In 2026, the short answer is: It depends on your turnover. Under the Nigeria Tax Act 2025 and CAMA 2020, most small businesses are now officially exempt from the expensive requirement of a professional external audit.
1. The "Small Company" Audit Exemption
If your company earns ₦100 million or less, you fall into the "Small Business" bracket under the NTA 2025:
- Tax Rate: 0% Company Income Tax.
- Audit Status: Exempt. You do not need to hire an external auditor for your tax filings.
- Filing Requirement: You must still file a "Nil Return" on TaxPro Max. The NRS now accepts "Certified Accounts" (financial statements signed by a Director and an internal accountant) instead of an external audit report for this group.
2. What you must file instead
Even if you are exempt from an "Audit," you are not exempt from financial reporting. You still have to submit simplified documents to the CAC and NRS:
| Requirement | Small Business (≤ ₦100m) | Large Business (> ₦100m) |
|---|---|---|
| CAC Annual Returns | Statement of Affairs (Simplified) | Audited Financial Statements |
| NRS Tax Filing | Certified Accounts (Internal) | Audited Accounts (External) |
| Appoint Auditor? | No | Mandatory |
Crucial 2026 Distinction: While you don't need an audit, the NRS now requires "Certified Accounts" for small businesses. This means a director or a qualified internal accountant must sign off that the records are true and accurate under penalty of perjury.
3. When an Audit is "Mandatory" Regardless of Size
There are three specific "trap" scenarios where you still need an audit in 2026:
- Revenue Threshold: Your annual gross turnover is above ₦100 million.
- Asset Threshold: Your total fixed assets exceed ₦250 million.
- Foreign Participation: If your company has a foreign shareholder, you are legally required to be audited, even if your turnover is zero.
- Professional Services: Firms providing specialized services (Law, Medicine, Accounting, Consulting) are often required by their professional bodies to have audited accounts for license renewal.
- Lending & Tenders: If you want to apply for a Bank of Industry (BOI) loan or bid for certain Federal Government contracts, they almost always demand 3 years of Audited Financial Statements, regardless of what the general law says.
4. Mandatory Data Protection Audit (The "Other" Audit)
Even if your money isn't audited, your data might be. This is a major enforcement point in 2026:
- Who: Any business that processes the personal data of more than 2,000 Nigerians in a year (e.g., an e-commerce site, a gym with a member list, or a school).
- Deadline: You must file a Data Protection Compliance Audit (DPCA) with the NDPC by March 15, 2026.
Penalty: Up to ₦10 million or 2% of your annual revenue, whichever is higher.