Engagement Letter For Statutory Audit Template for Saudi Arabia

An Engagement Letter For Statutory Audit is a legally binding contract that you must execute before any statutory audit work begins in Saudi Arabia. This document serves as the foundation of the professional relationship between your company and the appointed audit firm, ensuring compliance with Saudi Companies Law and professional standards set by the Saudi Organization for Certified Public Accountants (SOCPA).

When do you need this document?

You need this engagement letter whenever your company requires a statutory audit under Saudi law. This includes annual audits for joint stock companies, limited liability companies above certain thresholds, and listed companies regulated by the Capital Market Authority (CMA). Banks and financial institutions under SAMA supervision also require this document for their mandatory audits. The letter is essential when changing audit firms, as required by Saudi regulations on audit firm rotation, or when expanding audit scope to include subsidiaries or special purpose entities.

Key legal considerations

Your engagement letter must clearly define the audit scope in accordance with International Standards on Auditing as adopted by SOCPA. It should specify the auditor's responsibilities for detecting fraud and errors, compliance with anti-money laundering reporting obligations, and adherence to independence requirements. The document must outline management's responsibilities for preparing financial statements, providing access to records, and ensuring internal controls are adequate. Risk limitations and liability caps should be clearly stated, along with fee arrangements and payment terms. The letter should also address confidentiality requirements and specify the audit opinion format that will be delivered.

Legal requirements in Saudi Arabia

Under Saudi Companies Law, the engagement letter must be approved by your board of directors and, for joint stock companies, ratified by shareholders in the general assembly. The document must demonstrate the auditor's compliance with SOCPA licensing requirements and professional standards. For listed companies, additional CMA requirements apply, including enhanced independence disclosures and specific reporting obligations. Banks and financial institutions must ensure their engagement letters address SAMA's supervisory requirements and Basel III compliance reporting. The letter must specify the audit period, typically one Gregorian year, and acknowledge mandatory rotation requirements that may apply to your company type. Anti-money laundering compliance clauses are mandatory, requiring auditors to report suspicious transactions to the Saudi Financial Intelligence Unit.