifies, and stress-tests the numbers and risks that actually matter to your decision.

No. Unlike the statutory audit that most UAE mainland LLCs and many free zone companies must file annually as part of licence renewal, a due diligence audit is not mandated by UAE federal or emirate-level law. It is a commercially driven engagement, scoped and commissioned by whichever party — buyer, investor, or lender — needs the assurance before proceeding with a transaction.

A statutory audit expresses an opinion on whether financial statements present a true and fair view, prepared for shareholders and regulatory purposes, following International Standards on Auditing. A due diligence review is scoped specifically around a pending transaction, commissioned by the party relying on it (usually the buyer or investor), covers a broader range of areas beyond just the financial statements — including tax exposure, legal risk, and operational quality — and results in a confidential findings report rather than a formal audit opinion.

For a mid-market transaction involving a single UAE entity with reasonably organised records, 4–6 weeks from engagement letter to final report is a realistic range. More complex situations — multiple entities, cross-border structures involving both mainland and free zone operations, or a target with disorganised records — extend the timeline. Straightforward, narrowly scoped reviews (for example, a limited financial-only review for a small acquisition) can complete faster.

Fees vary meaningfully with deal size, number of entities and jurisdictions involved, sector complexity, and how organised the target's records are. PNPC scopes and quotes a fixed fee based on an initial scoping call before any engagement begins, rather than an open-ended time-and-materials arrangement that leaves the client uncertain of total cost.

Financial due diligence examines the quality and sustainability of reported earnings, working capital, and net debt. Tax due diligence examines UAE Corporate Tax and VAT compliance history, transfer pricing exposure, and any open matters with the Federal Tax Authority. Legal due diligence examines the licence, contracts, litigation exposure, and corporate governance documents. Operational due diligence examines the underlying business quality — customer concentration, key-person dependency, and systems readiness. Most engagements combine several of these workstreams, scoped to the transaction.

Yes, and this has become one of the most material areas of focus since UAE Corporate Tax took effect under Federal Decree-Law No. 47 of 2022 for financial years starting on or after 1 June 2023. We review the target's Corporate Tax registration status, filing history, whether the 9% standard rate or the Qualifying Free Zone Person 0% regime has been correctly applied (where the target is a free zone entity), and whether the AED 375,000 taxable income threshold has been correctly tracked and applied for the small business relief and standard rate calculations.

Yes. We review VAT registration status, the return filing history accessible through the target's EmaraTax account (the FTA's current digital tax services platform), any outstanding VAT liabilities, penalty notices, or voluntary disclosures filed with the Federal Tax Authority, and whether VAT has been correctly applied to the target's specific revenue streams — particularly where the business has any zero-rated, exempt, or reverse-charge transactions that are commonly misapplied.

We check the target's ESR filing history for financial years up to the year ended before 1 January 2023, since the ESR notification and report filing obligations were discontinued for financial years starting on or after that date, under Cabinet Decision No. 98 of 2024. For an entity with financial years before that cutoff, we verify historical ESR compliance was properly completed, since any pre-2023 ESR penalty or non-compliance finding by the Ministry of Finance can still be an inherited liability. For current and future financial years, ESR is no longer a live ongoing compliance obligation to test.

Where the target's sector falls within the scope of Designated Non-Financial Businesses and Professions (DNFBPs) under UAE AML/CFT law — such as real estate brokers, dealers in precious metals and stones, and certain corporate service providers — or where the transaction size and structure otherwise warrant it, we verify the target's AML/CFT registration status, UBO declaration accuracy against the ownership chain, and whether any goAML-related reporting obligations have been properly discharged.

Most commonly the buyer, investor, or lender commissions it, because they are the party relying on the findings to make a go/no-go and pricing decision. However, sellers increasingly commission a 'vendor due diligence' report in advance of a sale process — this can speed up the transaction, address issues proactively before a buyer finds them, and support a stronger asking price by demonstrating transparency.

It depends on the nature and materiality of the finding. Options typically include: renegotiating the purchase price downward to reflect the risk or the cost of remediation, requiring specific representations, warranties, and indemnities in the transaction documents to allocate the risk to the seller, structuring an escrow holdback against the identified liability, requiring the issue to be remediated before completion as a condition precedent, or in serious cases, walking away from the transaction entirely.

Yes. Our scope covers mainland LLCs licensed by the Department of Economic Development (DED) in the relevant emirate, and free zone companies across the major UAE free zones (including JAFZA, DMCC, DIFC, ADGM, RAK ICC, and others), each of which has its own licensing authority, filing regime, and — for DIFC and ADGM — its own courts and, in some respects, its own legal framework. We tailor the review to the specific authority and legal framework governing the target.

In a share purchase, the buyer acquires the company itself, including all its historical liabilities — known and unknown — subject only to whatever protections are negotiated into the Share Purchase Agreement. This makes comprehensive due diligence across financial, tax, legal, and regulatory areas essential, because undiscovered liabilities transfer with the shares. In an asset purchase, the buyer acquires specific identified assets and generally does not inherit unrelated historical liabilities, so due diligence can often be more narrowly scoped to the specific assets, contracts, and employees being transferred.

A due diligence report is not, in itself, a valuation report — it identifies and quantifies risks and financial adjustments that feed into a valuation, but the valuation and pricing decision itself sits with the client, their financial advisers, and negotiation with the counterparty. Where useful, PNPC's findings clearly translate into a quantified financial impact (for example, a working capital adjustment or a contingent tax liability estimate) that can be plugged directly into the client's own valuation model.

A comprehensive Information Request List typically covers three years of audited financial statements and management accounts, the trade licence and corporate constitutional documents, UBO declarations, UAE Corporate Tax and VAT registration and filing history, all material contracts and leases, employment records and WPS compliance history, and any litigation or dispute schedule. PNPC tailors the exact list to the target's licence type, sector, and the specific transaction structure.

This is itself a significant finding. Reluctance to provide standard financial, tax, or legal documentation during due diligence is one of the clearest red flags in a transaction — it may indicate poor record-keeping, an intent to conceal a liability, or simply an inexperienced seller unfamiliar with transaction requirements. We document any information gaps clearly in the findings report and advise the client on how each gap should affect the deal decision, pricing, or required warranties.

Much of the document review, financial analysis, and management interview work can be conducted remotely via secure data room access and video calls. However, for businesses with physical inventory, manufacturing operations, or multiple retail/commercial locations, an in-person site visit remains valuable to verify the physical existence and condition of assets, observe operations directly, and meet key staff. PNPC's Dubai and Abu Dhabi presence allows us to combine remote analytical work with targeted on-the-ground verification where it adds genuine value.

We identify all related-party transactions — intercompany loans, management fee arrangements, property leased from a shareholder, goods or services transacted with common-ownership entities — and assess whether they were conducted on arm's length terms. Where they were not, we quantify the adjustment needed to normalise reported earnings to reflect what the business would look like on a standalone, arm's length basis, and flag the transfer pricing implications under UAE Corporate Tax rules for related-party dealings.

Yes. We review headcount, visa status, remuneration structures, and — critically — Wage Protection System (WPS) compliance history with MOHRE, since WPS non-compliance can trigger fines, work permit suspension risk, and in serious repeated cases restrictions on the company's ability to process new labour applications. We also review end-of-service gratuity liability calculations, since this is frequently under-provisioned in target companies' balance sheets.

A red flag is any finding materially inconsistent with what the seller represented, or that indicates a risk not previously disclosed to the buyer — ranging from a minor administrative lapse to a fundamental issue that could derail the transaction entirely. Materiality depends on deal size and the client's risk tolerance; we grade findings by severity (informational, moderate, material, critical) so the client can prioritise attention and negotiation effort rather than treating every finding as equally urgent.

Yes. With operating offices in Dubai, Abu Dhabi, Chennai, Bangalore, and Hyderabad, PNPC is well positioned for transactions where an Indian buyer is acquiring a UAE target, a UAE-based investor is investing into an Indian company, or a group has entities in both jurisdictions. We coordinate the UAE-side due diligence (Corporate Tax, VAT, DED/free zone licensing, MOHRE/WPS) with the India-side considerations (FEMA/ODI structuring for the Indian party, RBI reporting, and India-UAE DTAA implications) under one engagement rather than a disconnected handoff between two separate firms.

Yes. The engagement is governed by a confidentiality agreement or is embedded within the transaction's existing non-disclosure agreement, and the findings report is addressed and privileged to the engaging party only — typically the buyer, investor, or lender — not published or shared with the target or any other party without the client's explicit consent.

Quality of earnings analysis examines whether the reported profit of a business is a reliable, repeatable indicator of its true underlying earning power, or whether it has been inflated or distorted by one-off items, aggressive accounting policies, related-party pricing, or timing of revenue and expense recognition. It is one of the most valuable components of financial due diligence because most acquisition pricing is built on a multiple of EBITDA — and an inflated EBITDA directly inflates the purchase price paid.

Yes, and this is an increasingly important check. The 0% Corporate Tax rate applies only to a Qualifying Free Zone Person that meets specific conditions under Federal Decree-Law No. 47 of 2022 and its Cabinet and Ministerial Decisions — including maintaining adequate substance in the UAE, deriving qualifying income, and keeping non-qualifying revenue within the prescribed de minimis threshold. If a target has been claiming the 0% rate without genuinely meeting these conditions, the standard 9% rate (on taxable income above AED 375,000) may in fact apply, with penalty exposure for prior periods.

We map the target's financial statements to a consistent basis for analysis purposes — most UAE entities report under IFRS or IFRS for SMEs, and we adjust for any framework or currency translation differences (particularly relevant for group structures spanning UAE, India, and other jurisdictions) so the client receives a single, coherent financial picture rather than having to reconcile multiple reporting bases themselves.

Beyond delivering the report, we support the client's legal team in translating findings into specific representations, warranties, and indemnity clauses for the Share Purchase Agreement or Shareholders' Agreement; support any completion accounts or working capital true-up calculation where the deal structure includes one; and, where engaged for ongoing work, manage the post-completion tax and compliance handoff so nothing flagged during due diligence falls through the cracks in the first months of new ownership.

Yes. For a minority equity investment — common with VC, PE, or angel investors taking a stake in a UAE company — due diligence is typically scoped more narrowly than a full acquisition, focusing on cap table accuracy, prior fundraising terms and any investor rights already granted, financial position and burn rate (for earlier-stage companies), key-person dependency, and the tax and regulatory compliance areas most relevant to an investor rather than a full owner.

Due diligence, in the classic sense, is performed by or for an external party ahead of a transaction. A 'health check' — sometimes requested by a company's own management or board — applies similar analytical rigour (financial quality, tax exposure, legal and regulatory compliance) but is commissioned by the company itself, typically to prepare for a future transaction, address governance gaps, or simply gain an independent view of the business's true position before problems compound.

Both. Beyond identifying and quantifying risks, our reports include specific, actionable recommendations — whether that is a price adjustment amount, a recommended warranty or indemnity clause, a remediation step the seller should complete before completion, or a governance improvement the buyer should implement in the first 100 days of ownership.

PNPC is engaged directly by the party relying on the due diligence findings — typically the buyer, investor, or lender — and has no financial or advisory relationship with the target that could compromise objectivity. Where PNPC has, or has previously had, any relationship with the target (for example, as their existing auditor), we disclose this at the outset and, where it creates a genuine conflict, decline the engagement or recommend an alternative reviewer.

This happens regularly — due diligence findings are one of the most common reasons a deal is renegotiated, restructured, or abandoned entirely, and that is a legitimate and valuable outcome of the process, not a failure of it. PNPC bills for work performed to the point the engagement is paused or terminated, in line with the agreed engagement letter terms, and can pause or resume the engagement if negotiations restart on revised terms.

PNPC has practised as Chartered Accountants across India and the UAE since 1986, with operating offices in Dubai, Abu Dhabi, Chennai, Bangalore, and Hyderabad. We bring genuine UAE Corporate Tax, VAT, and free zone regulatory depth — not a generic checklist adapted from another jurisdiction — combined with cross-border India-UAE structuring experience that most single-jurisdiction firms cannot offer. We escalate material findings live during fieldwork, translate every finding into specific transaction-document recommendations, and remain engaged through completion and post-transaction integration, not just until the report is emailed.