External Audit Agreement Spain (Acuerdo de Auditoría Externa)

An External Audit Agreement Spain (Acuerdo de Auditoría Externa) is a formal written contract between a company (entidad auditada) and a registered auditor (auditor de cuentas) or audit firm (sociedad de auditoría) for the independent review and verification of the company's annual accounts (cuentas anuales). The agreement is governed principally by Ley 22/2015 de Auditoría de Cuentas (LAC), which transposed EU Directive 2014/56/UE and EU Regulation 537/2014 into Spanish law, and specifically Article 22 of the LAC, which establishes the mandatory content and legal framework of the audit engagement letter.

The Ley 22/2015 de Auditoría de Cuentas replaced the previous Ley 19/1988 and introduced significant reforms to the Spanish audit regime, including stricter auditor independence requirements, mandatory firm rotation for public interest entities (entidades de interés público — EIP) after 10 years, and enhanced reporting obligations. The Instituto de Contabilidad y Auditoría de Cuentas (ICAC), operating under the Ministerio de Asuntos Económicos y Transformación Digital, is the primary regulatory body supervising audit activity in Spain and maintains the Registro Oficial de Auditores de Cuentas (ROAC) — only auditors and firms registered in the ROAC may legally perform statutory audits (auditorías legales) in Spain.

In Spain, the obligation to have annual accounts audited arises under Article 263 of the Ley de Sociedades de Capital (Real Decreto Legislativo 1/2010 — LSC) for companies that exceed two of three thresholds for two consecutive years: total assets exceeding €2,850,000; net annual turnover exceeding €5,700,000; or average employees exceeding 50. Additionally, public interest entities (listed companies, credit institutions, insurance companies) are subject to mandatory audit under Article 2 of the LAC regardless of size. Companies below the mandatory audit threshold may voluntarily commission an external audit agreement to satisfy lender requirements, investor due diligence, or internal governance standards.

The external audit agreement must be formalised before the commencement of audit work — Article 22 of the LAC requires the engagement letter to be signed prior to the start of the audit and to specify the applicable auditing standards (Normas Técnicas de Auditoría — NTA) issued by the ICAC. Spanish auditing standards derive from International Standards on Auditing (ISA) as adapted by the ICAC, with the principal reference being the Normas de Auditoría (NA) approved by Resolution of the ICAC of 15 October 2013 and subsequent technical guidance (Resoluciones del ICAC).

The audit opinion (informe de auditoría) produced under the engagement constitutes a public document when filed with the Registro Mercantil as part of the annual accounts deposit (depósito de cuentas) — all companies required to audit must file their audited accounts within one month of approval by the junta general de socios or junta general de accionistas under Article 365 of the Reglamento del Registro Mercantil (RRM). Failure to file audited accounts when required constitutes a serious infraction subject to fines by the Dirección General de los Registros y del Notariado.

Auditor independence is a cornerstone of the LAC regime — Articles 12 through 21 prohibit a wide range of financial, personal, employment, and business relationships between the auditor and the audited entity that could compromise objectivity. The audit firm must submit an annual independence declaration (declaración anual de independencia) to the ICAC. Violations of independence requirements may result in sanctions from the ICAC including suspension or removal from the ROAC and fines of up to €12,000,000 for the most serious infractions under Article 73 of the LAC.

For public interest entities (EIP), EU Regulation 537/2014 imposes additional requirements directly applicable in Spain — mandatory auditor rotation every 10 years (extendable to 20 years with joint audit), prohibited non-audit services, and a cap on non-audit fees at 70% of audit fees averaged over three years. The Comisión de Auditoría (audit committee) required for EIPs under Article 529 quaterdecies of the LSC plays a central governance role in overseeing the external auditor relationship.

An External Audit Agreement Spain is required whenever a company engages a registered auditor or audit firm to perform a statutory or voluntary audit of its annual accounts. The agreement must be signed before audit work commences, as required by Article 22 of Ley 22/2015 de Auditoría de Cuentas.

The agreement is mandatory when a company exceeds the thresholds in Article 263 of the Ley de Sociedades de Capital (LSC) — total assets over €2,850,000, net turnover over €5,700,000, or over 50 employees — for two consecutive years, triggering the obligación de auditoría (mandatory audit obligation). The company must appoint an auditor registered in the ROAC for a minimum initial term of three years and a maximum of nine years for non-EIP companies.

An external audit agreement is needed when a minority shareholder holding 5% or more of the company's share capital exercises their right under Article 265.2 of the LSC to request judicial appointment of an auditor — even for companies below the mandatory threshold. The juez de lo mercantil appoints the auditor from the ROAC, and the external audit agreement is then executed between the company and the judicially appointed auditor.

The agreement is required when a company seeks financing from a Spanish credit institution (banco, caja de ahorros, or cooperativa de crédito) regulated by the Banco de España, and the lender contractually requires audited accounts as a condition of credit — common for mid-market financing above €500,000 arranged through Spanish banks.

An external audit engagement is needed when a foreign parent company requires subsidiary accounts in Spain to be audited to satisfy consolidation requirements under NIIF (Normas Internacionales de Información Financiera) or the parent's home country GAAP. Spain's Plan General de Contabilidad (PGC), approved by Real Decreto 1514/2007, governs the preparation of Spanish accounts, which must then be reconciled with group reporting standards.

The agreement is also required when public administrations (Administraciones Públicas), foundations (fundaciones), or non-profit organisations (entidades sin ánimo de lucro) in Spain are subject to audit obligations under their specific regulations — for example, Ley 50/2002 de Fundaciones requires foundations receiving annual public subsidies exceeding €600,000 to submit audited accounts to the Protectorado.

Under the Ley Cambiaria y del Cheque (Ley 19/1985), promissory notes and bills of exchange are governed in Spain. The Banco de España supervises banking under Ley 10/2014. The Comisión Nacional del Mercado de Valores (CNMV) regulates securities markets. The AEAT administers IVA (Ley 37/1992) and IRPF (Ley 35/2006). The Ley 3/2004 governs late payment in commercial transactions with statutory interest.

A valid External Audit Agreement Spain under Ley 22/2015 de Auditoría de Cuentas must include the following essential elements as required by Article 22 of the LAC and the ICAC's technical guidance on engagement letters.

Identification of Parties: Full legal name, NIF, and registered address of both the entidad auditada (audited company) and the auditor de cuentas or sociedad de auditoría. The auditor's ROAC registration number must be stated — only ROAC-registered auditors may legally perform statutory audits in Spain. Where the audit is performed by an audit firm, the name of the signing partner responsible for the engagement (socio responsable) must be identified.

Scope of the Audit: A precise description of the accounts to be audited — the annual accounts (cuentas anuales) comprising balance sheet (balance de situación), profit and loss account (cuenta de pérdidas y ganancias), statement of changes in equity (estado de cambios en el patrimonio neto), cash flow statement (estado de flujos de efectivo), and notes (memoria), prepared in accordance with the Plan General de Contabilidad (PGC) approved by Real Decreto 1514/2007, or the PGC for SMEs (Real Decreto 1515/2007) where applicable. The fiscal year (ejercicio económico) to which the audit relates must be specified.

Applicable Auditing Standards: A reference to the Normas Técnicas de Auditoría (NTA) issued by the ICAC, the International Standards on Auditing (ISAs) as adapted for Spain, and any sector-specific standards. Article 22 of the LAC requires the engagement letter to identify the standards under which the audit will be conducted.

Audit Fees and Payment Terms: The agreed audit fee (honorarios de auditoría) expressed in euros, the basis for calculation (fixed fee or time-based), payment schedule, and provisions for additional work not included in the original scope. For EIP audits, Article 22 of the LAC prohibits contingent fee arrangements — fees may not depend on the outcome of the audit or any other contingency that would impair independence.

Timeline and Deliverables: The expected commencement date of fieldwork, the deadline for submission of the draft audit report (borrador del informe de auditoría) to management for review, and the final delivery date of the signed audit report (informe de auditoría firmado) in the format required by Article 5 of the LAC. The timeline must allow the audited company to approve and file annual accounts within legal deadlines — six months from the end of the fiscal year for approval by the junta general under Article 164 of the LSC.

Auditor Independence Declaration: The auditor's representation that they have conducted an independence assessment under Articles 12 to 21 of the LAC and have identified no prohibited relationships or threats to independence. Any safeguards applied to address identified independence threats must be described. For EIP auditors, the annual independence declaration submitted to the ICAC must be referenced.

Client Cooperation and Access: The company's obligation to provide the auditor with access to all accounting records, supporting documentation, company registers (libro de actas, libro de socios), bank statements, and contracts necessary for the audit. The right to obtain direct confirmation (confirmaciones directas) from the company's banks, legal counsel, and key customers must be addressed.

Confidentiality: The auditor's obligation to maintain professional secrecy (secreto profesional) under Article 13 of the LAC — prohibiting disclosure of client information except to the ICAC in supervisory proceedings, courts, or where disclosure is legally compelled. The LAC explicitly exempts communications to the ICAC from professional secrecy obligations to support supervision.

Limitation of Liability: Contractual limitations on auditor liability are permitted under Spanish law within the bounds established by the LAC — Article 26 of the LAC provides that auditor civil liability is joint and several with co-auditors and is not limited by contract for statutory audits of EIPs. For voluntary audits of non-EIPs, liability may be limited by agreement, subject to minimum insurance coverage maintained by auditors registered with the ROAC.

Forms-legal.com provides this External Audit Agreement Spain template as a practical starting point. All statutory audit engagements must be formalised in compliance with Ley 22/2015 and ICAC technical guidance — companies should verify the auditor's ROAC registration status and consult a qualified abogado mercantilista or economic adviser (asesor económico) before execution.

Under the Ley Cambiaria y del Cheque (Ley 19/1985), promissory notes and bills of exchange are governed in Spain. The Banco de España supervises banking under Ley 10/2014. The Comisión Nacional del Mercado de Valores (CNMV) regulates securities markets. The AEAT administers IVA (Ley 37/1992) and IRPF (Ley 35/2006). The Ley 3/2004 governs late payment in commercial transactions with statutory interest.