Cyprus Statutory Audit Requirements: What Finance Teams Need To Know

If you have recently taken responsibility for a Cyprus subsidiary — or if your group has expanded into Cyprus for the first time — understanding the Cyprus audit requirements is one of the first things to get right. Cyprus has specific statutory audit rules that determine when a Cyprus company audit is required, when a review engagement may be possible, how filing deadlines work, and what transfer pricing obligations apply to entities with related party transactions. Getting any of these wrong creates compliance gaps that are difficult and costly to close retroactively.

This article sets out the core Cyprus audit requirements for private limited companies, explains the distinction between a statutory audit and a review engagement, covers the key filing deadlines, outlines transfer pricing documentation obligations, and explains what group finance teams should know about consolidation requirements where the Cyprus entity is the parent. These Cyprus audit requirements should be understood early to avoid delays later in the compliance cycle.

Statutory audit or review engagement: which applies to your Cyprus company?

The assumption most group finance teams make is that every Cyprus company requires a full statutory audit. That is the default position — but a limited exception exists for very small entities.

Statutory audit: Under the Companies Law, Cap. 113, every Cyprus private limited company is required to have its annual financial statements audited by a licensed statutory auditor or statutory audit firm. Audits are conducted under International Standards on Auditing (ISAs) and financial statements are prepared under IFRS as adopted by the EU. There is no general small company exemption from the audit requirement based on size alone.

Review engagement: A company may replace its statutory audit with a review engagement if it satisfies both of the following criteria for two consecutive financial years: annual net turnover below €200,000 and total gross assets below €500,000. For financial years beginning on or after 6 February 2026, the turnover threshold increases to €300,000, while the total assets threshold remains at €500,000. The exemption applies to financial periods ending on or after 31 December 2022.

A review engagement is performed under ISRE 2400 (Revised) and provides limited assurance — primarily through inquiry and analytical procedures — rather than the detailed testing and evidence-gathering required in a full statutory audit. It is a lighter process, but it must still be conducted by a licensed statutory auditor or statutory audit firm registered in Cyprus.

Importantly, filing obligations with the Registrar of Companies and the Cyprus Tax Department are identical regardless of whether the company undergoes a statutory audit or a review engagement. The financial statements must still be filed, the annual return must still be submitted, and the tax return must still reference the audited or reviewed figures.

For subsidiaries of international groups, the review engagement option is rarely available in practice. Most group entities hold intercompany balances, loans, or investment assets that push total assets above the €500,000 threshold. Group audit requirements at the consolidation level will also typically override the local exemption. However it is worth knowing the threshold exists, particularly for holding or dormant entities with minimal activity.

Cyprus audit filing deadlines: when financial statements and tax returns must be filed

For a Cyprus private limited company with a 31 December financial year end, the following deadlines apply. Missing any of them triggers penalties and, in persistent cases, risk of administrative action by the Registrar of Companies.

The TD4 corporate tax return is the most time-sensitive obligation tied directly to the audit. It references the audited or reviewed figures, which means the financial statements must be finalised before the return can be prepared and submitted. A delayed audit creates a cascading effect across every other compliance deadline.

The 2026 tax reform is a significant change for group finance teams to plan for now. For financial years ending 31 December 2026 and beyond, the TD4 deadline moves from 31 March to 31 January of the following year — a full two months earlier. For a December 2026 year end, that means the TD4 is due 31 January 2028 rather than 31 March 2028. The audit must therefore be substantially complete earlier in the cycle than has historically been the case.

What your Cyprus auditor needs from you: preparing for the engagement

A Cyprus statutory audit cannot begin in any meaningful sense until the auditor has a complete and organised set of financial information. The most common cause of audit delays is not complexity — it is client information arriving in fragments over several weeks.

At a minimum, your audit team should be ready to provide the following on or shortly after the year end: a complete trial balance agreed to the general ledger, bank statements reconciled to the closing balance, a fixed asset register with additions and disposals during the year, loan agreements and confirmation of year-end balances for all borrowings, management accounts or board-approved financial information, and details of any significant transactions or events close to the year end.

Transfer pricing documentation: For group subsidiaries with related party or intercompany transactions, transfer pricing obligations are a separate and important area of preparation. Under the Income Tax Law, Cyprus tax residents and entities with a permanent establishment in Cyprus that have controlled transactions with associated persons are required to maintain a Transfer Pricing Documentation File and submit a Summary Information Table of controlled transactions (SIT) together with the TD4.

The Summary Information Table must be submitted for every company with controlled transactions — there is no minimum threshold. Even a single euro of intercompany transactions triggers the SIT filing obligation. This is a point that is frequently missed by group finance teams and can result in penalties.

The Transfer Pricing Documentation File itself consists of a Master File and a Cyprus Local File. Exemptions apply as follows: a company is exempt from preparing a Cyprus Local File where its controlled transactions per category do not exceed €2,500,000 per tax year (€5,000,000 for transactions involving the purchase or sale of goods, and €10,000,000 for financing transactions). Below these thresholds, minimum transfer pricing documentation is still required — the exemption applies only to the full Cyprus Local File. Exemption from the Master File applies where the entity is not the Ultimate Parent Entity or Surrogate Parent Entity of its group.

For both the auditor and the tax advisor, the existence of controlled transactions and whether transfer pricing thresholds are met is relevant to the audit of related party disclosures, the arm's length nature of intercompany balances, and the accuracy of the TD4 tax return. Group finance teams should ensure that transfer pricing studies, where required, are prepared and available before the audit and tax compliance work commences.

Group reporting and Cyprus standalone financial statements: what group CFOs need to understand

For subsidiaries within international groups, there is an important distinction between the Cyprus statutory financial statements — which are standalone, entity-level accounts prepared under IFRS as adopted by the EU — and the group consolidated financial statements prepared at the holding company level.

The Cyprus statutory financial statements reflect the financial position and performance of the Cyprus entity alone. Intercompany transactions are included rather than eliminated. This means the figures in the Cyprus statutory accounts will differ from the contribution that same entity makes to the group consolidated accounts, where intercompany balances and transactions are eliminated on consolidation.

When the Cyprus entity is the parent — consolidation requirements: Where the Cyprus company is itself the parent of a group, Cyprus law requires it to prepare and audit consolidated financial statements in addition to its standalone statutory accounts. However, this obligation applies only where the group qualifies as a large group. A Cyprus parent company is required to consolidate where its group exceeds at least two of the three following criteria in two consecutive financial years. Furthermore, even where the large group thresholds are met, a Cyprus parent company is exempt from preparing consolidated financial statements if it is itself a subsidiary of a parent entity that already prepares consolidated financial statements covering the Cyprus group. In other words, if consolidation is performed at a higher level in the corporate structure — for example at the level of a foreign holding company above the Cyprus entity — consolidation at the Cyprus level is not required.

Where a Cyprus parent company heads a group that falls below the large group thresholds across at least two of the three criteria for two consecutive years, consolidation is not required. The thresholds apply on a consolidated basis as at the balance sheet date of the parent company.

For group finance teams whose Cyprus entity sits below the large group threshold, this is a meaningful exemption. It means the Cyprus statutory audit covers only the standalone entity, and the group consolidation is prepared and audited at a higher level in the corporate structure. However, where the Cyprus entity is the ultimate parent and the group is large, the consolidation audit is a separate, material engagement that must be scoped and resourced accordingly.

Does your Cyprus audit need to be done by a large firm?

A common assumption among international groups — particularly those accustomed to using Big 4 firms at the group level — is that the Cyprus statutory audit should also be handled by a large firm. This assumption is worth examining directly.

Every licensed statutory auditor and statutory audit firm in Cyprus operates under exactly the same professional framework. Audits are conducted under ISAs. Financial statements are prepared under IFRS as adopted by the EU. Regulatory oversight is provided by ICPAC, which conducts quality assurance reviews of all registered audit firms regardless of size. There is no separate or lighter standard that applies to smaller firms. A properly conducted audit by a licensed Cypriot firm of any size carries the same professional weight and statutory validity as one conducted by a large international firm.

What matters is not firm size but the competence, experience, and partner involvement of the team conducting the audit. A group finance director reviewing their Cyprus audit arrangements should ask whether the engagement partner has relevant experience with group structures and IFRS reporting, whether the partner is directly involved throughout the audit or only at sign-off, whether the firm has passed its most recent ICPAC quality assurance review, and whether the firm can communicate effectively with a finance team located abroad and meet agreed deadlines.

Large firms handle a large volume of work. For Cyprus subsidiaries in the fee range that falls below their strategic priority threshold, the practical reality is that the engagement is staffed by junior personnel with limited partner oversight. The brand provides comfort but not necessarily quality at the engagement level. A smaller specialist firm with direct partner involvement and genuine experience in group audit work will in many cases deliver a better outcome for the same or lower cost.

Choosing a Cyprus audit firm: what international groups should require

For international subsidiaries, the selection of a Cyprus audit firm directly affects your compliance calendar, your group reporting timetable, and the quality of the financial information on which your group accounts depend.

Partner accessibility and direct involvement throughout the engagement — not just at sign-off — is the single most important criterion. Beyond that, look for demonstrable experience with IFRS reporting in a group context, familiarity with transfer pricing documentation requirements, a track record of delivering audits on time, and the ability to communicate clearly and efficiently with finance teams located abroad.

At Nikita & Partners, our partners are directly involved in every audit engagement from planning through to sign-off. We hold Big 4 experience and bring that standard of technical rigour to every file we handle. We work with Cyprus subsidiaries of international groups across multiple sectors and jurisdictions, and we understand what group finance teams need from a local Cyprus auditor.

These Cyprus audit requirements are often the starting point for broader compliance across tax, transfer pricing, and group reporting.

If you are reviewing your current audit arrangements or setting up a Cyprus entity for the first time, contact us directly. We will give you a clear assessment of your requirements and a fee proposal within 48 hours.

Frequently asked questions

Is a statutory audit required for all Cyprus private limited companies?

Yes, as the default position. Every Cyprus private limited company must have its financial statements audited under ISAs by a licensed statutory auditor. A limited exception exists for companies with net turnover below €200,000 (increasing to €300,000 from 6 February 2026) and total gross assets below €500,000 for two consecutive years, which may opt for a review engagement instead. Filing obligations remain unchanged regardless.

What is the difference between a statutory audit and a review engagement in Cyprus?

A statutory audit, conducted under ISAs, provides reasonable assurance that the financial statements are free from material misstatement through detailed testing and evidence-gathering. A review engagement under ISRE 2400 (Revised) provides limited assurance only, primarily through inquiry and analytical procedures. Both must be performed by a licensed statutory auditor registered in Cyprus and carry the same filing obligations.

What are the Cyprus audit filing deadlines for a December year-end company?

The annual return (HE32) with audited financial statements must be filed within 28 days of the AGM. The TD4 corporate tax return is due 31 March of the second year following year end for financial years up to and including 2025. From the 2026 financial year onwards, the TD4 deadline moves to 31 January of the second year following year end — so a 31 December 2026 year end has a TD4 due date of 31 January 2028.

Do all companies with related party transactions need to file a Summary Information Table?

Yes. The Summary Information Table of controlled transactions must be submitted together with the TD4 for every Cyprus tax resident company or PE that has any controlled transactions with associated persons — regardless of amount. There is no minimum threshold for the SIT filing obligation. The thresholds of €2,500,000, €5,000,000, and €10,000,000 relate only to the obligation to prepare a full Cyprus Local File, not to the SIT.

When does a Cyprus parent company need to prepare consolidated financial statements?

A Cyprus parent company must prepare and audit consolidated financial statements where its group qualifies as a large group — that is, where it exceeds at least two of the following criteria for two consecutive years: total consolidated gross assets above €25,000,000, net consolidated turnover above €50,000,000, or average number of employees above 250. Groups below these thresholds are not required to consolidate at the Cyprus level. Additionally, even where the large group thresholds are met, a Cyprus parent is exempt from consolidation if a parent entity higher in the corporate structure already prepares consolidated financial statements that include the Cyprus group. If consolidation is handled at a foreign holding company level above the Cyprus entity, Cyprus-level consolidation is not required.

Does it matter whether a Cyprus audit is done by a large or small firm?

No. All licensed Cyprus audit firms operate under the same framework — ISAs for audit conduct and IFRS as adopted by the EU for financial reporting. ICPAC regulates and reviews all firms regardless of size. What matters is the competence of the engagement team, the level of partner involvement, and the firm's experience with group structures and IFRS reporting — not the size or brand of the firm.

Speak to us directly

If you are setting up a Cyprus entity for the first time, reviewing your current audit arrangements or are unsure how these Cyprus audit requirements apply to your structure, we can guide you. We work with group finance teams across multiple jurisdictions and will give you a direct, clear answer.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.