How to Audit Zakat in Saudi Arabia (2026): Procedures, Documentation & Auditor's Checklist

Zakat audit saudi arabia work has become materially more demanding for external auditors, internal audit teams, CFOs and audit partners preparing engagements for the 2026 reporting cycle. This guide sets out a defensible, step-by-step audit programme mapped to Zakat, Tax and Customs Authority (ZATCA) rules and to the enhanced reporting obligations relevant to the 2026 reporting cycle, with primary Saudi legislation published through the Bureau of Experts at the Council of Ministers. It provides required-document checklists, a Step/Who/Duration timeline, indicative cost ranges, a worked calculation example and suggested auditor wording. The single takeaway: use this checklist to produce defensible Zakat audit evidence aligned to current ZATCA guidance and applicable statutory reporting obligations.

For the regulatory backdrop, read the Financial Oversight Law, Audit Implications (Saudi Arabia, 2026) analysis alongside this procedural guide.

Key definitions

• Zakat. A religious levy assessed on qualifying assets of eligible entities, administered in Saudi Arabia by ZATCA rather than a profit-based tax.
• ZATCA. The Zakat, Tax and Customs Authority, the regulator that publishes Zakat calculation guidance, filing requirements and technical notices, currently framed by the Zakat collection rules issued and updated by the Authority.
• Statutory reporting obligations. The audit, documentation and reporting duties that apply to Saudi entities under applicable Saudi legislation and SOCPA professional standards, which auditors should confirm against the primary text on the Bureau of Experts portal.

1. Overview, What is a Zakat audit in Saudi Arabia?

A Zakat audit in Saudi Arabia is the set of procedures an auditor performs to obtain sufficient, appropriate evidence that an entity’s reported Zakat base, Zakat charge and related disclosures are materially correct and consistent with ZATCA rules. Zakat is administered by ZATCA, which publishes the technical guidance auditors rely on for the calculation base, permitted deductions and filing obligations. Auditing zakat is rarely a standalone exercise: it interacts closely with the statutory audit of the financial statements, because the zakatable base is derived from the same trial balance, ledgers and asset registers that support the primary financial reporting.

Under professional standards adopted by the Saudi Organization for Chartered and Professional Accountants (SOCPA), which has adopted International Standards on Auditing in the Kingdom, auditors must document their procedures, maintain working papers and apply the ethical requirements that govern audit evidence. As documentation and reporting expectations have increased in recent cycles, a robust zakat audit saudi arabia programme now needs to crosswalk ZATCA technical guidance with the auditor’s professional and statutory obligations to remain defensible under regulatory scrutiny.

Regulatory framework

The governing sources are ZATCA (for Zakat rules, deductions and filing) and the primary Saudi legislation and SOCPA standards (for auditor reporting and documentation obligations). Where an entity is a financial institution, supervisory guidance from the Saudi Central Bank (SAMA) may affect how Zakat is treated and how supporting evidence is examined. Auditors should always confirm current rules, article references and any circular updates directly against the primary regulator text, as Zakat implementing regulations are periodically amended.

2. Eligibility & scope, Who must pay Zakat and how this affects audit scope

Determining who is obligated to pay Zakat is the first control that defines the boundaries of any zakat audit saudi arabia engagement. Broadly, Saudi and GCC-owned companies and certain partnerships fall within the Zakat regime, while non-GCC foreign-owned entities are typically subject to corporate income tax; mixed-ownership entities may face a blended treatment. Auditors must establish the entity’s ownership profile, legal form and any exemptions before scoping fieldwork, because misclassifying the obligation is a root cause of downstream error.

2.1 Determining zakat obligation for legal entities

Confirm the legal entity type, the shareholder register and the residency/ownership split. The obligation to pay Zakat, corporate tax, or a mix flows directly from this analysis. Where ownership has changed during the year, the auditor should test the effective dates and confirm the treatment applied in the ZATCA return matches the entity’s actual status. Always trace the ownership assertion to primary documents, the commercial register, shareholder agreements and board minutes, rather than relying on management representation alone.

2.2 When Zakat becomes audit-relevant (consolidated vs standalone)

Zakat is assessed at the level of the taxable entity, but audit complexity increases sharply in group structures. Consolidation can obscure intercompany balances that must be adjusted in the zakatable base, and subsidiaries with different ownership profiles may carry different Zakat or tax treatments. Scope the engagement to identify each in-scope entity, the reporting boundary and whether the Zakat audit is standalone or combined with the statutory audit. For groups, map which entities file separately and which are consolidated, and document how intercompany eliminations affect the base.

The following comparison clarifies why the audit focus for Zakat differs from a corporate tax review.

3. Step-by-step zakat audit saudi arabia procedures

The core of any zakat audit saudi arabia engagement is a disciplined, numbered programme that moves from acceptance through planning, base verification, evidence testing and reporting. The procedures below are structured so that each step produces a defined deliverable and a documented conclusion, satisfying both ZATCA expectations and professional documentation standards. Cross-reference the Step/Who/Duration table that follows for realistic ownership and timing.

3.1 Step 1, Pre-engagement, acceptance & planning

Begin by defining scope in the engagement letter: is the Zakat work standalone, or combined with the statutory audit? Ambiguity here is a frequent source of dispute, so specify the deliverables, the reporting output and the period covered. Next, perform a Zakat-focused risk assessment. Elevated risk factors include complex related-party transactions, incomplete accounting records, foreign operations that complicate the ownership analysis, and any history of prior non-compliance or ZATCA queries.

Set materiality and tolerable misstatement specifically for the Zakat base, this is not always identical to statutory audit materiality, because the zakatable base is composed differently from profit. A practical approach is to anchor materiality to the Zakat charge and the components of the base most susceptible to misstatement (asset valuation, exemptions and disbursements). The deliverable for this step is a documented Zakat audit programme and a planning memo recording risks, materiality and the planned response.

3.2 Step 2, Calculating and verifying the Zakat base

Auditing zakat correctly depends on rebuilding the zakatable base from source records and reconciling it to the ZATCA return. The Zakat base is broadly the entity’s qualifying assets adjusted for allowable liabilities and specific additions and deductions set out in ZATCA’s implementing regulations. Auditors should recalculate the base independently rather than accept management’s schedule, then reconcile the two and investigate every difference.

A structured recalculation runs from trial balance → adjusted equity and provisions → additions (such as certain long-term financing used to fund non-zakatable assets) → deductions (such as the net book value of qualifying fixed assets and specified investments) → zakatable base → Zakat charge. The precise additions and deductions must be taken from current ZATCA guidance, because permitted items and their treatment can change.

Worked example (illustrative). Assume a single Saudi-owned entity with the following simplified year-end figures:

The auditor then applies the Zakat rate published by ZATCA to the recalculated base, compares the result to the amount in the filed return, and documents any variance. In this illustration the recalculated base of SAR 8,000,000 becomes the reference point against which management’s computation is tested. Confirm the exact prevailing rate and the eligibility of each addition and deduction directly against ZATCA guidance before relying on any figure, noting that the base is subject to a statutory minimum and maximum and that special rules apply to certain financing sectors.

Substantive procedures supporting the base include: recalculation of each adjustment; cut-off tests around year-end to confirm balances fall in the correct period; bank and receivables confirmations for cash and debtor balances feeding the base; inventory observation and valuation testing; and verification of fixed asset registers used for the qualifying-asset deduction. This directly answers how auditors calculate and verify Zakat liabilities, by independent recalculation corroborated with external and physical evidence.

3.3 Step 3, Gathering and testing zakat audit evidence

Strong zakat audit evidence is the difference between an opinion that withstands regulatory review and one that does not. Assemble and test the following evidence types: general ledger and reconciliations; year-end bank statements and independent confirmations; sales, purchase and lease contracts; invoices; export and shipping documentation where relevant; and the fixed asset and inventory records.

Design a sampling approach appropriate to the population. Attribute sampling suits tests of controls and classification (for example, confirming that each sampled disbursement was correctly categorised), while monetary-unit sampling is appropriate where the risk is one of value misstatement in the base. Document the sampling basis, sample size and selection method in the working papers.

Give particular attention to any transfers treated as qualifying disbursements: obtain payment evidence, beneficiary confirmations and receipts, and confirm that the disbursement qualifies under the applicable ZATCA rules before it affects the Zakat computation. Sample working-paper items should record, for each test, the population, the sample selected, the procedure performed, the exceptions found and the auditor’s conclusion. A clear conclusion statement on each working paper, cross-referenced to the audit programme, is what makes the file defensible under professional documentation standards.

3.4 Step 4, Reporting, disclosure and audit conclusions

Test that management’s Zakat disclosure in the financial statements is complete, accurately presented and consistent with the tested base and charge. Where the entity reports under IFRS as endorsed by SOCPA in Saudi Arabia, confirm that the Zakat accounting policy and any related provisions are disclosed appropriately and cross-referenced within the notes.

Under applicable auditing standards, auditors must be able to demonstrate the procedures performed, the materiality decisions taken and the basis for their conclusions. Where a material misstatement in the Zakat charge or base is identified and uncorrected, this must be reflected in the audit report in accordance with the applicable reporting framework. Suggested advisory wording for a management letter might read: “Our procedures identified differences between the recalculated Zakat base and the amount reported in the filed return; we recommend management reconcile these items and strengthen documentation over qualifying deductions and disbursements.

” Such wording is advisory in nature and is not a legal opinion; where the relevant rules are ambiguous on a specific reporting trigger, auditors should seek regulator or legal confirmation before finalising.

4. Required documents and zakat documentation checklist

A complete zakat documentation checklist ensures the audit file is defensible and that no base component is tested without underlying evidence. Obtain the following documents at the outset and record their receipt in the working papers. Apply consistent file naming and observe the working-paper retention standards set out in SOCPA guidance.

5. Timeline & deadlines

Plan the engagement backwards from the ZATCA filing deadline applicable to the entity, confirming the current schedule directly on the ZATCA portal, as filing windows and any late-filing penalties are set by the regulator. Zakat and tax returns are generally due within a defined period after the entity’s financial year-end, but auditors should verify the exact deadline for each client rather than assume a fixed number of days. Because external confirmations from banks and other third parties are frequently the critical-path item, set internal cut-offs 10–15 days ahead of the statutory deadline to absorb response delays.

Using the Step/Who/Duration table above, a typical single-entity engagement runs roughly four to six weeks end to end: allow one week for acceptance and planning, two to three weeks for data collection and substantive testing, and one week for confirmations, final recalculation and reporting. Group engagements should be scheduled with additional lead time for intercompany reconciliation and multi-entity confirmations.

6. Costs & professional fees

Fees for a zakat audit saudi arabia engagement are driven by entity complexity, the number of entities in a group, transaction volume, the quality of underlying records and any history of non-compliance requiring remediation. The ranges below are indicative only, are not set by any regulator, and should be scoped to the specific engagement and confirmed with the appointed firm.

7. What changes for 2026, regulatory updates

The regulatory environment for zakat audit saudi arabia work continues to develop, with the practical trend being toward stricter documentation and reporting by auditors. Firms are increasingly expected to maintain more detailed records of the procedures performed and the materiality judgements applied, and, in certain circumstances, to escalate or address material non-compliance in line with professional standards and applicable law. The precise obligations, article references and any notification triggers should be confirmed against the published legislative text on the Bureau of Experts portal and against current ZATCA guidance, and where the drafting is ambiguous on a specific obligation, auditors should seek legal or regulatory confirmation rather than assume.

To keep an audit file current, firms commonly take three practical steps: augment the engagement letter to reference the applicable documentation and reporting obligations; expand the working-paper file so that every material Zakat conclusion is supported by an explicit evidence trail; and add a short compliance crosswalk in the engagement’s executive summary, mapping each obligation to the working paper that satisfies it. The likely practical effect is longer planning cycles and heavier documentation for higher-risk Zakat populations. A fuller treatment is available in the Financial Oversight Law, Audit Implications (Saudi Arabia, 2026) analysis.

8. Common pitfalls & practical remediation

Recurring findings on zakat audit saudi arabia engagements cluster around a handful of avoidable errors. Address each with a documented response and, where necessary, escalation to the engagement partner or audit committee.

• Incorrect base calculations. Additions and deductions misapplied against current ZATCA rules. Remediate by independent recalculation and reconciliation to the filed return, then propose adjustments.
• Misclassified exemptions. Ownership or entity-type errors that change the Zakat/tax treatment. Remediate by tracing ownership to the commercial register and shareholder agreements.
• Missing disbursement receipts. Amounts claimed without beneficiary confirmations. Remediate by obtaining receipts and confirmations, or excluding unsupported amounts.
• Inadequate documentation. Working papers lacking a clear conclusion or evidence trail. Remediate by rebuilding the file to professional documentation standards.
• Undocumented related-party transfers. Intercompany balances not adjusted in the base. Remediate with transfer documentation and challenge management where support is absent.

Conclusion & next steps

A defensible zakat audit saudi arabia engagement in 2026 rests on three foundations: a numbered audit programme mapped to ZATCA rules, a complete documentation file that satisfies applicable professional and statutory standards, and clear, evidence-backed conclusions on the Zakat base, charge and disclosures. Use the checklists, tables and worked example in this guide to structure your fieldwork, and confirm every rate, deduction and deadline directly against the primary regulator text. For related operational guidance, see the Financial Oversight Law, Audit Implications (Saudi Arabia, 2026) analysis.

Sources

1. Zakat, Tax and Customs Authority (ZATCA)
2. Bureau of Experts at the Council of Ministers, Saudi Laws Portal
3. Saudi Organization for Chartered and Professional Accountants (SOCPA)
4. Saudi Central Bank (SAMA)