All foreign-invested enterprises (FDIs) in Vietnam face mandatory independent audits regardless of size, revenue, or headcount under the Law on Independent Audit (67/2011/QH13), Article 37. This absolute requirement contrasts sharply with domestic companies, which only trigger audit obligations if they exceed specific “large-scale” financial thresholds.
For an FDI, the statutory audit is not merely an internal health check; it is the ultimate regulatory gatekeeper. An unqualified audit opinion is the mandatory prerequisite for finalizing Corporate Income Tax (CIT) and legally repatriating profits abroad. Failure to conduct an audit triggers penalties up to VND 50 million (~USD 2,000) under Decree 41/2018/ND-CP.
1. The Mandatory Audit Obligations (FDI vs. Domestic)
The statutory audit framework in Vietnam operates on a rigid dual-track system separating foreign capital from local capital.
The Absolute Obligation for FDI Companies
Every FDI enterprise must conduct an annual statutory audit via an independent, Vietnamese-licensed CPA firm. The law contains zero exemptions. Whether you operate a massive manufacturing complex in Binh Duong or a zero-revenue software consulting startup in Ho Chi Minh City, the obligation is identical.
The General Department of Taxation (GDT) and the Department of Finance (formerly Department of Finance (formerly DPI)) cross-link their databases using your enterprise tax code. Their systems automatically flag FDIs that fail to upload an audit report matching their tax finalization file, instantly triggering penalty notices and blocking subsequent investment license amendments.
The Threshold Trigger for Domestic Companies
Unlike FDIs, domestic Vietnamese companies are shielded from mandatory audits unless they hit the “Large-Scale Enterprise” threshold. Under Decree 90/2025/ND-CP, domestic firms must audit only if they meet at least two of the following three criteria:
- Total assets: > VND 100 billion (~USD 4 million)
- Annual revenue: > VND 300 billion (~USD 12 million)
- Employees: > 200 (measured by active social insurance contributors)
2. Planning the 90-Day Audit Timeline
Audit compliance runs on a strict 90-day countdown immediately following the fiscal year-end. For companies using the standard calendar year, the filing deadline is March 31.
The Q4 Auditor Selection Trap
A common pitfall for new foreign CFOs is treating the Vietnamese statutory audit like a western tax return—waiting until January to find a CPA firm.
Because every FDI company in the country shares the exact same March 31 deadline, reputable audit firms hit capacity by November. We advise FDIs to follow this operational timeline:
- Q3 (July-September): Select the auditor and sign the engagement letter.
- Q4 (October-December): Conduct interim fieldwork and internal control testing.
- Mid-January: Close the books and prepare the draft VAS financial statements.
- February: Execute year-end fieldwork.
- March: Finalize the audit report and execute multi-agency filings.
The 5-Year Auditor Rotation Rule
Under Decree 90/2025/ND-CP (amending Decree 17/2012/ND-CP), a practicing auditor cannot sign audit reports for the same audited entity for more than 5 consecutive years. Companies must proactively plan local auditor rotation ahead of the fifth consecutive engagement year to avoid independence violations.
3. The 5 Concurrent Submission Destinations
When the audit is successfully completed, the Chief Accountant cannot simply upload the PDF to a single government portal. Official submissions must follow a scattered, multi-agency distribution.
Under Circular 200/2014/TT-BTC (Article 110), the audited financial statements must be submitted concurrently to:
- The Tax Authority: Submitted electronically via the eTax portal alongside the annual CIT finalization.
- The Department of Finance (formerly Department of Finance (formerly DPI)): Submitted electronically via the National Investment Information System to satisfy FDI Periodic Reporting requirements.
- The General Statistics Office (GSO): Required for national macroeconomic modeling and industry tracking.
- The Parent Company: Exported to the overseas headquarters for global consolidation.
- The Licensing Authority / Management Board: Required if the enterprise operates inside a specialized Industrial Zone or Export Processing Zone.
4. Circular 99: The New Internal Control Mandate (2026)
Effective January 1, 2026, the audit landscape tightens significantly regarding internal governance.
Article 3 of Circular 99/2025/TT-BTC explicitly mandates that enterprises must establish and maintain formally documented internal control systems. This legally shifts internal control from a “corporate best practice” to a statutory compliance requirement.
During the statutory audit, external auditors must now aggressively test these written controls. Undocumented governance—such as missing authorization hierarchies for expenditures or lacking segregation of duties between the purchasing and treasury teams—elevates the risk of an “audit qualification” and triggers expanded substantive testing under Vietnamese Standards on Auditing.
5. Non-Compliance Consequences & Qualified Opinions
Failing to conduct an audit, missing the 90-day deadline, or receiving a heavily qualified audit opinion generates profound downstream risks that extend far beyond administrative fines.
Administrative Penalty Schedule
Under Decree 41/2018/ND-CP, the Ministry of Finance enforces strict administrative penalties:
- Late submission of audited statements: Fines range from VND 5,000,000 to VND 10,000,000 for delays under 3 months (Article 12).
- Total failure to conduct the mandatory audit: Fines range from VND 40,000,000 to VND 50,000,000 (~USD 1,600 - USD 2,000) (Article 53).
Because these penalties exceed the VND 20 million threshold, they create a permanent negative administrative compliance record for the enterprise in the tax system.
The Business Impact of a Qualified Opinion
A “Qualified Opinion” (where the auditor notes exceptions to VAS compliance, such as unverified inventory or missing e-invoices) directly impacts daily business operations:
- Profit Repatriation Blockage: The Tax Authority routinely denies authorization to remit dividends abroad if the audit report contains severe qualifications regarding taxable revenue matching.
- Banking Defaults: Standard commercial loan covenants in Vietnam require unqualified audit opinions; a qualification often triggers a technical default on credit lines.
- License Renewal Delays: The Department of Finance (formerly DPI) scrutinizes audit notes during investment certificate renewals or capital expansion requests. A heavily qualified audit raises suspicions of transfer pricing abuse or capital misallocation.
For a comprehensive overview of all accounting rules, see our Vietnam Accounting Compliance Guide.
Need audit coordination support? Indochina Link Vietnam provides end-to-end Accounting & Reporting Services-—from aligning internal documentation with Circular 99/2025 before the auditors arrive, to managing the fragmented 5-agency submission process.
