Understand secretarial audit under Section 204, who needs Form MR-3, the process, costs, deadlines and penalties for Indian companies in 2026.
Secretarial Audit & Form MR-3: Complete Guide for Indian Companies (2026)
If you run a growing company in India, you have probably heard the term "secretarial audit" thrown around by your Company Secretary or auditor, usually followed by a slightly worried look. It sounds like just another compliance box to tick, but for the companies it applies to, getting it wrong can mean penalties, reputational damage, and awkward questions from the Registrar of Companies.
The good news is that once you understand what secretarial audit actually checks, who needs it, and how Form MR-3 works, it stops feeling like a mystery and starts feeling like just another item on your annual compliance calendar. Let's break it down in plain language.
What is Secretarial Audit
Secretarial audit is an independent check of whether a company has followed the various laws, rules, and regulations applicable to it — not just the Companies Act, 2013, but also SEBI regulations, FEMA provisions, labour laws, and other secretarial and corporate governance requirements. Think of it as a "compliance health check" done by an external expert, separate from your usual financial statutory audit.
This audit is governed by Section 204 of the Companies Act, 2013, along with the related rules. The audit must be conducted by a practicing Company Secretary (PCS) — someone who holds a valid Certificate of Practice from the Institute of Company Secretaries of India (ICSI). Unlike a statutory financial audit, which is done by a Chartered Accountant and focuses on books of accounts, secretarial audit focuses on legal and procedural compliance — board meetings held on time, resolutions passed correctly, filings made within deadlines, share transfers recorded properly, and so on.
The output of this exercise is a formal report called Form MR-3, which the Company Secretary in Practice prepares and signs. This report is then attached to the company's Board's Report, which goes to shareholders as part of the annual report.
In simple terms: secretarial audit tells you (and your shareholders, regulators, and other stakeholders) whether the company is actually following the rulebook, not just claiming to.
Why Secretarial Audit Matters
You might wonder why this matters beyond just "the law says so." Here's the real-world value it brings.
- Early warning system: A secretarial audit often catches small compliance gaps — a delayed board meeting, a missing resolution, an overdue filing — before they snowball into bigger legal or financial trouble.
- Builds credibility with investors and lenders: When a company can show a clean secretarial audit report, it signals strong governance. This matters a lot for companies raising funds, seeking loans, or planning an IPO.
- Protects directors personally: Company directors can face personal liability for certain compliance failures. A rigorous secretarial audit process reduces this risk by catching issues early.
- Regulatory expectation: For companies where it is mandatory, skipping secretarial audit or filing an incomplete/inaccurate MR-3 report is itself a compliance violation, inviting penalties on top of whatever underlying issue existed.
- Supports better decision-making: Because the audit reviews board processes, related party transactions, and statutory registers, it often surfaces useful information for management and the board itself, not just for outside regulators.
For many founders, the biggest value is peace of mind — knowing that an independent professional has gone through the company's legal and secretarial records and flagged anything that needs fixing, well before an inspection or a due-diligence exercise by an investor does it for you.
Who Needs Secretarial Audit — Applicability & Thresholds
Secretarial audit under Section 204 is not applicable to every company in India. It is mandated for specific categories, generally larger or listed entities, though the thresholds have been refined over the years through amendments to the Companies (Appointment and Remuneration of Managerial Personnel) Rules.
As a general guide, secretarial audit is typically required for:
- Every listed company, regardless of size.
- Every public company that crosses prescribed thresholds of paid-up share capital or turnover (the exact rupee thresholds have been revised in past amendments, so please verify the current rate applicable for the relevant financial year with a professional or the MCA website).
- Every company having outstanding loans or borrowings from banks or public financial institutions above a prescribed limit.
- Certain private companies that are subsidiaries of public companies and meet similar size thresholds, following amendments that extended applicability beyond only public companies.
Because these thresholds get revised periodically by the Ministry of Corporate Affairs, it is important not to rely on numbers you read somewhere online from a few years ago. Always verify the current rate and threshold applicable for your financial year before deciding whether secretarial audit applies to you. A quick way to be sure is to have a professional review your latest paid-up capital, turnover, and borrowing figures against the current rules.
If your company does not fall into any prescribed category, secretarial audit is not compulsory — but many growth-stage companies still choose to get one done voluntarily, especially before a funding round, as part of investor due diligence, or simply as good governance practice.
What's Involved — Documents & Records Checked
A secretarial audit is a fairly detailed exercise. The practicing Company Secretary will typically ask for and review:
- Certificate of Incorporation, Memorandum and Articles of Association (MOA/AOA), including any amendments made during the year.
- Minutes books of Board Meetings, Committee Meetings, and General Meetings, along with attendance registers.
- Statutory registers — register of members, register of directors and KMP, register of charges, register of related party transactions, and so on.
- Annual filings made with the Registrar of Companies — annual return, financial statements, and various event-based forms (change in directors, charges, share allotments, etc.).
- Board's Report and Annual Report of the previous year, to check consistency and disclosures.
- Details of loans, investments, guarantees, and compliance with Section 186 of the Companies Act.
- Related party transaction records and approvals under Section 188.
- Compliance with SEBI regulations (if listed), FEMA regulations (for foreign investment or overseas dealings), and applicable labour law registrations.
- Secretarial Standards compliance (SS-1 and SS-2) relating to board and general meetings.
- Details of statutory dues, remuneration paid to directors, and any related disclosures.
Because the scope is wide, companies that prepare well in advance — keeping registers updated and minutes signed on time — find the audit far smoother than those scrambling to reconstruct records at the last moment.
Step-by-Step Process for Secretarial Audit
Here's how a typical secretarial audit engagement unfolds:
- Appointment of the Practicing Company Secretary: The Board of Directors appoints a PCS through a board resolution, usually at the start of the financial year or well before the audit is due.
- Scope discussion and engagement letter: The PCS and the company agree on the scope, timelines, and fee, formalised through an engagement letter.
- Document collection: The company shares statutory registers, minutes, filings, and other records requested by the auditor, often through a checklist.
- Preliminary review: The PCS reviews documents for the financial year under audit, cross-checking board resolutions against actual filings and registers.
- Management queries and clarifications: Any gaps, missing documents, or inconsistencies are flagged to management for clarification or rectification where possible.
- On-site or virtual verification: The auditor may visit the registered office or conduct the review remotely, verifying original records where needed.
- Draft report preparation: The PCS prepares a draft secretarial audit report in Form MR-3, noting observations, qualifications, or adverse remarks if applicable.
- Discussion with the Board: The draft report, along with any qualifications, is shared with the Board or the Audit Committee for discussion.
- Finalisation and signing: The PCS finalises and signs Form MR-3.
- Attachment to Board's Report: The signed MR-3 is attached to the company's Board's Report, which forms part of the Annual Report placed before shareholders.
- Filing compliance: The Board's Report along with the secretarial audit report is filed with the Registrar of Companies as part of the annual filing requirements.
Cost, Fees & Penalties (2026)
Professional fees: The fee charged by a practicing Company Secretary for secretarial audit depends on the size and complexity of the company, the number of subsidiaries, whether it is listed, and the volume of records to review. Fees can range from a modest amount for a smaller private company to a significantly higher figure for large listed groups with multiple compliance layers. Because fees vary widely by firm and company profile, it's best to get a specific quote rather than relying on a generic number — always verify the current rate with your service provider.
Penalties for non-compliance: If a company that is required to get a secretarial audit done fails to do so, or if the PCS or the company fails to comply with the provisions of Section 204, the Companies Act prescribes penalties on the company, its officers in default, and in some cases the practicing Company Secretary as well. These penalties can apply on a per-day or per-instance basis for continuing defaults, and can add up meaningfully over time. Because exact penalty amounts have been revised through amendments over the years, please verify the current penalty figures under the Companies Act before assuming any specific number.
Additional costs of getting it wrong: Beyond the direct monetary penalty, an adverse or qualified secretarial audit report can also affect investor confidence, delay fundraising, and invite closer regulatory scrutiny — costs that are harder to quantify but often more painful than the penalty itself.
Timeline & Due Dates
Secretarial audit is an annual exercise, tied to the company's financial year (usually April to March for most Indian companies).
- The audit is generally conducted after the financial year ends, once the books and records for that year are largely finalised.
- The secretarial audit report (Form MR-3) needs to be ready in time to be attached to the Board's Report, which the Board approves before the Annual General Meeting (AGM).
- Since AGMs typically need to be held within a prescribed number of months after the financial year-end (subject to any extensions granted), the secretarial audit needs to be completed well before that AGM date.
- Companies often start the process a few months in advance — some engage their PCS on an ongoing/quarterly basis so that by year-end, most of the review is already done and only finalisation remains.
Because AGM deadlines and extension provisions can change, and because delays here have a knock-on effect on annual filing due dates, it's wise to verify the current timeline applicable to your company's financial year with your compliance advisor rather than assuming last year's calendar still applies.
Secretarial Audit vs Other Types of Audit
It helps to know how secretarial audit is different from other audits your company might be subject to, since the names can get confusing.
- Secretarial audit (Section 204): Conducted by a practicing Company Secretary; focuses on compliance with corporate laws, secretarial standards, and governance procedures. Output is Form MR-3.
- Statutory audit (Companies Act): Conducted by a Chartered Accountant; focuses on the truth and fairness of financial statements. Mandatory for virtually all companies.
- Internal audit (Section 138): Conducted by an internal auditor (who may be a CA, CS, cost accountant, or other professional as prescribed); focuses on internal controls, risk management, and operational efficiency. Applicable to prescribed classes of companies based on turnover, borrowings, or deposits.
- Tax audit (Income Tax Act): Conducted by a Chartered Accountant; focuses on compliance with income tax provisions, applicable once turnover crosses prescribed limits.
- Cost audit: Applicable to certain manufacturing and specified sectors; focuses on cost records rather than general compliance.
The key distinction to remember: statutory and tax audits look at your numbers; secretarial audit looks at your process and paperwork — did you follow the correct legal procedure, at the right time, with the right approvals.
Common Mistakes Companies Make
- Assuming it doesn't apply to them without actually checking current thresholds — many private companies that have grown quickly are surprised to learn they now qualify.
- Appointing the PCS too late, leaving little time for a thorough review before the AGM deadline.
- Poor record-keeping through the year, meaning the auditor spends most of the engagement reconstructing missing minutes and registers instead of actually reviewing compliance.
- Ignoring event-based compliances (like changes in directorship, charges, or share allotments) because attention is focused only on annual filings.
- Ignoring qualifications in the MR-3 report instead of acting on them — an adverse remark left unaddressed year after year looks far worse to investors and regulators than one flagged and fixed promptly.
- Treating secretarial audit as a formality rather than a genuine governance tool, which defeats its real purpose.
- Not aligning secretarial records with financial statements, leading to inconsistencies between the Board's Report, financial statements, and the MR-3 report.
FAQ
Is secretarial audit mandatory for all companies?
No. It is mandatory only for specified categories such as listed companies and companies crossing prescribed thresholds of paid-up capital, turnover, or borrowings under Section 204. Smaller companies outside these thresholds are not legally required to get one, though many opt for it voluntarily for good governance.
Who can conduct a secretarial audit?
Only a Company Secretary holding a valid Certificate of Practice from the Institute of Company Secretaries of India (ICSI) can conduct a secretarial audit and sign Form MR-3. Employees or in-house Company Secretaries who do not hold a Certificate of Practice cannot sign this report.
What is Form MR-3?
Form MR-3 is the prescribed format in which the practicing Company Secretary reports the findings of the secretarial audit. It gets attached to the company's Board's Report and forms part of the annual report shared with shareholders.
What happens if the secretarial audit report has qualifications?
If the PCS notes any qualifications, reservations, or adverse remarks in the MR-3 report, the Board is required to explain these in its Board's Report. Unaddressed or repeated qualifications can attract regulatory attention and hurt investor confidence.
Can a private company be required to do a secretarial audit?
Yes. While the requirement traditionally focused on public companies, amendments have extended applicability to certain private companies as well, particularly those that are subsidiaries of public companies and meet prescribed size criteria. It's important to verify current rules for your specific company structure.
What is the difference between secretarial audit and statutory audit?
Statutory audit examines financial statements for accuracy and fairness and is done by a Chartered Accountant. Secretarial audit examines legal and procedural compliance across corporate laws and is done by a practicing Company Secretary. They serve different purposes and are conducted by different professionals.
What are the penalties for not conducting a mandatory secretarial audit?
The Companies Act prescribes penalties on the company and officers in default for failing to comply with Section 204, and these can apply on a continuing basis for ongoing defaults. Because exact penalty figures are periodically revised, it's best to verify the current applicable amount with a compliance professional.
How often is secretarial audit required?
It is an annual requirement for companies to which it applies, conducted once per financial year, with the report attached to that year's Board's Report before it goes to shareholders at the AGM.
How Legal Suvidha Makes This Effortless
This is exactly the kind of process where one wrong document, a mismatched detail, or a missed deadline turns into a rejection, a resubmission, or a running penalty. Legal Suvidha handles the whole thing end-to-end so you can focus on your business.
- Fixed, all-inclusive price quoted upfront — professional fee plus government fee, itemised, with no hidden charges appearing later.
- A dedicated Chartered Accountant / Company Secretary who owns your case from the first call to the final certificate.
- Proactive updates and deadline alerts at every stage — we do not disappear after payment.
- Trusted by 10,000+ founders with a 4.9/5 rating and a multi-disciplinary team of CAs, CSs and lawyers.
Talk to a Legal Suvidha expert today for a free consultation and an exact, transparent quote on WhatsApp — and get it done right the first time.
