The Statutory Audit Process in Morocco: What Actually Happens

Who this is for: finance leads and managers at a Moroccan SA or SARL who know an audit is required but have never actually been through one, and want to know what to expect before the auditor arrives.

Key Takeaways

• A Moroccan statutory audit follows Moroccan Standards on Auditing, which are converged with the international ISA framework — the process will feel familiar to anyone who has been audited elsewhere.
• The auditor’s core job is to express one of four opinions on the financial statements: unqualified, qualified, adverse, or disclaimer of opinion.
• Beyond the opinion itself, the auditor separately prepares a special report on regulated agreements — related-party transactions between the company and its directors or major shareholders.
• The auditor has two legal reporting duties that go beyond the numbers: reporting criminal offenses discovered during the audit to the public prosecutor, and triggering an alert procedure if the company’s status as a going concern is threatened.
• A statutory audit is not the same engagement as a contractual (voluntary) audit — the legal reporting duties above apply specifically to the statutory mandate.

Knowing your company needs a statutory auditor (see our guide to statutory audit requirements for SARLs and SAs) is only half the picture. What the engagement actually involves — and what the auditor is legally obligated to do beyond checking your numbers — is the part most first-time finance leads don’t expect.

Who Can Actually Perform the Audit

Only a professional registered with the Ordre des Experts-Comptables du Royaume du Maroc (OEC-Morocco) can act as a commissaire aux comptes. This isn’t a formality — appointing anyone outside the OEC register means the audit doesn’t satisfy the legal obligation, regardless of the quality of work performed.

For public interest entities — listed companies, banks, and insurance companies — Moroccan law generally requires two statutory auditors rather than one, a heavier requirement than the single-auditor rule that applies to most SAs and qualifying SARLs.

The Audit Opinion: Four Possible Outcomes

At the end of the engagement, the auditor issues a formal opinion on whether the financial statements present a true and fair view of the company’s financial position. There are four possible outcomes:

Opinion type	What it means
Unqualified	The financial statements present a true and fair view, with no material issues found
Qualified	The statements are fair overall, but with one or more specific, disclosed exceptions
Adverse	The statements do not present a true and fair view — a serious finding
Disclaimer of opinion	The auditor could not obtain enough evidence to form an opinion at all

Table: the four audit opinion outcomes under Moroccan statutory auditing standards, converged with the international ISA framework.

An unqualified opinion is the expected, “clean” outcome for a well-run company. Anything else is worth understanding well before year-end, since a qualified or adverse opinion is visible to shareholders, lenders, and — for the pages a bank or investor cares about — anyone doing due diligence on the company.

The Special Report on Regulated Agreements

Separate from the main audit opinion, the statutory auditor prepares a special report on regulated agreements — transactions between the company and its own directors, managers, or major shareholders that carry a conflict-of-interest risk. This report exists specifically so shareholders can see and approve related-party dealings at the general assembly, rather than having them buried inside ordinary financial statements.

Two Legal Duties That Go Beyond the Numbers

A statutory auditor in Morocco carries two obligations that a purely voluntary or contractual audit does not:

1. Reporting criminal offenses. If the auditor discovers evidence of a criminal offense during the engagement, they are legally required to report it to the public prosecutor — this is not discretionary.
2. The alert procedure. If the auditor identifies facts that threaten the company’s status as a going concern, they must trigger a formal alert procedure, notifying management and, if unresolved, escalating further.

These duties are part of why a statutory mandate carries more legal weight than a contractual audit performed for a bank covenant or investor requirement — see our comparison of statutory vs. voluntary audits for when each applies.

What to Expect: A Practical Timeline

1. Appointment — the auditor is appointed by the general assembly (or named in the bylaws for a newly incorporated SA).
2. Planning — the auditor assesses risk areas and plans the scope of testing before fieldwork begins.
3. Fieldwork — testing of transactions, balances, and internal controls, typically involving document requests and staff interviews.
4. Regulated agreements review — related-party transactions are identified and prepared for the special report.
5. Opinion formation — the auditor concludes on the four possible outcomes above.
6. General assembly — the auditor attends and presents findings to shareholders, as a legal right and duty of the role.

Conclusion

A Moroccan statutory audit isn’t just a compliance checkbox — it’s a structured process governed by international-aligned standards, ending in one of four defined opinions, with the auditor carrying real legal duties around related-party transactions, criminal offenses, and going-concern risk. Knowing this before your first engagement makes the process considerably less opaque. If you’re approaching your first statutory audit and want to understand what documentation to have ready, our Audit & Due Diligence team can walk through the scope with you before the engagement starts.