The short answer
Audit preparation is the work of assembling your books, schedules and supporting evidence before an auditor or a URA officer asks for them, so that the audit tests your records rather than your memory. Two different things get called an audit in Uganda. A statutory audit is required by law: under the Companies Act 2012 every registered company must appoint an external auditor and be audited every year, and there is no small-company or turnover exemption of the kind the UK and some other countries allow. A URA audit is URA reviewing your records to test the income, VAT, PAYE or other tax you declared, and it can reach any business, company or not.
The dates that decide the work: a private company lays its accounts within 10 months of its year end and a public company within 7 months, and tax records must be kept 5 years after the end of the tax period they relate to, and longer if an audit, objection or appeal started before those five years ran out. Growth Informer Software Services offers audit preparation for both kinds of audit and, where a statutory audit is required, the audit itself, because our practice holds an ICPAU practising certificate. We name no clients, publish no count of audits and promise no outcome: every audit is judged on its own records. The retention rules behind all of this are in what records URA expects.
Statutory audit or URA audit: which one you are facing
A statutory audit applies to every company registered in Uganda. Under the Companies Act 2012 every company must appoint an external auditor and have its accounts audited annually. Once they are audited, section 167(1) requires the accounts to go to the Registrar at URSB with the auditor’s report and the directors’ report, and the accounts must be laid within 10 months of year end for a private company and 7 months for a public company. Three URSB filings get confused with one another here, and they are separate: the accounts themselves, the annual return (UGX 55,000 for a private company limited by shares), and beneficial ownership information, which every company must file and which is the one owners most often forget. URSB fees checked September 2026. The requirement is tied to being a company, so a sole proprietor or an unregistered partnership is outside it, although a bank, an investor or a tender may still ask for audited accounts.
A URA audit is a different process. URA reviews a business’s records to test whether the tax it declared is correct, and any business can face one, registered company or not. There is no annual cycle: the timetable is whatever the notice says. The practical difference is who you are answering. A statutory auditor is testing whether the accounts show a true picture. A URA officer is testing whether a specific figure on a specific return can be supported by documents, and in any dispute that follows, the burden of proof sits with you to show the assessment is wrong, not with URA to show it is right.
What gets asked for, and what makes a document count as evidence
Auditors and URA officers ask for broadly the same evidence, because both are checking the same underlying question: do the numbers in your accounts or your tax returns match what actually happened in the business. This is the standing list, and where each item should already exist in your own records.
| What gets asked for | Why | Where it comes from |
|---|---|---|
| Sales invoices and EFRIS e-invoices or e-receipts | Proves declared income and output VAT actually happened | Your sales day book and EFRIS records |
| Purchase invoices and supplier EFRIS documents | Backs expense deductions and input VAT claims | Your purchases day book and supplier files |
| Bank and mobile money statements | Checks declared sales against money that actually moved | Bank and MTN MoMo or Airtel Money statements |
| A fixed asset register | Supports depreciation and equipment values on the balance sheet | A list of equipment, vehicles and fittings with purchase date, cost and depreciation to date |
| Payroll, PAYE, NSSF and LST records | Confirms staff were paid correctly and tax withheld and remitted | Payslips, the PAYE returns as filed and the NSSF remittance schedules |
| Stock records and a physical count | Explains cost of goods sold and any stock loss or shrinkage | Bin cards or a stock spreadsheet, counted against the book balance |
What makes a document count as evidence
Having a document is not the same as having evidence, and Ugandan tribunals have been specific about the difference. In Quickway Property Services Limited v Uganda Revenue Authority, Application No. TAT 105 of 2021, decided in 2023, the Tax Appeals Tribunal held that to claim an input VAT credit under section 28(1) of the VAT Act a taxpayer must show the supplies were actually made to it and were not fictitious, and that the invoices and receipts must be credible, sequentially numbered and independently verifiable, with a traceable payment trail. Quickway could not show that, and its application was dismissed with costs.
The working test before an audit, then, is not "do I have a paper for this" but "can I show this supply happened". For each significant purchase you should be able to point to the invoice, the supplier’s EFRIS document where one was required, and the bank or mobile money line that paid it. A cash purchase from a supplier who issues no numbered invoice and leaves no payment trail is the weakest item in any file, and it is worth listing those before anyone else does.
The four gaps that trip businesses up, and what two of them cost
The same four gaps show up in most Ugandan audits, statutory or URA, and every one of them is fixable well before the audit starts. Two of them have a price you can calculate.
- Missing EFRIS e-invoices, and what one costs. Buy stock for UGX 5,900,000 including UGX 900,000 of VAT from a supplier who was required to use EFRIS and never issued an e-invoice, and two things go wrong at once. The UGX 900,000 of input VAT has nothing credible behind it, and under Income Tax Act section 22(3)(m) URA can disallow the UGX 5,000,000 expense altogether, which at the 30% company rate is a further UGX 1,500,000 of income tax. One missing document, UGX 2,400,000. Chase the e-invoice before you pay, not at year end when the supplier has stopped answering. If you are unsure whether you or your suppliers are inside EFRIS at all, the free EFRIS checker answers it in a minute.
- Unreconciled mobile money. MTN MoMo and Airtel Money statements that were never matched line by line to the cash book leave gaps that show the moment the two are put side by side, because the statement is an independent record and your cash book is not. Mobile money transaction and withdrawal charges are the single most commonly missed expense line in hand-kept Ugandan books, since almost no accounting system creates that account by default. Every unexplained line is a question you will be asked to answer from memory months later.
- No fixed asset register. Equipment, fittings and vehicles bought over several years but never listed with a purchase date, a cost and the depreciation charged since make the depreciation in your profit and loss, and the equipment figure on your balance sheet, impossible to support. Basic POS systems rarely carry an accumulated depreciation account at all, so this one is usually a spreadsheet that nobody was asked to keep.
- Staff paid without PAYE records. Cash paid to staff with no payslip, no PAYE calculation and no NSSF registration is one of the fastest ways a URA audit turns into an assessment, because the employer, not the worker, carries the withholding obligation. Every employer with at least one employee must be registered with NSSF, and people engaged as consultants are judged on the substance of the relationship, not the label on the contract, so keep the contracts and the evidence of independence on file.
Where the books behind these gaps do not really exist yet, an audit is a poor moment to discover it. Reconstructing a year of missing records while an auditor waits costs more than keeping them did, which is what catch-up bookkeeping exists to fix.
The countdown: when to do what, working back from the deadline
Only one date in a statutory audit is fixed by law: the accounts must be laid within 10 months of year end for a private company, 7 months for a public one. Everything else is a working timetable, not a legal one. This is the order that keeps the last month from becoming a scramble, written for a private company with a 31 December year end, so the fixed date is 31 October.
| When | What to do | Why then |
|---|---|---|
| Weeks 1 to 4 after year end | Close the books: reconcile cash, bank and mobile money to statements, count stock physically against the book balance, post the sales and purchases day books | The audit should test your figures, not produce them for you |
| Month 2 | Assemble the evidence file: sales invoices and EFRIS documents, purchase invoices with supplier EFRIS documents, bank and mobile money statements, payroll, PAYE and NSSF records, the fixed asset register | Assembling is quick when the records exist and slow when they do not, and you need to know which it is early |
| Months 2 to 3 | Chase what is missing: every supplier e-invoice that was never issued, every unexplained mobile money line, every asset not on the register | This is the last stage at which a missing document can still be recovered from the person who has it |
| Months 3 to 4 | Appoint the external auditor and hand over the file | Every registered company must appoint one, and appointing early is what leaves time to fix whatever the first look turns up |
| Months 5 to 8 | Fieldwork and queries: answer each query with a document, not an explanation | A query answered with a document closes; one answered from memory comes back |
| By month 10 | Accounts audited and laid, and delivered to the Registrar at URSB with the auditor’s report and the directors’ report | 7 months for a public company. The annual return and beneficial ownership are separate filings |
Two habits do most of the work in this table. Keep the year’s records reconciled monthly rather than annually, and keep them for 5 years after the end of the tax period, longer if an audit, objection or appeal started before those five years ran out.
Set this up first, so audit preparation is not starting from zero
Audit preparation is far cheaper, and far faster, when the records behind it already exist. If a business is not there yet, this is the real order, with what each step costs. Registration and the trading licence are not free whatever an advert says, the TIN and the habits after them really are, and we are named only where we genuinely earn the money.
- Register, and know the real fee. A URSB business name is UGX 90,000 in total: UGX 35,000 to reserve the name and UGX 55,000 to register it. A private company whose nominal share capital is UGX 5,000,000 or less costs UGX 105,000 to register, on top of the same UGX 35,000 name reservation, plus 0.5% stamp duty on the capital, so UGX 25,000 on UGX 5,000,000 of capital. A TIN is free from URA and takes about five minutes online if you hold a National ID. A KCCA or local council trading licence is not free and depends on the trade and the grade of the area: a Grade IV kiosk is UGX 6,000 a year, a Grade IV general shop UGX 31,500, a Grade I general retail shop UGX 210,000, a Grade I grocery UGX 525,000, a Grade I pharmacy UGX 600,000. URSB and KCCA schedules, checked September 2026. Owners commonly report paying agents anywhere from about UGX 600,000 to several million shillings for the same registration errand, so ask for the official fee in writing before you agree a price with anyone.
- The free habits, from day one. Keep business money in its own account and its own mobile money line, write down every sale and expense the day it happens, put the catalogue on WhatsApp Business, and claim your Google Business Profile so the place shows on Maps. Claiming it costs nothing and most owners still pay someone to do it: how to add a business to Google Maps. These four habits are also what turn an audit from a reconstruction job into a printing job.
- Once there is stock to lose or staff at the till: Growth Informer Business for sales, stock and the daily cash-up. It produces the sales day book and the stock record as a by-product of serving customers, with EFRIS switched on when URA requires it and left off until then.
- Once customers look the business up before they visit: a website , with a monthly care plan at if you want it kept running. Useful for sales, irrelevant to an audit.
- When no ready-made tool fits the workflow: a custom build, , quoted per project.
- When an audit notice, penalty, assessment or deadline is already live: that is the point at which a URA-registered tax agent earns the fee, and it is the section below.
Be honest about where you are. A stall turning over UGX 500,000 a month needs a daily record, a separate money line and WhatsApp Business, not a website and not an audit: it is not a company, so no statutory audit reaches it, and its exposure is a URA records request it cannot answer. Audit preparation starts being worth paying for once the business is a registered company, or once a bank, an investor or a tender asks for audited accounts.
If an audit notice or a records request has already arrived
If a URA audit notice, a records request or an assessment has already arrived, the calendar decides more than the arguments do. Do these before you call anyone, including us.
- Read the notice for three things: the tax type, the exact period, and the date the response is due. Answer that scope and nothing wider. Sending your whole filing system invites questions nobody asked.
- Pull that period’s records first, in this order: bank and MTN MoMo or Airtel Money statements, because they can usually be reprinted or re-downloaded and carry dates and amounts nobody can dispute; then sales invoices and EFRIS e-invoices or e-receipts; then purchase invoices with the supplier’s EFRIS documents; then payroll, PAYE and NSSF schedules; then the stock record.
- List the purchases with no EFRIS document from a supplier who should have issued one, and expect them to be questioned under Income Tax Act section 22(3)(m). Knowing which ones they are before URA does is worth more than hoping they are missed.
- Keep the file open. The 5-year retention rule extends: a record needed for an audit, objection or appeal that started before the five years expired must be kept until that proceeding is finished.
- If it becomes an assessment you disagree with, object within 45 days of the date of the notice, in writing, stating your grounds and attaching the evidence. The burden of proof is on you. The Commissioner must then serve an objection decision within 90 days, and a decision served late can be treated as one that allows your objection. From that decision you have 30 days to apply to the Tax Appeals Tribunal, which charges a non-refundable UGX 22,000 filing fee and will not hear the case until you have paid 30% of the tax assessed or the tax not in dispute, whichever is the higher amount.
This is our reading of the published process, not tax advice; for a ruling on your own case go to URA or a registered tax adviser, and how a URA tax dispute works sets out the full timetable with decided cases.
Where we come in: we are registered with URA as a tax agent, so we can assemble and review the period’s records, answer the officer’s questions, file any outstanding returns, and draft, lodge and argue the objection if it goes that far. See tax agent services for how that works. We quote tax work only after seeing the notice, never before. Send it on WhatsApp to +256 702 946 946.
How Growth Informer Software Services can help
We offer audit preparation, which means getting the books, schedules and evidence ready and answering the auditor’s or the URA officer’s questions, and, where a statutory audit is required, the audit itself, because our practice holds an ICPAU practising certificate. We name no clients, publish no count of audits and promise no outcome.
We quote after seeing your records and the scope required, at a fixed price agreed before any work starts, and we publish no price for this work because a company with a clean reconciled year and a company with a box of receipts are not the same job. Where the gaps are really a records problem rather than an audit problem, catch-up bookkeeping first is usually the cheaper route to the same place.
Message us on WhatsApp at +256 702 946 946 with your audit notice, or your year end date if you are preparing ahead of one. We reply within 6 hours and set up a meeting for the next day.
Frequently asked questions
What is audit preparation?
Assembling your books, schedules and supporting evidence before an auditor or a URA officer asks for them: reconciled cash, bank and mobile money, sales and purchase invoices with their EFRIS documents, a fixed asset register, payroll and PAYE records, and a stock count. Done ahead of time it turns an audit into a checking exercise rather than a reconstruction.
Is a statutory audit required in Uganda?
Yes, for every company registered under the Companies Act 2012. Every company must appoint an external auditor and have audited accounts each year, and there is no exemption for small companies of the kind the UK allows. A sole proprietor or a partnership that is not registered as a company is not caught by this requirement.
When must a Ugandan company file its audited accounts?
A private company lays its accounts within 10 months of its year end and a public company within 7 months, and under section 167(1) of the Companies Act 2012 the accounts go to the Registrar at URSB with the auditor’s report and the directors’ report. The annual return is a separate filing, UGX 55,000 for a private company limited by shares, and beneficial ownership information is a third one.
What does URA ask for in an audit?
Usually sales and purchase invoices, EFRIS e-invoices and e-receipts, bank and mobile money statements, payroll, PAYE and NSSF records, and stock records, tested against the income, VAT and PAYE you declared. Read the notice itself carefully, because URA states the exact tax type, period and documents it wants, and you should answer that scope and nothing wider.
How long must I keep records for an audit?
Tax records must be kept for 5 years after the end of the tax period they relate to. If an audit, objection or appeal started before those five years ran out, the records it needs must be kept until that proceeding is finished, even if that runs past the five years.
What happens if I disagree with the assessment after a URA audit?
You have 45 days from the date of the assessment notice to object in writing, stating your grounds and attaching the evidence, and the burden of proof is on you. The Commissioner must serve a decision within 90 days, and from that decision you have 30 days to apply to the Tax Appeals Tribunal, which charges a non-refundable UGX 22,000 filing fee and requires you to have paid 30% of the tax assessed or the tax not in dispute, whichever is higher.