Mandatory NFRA Auditor Registration in India: What Companies, Audit Firms and Boards Must Do in 2026

The Corporate Laws (Amendment) Bill, 2026 has transformed NFRA auditor registration in India from a largely passive obligation into a mandatory, time-bound compliance requirement for prescribed classes of companies and their statutory auditors. Under the amended framework, companies that fall within the National Financial Reporting Authority’s jurisdiction must now ensure their auditors are registered on the NFRA portal, file prescribed forms within strict deadlines, and maintain documentary proof of compliance at every stage. For company secretaries, CFOs, in-house counsel, audit partners and board members, the central question is no longer whether NFRA oversight will expand, it is whether your organisation’s auditor appointment process, engagement letters and board resolutions are already aligned with the 2026 requirements.

Quick compliance decision, do you need to act?

• Your company is listed on a recognised stock exchange. Yes, mandatory NFRA auditor registration applies.
• Your company is an unlisted public company exceeding prescribed turnover or net-worth thresholds. Likely yes, check the latest MCA notification for applicable thresholds.
• Your company is a prescribed body corporate (bank, insurance company, PSU or government company). Yes, NFRA jurisdiction is confirmed under the Companies Act, 2013 (Section 132).
• You are an audit firm appointed as statutory auditor of any entity above. Yes, you must register on the NFRA portal and file periodic returns.
• Your company is a small private company with no prescribed-class characteristics. No, but maintaining audit-file readiness is still recommended.
• You are unsure about threshold applicability. Consult the NFRA portal and your legal adviser immediately.

Legislative Changes in 2026: The Corporate Laws (Amendment) Bill and MCA Notifications

Mandatory auditor registration with NFRA is the single largest change to audit oversight in India since the Authority’s constitution in 2018. The Corporate Laws (Amendment) Bill, 2026 introduces amendments to Section 132 of the Companies Act, 2013 that expand NFRA’s powers, prescribe new registration obligations and tighten the enforcement architecture around auditor oversight for companies of public interest.

The Bill strengthens NFRA’s mandate in several important respects. It formalises the requirement for audit firms and individual auditors serving prescribed classes of companies to register with NFRA before accepting or continuing an audit engagement. It grants NFRA enhanced inspection powers, including the authority to call for audit working papers, conduct on-site quality reviews and issue binding directions. It also introduces a framework for periodic returns, the NFRA-2 form, requiring registered auditors to disclose engagement details, quality-control policies and compliance status on an ongoing basis.

Related MCA notifications issued alongside the Bill clarify implementation timelines and prescribe the classes of companies and bodies corporate to which the new registration obligations apply. These notifications build on the existing NFRA Rules, 2018, which already required companies to file Form NFRA-1 within fifteen days of auditor appointment.

Key legal provisions at a glance

• Section 132, Companies Act, 2013 (as amended). Establishes NFRA’s jurisdiction over prescribed classes of companies and their auditors, and provides the legal basis for registration, inspection and disciplinary action.
• NFRA Rules, 2018 (as updated by 2026 notifications). Prescribe Form NFRA-1 (company filing on auditor appointment), Form NFRA-2 (auditor annual return) and the documentation standards for registered audit firms.
• Corporate Laws (Amendment) Bill, 2026. Introduces mandatory pre-engagement registration for audit firms, expanded inspection powers and enhanced penalties for non-compliance.
• MCA commencement notifications. Set effective dates and threshold criteria for each category of prescribed company.

Who Must Register? Scope and Eligibility for NFRA Registration

NFRA registration obligations apply to two groups: the prescribed companies themselves and the auditors who serve them. Understanding which entities fall within NFRA’s jurisdiction is the essential first step in any compliance programme.

Under Section 132 of the Companies Act, 2013, NFRA has authority over the auditors of listed companies, unlisted public companies meeting prescribed turnover or net-worth thresholds, and certain bodies corporate including banks, insurance companies, government companies and public-sector undertakings. The Corporate Laws (Amendment) Bill, 2026 reinforces this scope and provides the MCA with authority to expand the prescribed classes through future notifications.

For audit firms, the registration requirement extends to any firm, or individual practitioner, appointed as statutory auditor of a company within NFRA’s jurisdiction. This includes the engagement partner, the firm itself and, in the case of network firms, the entity that signs the audit report.

NFRA Registration Process: Step-by-Step for Companies and Audit Firms

The NFRA registration process involves distinct obligations for audit firms and for the companies appointing them. Both must be completed within statutory deadlines to avoid penalties.

For audit firms: registration on the NFRA portal

1. Create an account on the NFRA portal. Visit the official NFRA website and register as an audit firm or individual auditor. Provide basic firm details, ICAI registration number and authorised signatory information.
2. Submit the application with supporting documents. Upload all required documents (see checklist below). The portal validates entries against ICAI membership data and MCA records.
3. Pay the prescribed registration fee. Fees are payable online through the NFRA portal. Retain the payment receipt as evidence of compliance.
4. Receive confirmation and NFRA listing. Once the application is processed, the firm receives a registration confirmation and is listed on the NFRA database of registered auditors.
5. File NFRA-2 periodic returns. Registered firms must file annual returns disclosing engagement details, quality-control policies and any changes in partnership or network structure, in accordance with the timelines prescribed in the NFRA Rules.

For companies: filing on auditor appointment

1. Verify auditor registration status. Before appointing or reappointing a statutory auditor, confirm that the firm holds a valid NFRA registration by checking the NFRA portal database.
2. File Form NFRA-1. Within fifteen days of the auditor’s appointment at a general meeting, file Form NFRA-1 electronically on the NFRA portal, providing details of the appointed auditor and the engagement.
3. Update the audit committee resolution and engagement letter. Ensure the board or audit committee resolution records the auditor’s NFRA registration status. Update the engagement letter to include NFRA compliance representations.
4. Maintain documentary proof. Retain copies of the NFRA-1 filing acknowledgement, auditor registration confirmation and updated engagement letter for inspection purposes.

Documents required for audit firm registration

• Firm registration certificate. Issued by ICAI, confirming the firm’s current registration status and membership number.
• Partner KYC documents. Identity and address proof for all partners, including PAN and Aadhaar details.
• Quality-control policies. A copy of the firm’s internal quality-control framework, including engagement acceptance and continuance policies.
• Peer review certificate. The most recent peer review certificate issued by ICAI’s Peer Review Board, confirming compliance with auditing standards.
• ICAI membership details. Individual membership certificates for all engagement partners who will sign audit reports for prescribed companies.
• Authorised signatory details. Board resolution or partnership deed extract authorising the designated partner to interact with NFRA on the firm’s behalf.

Common filing pitfalls and how to avoid them

• Mismatch between ICAI records and NFRA portal entries. Ensure firm name, registration number and partner details match exactly across both databases before submitting.
• Late NFRA-1 filing. The fifteen-day deadline runs from the date of appointment at the general meeting, not from the date of board recommendation. Calendar the deadline immediately after the AGM.
• Incomplete quality-control documentation. Firms that have not updated their QC policies to reflect current standards risk rejection or queries. Review and update policies before applying.
• Failure to file NFRA-2 returns. Registration is not a one-time event. Set internal reminders for annual return deadlines to maintain compliant status.

Practical Checklists: Audit Firms, Companies, Boards and Audit Committees

Operational compliance with NFRA auditor registration in India requires coordinated action across multiple functions. The checklists below translate statutory requirements into immediate, role-specific tasks.

Audit firm compliance checklist

• Register on the NFRA portal and obtain registration confirmation.
• Upload all required documents, including current peer review certificate and quality-control policies.
• Designate an internal NFRA compliance officer responsible for portal filings and correspondence.
• Update engagement letter templates to include NFRA registration representations and cooperation clauses.
• Set calendar reminders for NFRA-2 annual return filing deadlines.
• Ensure all engagement partners hold current ICAI membership and individual NFRA registration where required.
• Brief audit teams on NFRA inspection protocols and document-retention requirements.

Company / CS / CFO checklist for auditor appointment

• Confirm whether the company falls within a prescribed class under Section 132 and the latest MCA notification.
• Verify the proposed auditor’s NFRA registration status before tabling the appointment resolution.
• File Form NFRA-1 within fifteen days of the auditor’s appointment at the general meeting.
• Update the audit engagement letter to include NFRA compliance warranties and inspection-cooperation obligations.
• Maintain a compliance file with copies of NFRA-1 acknowledgement, auditor registration proof and board resolution.
• Brief the board and audit committee on the company’s NFRA obligations and potential liability for non-compliance.

Board and audit committee: immediate actions (next 30 days)

1. Review current auditor panel. Confirm that every firm on the approved panel holds valid NFRA registration. If any firm is unregistered, issue a formal notice requiring registration within a specified deadline.
2. Update RFP and procurement documentation. Insert a mandatory requirement in all audit RFPs for prospective firms to produce NFRA registration proof and current quality-control policies.
3. Pass a board or audit committee resolution. Record the committee’s verification of the current auditor’s NFRA registration status and the company’s compliance with NFRA-1 filing obligations.
4. Instruct legal counsel to review engagement letters. Ensure all current and future engagement letters contain NFRA compliance representations, inspection cooperation clauses and termination triggers for registration lapses.
5. Establish a compliance calendar. Map all NFRA filing deadlines, NFRA-1 (within 15 days of appointment), NFRA-2 (annual returns), against the company’s corporate calendar and AGM schedule.

Roles and responsibilities summary

Consequences, Penalties and Director Liability for Non-Compliance

Failure to comply with NFRA auditor registration requirements exposes both companies and auditors to statutory penalties, professional sanctions and significant reputational risk. The consequences extend beyond the audit firm to directors and officers who approved the appointment of a non-registered auditor.

Under the amended framework, appointing a statutory auditor who is not registered with NFRA, where registration is required, may render the audit appointment non-compliant with the Companies Act, 2013. Industry observers expect that this could call into question the validity of the audit report itself, with cascading consequences for regulatory filings, banking covenants and investor disclosures. Companies may face monetary penalties prescribed under the Act, and the officers in default, typically the managing director, company secretary and CFO, may be held personally liable.

For audit firms, practising without NFRA registration where required constitutes a breach of statutory obligations and may trigger professional disciplinary proceedings. NFRA has the power to debar auditors from practice for prescribed periods, in addition to imposing monetary penalties. These penalties operate independently of any action taken by ICAI under its own disciplinary framework.

Enforcement mechanisms

• NFRA inspections. NFRA can conduct on-site and off-site inspections of registered audit firms, call for working papers and issue binding directions for remedial action.
• Show-cause proceedings. Non-compliance triggers show-cause notices, with the auditor or company required to respond within prescribed timelines.
• Referral to ICAI. NFRA may refer matters involving professional misconduct to ICAI for parallel disciplinary proceedings under the Chartered Accountants Act, 1949.
• Monetary penalties and debarment. The amended provisions prescribe penalties for companies and auditors and empower NFRA to debar non-compliant auditors from auditing prescribed companies for specified periods.

Directors should ensure that board minutes explicitly record the audit committee’s verification of the auditor’s NFRA registration status before every appointment or reappointment. This documentation establishes a due-diligence defence and reduces personal liability exposure. Companies that have already encountered regulatory enforcement in related contexts, such as those navigating the IBC amendment act in India, will recognise the importance of maintaining robust compliance records.

How to Update Audit Engagement Letters, Procurement and Internal Controls

NFRA compliance requires updates to three core documents: the audit engagement letter, the audit RFP template and internal control policies governing auditor appointment.

Every engagement letter for a prescribed-class audit should now include the following elements:

• Registration warranty. A representation by the audit firm that it holds valid NFRA registration and will maintain that registration throughout the engagement period.
• Inspection cooperation clause. A commitment by the firm to cooperate fully with any NFRA inspection, including providing working papers, responding to queries within stipulated timelines and facilitating on-site reviews.
• Termination trigger. A provision entitling the company to terminate the engagement if the firm’s NFRA registration lapses, is suspended or is revoked.

Sample engagement letter clause:

“The Auditor represents and warrants that it is duly registered with the National Financial Reporting Authority (NFRA) in accordance with the NFRA Rules, 2018, as amended, and Section 132 of the Companies Act, 2013. The Auditor shall maintain such registration throughout the term of this engagement and shall promptly notify the Company of any change in its registration status. The Auditor shall cooperate fully with any inspection or inquiry initiated by NFRA, including by providing access to audit working papers and responding to NFRA communications within the timelines prescribed. Failure to maintain valid NFRA registration shall constitute a material breach entitling the Company to terminate this engagement with immediate effect.”

For audit RFPs, insert a mandatory requirement that prospective firms provide proof of current NFRA registration, a copy of their latest peer review certificate and a summary of their quality-control policies. This ensures that only NFRA-compliant firms enter the evaluation process.

Timeline and Action Plan for NFRA Auditor Registration in 2026

The following timeline maps key compliance milestones for companies and audit firms. Where MCA notifications specify exact dates, those dates should be substituted for the indicative timeframes shown.

Conclusion: Securing NFRA Compliance Before the Next Audit Cycle

NFRA auditor registration in India is no longer optional for prescribed-class companies, their boards or their statutory auditors. The practical steps are clear: confirm your company’s prescribed-class status, verify your auditor’s registration, file Form NFRA-1 within the statutory deadline, update your engagement letters and establish a compliance calendar that covers NFRA-2 returns and inspection readiness. Companies exploring other company law obligations in India will find that early compliance reduces both regulatory risk and the operational disruption of last-minute remediation. To speak with a qualified company-law specialist about your NFRA compliance position, visit the India company-law lawyer directory.

Sources

1. National Financial Reporting Authority (NFRA), Official Site
2. Ministry of Corporate Affairs (MCA), Notifications and Bills
3. Lok Sabha, Parliament of India (Bill Text and Status)
4. Gazette of India (eGazette), Notifications
5. IndiaCode, Companies Act, 2013 (Consolidated Text)
6. Institute of Chartered Accountants of India (ICAI)