UAE Corporate Tax Record-Keeping Requirements: The Complete Guide

For decades, the UAE's zero federal income tax environment meant most businesses had no regulatory reason to maintain structured financial records. Invoices piled up in filing cabinets or lived scattered across email threads. Bank statements went unreconciled. There was no taxing authority asking questions, so there was no compliance risk in keeping things informal.

That changed on June 1, 2023, when the UAE's 9% corporate tax took effect under Federal Decree-Law No. 47 of 2022, applying to taxable income above AED 375,000. Overnight, businesses that had operated for years — sometimes decades — without systematic record-keeping faced a formal set of obligations enforced by the Federal Tax Authority (FTA).

The UAE corporate tax record keeping requirements are unambiguous: businesses must retain all corporate tax records for a minimum of 7 years from the end of the relevant tax period. Required records include invoices, contracts, bank statements, and financial statements. The FTA can request these records at any time, and businesses must produce them within 48 hours. Failure to maintain required records carries a penalty of AED 10,000, rising to AED 20,000 for repeat violations within 24 months.

The scale of this transition is unprecedented. More than 640,000 businesses registered and filed corporate tax returns by the September 30, 2025 deadline, marking record compliance levels in the first complete filing cycle under the UAE's corporate tax regime, according to Gulf News reporting on FTA corporate tax compliance data. That figure represents the vast majority of UAE-registered entities now operating under a formal UAE corporate tax record retention framework for the first time.

But the 7-year retention rule and 48-hour retrieval window are only the starting point. Corporate tax obligations interact with existing VAT requirements, upcoming e-invoicing mandates, and transfer pricing rules, creating a multi-layered compliance picture that this guide works through in full — what records you must keep, how long, in what format, and what happens when the FTA finds gaps.

What Records UAE Businesses Must Maintain

Federal Decree-Law No. 47 of 2022 and its implementing decisions place explicit record-keeping obligations on every taxable person. The UAE Federal Tax Authority (FTA) does not publish a single exhaustive checklist, but the requirements drawn from the law, ministerial decisions, and published guidance converge on several clear categories. Missing any one of them can result in disallowed deductions or, worse, an estimated assessment where the FTA calculates your liability for you.

Financial Statements and Supporting Workings

At the foundation of every corporate tax filing sits a complete set of financial statements: profit and loss statement, balance sheet, and cash flow statement prepared in accordance with IFRS (or IFRS for SMEs where applicable). But the statements alone are not enough. The FTA expects the underlying calculation workings that show how you moved from accounting profit to taxable income. This means documented adjustments for non-deductible expenses, exempt income, reliefs claimed, and any elections made under the law. If an auditor or FTA reviewer cannot trace a number on your return back to a source record, that number is vulnerable.

Invoices and Transaction Records

Every sales invoice issued and every purchase invoice received must be retained. This category carries double weight because invoices serve both corporate tax and VAT purposes simultaneously. A single sales invoice is evidence of revenue recognition for corporate tax and evidence of output tax for VAT. A purchase invoice supports an expense deduction and an input tax credit. Tax credit notes, debit notes, and import/export documentation fall into the same dual-purpose bracket.

This overlap is a practical advantage if you treat it deliberately. Businesses that maintain one well-organized invoice archive satisfy two compliance regimes at once. Businesses that silo their VAT and corporate tax records risk gaps in both, particularly around inter-company transactions, credit notes that adjust previously reported figures, and import duties that affect cost of goods sold.

The documents required for corporate tax filing in the UAE extend beyond what many businesses currently retain for VAT alone. Invoice documentation must include sufficient detail to verify the nature of the transaction, the parties involved, the date, and the amount, and must be cross-referenceable to the corresponding entry in your accounting system.

Contracts and Agreements

Retain all contracts, agreements, and legal documents that underpin transactions reflected in your financial statements. This includes:

Customer and supplier contracts that establish revenue and cost recognition terms
Lease agreements relevant to right-of-use asset calculations under IFRS 16
Intercompany agreements and any related transfer pricing arrangements
Employment contracts supporting payroll expenses
Loan agreements that determine interest expense deductibility, including those subject to the general interest deduction limitation rules

Contracts matter because the FTA uses them to verify that transactions are genuine, conducted at arm's length where applicable, and recorded in the correct period.

Bank Statements and Payment Records

Complete bank statements for every account used in the business, covering the full taxable period. Payment records, receipts, and proof of settlement corroborate what invoices and contracts claim happened. Where expenses are paid in cash, maintain receipts with enough detail to substantiate the deduction.

Tax Returns and FTA Correspondence

Every corporate tax return filed, along with any supporting schedules, elections, or claims submitted to the FTA, must be retained. The same applies to all correspondence with the FTA, including objections, clarification requests, voluntary disclosure submissions, and any notices received. These records protect you in the event of a future audit or dispute over a previously filed position.

Records From the Start of Your First Taxable Period

Businesses crossing the AED 375,000 taxable income threshold for the first time face a common misconception: that record-keeping obligations begin at the point the threshold is exceeded. They do not. Records must be maintained from the beginning of the first taxable period, which for most businesses aligns with their financial year start date. A company that exceeds the threshold in month eight of its financial year still needs compliant records for months one through seven. Retroactive record assembly is both difficult and unreliable, so the practical guidance is straightforward: maintain corporate-tax-grade records from day one, regardless of whether you expect to owe tax.

Retention Periods: How the 5, 7, and 15-Year Rules Apply

Not all records carry the same retention obligation. The UAE applies a tiered structure where VAT records, corporate tax records, and real estate transaction records each fall under different minimum retention periods set by different pieces of legislation. Getting this wrong means either destroying documents too early or, less critically, over-retaining records without a clear policy rationale.

The following table summarizes the three primary retention tiers:

Record Category	Minimum Retention Period	Measured From	Governing Authority
UAE VAT records	5 years	End of the relevant tax period	Federal Tax Authority (VAT)
Corporate tax records	7 years	End of the relevant tax period	Federal Tax Authority (Corporate Tax)
Real estate transaction records	15 years	End of the financial year in which the transaction occurred	Federal Tax Authority (Corporate Tax)

Understanding "from the end of the relevant tax period." This phrase determines when the retention clock actually starts, and it is commonly misread. For a business using a calendar-year tax period ending December 31, 2024, the 7-year corporate tax retention period begins on that date. The records must therefore be maintained until at least December 31, 2031. The clock does not start on the date the transaction occurred or the date the return was filed. It starts when the tax period closes.

The same logic applies to VAT. A VAT return for the quarter ending March 31, 2025 triggers a 5-year retention period measured from that quarter-end date, requiring records through at least March 31, 2030.

When a single document serves multiple purposes, the longest period governs. A purchase invoice, for example, may support both a VAT input tax credit and a corporate tax deduction. That invoice is subject to the 5-year VAT retention rule and the 7-year corporate tax retention rule simultaneously. The compliant approach is straightforward: retain it for 7 years. Financial controllers setting document retention policies should default to the longest applicable period for any given record rather than attempting to track separate destruction dates for the same document under different regimes.

Real estate transactions carry the heaviest burden. Businesses that buy, sell, lease, or develop real property in the UAE face a 15-year retention obligation, the longest in the UAE tax system. This covers contracts, valuation reports, transfer documents, and related financial records. For organizations with significant property portfolios, this creates a substantial long-term archival requirement that must be factored into records management infrastructure from the outset.

These UAE retention periods sit within a broader global pattern. Most major jurisdictions impose multi-year document retention requirements, though the specific durations and measurement rules vary considerably. Businesses operating across borders need to reconcile UAE obligations with those of other countries where they file, which can mean maintaining records well beyond what any single jurisdiction requires in isolation. For a detailed comparison, see the breakdown of global invoice retention requirements by country, which maps retention periods across dozens of jurisdictions.

The 48-Hour Retrieval Rule and Digital Record-Keeping Standards

Knowing what records to keep is only half the equation. Article 56 of the UAE Corporate Tax Law imposes a strict operational requirement: when the Federal Tax Authority requests records, businesses must produce them within 48 hours. This is not a soft guideline or a best-effort target. It is a binding obligation that applies to every record within the applicable retention window, whether that record is from the current tax period or from seven years prior.

The 48-hour clock starts when the FTA issues its request. That request can cover any category of record the business is required to maintain — financial statements, supporting invoices, contracts, transfer pricing documentation, or board minutes. The FTA does not limit itself to current-year materials. A request in 2028 could demand records from 2024, and the business has the same 48-hour window to comply.

Why Physical-Only Filing Systems Fall Short

The practical effect of this rule is that traditional paper-based archiving is no longer viable as a primary record-keeping method. Filing cabinets in an offsite warehouse, banker's boxes sorted by year, or binders stored across multiple office locations cannot reliably meet a 48-hour production deadline — particularly when the request covers records spanning multiple years or requires cross-referencing between document types.

Digital record-keeping with searchable, indexed storage is effectively a necessity. Businesses need systems where records can be located by date, transaction type, counterparty, or document category and exported within hours rather than days. This means:

Consistent file naming and folder structures across all record categories
Optical character recognition (OCR) for scanned documents so they are text-searchable
Indexed metadata (date, amount, vendor, tax treatment) attached to each record
A retrieval process that does not depend on a single employee's knowledge of where things are filed

Cloud Storage and UAE Accessibility

Businesses using cloud-based accounting platforms or document management systems must confirm one critical point: records must be accessible from within the UAE. This does not necessarily require UAE-based data centers or local server hosting. However, the data must be retrievable by authorized personnel operating from within the country, without delays caused by cross-border access restrictions, regional licensing limitations, or data sovereignty controls that block UAE-based retrieval.

In practice, this means verifying that your cloud provider does not impose geographic access restrictions that would prevent a UAE-based team member from pulling records on demand. It also means ensuring that login credentials, encryption keys, and access permissions are held by personnel who can act within the 48-hour window — not by an overseas parent company operating in a different time zone.

The FTA Audit File (FAF)

Beyond ad hoc document requests, the FTA may require businesses to submit a standardized audit file containing transaction-level data. The FTA Audit File is a CSV-format export that follows a prescribed structure, covering sales transactions, purchase transactions, and general ledger entries with specific field requirements.

Businesses should confirm that their accounting software or ERP system can generate an FAF-compliant export on demand. This is not a report that can be assembled manually from spreadsheets under time pressure. The required fields, formatting, and data structure must match the FTA's specifications exactly. If your current system cannot produce this output natively, the gap needs to be addressed before the FTA makes the request — not after.

Key FAF preparation steps include:

Confirming your accounting platform supports FAF export (most major UAE-market ERP systems now include this)
Running a test export and validating the output against the FTA's published format specifications
Ensuring that the export captures all transaction types, not just sales invoices
Establishing a documented process so the export can be generated by any authorized team member, not just one specialist

Most major cloud accounting and ERP platforms marketed for the UAE now include FAF export functionality. Businesses still relying on spreadsheet-based or legacy systems should assess this capability gap as a priority.

E-Invoicing: An Additional Layer Ahead

The UAE's upcoming e-invoicing mandate, expected to roll out in phases during 2026 and 2027, will add further digital archiving requirements on top of these obligations. The specific implications for record-keeping infrastructure — including format standards, archiving protocols, and practical preparation steps — are covered in the final section of this guide.

How VAT and Corporate Tax Record-Keeping Interact

The Federal Tax Authority does not treat VAT and corporate tax as isolated compliance regimes. Its systems actively reconcile turnover declared in VAT returns against revenue reported in corporate tax filings. When those numbers diverge, the discrepancy triggers audit scrutiny. For businesses registered under both regimes, this cross-checking mechanism means that a single set of invoice records must produce consistent figures across VAT and corporate tax reporting.

The practical implications are significant. Sales invoices used to calculate VAT output tax must reconcile with revenue reported for corporate tax purposes. If a business declares AED 2 million in taxable supplies on its VAT returns but reports AED 1.8 million in revenue on its corporate tax filing, the FTA's automated systems will flag that gap. The same logic applies on the expense side: purchase invoices claimed for VAT input tax recovery must align with the expenses deducted against corporate tax liability. A supplier invoice that supports an input tax credit but does not appear in the corporate tax expense ledger, or vice versa, creates exactly the kind of inconsistency that draws FTA attention.

Businesses that built their VAT compliance processes before corporate tax took effect often maintained record systems designed exclusively for VAT reporting. Those systems tracked taxable supplies, exempt supplies, and input tax recovery, but were not structured to feed corporate tax calculations. Now that both regimes draw from the same underlying transaction data, these siloed approaches create risk. When the FTA runs automated reconciliation across the two filing streams, discrepancies rooted in separate record-keeping systems surface quickly.

The solution is unified record-keeping, where the same source invoices feed both VAT returns and corporate tax filings. Rather than maintaining parallel systems that must be manually reconciled, businesses should structure their records so that every sales and purchase invoice is captured once and referenced consistently across both tax obligations. This eliminates the reconciliation gaps that trigger FTA scrutiny and reduces the administrative burden of maintaining duplicate records. Understanding the full scope of UAE VAT invoice compliance requirements is essential to building this unified foundation.

Retention obligations compound under both regimes. Businesses registered for VAT (mandatory above AED 375,000 in taxable supplies) must retain records for at least five years under the VAT regime. Corporate tax imposes a seven-year minimum on the same underlying invoice records. The longer period governs, meaning those invoices must be accessible for seven years from the end of the relevant tax period. Destroying invoice records after five years to comply with VAT retention rules would create a corporate tax violation for the remaining two years. Financial controllers should apply the longest applicable retention period to every record category rather than attempting to manage different destruction schedules for the same documents.

Documenting Deductible Expenses and Free Zone Obligations

Paying a business expense does not automatically make it tax-deductible. Under the UAE corporate tax regime, the Federal Tax Authority requires specific supporting documentation for every deduction claimed on a tax return. If that documentation is missing, incomplete, or fails to meet invoice requirements, the FTA can disallow the deduction retroactively, increasing your taxable income and triggering penalties.

Every deductible expense must be supported by:

A valid tax invoice or receipt that meets FTA formatting requirements
Proof of payment (bank statement, payment confirmation, or cleared cheque record)
Evidence that the expense was incurred wholly and exclusively for business purposes
Any contracts, agreements, or purchase orders that establish the commercial basis for the transaction

The standard is strict. A bank statement alone does not constitute sufficient documentation. The FTA expects a matching invoice that identifies the supplier, describes the goods or services, states the amount, and includes the date of supply. Where expenses are shared between business and personal use, or between taxable and exempt activities, records must demonstrate the basis for apportionment.

Capital Expenditure and Depreciation Records

Assets subject to depreciation carry their own documentation requirements that extend across the asset's useful life. For each capital asset, businesses must maintain:

The acquisition invoice showing the purchase price, date, and supplier
Cost allocation records where the asset forms part of a larger purchase or project
A depreciation schedule that documents the method used (straight-line, declining balance, or other permitted method), the depreciation rate applied, and the resulting annual charge
Records of any subsequent capital improvements, impairments, or disposals

The documentation trail must support the depreciation method and rates used in the tax computation. If the FTA audits your depreciation claims and finds no underlying schedule or inconsistent methodology, the entire capital allowance can be challenged. Maintain these records for the full retention period, which in many cases extends well beyond the asset's useful life.

Free Zone Businesses: 0% Rate Does Not Mean Zero Obligations

Businesses operating in UAE free zones that qualify as Qualifying Free Zone Persons (QFZPs) benefit from a 0% corporate tax rate on qualifying income. This creates a common misconception, particularly among businesses that operated under zero federal income tax for years and viewed their free zone status as a blanket exemption from all tax obligations.

It does not. QFZPs are subject to the corporate tax regime in full. They must register for corporate tax, file annual returns, and maintain the same standard of records as any mainland business. The 0% rate is a benefit that must be actively earned and documented, not a blanket exemption.

The stakes are high because QFZP status is conditional. If a business fails to meet the qualifying conditions in any tax period, the standard 9% corporate tax rate applies retroactively to that period. When this happens, the business must produce records sufficient to support a full tax computation at the 9% rate, including revenue breakdowns, expense documentation, and evidence of the nature and source of all income streams. Businesses that assumed they would never need detailed records because of their free zone status find themselves exposed.

To protect QFZP status, free zone businesses should maintain:

Clear segregation of qualifying income (from qualifying activities) and non-qualifying income
Documentation proving that adequate substance exists in the free zone (staff, premises, expenditure)
Records demonstrating compliance with all conditions under the relevant Cabinet Decision
The same invoice, receipt, and expense documentation standards that apply to mainland entities

For businesses navigating the intersection of free zone invoicing and VAT obligations in the UAE, the record-keeping requirements layer on top of one another. VAT registration, corporate tax filing, and QFZP qualification each demand their own documentation, and gaps in one area can create problems in another.

Groups with Both Mainland and Free Zone Operations

Where a corporate group includes both mainland entities and free zone entities, intercompany transactions between them are subject to transfer pricing rules. This adds a documentation layer that goes beyond standard expense records. Transactions must be priced at arm's length, and the supporting documentation must demonstrate that pricing methodology. Groups straddling the mainland-free zone boundary face compounding record-keeping obligations that require deliberate coordination across entities.

Transfer Pricing Documentation Requirements

Businesses with related-party transactions face a distinct layer of UAE corporate tax record-keeping obligations. Transfer pricing documentation sits on top of the standard records covered earlier in this guide, meaning affected companies maintain both the underlying transaction evidence (invoices, contracts, payment records) and the specific analytical files that demonstrate arm's length pricing.

The operative principle is straightforward: every transaction between related parties must be conducted at arm's length, reflecting prices and terms that independent parties would agree to under comparable circumstances. This applies to cross-border intercompany dealings and, critically, to domestic transactions between mainland entities and free zone entities. Documentation must demonstrate that pricing reflects market conditions, not internal convenience.

Thresholds That Trigger Formal Filing

Three distinct thresholds determine which transfer pricing documents a business must prepare:

Master File and Local File become mandatory when either condition is met:

The entity's revenue reaches AED 200 million or more in the relevant tax period.
The entity belongs to a multinational enterprise (MNE) group with consolidated revenue of AED 3.15 billion or more.

The Master File provides a high-level overview of the MNE group's global business operations, transfer pricing policies, and allocation of income. The Local File focuses on the specific UAE entity's material intercompany transactions, including functional and economic analyses that support the pricing applied.

Related Party Transaction Disclosure is required where aggregate related-party transactions exceed AED 40 million in a tax period. This disclosure is filed as part of the corporate tax return and captures the nature, value, and parties involved in each qualifying transaction.

Businesses below all three thresholds are not exempt from the arm's length principle itself. They still must price related-party transactions at market rates and retain sufficient records to substantiate those prices if the FTA inquires. What they avoid is the formal Master File, Local File, and disclosure filing obligations.

The Advance Pricing Agreement Programme

Launched in December 2025, the FTA's Advance Pricing Agreement (APA) programme allows businesses to agree on transfer pricing methodologies with the authority in advance. Rather than preparing documentation and hoping it withstands future scrutiny, an APA locks in the accepted methodology for a defined period, providing certainty for both the taxpayer and the FTA.

APAs are particularly relevant for businesses with significant recurring intercompany transactions where the transfer pricing analysis is complex or where the risk of dispute is material. By front-loading the negotiation, companies reduce the ongoing documentation burden for covered transactions and eliminate the risk of retrospective adjustments on agreed matters.

The programme is voluntary. Businesses that opt not to pursue an APA continue under the standard self-assessment model, preparing and retaining their transfer pricing documentation for potential FTA review.

Practical Documentation Burden

For businesses that cross the thresholds, the record-keeping requirement is additive. Transfer pricing files do not replace the standard corporate tax records outlined in earlier sections of this guide. A company preparing a Local File still needs the full suite of financial statements, source documents, and ledgers that every taxable entity must maintain.

The transfer pricing layer adds:

Functional analysis documenting each party's functions, assets, and risks in the transaction.
Economic analysis with benchmarking studies or comparable data supporting the pricing.
Intercompany agreements formalizing the terms of related-party arrangements.
Documentation of the method selected and why it produces an arm's length result.

These files follow the same retention periods that apply to corporate tax records generally. Given the complexity and the volume of supporting data involved, businesses approaching the AED 200 million revenue threshold or the AED 40 million related-party transaction threshold should begin building their documentation processes well before the obligation formally applies.

Penalties, Voluntary Disclosure, and What Comes Next

Record-keeping failures under the UAE corporate tax regime carry financial penalties that escalate quickly. The FTA imposes AED 10,000 for a first violation and AED 20,000 for any repeat violation within 24 months. What makes this penalty structure particularly consequential is that it applies per violation. A single audit that uncovers five separate record-keeping deficiencies — missing transfer pricing documentation, incomplete expense receipts, gaps in free zone qualifying income records, unreconciled intercompany transactions, and absent board resolutions — can produce AED 50,000 in penalties on the first occurrence alone. Repeat findings across those same categories within two years would double each line item.

The cumulative nature of these penalties means that systemic record-keeping weaknesses are far more costly than isolated oversights. For businesses that operated for years without formal record-keeping systems, the risk is not a single isolated gap but deficiency across multiple categories simultaneously. Businesses operating across multiple entities, free zones, or Emirates face compounded exposure because each entity's records are assessed independently.

The Voluntary Disclosure Framework

Effective April 2026, the FTA's voluntary disclosure mechanism creates a structured path for businesses that identify errors or omissions in their corporate tax filings. The framework establishes two distinct penalty tiers based on timing.

Pre-audit voluntary disclosures — those filed before the FTA initiates any audit or investigation — incur a 1% monthly penalty on the unpaid tax amount. This rate applies from the date the tax should have been paid until the disclosure is processed. For a business that discovers a AED 500,000 underreporting six months after the filing deadline, the penalty would be approximately AED 30,000.

Post-audit voluntary disclosures — where the FTA has already commenced an audit — carry a 15% lump-sum penalty on the unpaid tax plus 1% monthly accrual. Using the same AED 500,000 example at six months, this produces AED 75,000 (lump sum) plus AED 30,000 (monthly accrual), totalling AED 105,000.

The incentive structure is unambiguous: self-reporting before the FTA comes knocking costs roughly one-quarter of what disclosure under audit costs. For businesses conducting internal reviews of their first corporate tax filings, this framework makes it financially rational to prioritise finding and correcting errors now rather than hoping they go undetected.

The E-Invoicing Mandate on the Horizon

The UAE is developing mandatory e-invoicing requirements expected to begin phased rollout between 2026 and 2027. While the final technical specifications and implementation timeline are still being defined, the direction is clear: structured digital invoicing will become a regulatory requirement, not a voluntary efficiency measure.

For corporate tax record-keeping, e-invoicing adds a layer of structured digital archiving obligations on top of existing retention requirements. E-invoicing systems typically require invoices to be generated, transmitted, and stored in standardised machine-readable formats with digital signatures or authentication mechanisms.

Businesses building or upgrading their digital record-keeping infrastructure now should design with e-invoicing compatibility in mind. Practical steps include:

Selecting accounting and ERP systems that support structured data export formats (XML, UBL, or Peppol standards commonly adopted in e-invoicing regimes)
Ensuring document management systems can store both human-readable and machine-readable invoice versions
Building API connectivity into archiving workflows so that future integration with FTA e-invoicing platforms requires configuration changes rather than system replacement

Retrofitting a record-keeping system for e-invoicing compliance after the mandate takes effect is significantly more disruptive and expensive than incorporating these requirements during initial design.

Preparing Your Records for an FTA Audit

The practical test of any record-keeping system is whether it can withstand FTA scrutiny without operational disruption. Audit preparation should centre on a consolidated record inventory — a single reference document that maps each required document category to three data points:

Storage location — physical address, cloud system, or archival service, with access credentials or contact procedures
Retention period — whether the 5-year VAT rule, 7-year corporate tax requirement, or 15-year real estate rule applies to that category
Retrieval procedure — the specific steps required to locate and produce the record, including which personnel have access authority

The goal is straightforward: produce any requested record within the 48-hour retrieval window without scrambling.

An FTA audit typically begins with a written notification specifying the tax periods and document categories under review. The scope may be limited to a specific area (such as transfer pricing or expense deductions) or it may cover the full filing position. During the audit, FTA officers will request documents, cross-reference records against filed returns, and may interview relevant personnel. The process can extend over several months for complex cases, and the 48-hour production window applies to each document request throughout.

This means testing retrieval procedures periodically, not just documenting them. A record inventory that lists a cloud storage location is worthless if the access credentials have expired or the folder structure has changed since the inventory was last updated.

The FTA's cross-checking systems compare data across VAT returns, corporate tax filings, customs declarations, and economic substance reports. Consistency across VAT and corporate tax records is the first thing auditors verify. Discrepancies between VAT-reported revenue and corporate tax-reported income trigger immediate scrutiny, so reconciliation between these two data sets should be part of every quarterly close process — not something attempted for the first time when an audit notice arrives.