Do I need an auditor? Sooner or later almost every business owner in Estonia asks this question. The answer depends on the size of your company: most small firms don’t need one at all, mid-sized ones may need a lighter check called a review, and larger ones must arrange a full statutory audit of their annual accounts.
This guide explains the audit requirements in Estonia in plain language: what an audit and a review actually involve, the exact financial thresholds that trigger each obligation, and why some companies order an audit voluntarily. As part of Estonia’s transparent business environment, the rules are refreshingly straightforward: simple, numeric, and easy to check yourself.
What Is a Financial Audit?
A financial audit (audiitorkontroll) is an independent examination of a company’s annual accounts. The auditor checks the accounting records, significant transactions, and internal controls to confirm that the financial statements give a true and fair view of the business and comply with accounting rules.
The result is an auditor’s report expressing an opinion on the financial statements. This is called reasonable assurance — the highest level of confidence an external check can give. For owners, investors, banks, and public authorities it means one thing: the numbers can be trusted.
Who May Perform Statutory Audits?
Only a sworn auditor (vandeaudiitor) or a licensed audit firm may perform statutory audits and reviews. Auditors belong to the Estonian Auditors’ Association, follow international auditing standards, and must be fully independent of the company’s management. The auditor is normally appointed by the shareholders, and the appointment requires the auditor’s written consent.
Audit vs Review: What Is the Difference?
Alongside the full audit, Estonian law recognises a review (ülevaatus) — a lighter assurance engagement. Instead of detailed testing, the auditor mainly asks questions of management and performs analytical checks on the figures. Because the work is narrower, a review gives only limited assurance: the report says that nothing came to the auditor’s attention suggesting material errors, rather than giving a positive opinion.
| Aspect | Full audit | Review |
|---|---|---|
| Depth of work | Detailed testing of transactions and balances | Inquiries and analytical procedures |
| Level of assurance | Reasonable assurance (high) | Limited assurance (moderate) |
| Auditor’s conclusion | Positive opinion on the accounts | “Nothing indicates material errors” |
| Time and cost | Longer and more expensive | Quicker and cheaper |
| Typically applies to | Larger companies | Mid-sized companies |
In short, both are performed by a certified professional, but an audit digs deeper and gives stronger confidence, while a review is a quicker check-up that still adds credibility to the annual report.
When Is an Audit Mandatory? Thresholds for Estonian Companies
The mandatory audit criteria are set out in the Auditors Activities Act and depend on three indicators from the annual report: sales revenue, total assets at the end of the financial year, and the average number of employees. A full audit becomes compulsory when at least two of the three exceed the standard limits — or when any single indicator exceeds a much higher ceiling.
| Indicator | At least two exceed | Any single one exceeds |
|---|---|---|
| Sales revenue or income | €5 million | €15 million |
| Total assets at year end | €2.5 million | €7.5 million |
| Average number of employees | 50 | 180 |
Quick Self-Check
Take three figures from your latest annual report: revenue, total assets, and average headcount. If two of them are above the standard limits — or one is above the higher ceiling — your company must appoint an auditor. The test is applied to each financial year separately.
Which Entities Are Always Subject to Audit?
Some organisations must be audited every year, whatever their figures. The main examples are public limited companies (AS) with more than two shareholders, entities in the public sector, political parties receiving state funding, and certain foundations connected to the state or local government. If you run one of these, an audit is a fixed part of every reporting cycle.
Skipping a Required Audit Has Consequences
An annual report filed without a required auditor’s report does not meet legal requirements. The Business Register can demand corrections and impose penalties, and banks or partners may treat the accounts as unreliable. Plan the engagement early — auditors are in high demand before filing deadlines.
When Is a Limited Review Enough?
Mid-sized businesses that stay below the audit limits may still be obliged to arrange the lighter check. A review is mandatory when at least two of the three indicators exceed the lower set of limits — or any single indicator exceeds its higher ceiling.
| Indicator | At least two exceed | Any single one exceeds |
|---|---|---|
| Sales revenue or income | €2 million | €6 million |
| Total assets at year end | €1 million | €3 million |
| Average number of employees | 24 | 72 |
Two details worth knowing. First, a mandatory review can always be replaced with a full audit if the company prefers the stronger form of assurance. Second, the monetary limits were most recently raised by about a quarter to ease the administrative burden on smaller businesses — so a firm that once needed an audit may now qualify for a review, and many small enterprises are exempt from both requirements entirely.
Is a Voluntary Audit Worth It?
Most small Estonian companies enjoy an audit exemption — they are under no legal duty to involve an auditor at all. Even so, some choose to commission an audit or review voluntarily — and treat it as an investment rather than a cost. Here is what it can bring:
- Trust: independently checked accounts carry more weight with banks, investors, and business partners, which helps when raising financing or bidding for contracts.
- Discipline: the process often uncovers weak spots in bookkeeping or internal controls while they are still cheap to fix.
- Readiness for growth: if you plan to attract serious investment or sell the business one day, a history of assured accounts makes due diligence far smoother.
- Reputation: in international deals and public tenders, assured financial statements signal professionalism and transparency.
For a growing business, the credibility gained usually outweighs the fee — especially if the alternative is explaining unverified numbers to a cautious investor.
Preparing for an Audit with Eesti Firma
Getting through an audit smoothly is mostly a matter of preparation. Eesti Firma provides accounting services for companies of all sizes — from day-to-day bookkeeping to preparing the annual report that the auditor will examine. Clean, well-organised accounts turn the audit from a stressful inspection into a routine confirmation.
We help clients determine whether an audit or review obligation applies, put the accounting in order before the engagement starts, and coordinate directly with sworn auditors on the client’s behalf. Whether the check is required by law or ordered voluntarily, our goal is the same: a clear process and a clean report.
Frequently Asked Questions
No. The obligation depends on size. Most small private limited companies (OÜ) fall below all thresholds and need neither an audit nor a review. The duty arises only when the company’s revenue, assets, or headcount exceed the limits set by law.
An audit is an in-depth examination that ends with a positive opinion on the accounts (reasonable assurance). A review is a lighter engagement based on inquiries and analysis, giving limited assurance — a statement that nothing suggests material errors. The review is faster and cheaper but carries less weight.
Three indicators from the annual report: sales revenue (or income), total assets as at the end of the financial year, and the average number of employees. If at least two exceed the relevant limits — or one exceeds the higher ceiling — the obligation applies for that year.
Only a sworn auditor (vandeaudiitor) or a licensed audit firm. The auditor must be independent of the company’s management and is normally appointed by the shareholders, with the auditor’s written consent.
Yes. The law allows a required review to be replaced with a full audit at the company’s choice. Some businesses do this to give investors and banks the stronger form of assurance.
The annual report will not meet legal requirements without the auditor’s report attached. The Business Register can demand a compliant filing and impose penalties, and the company’s accounts lose credibility with banks and partners.