Internal audit is a management control tool Swiss company owners use to verify financial accuracy and operational compliance outside the statutory audit framework. You need it when you want independent verification of your financial position before a transaction, restructuring, or investor entry. Unlike the [statutory audit](https://lawsupport.ch/limited-audit-switzerland/) required by law for certain companies, internal audit is optional. You commission it for your own purposes. The scope, depth, and focus are defined by you. The output is a detailed report on financial accuracy, tax compliance, and operational controls. This page explains when internal audit makes sense, what gets examined, and how the process works in practice. Swiss law requires [statutory audit](https://lawsupport.ch/limited-audit-switzerland/) (obligatorische Revision) for companies above certain thresholds: CHF 10 million in balance sheet total, CHF 20 million in revenue, or 50 full-time employees \[1\]. Internal audit operates outside this legal framework. It is commissioned voluntarily for management purposes. Many Swiss companies above the statutory audit threshold commission both: statutory audit to meet legal requirements, internal audit to verify specific areas or prepare for events (sale, restructuring, investor entry). In Switzerland, internal audit carries more weight than in many low-tax or offshore jurisdictions. Swiss banks, investors, and buyers expect higher standards of financial transparency. Foreign buyers often apply stricter due diligence standards than Swiss statutory audit requires. They examine VAT treatment, transfer pricing, and intercompany transactions in detail. Internal audit before the transaction gives Swiss company owners time to identify and fix issues. This is particularly relevant for companies in Zug, Zurich, and Geneva cantons, where cross-border M&A activity is high. ## Statutory Audit vs Internal Audit — Key Differences The table below shows the key differences between mandatory statutory audit and optional internal audit. | **Aspect** | **Statutory Audit (Mandatory)** | **Internal Audit (Optional)** | |:-----|:-----|:-----| | **Legal Requirement** | Required by Swiss Code of Obligations (CO) for companies above CHF 10 million in balance sheet total, CHF 20 million in revenue, or 50 full-time employees \[1\] | Not required by law. Commissioned by the owner or board for management purposes. | | **Purpose** | Verify that financial statements comply with Swiss accounting standards and CO requirements. | Verify financial accuracy, tax compliance, and operational controls for internal decision-making. | | **Scope** | Defined by CO and Swiss auditing standards. Covers financial statements, accounting records, and internal controls. | Defined by the client. Can focus on specific areas: financial accuracy, tax compliance, operational efficiency, or fraud detection. | | **Auditor** | Must be a licensed auditor (expert or limited statutory examination). | Can be any qualified professional: accountant, lawyer, or specialized firm. No licensing requirement. | | **Report Recipient** | Shareholders and board of directors. Filed with the Commercial Register. | Owner, board, or management only. Not filed publicly. | | **Frequency** | Annual (for companies above thresholds). | As needed (before transactions, restructuring, or when irregularities are suspected). | | **Cost** | CHF 5,000–15,000+ per year depending on company size and complexity. | CHF 3,000–20,000+ depending on scope and depth. |

Statutory Audit vs. Internal Audit

Key differences in legal requirements, scope, and purpose under Swiss law.

Aspect	Statutory Audit (Mandatory)	Internal Audit (Optional)
Legal Requirement	Mandatory* Required by Swiss Code of Obligations if >10M balance sheet, >20M revenue, or >50 FTE.	Voluntary Not required by law. Commissioned by owner/board for management purposes.
Purpose	Verify compliance with Swiss accounting standards & CO requirements.	Verify financial accuracy, tax compliance & operational controls for decisions.
Scope	Rigid: Defined by CO and Swiss auditing standards.	Flexible: Defined by client (fraud, tax, efficiency, etc.).
Auditor	Must be a licensed auditor (expert or limited) in Switzerland.	Any qualified professional (accountant, lawyer, specialized firm).
Report Recipient	Shareholders & Board. Filed with Commercial Register (formal).	Owner, Board, or Management only. Confidential and internal.
Frequency	Annual (recurring).	As needed (pre-transaction, restructuring, suspicion).
Cost Range	CHF 5,000 – 15,000+	CHF 3,000 – 20,000+

## When Internal Audit Makes Sense In our practice, we see four main scenarios where Swiss company owners commission internal audit. Each scenario has a different risk profile and required scope. ### Scenario 1: Pre-Transaction Due Diligence You are selling your company or acquiring another company. The buyer will conduct [due diligence](https://lawsupport.ch/due-diligence-switzerland/). They will examine your financial statements, tax compliance, and corporate structure. If they find discrepancies, they will reduce the purchase price or walk away. Internal audit before the transaction gives you time to identify and fix issues. You enter negotiations with clean financials. The audit report becomes part of your data room. Buyers see that you have already verified the numbers. This reduces their risk and speeds up the process. **Case example:** In 2023, we assisted a Zug-based GmbH preparing for sale to a German strategic buyer. Internal audit identified CHF 45,000 in undeclared VAT from 2021–2022\. The client filed corrective VAT returns before due diligence. The buyer accepted the purchase price without reduction. Timeline: 3 weeks from engagement to findings report. We see this issue often with clients selling to foreign buyers. The buyer's auditors apply stricter standards than Swiss statutory audit. They examine VAT treatment, transfer pricing, and intercompany transactions in detail. If your internal records are incomplete, the buyer will demand a price reduction or escrow. Internal audit before the sale prevents this. ### Scenario 2: Investor Entry or Restructuring You are bringing in a new investor or restructuring your shareholding. The investor wants to verify the company's financial position before committing capital. They will request audited financials. If your company is below the statutory audit threshold, you do not have audited financials. Internal audit fills this gap. The auditor examines your accounting records, tax compliance, and corporate structure. The investor receives an independent report. This builds trust and accelerates the investment process. **Case example:** In 2024, we coordinated internal audit for a Zurich-based AG raising CHF 2 million from a family office. The company had CHF 8 million in revenue (below statutory audit threshold). Internal audit verified revenue recognition, expense classification, and VAT compliance. The investor received the findings report within 2 weeks. Capital injection closed 4 weeks later. In our practice, we see this scenario with startups and SMEs raising capital from private investors or family offices. The investor does not trust management-prepared financials. They want third-party verification. Internal audit provides this at a lower cost than full statutory audit. ### Scenario 3: Suspected Financial Irregularities You suspect fraud, embezzlement, or accounting errors. You need independent verification. Internal audit examines transactions, bank statements, and accounting records. The auditor identifies discrepancies and traces them to their source. You receive a detailed report with findings and recommendations. This report can be used for internal corrective action or as evidence in legal proceedings. Swiss authorities typically require forensic audit reports to be prepared by licensed auditors if the case goes to court. However, internal audit is sufficient for initial investigation and management decision-making. If the audit reveals criminal activity, the findings can be escalated to forensic audit. **Case example:** In 2023, a Geneva-based AG commissioned internal audit after noticing unexplained cash withdrawals. The auditor traced CHF 120,000 in unauthorized expenses over 18 months. The company terminated the employee and filed a criminal complaint. The internal audit report was used as supporting evidence in court proceedings. ### Scenario 4: Operational Efficiency Review You want to verify that your company's cost structure, authorization procedures, and expense policies are efficient and compliant. Internal audit examines operational controls: who approves expenses, how invoices are processed, whether contracts are properly archived, and whether the company follows its own internal policies. The auditor identifies gaps and recommends improvements. This is not a financial audit — it is a process audit. The output is a management report with actionable recommendations. We see this scenario with growing companies that have added staff and processes but have not formalized controls. The owner wants to verify that the company is not leaking money through inefficient procedures or unauthorized expenses. ## Purpose → Recommended Scope Matrix The table below shows typical audit scope and auditor requirements based on the client's purpose. | **Purpose** | **Recommended Scope** | **Auditor Type** | **External Use?** | |:-----|:-----|:-----|:-----| | **Internal process optimization** | Operational controls, authorization procedures, expense policies | Accountant or specialized firm | No | | **Pre-transaction due diligence** | Financial accuracy, tax compliance, corporate compliance | Accountant or licensed auditor | Yes (data room) | | **Investor negotiations** | Financial accuracy, tax compliance, corporate structure | Licensed auditor recommended | Yes (investor) | | **Suspected fraud** | Transaction tracing, bank reconciliation, forensic analysis | Licensed auditor or forensic specialist | Yes (court) | | **Bank KYC / compliance** | Financial accuracy, source of funds, beneficial ownership | Licensed auditor recommended | Yes (bank) |

Purpose → Recommended Scope Matrix

Typical internal audit requirements based on the client's objective.

Purpose	Recommended Scope	Auditor Type	External Use?
Internal process optimization	Operational controls, authorization procedures, expense policies	Accountant or specialized firm	No
Pre-transaction DD	Financial accuracy, tax compliance, corporate compliance	Accountant or licensed auditor	Yes (Data Room)
Investor negotiations	Financial accuracy, tax compliance, corporate structure	Licensed auditor recommended	Yes (Investor)
Suspected fraud	Transaction tracing, bank reconciliation, forensic analysis	Licensed auditor or forensic specialist	Yes (Court)
Bank KYC / Compliance	Financial accuracy, source of funds, beneficial ownership	Licensed auditor recommended	Yes (Bank)

## What Gets Examined in an Internal Audit The scope of internal audit is defined by the client. However, most internal audits cover four areas: financial accuracy, tax compliance, corporate compliance, and operational controls. ### Financial Accuracy The auditor examines accounting records and compares them to bank statements, invoices, and contracts. The goal is to verify that the financial statements reflect the company's actual financial position. Specific checks include: * **Bank reconciliation:** Do the accounting records match bank statements? Are there unexplained discrepancies? * **Revenue recognition:** Is revenue recorded in the correct period? Are invoices properly documented? * **Expense classification:** Are expenses recorded in the correct accounts? Are personal expenses mixed with business expenses? * **Asset valuation:** Are assets (inventory, receivables, fixed assets) valued correctly? Are there obsolete items still on the balance sheet? * **Liability completeness:** Are all liabilities recorded? Are there hidden debts or contingent liabilities? The auditor does not prepare financial statements. The auditor verifies the accuracy of existing financial statements. If discrepancies are found, the auditor documents them in the findings report. ### Tax Compliance The auditor examines the company's tax position. This includes VAT, corporate income tax, withholding tax, and social security contributions. Specific checks include: * **VAT compliance:** Are VAT returns filed correctly? Is input VAT properly documented? Are exempt transactions treated correctly? \[2\] * **Corporate income tax:** Are tax returns consistent with financial statements? Are deductions properly documented? Are intercompany transactions at arm's length? * **Withholding tax:** Are dividends, interest, and royalty payments subject to withholding tax? Are withholding tax returns filed correctly? * **Social security contributions:** Are AHV/IV/EO contributions calculated correctly? Are employees properly registered? The auditor does not prepare tax returns. The auditor verifies that existing tax filings are correct and complete. If errors are found, the auditor documents them and recommends corrective action. Your tax advisor or accountant implements the corrections. ### Corporate Compliance The auditor examines whether the company complies with Swiss Code of Obligations (CO) requirements. This includes corporate structure, shareholder resolutions, board minutes, and [Commercial Register filings](https://lawsupport.ch/commercial-register-switzerland/). Specific checks include: * **Shareholder resolutions:** Are major decisions (capital increase, dividend distribution, board appointments) properly documented in shareholder resolutions? * **Board minutes:** Does the board meet regularly? Are minutes properly signed and archived? * **Commercial Register filings:** Are changes (directors, share capital, address) filed with the [Commercial Register](https://lawsupport.ch/commercial-register-switzerland/) within the legal deadline? \[3\] * **Signature authority:** Are authorized signatories properly registered? Are signature cards up to date? * **Corporate documents:** Are articles of association, shareholder agreements, and board regulations properly archived? The auditor does not provide legal advice. The auditor verifies that the company follows CO requirements and its own internal policies. If gaps are found, the auditor documents them and recommends corrective action. Your corporate lawyer implements the corrections. ### Operational Controls The auditor examines internal controls: authorization procedures, expense policies, contract management, and data security. Specific checks include: * **Authorization procedures:** Who approves expenses? Are approval limits documented? Are they followed in practice? * **Expense policies:** Does the company have a written expense policy? Are personal expenses properly separated from business expenses? * **Contract management:** Are contracts properly archived? Are renewal dates tracked? Are contracts signed by authorized persons? * **Data security:** Are financial records stored securely? Are backups performed regularly? Are access controls in place? The auditor does not redesign processes. The auditor identifies gaps and recommends improvements. The owner or management decides whether to implement the recommendations. ### Accounting & Tax Advisory for Swiss Companies Understanding Swiss accounting obligations, cantonal tax differences, and when VAT registration becomes mandatory can be complex for foreign company owners or directors. Without local professional support, you risk filing errors or missed deadlines. Lawsupport provides ongoing bookkeeping, corporate and director tax returns, VAT advisory, payroll, and annual statements — all coordinated by in-house specialists familiar with Swiss cantonal requirements. We serve clients from 30+ countries, have a physical office in Zug, and respond within 1–2 hours. If you are planning a holding structure and need a Swiss-resident director, contact our corporate team for a free initial consultation. **Learn more:** [Accounting & Tax Advisory for Swiss Companies](https://lawsupport.ch/accounting-tax-switzerland/) ## The Internal Audit Process — Step by Step Internal audit follows a structured process. The timeline depends on company size and scope. A typical internal audit for a small to medium-sized Swiss company takes 2–4 weeks. ### Step 1: Scope Definition The client defines the scope. What areas should the auditor examine? Financial accuracy only? Tax compliance? Operational controls? The auditor prepares a scope document. The client reviews and approves it. The scope document defines what will be examined, what will not be examined, and what the deliverable will be (findings report, management letter, or detailed audit report). ### Step 2: Document Collection The auditor requests documents. The client provides access to accounting software, bank accounts, and corporate files. Your accountant or CFO coordinates document collection. **Document Checklist (Minimum Set for Basic Internal Audit):** * Financial statements (last 2–3 years) * Bank statements (last 12 months) * VAT returns and supporting documentation * Corporate income tax returns * Shareholder resolutions and board minutes * Articles of association * Commercial Register extract (current) * Contracts (major suppliers, customers, leases) * Employee payroll records and AHV/IV filings ### Step 3: On-Site or Remote Review The auditor examines the documents. For small companies, the review can be done remotely. For larger companies or complex cases, the auditor conducts an on-site visit. The auditor interviews key personnel: the accountant, the CFO, and the managing director. The auditor asks questions, examines records, and traces transactions. ### Step 4: Findings Report The auditor prepares a findings report. The report lists discrepancies, errors, and gaps. Each finding includes: description, impact, and recommendation. The report is structured by area: financial accuracy, tax compliance, corporate compliance, and operational controls. The auditor does not assign blame. The auditor documents facts and recommends corrective action. ### Step 5: Management Response The client reviews the findings report. The client prepares a management response: which recommendations will be implemented, which will not, and why. The auditor does not enforce recommendations. The auditor provides independent verification. The client decides what to do with the findings. ## Cost and Timeline Internal audit cost depends on company size, complexity, and scope. A basic financial review for a small [GmbH](https://lawsupport.ch/gmbh-formation-switzerland/) (CHF 500,000 revenue, 5 employees) costs CHF 3,000–5,000\. A comprehensive audit for a mid-sized AG (CHF 10 million revenue, 50 employees) costs CHF 10,000–20,000\. A forensic audit for suspected fraud can cost CHF 20,000+. Timeline depends on document availability and complexity. A basic review takes 1–2 weeks. A comprehensive audit takes 3–4 weeks. A forensic audit can take 6–8 weeks. **Factors that increase cost and timeline:** * **Multiple entities:** If the company has subsidiaries or branches, each entity requires separate review. * **Complex transactions:** Intercompany transactions, transfer pricing, and cross-border payments require additional analysis. * **Incomplete records:** If accounting records are incomplete or disorganized, the auditor spends more time reconstructing transactions. * **Language barriers:** If documents are in multiple languages, translation adds time and cost. Lawsupport does not publish fixed pricing for internal audit. Each engagement is scoped individually based on your company's size, complexity, and audit objectives. ## What to Do Next If You Are Considering Internal Audit If you are preparing for a transaction, investor entry, or suspect irregularities, follow these steps: 1. **Define your objective.** What do you need to verify? Financial accuracy? Tax compliance? Operational controls? Fraud detection? 2. **Determine the scope.** Do you need a basic review or comprehensive audit? Will the report be used internally or shared with external parties (investors, buyers, banks)? 3. **Prepare your documents.** Gather financial statements, bank statements, tax returns, and corporate records. Inform your accountant or CFO. 4. **Select a provider.** If the report will be used in legal proceedings or for investor due diligence, choose a licensed auditor. For internal management purposes, a qualified accountant or specialized firm is sufficient. 5. **Set a timeline.** Allow 2–4 weeks for a typical engagement. If you have a transaction closing date, start the process at least 6 weeks in advance. 6. **Review the findings and act.** Implement critical corrections (tax compliance errors, missing corporate filings) immediately. Address operational improvements on a scheduled basis. Lawsupport has 22 years of experience in Swiss corporate law and accounting. We work with AG and GmbH structures across all cantons. Our team examines accounting records, tax compliance, and corporate structure. Average turnaround time: 2–3 weeks depending on company size. We coordinate with licensed auditors where necessary for external-use reports. Contact us at Grafenauweg 4, Zug, Switzerland for a scope discussion. Average response time: 1–2 hours. ## References \[1\] Swiss Code of Obligations (CO), Art. 727 — [Federal Council, Swiss Code of Obligations](https://www.admin.ch/opc/en/classified-compilation/19110009/index.html) \[2\] Federal Tax Administration (ESTV) — [VAT Guidelines and Compliance Requirements](https://www.estv.admin.ch/estv/en/home/value-added-tax.html) \[3\] Commercial Register (Zefix) — [Corporate Filing Requirements](https://www.zefix.ch/en/search/entity/welcome) **Disclaimer:** This page provides general information only. It does not constitute legal or tax advice for any specific case. For advice tailored to your company's situation, consult a licensed Swiss lawyer or tax advisor.

Internal Audit and Financial Review for Swiss Companies

FAQ

Maria Werner