Due Diligence Audit (UAE)

It is an independent investigation into a company's true financial, tax, legal, and operational position before you commit to buying it, investing in it, partnering with it, or lending to it significant money. It goes beyond what the seller tells you or what the audited financial statements show on the surface, and instead verifies, quantifies, and stress-tests the numbers and risks that actually matter to your decision.

No. Unlike the statutory audit that most UAE mainland LLCs and many free zone companies must file annually as part of licence renewal, a due diligence audit is not mandated by UAE federal or emirate-level law. It is a commercially driven engagement, scoped and commissioned by whichever party — buyer, investor, or lender — needs the assurance before proceeding with a transaction.

A statutory audit expresses an opinion on whether financial statements present a true and fair view, prepared for shareholders and regulatory purposes, following International Standards on Auditing. A due diligence review is scoped specifically around a pending transaction, commissioned by the party relying on it (usually the buyer or investor), covers a broader range of areas beyond just the financial statements — including tax exposure, legal risk, and operational quality — and results in a confidential findings report rather than a formal audit opinion.

For a mid-market transaction involving a single UAE entity with reasonably organised records, 4–6 weeks from engagement letter to final report is a realistic range. More complex situations — multiple entities, cross-border structures involving both mainland and free zone operations, or a target with disorganised records — extend the timeline. Straightforward, narrowly scoped reviews (for example, a limited financial-only review for a small acquisition) can complete faster.

Fees vary meaningfully with deal size, number of entities and jurisdictions involved, sector complexity, and how organised the target's records are. PNPC scopes and quotes a fixed fee based on an initial scoping call before any engagement begins, rather than an open-ended time-and-materials arrangement that leaves the client uncertain of total cost.

Financial due diligence examines the quality and sustainability of reported earnings, working capital, and net debt. Tax due diligence examines UAE Corporate Tax and VAT compliance history, transfer pricing exposure, and any open matters with the Federal Tax Authority. Legal due diligence examines the licence, contracts, litigation exposure, and corporate governance documents. Operational due diligence examines the underlying business quality — customer concentration, key-person dependency, and systems readiness. Most engagements combine several of these workstreams, scoped to the transaction.

Yes, and this has become one of the most material areas of focus since UAE Corporate Tax took effect under Federal Decree-Law No. 47 of 2022 for financial years starting on or after 1 June 2023. We review the target's Corporate Tax registration status, filing history, whether the 9% standard rate or the Qualifying Free Zone Person 0% regime has been correctly applied (where the target is a free zone entity), and whether the AED 375,000 taxable income threshold has been correctly tracked and applied for the small business relief and standard rate calculations.

Yes. We review VAT registration status, the return filing history accessible through the target's EmaraTax account (the FTA's current digital tax services platform), any outstanding VAT liabilities, penalty notices, or voluntary disclosures filed with the Federal Tax Authority, and whether VAT has been correctly applied to the target's specific revenue streams — particularly where the business has any zero-rated, exempt, or reverse-charge transactions that are commonly misapplied.

We check the target's ESR filing history for financial years up to the year ended before 1 January 2023, since the ESR notification and report filing obligations were discontinued for financial years starting on or after that date, under Cabinet Decision No. 98 of 2024. For an entity with financial years before that cutoff, we verify historical ESR compliance was properly completed, since any pre-2023 ESR penalty or non-compliance finding by the Ministry of Finance can still be an inherited liability. For current and future financial years, ESR is no longer a live ongoing compliance obligation to test.

Where the target's sector falls within the scope of Designated Non-Financial Businesses and Professions (DNFBPs) under UAE AML/CFT law — such as real estate brokers, dealers in precious metals and stones, and certain corporate service providers — or where the transaction size and structure otherwise warrant it, we verify the target's AML/CFT registration status, UBO declaration accuracy against the ownership chain, and whether any goAML-related reporting obligations have been properly discharged.

Most commonly the buyer, investor, or lender commissions it, because they are the party relying on the findings to make a go/no-go and pricing decision. However, sellers increasingly commission a 'vendor due diligence' report in advance of a sale process — this can speed up the transaction, address issues proactively before a buyer finds them, and support a stronger asking price by demonstrating transparency.

It depends on the nature and materiality of the finding. Options typically include: renegotiating the purchase price downward to reflect the risk or the cost of remediation, requiring specific representations, warranties, and indemnities in the transaction documents to allocate the risk to the seller, structuring an escrow holdback against the identified liability, requiring the issue to be remediated before completion as a condition precedent, or in serious cases, walking away from the transaction entirely.

Yes. Our scope covers mainland LLCs licensed by the Department of Economic Development (DED) in the relevant emirate, and free zone companies across the major UAE free zones (including JAFZA, DMCC, DIFC, ADGM, RAK ICC, and others), each of which has its own licensing authority, filing regime, and — for DIFC and ADGM — its own courts and, in some respects, its own legal framework. We tailor the review to the specific authority and legal framework governing the target.

In a share purchase, the buyer acquires the company itself, including all its historical liabilities — known and unknown — subject only to whatever protections are negotiated into the Share Purchase Agreement. This makes comprehensive due diligence across financial, tax, legal, and regulatory areas essential, because undiscovered liabilities transfer with the shares. In an asset purchase, the buyer acquires specific identified assets and generally does not inherit unrelated historical liabilities, so due diligence can often be more narrowly scoped to the specific assets, contracts, and employees being transferred.

A due diligence report is not, in itself, a valuation report — it identifies and quantifies risks and financial adjustments that feed into a valuation, but the valuation and pricing decision itself sits with the client, their financial advisers, and negotiation with the counterparty. Where useful, PNPC's findings clearly translate into a quantified financial impact (for example, a working capital adjustment or a contingent tax liability estimate) that can be plugged directly into the client's own valuation model.

A comprehensive Information Request List typically covers three years of audited financial statements and management accounts, the trade licence and corporate constitutional documents, UBO declarations, UAE Corporate Tax and VAT registration and filing history, all material contracts and leases, employment records and WPS compliance history, and any litigation or dispute schedule. PNPC tailors the exact list to the target's licence type, sector, and the specific transaction structure.

This is itself a significant finding. Reluctance to provide standard financial, tax, or legal documentation during due diligence is one of the clearest red flags in a transaction — it may indicate poor record-keeping, an intent to conceal a liability, or simply an inexperienced seller unfamiliar with transaction requirements. We document any information gaps clearly in the findings report and advise the client on how each gap should affect the deal decision, pricing, or required warranties.

Much of the document review, financial analysis, and management interview work can be conducted remotely via secure data room access and video calls. However, for businesses with physical inventory, manufacturing operations, or multiple retail/commercial locations, an in-person site visit remains valuable to verify the physical existence and condition of assets, observe operations directly, and meet key staff. PNPC's Dubai and Abu Dhabi presence allows us to combine remote analytical work with targeted on-the-ground verification where it adds genuine value.

We identify all related-party transactions — intercompany loans, management fee arrangements, property leased from a shareholder, goods or services transacted with common-ownership entities — and assess whether they were conducted on arm's length terms. Where they were not, we quantify the adjustment needed to normalise reported earnings to reflect what the business would look like on a standalone, arm's length basis, and flag the transfer pricing implications under UAE Corporate Tax rules for related-party dealings.

Yes. We review headcount, visa status, remuneration structures, and — critically — Wage Protection System (WPS) compliance history with MOHRE, since WPS non-compliance can trigger fines, work permit suspension risk, and in serious repeated cases restrictions on the company's ability to process new labour applications. We also review end-of-service gratuity liability calculations, since this is frequently under-provisioned in target companies' balance sheets.

A red flag is any finding materially inconsistent with what the seller represented, or that indicates a risk not previously disclosed to the buyer — ranging from a minor administrative lapse to a fundamental issue that could derail the transaction entirely. Materiality depends on deal size and the client's risk tolerance; we grade findings by severity (informational, moderate, material, critical) so the client can prioritise attention and negotiation effort rather than treating every finding as equally urgent.

Yes. With operating offices in Dubai, Abu Dhabi, Chennai, Bangalore, and Hyderabad, PNPC is well positioned for transactions where an Indian buyer is acquiring a UAE target, a UAE-based investor is investing into an Indian company, or a group has entities in both jurisdictions. We coordinate the UAE-side due diligence (Corporate Tax, VAT, DED/free zone licensing, MOHRE/WPS) with the India-side considerations (FEMA/ODI structuring for the Indian party, RBI reporting, and India-UAE DTAA implications) under one engagement rather than a disconnected handoff between two separate firms.

Yes. The engagement is governed by a confidentiality agreement or is embedded within the transaction's existing non-disclosure agreement, and the findings report is addressed and privileged to the engaging party only — typically the buyer, investor, or lender — not published or shared with the target or any other party without the client's explicit consent.

Quality of earnings analysis examines whether the reported profit of a business is a reliable, repeatable indicator of its true underlying earning power, or whether it has been inflated or distorted by one-off items, aggressive accounting policies, related-party pricing, or timing of revenue and expense recognition. It is one of the most valuable components of financial due diligence because most acquisition pricing is built on a multiple of EBITDA — and an inflated EBITDA directly inflates the purchase price paid.

Yes, and this is an increasingly important check. The 0% Corporate Tax rate applies only to a Qualifying Free Zone Person that meets specific conditions under Federal Decree-Law No. 47 of 2022 and its Cabinet and Ministerial Decisions — including maintaining adequate substance in the UAE, deriving qualifying income, and keeping non-qualifying revenue within the prescribed de minimis threshold. If a target has been claiming the 0% rate without genuinely meeting these conditions, the standard 9% rate (on taxable income above AED 375,000) may in fact apply, with penalty exposure for prior periods.

We map the target's financial statements to a consistent basis for analysis purposes — most UAE entities report under IFRS or IFRS for SMEs, and we adjust for any framework or currency translation differences (particularly relevant for group structures spanning UAE, India, and other jurisdictions) so the client receives a single, coherent financial picture rather than having to reconcile multiple reporting bases themselves.

Beyond delivering the report, we support the client's legal team in translating findings into specific representations, warranties, and indemnity clauses for the Share Purchase Agreement or Shareholders' Agreement; support any completion accounts or working capital true-up calculation where the deal structure includes one; and, where engaged for ongoing work, manage the post-completion tax and compliance handoff so nothing flagged during due diligence falls through the cracks in the first months of new ownership.

Yes. For a minority equity investment — common with VC, PE, or angel investors taking a stake in a UAE company — due diligence is typically scoped more narrowly than a full acquisition, focusing on cap table accuracy, prior fundraising terms and any investor rights already granted, financial position and burn rate (for earlier-stage companies), key-person dependency, and the tax and regulatory compliance areas most relevant to an investor rather than a full owner.

Due diligence, in the classic sense, is performed by or for an external party ahead of a transaction. A 'health check' — sometimes requested by a company's own management or board — applies similar analytical rigour (financial quality, tax exposure, legal and regulatory compliance) but is commissioned by the company itself, typically to prepare for a future transaction, address governance gaps, or simply gain an independent view of the business's true position before problems compound.

Both. Beyond identifying and quantifying risks, our reports include specific, actionable recommendations — whether that is a price adjustment amount, a recommended warranty or indemnity clause, a remediation step the seller should complete before completion, or a governance improvement the buyer should implement in the first 100 days of ownership.

PNPC is engaged directly by the party relying on the due diligence findings — typically the buyer, investor, or lender — and has no financial or advisory relationship with the target that could compromise objectivity. Where PNPC has, or has previously had, any relationship with the target (for example, as their existing auditor), we disclose this at the outset and, where it creates a genuine conflict, decline the engagement or recommend an alternative reviewer.

This happens regularly — due diligence findings are one of the most common reasons a deal is renegotiated, restructured, or abandoned entirely, and that is a legitimate and valuable outcome of the process, not a failure of it. PNPC bills for work performed to the point the engagement is paused or terminated, in line with the agreed engagement letter terms, and can pause or resume the engagement if negotiations restart on revised terms.

PNPC has practised as Chartered Accountants across India and the UAE since 1986, with operating offices in Dubai, Abu Dhabi, Chennai, Bangalore, and Hyderabad. We bring genuine UAE Corporate Tax, VAT, and free zone regulatory depth — not a generic checklist adapted from another jurisdiction — combined with cross-border India-UAE structuring experience that most single-jurisdiction firms cannot offer. We escalate material findings live during fieldwork, translate every finding into specific transaction-document recommendations, and remain engaged through completion and post-transaction integration, not just until the report is emailed.

Yes. The engagement letter fixes the scope — which entities, which workstreams (financial, tax, legal, operational), and which time period are covered — before fieldwork starts. Anything outside that boundary (for example, a related entity the client did not originally flag, or a period before the agreed review window) is not silently assumed to be covered; it is raised back to the client as a scope-change decision, with any fee or timeline impact made explicit before we proceed.

We do not treat missing or disorganised source records as a minor administrative footnote. Where ledgers, reconciliations, or supporting invoices cannot be produced, we document exactly what could not be verified, why, and what conclusion cannot safely be drawn as a result — rather than filling the gap with management's verbal assurance. A due diligence report that quietly assumes unverifiable figures are correct gives the client false comfort.

Due diligence itself is not an authority-facing filing — the report goes to the client, not to the FTA, DED, or a free zone authority. However, the underlying facts we verify are authority-anchored: Corporate Tax and VAT registration status and filing history through EmaraTax, trade licence validity and activity scope with the DED or the relevant free zone authority, and, where relevant, AML/CFT registration status with the Ministry of Economy. We verify against these authority records directly rather than relying on the target's summary of its own compliance position.

For Corporate Tax purposes, Taxable and Exempt Persons in the UAE must retain relevant records for at least seven years after the end of the relevant tax period, under Federal Decree-Law No. 47 of 2022. In practice, most due diligence reviews focus the detailed financial and tax fieldwork on the last three financial years, since that reflects current trading and current-regime compliance, but where an inherited liability could reach further back — a pre-2023 ESR exposure, or an older tax dispute — we extend the review period specifically for that item rather than for the whole engagement.

Yes. VAT and Corporate Tax are separate regimes with separate filing obligations through EmaraTax, but they are not independent of each other in practice — a revenue recognition policy that affects the Corporate Tax taxable income calculation can also affect the VAT output tax position on the same transactions, and related-party pricing adjustments made for Corporate Tax transfer pricing purposes can have a knock-on VAT consequence. We review both together rather than as two disconnected checklists, so an adjustment made for one purpose does not create an unflagged inconsistency in the other.

Yes, materially. A mainland LLC target is reviewed against DED licensing rules and the general Commercial Companies Law framework, including checking whether any 'strategic impact' activity carries residual local-ownership conditions post the 2020 foreign-ownership liberalisation. A free zone target is reviewed against that specific free zone authority's own licensing, activity, and — for many free zones — Qualifying Free Zone Person conditions for the 0% Corporate Tax rate, which do not apply to mainland entities in the same way. DIFC and ADGM targets add their own courts and, in places, distinct legal frameworks on top of that.

Where the target structure includes an offshore holding entity (for example a JAFZA Offshore or RAK ICC company) sitting above a UAE mainland or free zone operating entity, we trace ownership, intercompany funding, and any management or royalty charges through the full structure, not just the operating entity in isolation. This matters because liabilities, guarantees, or related-party arrangements booked at the holding level can materially affect the true economics of the operating business being acquired.

The most common drivers we see are: a target with multiple entities or jurisdictions rather than a single clean entity; disorganised or incomplete source records that require reconstruction before they can be tested; slow or partial responses to the Information Request List; and late-discovered issues (an undisclosed related-party arrangement, a licence mismatch) that require additional targeted fieldwork once found. A single, well-organised UAE entity with responsive management routinely finishes at the faster end of the range.

Fee is driven primarily by scope breadth (financial-only versus a combined financial, tax, legal, and operational review), the number of entities and jurisdictions in the structure, the condition of the target's records, and whether site visits are needed for physical assets or stock. Two acquisitions of similar deal value can have very different fees if one target has three years of clean audited accounts and the other has reconstructed management accounts and multiple related entities.

On the client side, we ask for a named individual — usually the deal lead, CFO, or a board member — who can confirm the assumptions we have used for any item where management's own explanation is the only available evidence, and who can decide, for each material red flag, whether it changes price, requires a specific warranty, or needs further investigation before the deal proceeds. We do not finalise a report around unresolved material items without that sign-off, because an unresolved assumption presented as a settled fact undermines the report's reliability.

Banks and institutional investors commissioning or relying on due diligence for a lending or investment decision typically expect a more formally structured report — an explicit statement of scope and limitations, clearly sourced findings tied to specific documents or authority records, and often a standalone executive summary suitable for a credit or investment committee paper. A smaller private buyer may be comfortable with a more conversational findings discussion supplemented by a shorter written summary.

Every material finding in the report is tied back to the specific document, ledger entry, authority record, or management representation it is based on, and our working files retain that evidence trail. Where a finding rests on a management explanation rather than independent documentary evidence, the report says so explicitly, so the client and their legal team understand the strength of the underlying support if a warranty or indemnity claim is later contested.

For the purpose of the due diligence review itself, we work from certified translations and copies without needing formal legalisation, since the report is an internal commercial document for the client, not a filing submitted to a UAE authority. Legalisation only becomes relevant where a specific foreign-issued document (for example, a foreign shareholder's incorporation certificate) needs to be formally relied upon in the transaction documents themselves — and because the UAE is not a party to the Hague Apostille Convention, any such document requires full consular/chain legalisation through the issuing country's authorities and the UAE Embassy or Consulate, followed by UAE Ministry of Foreign Affairs and International Cooperation attestation. There is no apostille shortcut available for UAE-bound documents.

Yes, where the transaction involves an Indian party — an Indian company making an overseas direct investment (ODI) into the UAE target, or a UAE entity investing into an Indian group company. We flag the India-side regulatory touchpoints (ODI reporting to the RBI, FEMA pricing-guideline considerations, and India-UAE DTAA implications) that the client's Indian counsel or our own India offices need to address in parallel, so the UAE-side due diligence and the India-side compliance obligations are tracked on one coordinated timeline rather than surfacing as a late surprise for the Indian entity.

Yes. Where PNPC has conducted the due diligence and later continues an ongoing tax, accounting, or compliance relationship with the acquired entity, we can help prepare and support the response to an FTA query, an audit assistance request, or a similar authority query — using the underlying due diligence working papers as the starting evidence base rather than reconstructing the position from scratch. Where PNPC was not the original engaged reviewer, we can still assist, though the response will draw on whatever records and prior due diligence file the client can make available.

As part of the final report and handover, we identify any trade licence renewal, VAT or Corporate Tax filing, WPS registration step, or insurance renewal that falls due in the weeks immediately following completion, and flag ownership of each to the client's team or ours, depending on the post-completion engagement scope. A frequently overlooked one on a share acquisition: the FTA requires changes to key company and tax records — including a change of principal place of business, trading name, or primary business activity — to be notified through EmaraTax within 20 business days of the change, so a post-completion restructuring can itself create a hard deadline the new owner did not know they had inherited. A deal closing does not pause an authority deadline, and a lapsed renewal or a missed record-amendment notification discovered weeks into new ownership is an avoidable, entirely foreseeable problem.

We trace the filed UBO declaration against the actual ownership chain evidenced in the shareholder register, constitutional documents, and any nominee or trust arrangements disclosed by management, rather than accepting the filed declaration as automatically correct. Where the ownership structure includes layered holding entities or foreign shareholders, we confirm the ultimate natural-person beneficial owner is correctly identified under the applicable Ministry of Economy cabinet resolution requirements.

We ask for evidence of the control operating, not just a policy document describing it — for example, actual board or management approval minutes for material contracts, capital expenditure, or related-party transactions during the review period, not merely a stated approval threshold in a governance policy. Where a policy exists on paper but the sampled transactions show no corresponding approval evidence, we flag the gap between stated control and actual practice as a finding in its own right.

Material findings that affect price, warranties, or the go/no-go decision go into the main findings report with full analysis. Smaller, unresolved administrative points — a missing renewal certificate the target says is 'in process', an outstanding query with an authority that has not yet been answered — go into a structured exception register with an assigned owner and required action, so they are tracked to resolution rather than left as a loose mention buried in an appendix.

The handover typically includes the final findings report, the exception register with outstanding items and owners, the recommended representations, warranties, and indemnity language for the transaction documents, and — where relevant — a structured summary of information gaps that were never resolved during the engagement, so the client's legal and finance teams have one complete, indexed package rather than a scattered set of emails and interim notes.

Access to the target's data room, financial records, and management is governed by the confidentiality agreement or non-disclosure agreement already in place between the client and the target, and our team operates strictly within those terms. Internally, we restrict working file access to the engagement team, and our final report is delivered only to the client as the engaging party — not shared with the target, other bidders, or any third party without the client's explicit written consent.

Where we identify a related-party arrangement priced away from market terms — a below-market lease from a shareholder, an inflated intercompany management fee — we benchmark against comparable market terms where reasonably available and calculate the earnings adjustment that would result from normalising the arrangement to an arm's length basis. That adjusted figure is what we recommend feeding into the client's own EBITDA multiple or valuation model, rather than leaving the client to guess at the magnitude of the distortion.

Yes, for engagements where the client's board or investment committee needs to approve or decline the transaction, we prepare a concise executive summary — typically the material red flags, the quantified financial adjustments, and a clear recommendation framework — designed to be read in a single board pack alongside the detailed workstream findings for those who need the full underlying analysis.

Where a target's financial year-end occurs during the engagement, we agree with the client whether the review should be based on the last completed audited year plus stub-period management accounts, or whether the engagement timeline should flex to incorporate the newly closed year-end figures once available — this is a scoping decision made explicitly rather than left ambiguous, since it affects both the review period and potentially the completion accounts mechanism if one is included in the deal structure.

We do not simply accept a system-generated report at face value. Where the target's accounting or ERP system is a factor — for example, in assessing post-acquisition integration effort — we sample underlying transactions against the system output to confirm the reports being relied upon actually reconcile to source data, and we note where a system's limitations (manual workarounds, disconnected modules, weak access controls) create data-quality risk that could affect both the diligence conclusions and Day-1 integration planning.

We grade each finding by combining its financial materiality against deal size, the likelihood it recurs or crystallises post-completion, and whether it is remediable before completion or only manageable through a warranty or price adjustment afterward. A finding that is financially small but points to a systemic control weakness can still be graded higher than a larger one-off item that is easily fixed, because the systemic issue signals broader risk beyond the single instance.

Where we become aware of a live dispute between the target's own shareholders or founders during fieldwork — for example, conflicting explanations of a related-party arrangement, or disagreement over historical capital contributions — we document the discrepancy and flag it as a finding in its own right, rather than picking a side or quietly reconciling it ourselves. An unresolved internal dispute at the target is directly relevant to the buyer's decision, since it can surface as litigation risk post-completion.