China Annual Audit Versus Internal Control Review

For foreign companies operating in China, financial oversight should not stop at incorporation. Once the business licence has been issued, the company must maintain accounting records, complete tax filings, manage VAT and fapiao processes, monitor payroll, and ensure that payments, contracts and reporting all remain aligned.

Two important tools support this process: the annual audit and the internal control review.

They are connected, but they are not the same. The annual audit is focused on whether the company’s financial statements are prepared correctly and supported by appropriate records. An internal control review looks at how the company operates day to day, whether the right checks are in place, and where weaknesses could lead to financial error, tax exposure, fraud, cash leakage or compliance failure.

For foreign-invested enterprises in China, understanding the difference is essential. An annual audit may identify financial reporting issues after the event. An internal control review helps prevent issues from becoming embedded in the business.

Why financial oversight matters in China

China’s compliance environment is highly procedural. Company registration, accounting, tax filing, VAT, fapiao issuance, customs, foreign exchange, payroll and statutory reporting are closely connected. A weakness in one area can quickly affect another.

For example, if the company issues fapiao that do not match contracts, revenue recognition may be questioned. If bank payments do not match the accounting records, tax filings may require explanation. If related-party charges are not documented, transfer pricing questions may arise. If staff expense approvals are weak, the business may face tax deduction issues or internal fraud risk.

The revised China Company Law, which came into effect on 1 July 2024, introduced significant changes to company capital rules, governance, shareholder rights and corporate administration, increasing the need for foreign investors to maintain stronger internal records and governance discipline.

What is a China annual audit?

A China annual audit is a formal review of the company’s financial statements by a qualified accounting firm. The purpose is to assess whether the financial statements present the company’s financial position in accordance with applicable accounting standards and whether they are supported by appropriate evidence.

For foreign-invested enterprises, the annual audit is commonly part of the wider annual compliance process. This process may include the annual audit report, corporate income tax reconciliation, annual reporting to government authorities and other filings depending on the company’s structure and activity. Failure to complete annual compliance properly may lead to penalties, additional costs, lower credit standing or more serious administrative consequences.

The annual audit typically reviews areas such as revenue, costs, bank balances, accounts receivable, accounts payable, fixed assets, inventory, payroll, tax balances, related-party transactions and capital contributions.

What the annual audit is designed to do

The annual audit is primarily designed to provide assurance over the financial statements. It looks at whether the company’s accounts are materially accurate and whether they can be supported by evidence.

This usually involves checking samples of transactions, reconciling bank accounts, reviewing invoices and fapiao, confirming balances, checking tax provisions, reviewing contracts and assessing whether accounting treatment is appropriate.

For overseas shareholders, the annual audit can also provide visibility over the China entity’s financial position. It may support group consolidation, dividend planning, tax compliance, bank reviews, investor reporting and future restructuring.

However, the annual audit is not designed to examine every transaction or redesign the company’s operating processes. It may identify issues, but it usually does so after the financial year has ended.

What is an internal control review?

An internal control review examines the systems, approvals, processes and checks that sit behind the company’s financial and operational activity. It asks whether the company has the right controls in place to reduce risk before errors, misstatements or compliance breaches occur.

An internal control review may cover finance processes, payment approvals, procurement, sales contracts, fapiao issuance, inventory controls, expense claims, payroll approval, bank access, related-party transactions, segregation of duties and management reporting.

In simple terms, the annual audit asks whether the numbers are supportable. An internal control review asks whether the business is being managed in a controlled and reliable way.

China’s own internal control framework has long encouraged enterprises to build internal control systems, strengthen internal management, improve risk prevention and create effective internal checks.

The main difference between the two

The annual audit is financial statement focused. It looks back over the reporting period and assesses whether the accounts are materially correct.

The internal control review is process-focused. It looks at how the business operates and whether the company’s systems are strong enough to prevent problems.

The annual audit is usually linked to statutory or annual compliance requirements. The internal control review is usually a management tool, although it may be required by group policy, investors, lenders, head office, listed company standards or sector-specific governance expectations.

The annual audit produces an audit report. An internal control review usually produces findings, risk ratings and practical recommendations for management.

Why an annual audit is not enough on its own

Many foreign companies assume that if the annual audit is completed, the business is under control. This is not always the case.

An audit may confirm that the financial statements are materially acceptable, but it may not fully address weaknesses in the underlying process. For example, the audit might not examine whether only authorised staff can approve payments, whether supplier changes are independently checked, whether fapiao requests are matched to contracts, or whether expense claims are being reviewed properly before reimbursement.

These weaknesses may not create a material audit adjustment in one year, but they can still create significant operational and tax risk over time.

For companies with fast growth, multiple bank accounts, local management teams, high transaction volumes or remote overseas ownership, an internal control review often provides a more practical view of business risk.

Common issues found during China annual audits

Annual audits may identify accounting or documentation issues such as incomplete invoices, unreconciled bank balances, unsupported expenses, inconsistent revenue recognition, incorrect VAT treatment, weak inventory records, late payroll accruals or unclear related-party balances.

They may also raise questions about registered capital contributions, shareholder loans, foreign exchange payments, intercompany service charges, customs records, bad debt provisions and asset ownership.

Where records have not been maintained properly during the year, the audit can become difficult and time-consuming. This may delay corporate income tax reconciliation, group reporting and dividend planning.

Common issues found during internal control reviews

Internal control reviews often uncover risks that do not always appear clearly in the annual audit.

These may include one person controlling supplier setup and payment approval, weak contract approval processes, lack of dual authorisation for bank payments, informal use of company chops, poor control over fapiao issuance, inadequate review of expense claims, missing inventory checks, limited oversight of local finance staff, or unclear approval routes for related-party payments.

They may also identify process gaps between the China team and overseas headquarters. For example, head office may assume that group policies are being followed, while the China team may be using local workarounds to manage tax, banking or fapiao requirements.

Why internal controls are especially important for foreign investors

Foreign investors often manage their China entity from overseas. This can create distance between ownership, finance control and day-to-day operations.

The legal representative, finance manager, general manager, tax handler and local accountant may all have different roles in practice. If responsibilities are not clearly documented, decisions may be made informally or without adequate oversight.

Internal control reviews are particularly useful where the shareholder is not based in China, the company has recently grown, the China entity handles significant payments, the business relies heavily on local staff, or there have been changes in finance personnel.

They are also useful before a group audit, investment round, merger, acquisition, restructuring, liquidation or shareholder dispute.

Annual audit and internal control review compared

Area	Annual audit	Internal control review
Main purpose	Review financial statements	Review processes, controls and risk points
Timing	Usually after year-end	Can be done at any time
Focus	Financial reporting accuracy	Prevention, control and process quality
Output	Audit report	Findings, risk ratings and recommendations
Main audience	Regulators, shareholders, group finance, tax authorities	Management, shareholders, head office, investors
Typical review areas	Accounts, tax balances, bank records, revenue, expenses, assets	Payment approvals, fapiao controls, procurement, expenses, bank access, duties
Main limitation	May identify issues after they occur	Does not replace statutory audit or tax filing

The role of fapiao controls

Fapiao control is one of the areas where internal control reviews can be particularly valuable.

In China, fapiao are tax invoices and form part of VAT administration. They are not merely customer-facing invoices. If fapiao are issued incorrectly, issued without proper contracts, issued before revenue is recognised, or issued under the wrong category, the company may face tax and accounting issues.

An annual audit may test fapiao as part of revenue and tax review. An internal control review looks at the process behind fapiao issuance. It asks who can request fapiao, who checks the contract, who confirms payment terms, who approves the tax category and how the finance team ensures the invoice matches the actual transaction.

For businesses with high invoice volumes, this control environment can be just as important as the year-end audit result.

The role of bank and payment controls

China companies often operate through local bank accounts, online banking platforms and designated approval users. Weak banking controls can create serious risk.

An internal control review may examine who has online banking access, whether payment approvals are separated from payment execution, whether supplier bank details are independently verified, whether high-value payments require dual approval and whether overseas shareholders receive regular payment reports.

The annual audit will review bank balances and selected transactions. It may not fully assess whether the payment approval structure is suitable for ongoing risk management.

The role of company chops

Company chops remain highly important in China business practice. They may be used to execute contracts, approve documents, authorise filings or support banking matters.

An annual audit may not fully examine chop custody and approval processes. An internal control review can assess who holds the company chops, how usage is recorded, whether management approval is required, and whether contracts signed with chops are reviewed before execution.

For foreign shareholders, chop control is one of the most sensitive governance areas. Poor control can create legal and commercial exposure.

The role of related-party controls

Foreign-invested enterprises often make payments to overseas group companies or receive funding from related parties. These transactions can include service fees, royalties, management charges, cost allocations, loans or product purchases.

The annual audit may review balances and supporting agreements. An internal control review examines whether related-party transactions are approved properly, priced consistently, documented before execution and reviewed for tax, VAT, withholding tax and foreign exchange implications.

This is important because related-party transactions can attract transfer pricing questions. Internal controls help ensure that the company does not create avoidable tax exposure through informal group charging arrangements.

When a company should consider an internal control review

An internal control review is worth considering when a China company has started trading, hired staff, opened local bank accounts, increased transaction volume, changed finance personnel, introduced new product lines, expanded into import-export, or started making related-party payments.

It is also useful when the overseas parent company is concerned about visibility. If head office receives financial reports but does not understand how the China entity approves spending, issues fapiao or manages bank access, an internal control review can provide clarity.

Companies may also conduct an internal control review before year-end so that issues can be corrected before the annual audit begins.

When the annual audit and internal control review should work together

The strongest approach is to use both tools together.

The annual audit provides financial assurance and supports annual compliance. The internal control review improves the processes that feed into the audit.

For example, if the annual audit identifies repeated issues with missing support documents, the internal control review can examine why documents are missing and redesign the approval process. If the audit finds unexplained supplier balances, the internal control review can assess procurement, supplier onboarding and payment approval procedures.

This combination helps move the company from reactive compliance to better financial management.

How the 2024 Company Law changes the discussion

The revised Company Law has increased attention on governance, capital contribution rules, shareholder rights, director responsibilities and corporate administration. For foreign-invested enterprises, this makes internal documentation and control more important.

Companies should ensure that capital contribution timetables, shareholder resolutions, board decisions, registered information, financial records and management approvals are properly maintained. The Company Law changes are not only a legal issue. They also affect how companies should manage internal governance and evidence decision-making.

Practical preparation for the annual audit

Companies should prepare for the annual audit throughout the year rather than waiting until year-end.

This includes keeping complete accounting records, reconciling bank accounts monthly, retaining contracts and fapiao, documenting related-party transactions, maintaining payroll records, reviewing VAT filings, checking inventory records and ensuring that capital contributions are properly recorded.

The finance team should also ensure that management accounts, statutory accounts and tax filings do not conflict. Inconsistencies between these records can lead to audit delays and further tax questions.

Practical preparation for an internal control review

Before an internal control review, the company should collect process documents, approval matrices, finance policies, bank access records, chop custody records, supplier onboarding procedures, fapiao procedures, expense claim policies, payroll approval steps and reporting templates.

The review should involve both the local China team and overseas management. This is important because the practical controls used by the local team may differ from the policies assumed by head office.

The best reviews do not only identify weaknesses. They also provide workable recommendations that fit China’s tax, banking and administrative requirements.

Common mistake: treating controls as a head office template

Many multinational companies apply global finance policies to their China entity without adapting them to local requirements. This can create gaps.

China has specific practices around fapiao, company chops, tax filing, banking, foreign exchange, customs, payroll and statutory records. A policy designed for the UK, Europe or the US may not fully address these areas.

An internal control review should therefore localise the control framework. The aim is not to create unnecessary paperwork. It is to ensure that the company’s controls work in China.

Common mistake: waiting until a problem appears

Internal control reviews are often commissioned after a problem has already occurred. This might be a suspicious payment, missing fapiao, poor audit result, tax bureau question, employee departure, bank issue or shareholder concern.

Although a review can still help at that stage, it is better to conduct one earlier. A planned review allows the company to identify process gaps before they become disputes, penalties or financial losses.

How Woodburn supports annual audit and internal control review work in China

Woodburn supports foreign companies with annual compliance, accounting coordination, tax filing support, audit liaison, internal control review and practical finance process improvement in China.

For overseas shareholders, this provides a clearer view of how the China entity is operating, whether records are being maintained correctly and where controls may need to be strengthened.

The objective is not only to complete year-end reporting, but to help the company operate with better visibility, stronger governance and fewer preventable compliance issues.

Conclusion

The China annual audit and an internal control review serve different purposes. The annual audit reviews the financial statements and supports statutory compliance. The internal control review examines the processes that produce those numbers and identifies weaknesses before they become larger issues.

For foreign-invested enterprises, both are valuable. The annual audit helps satisfy formal reporting requirements. The internal control review helps management understand whether the business is operating safely, consistently and in line with shareholder expectations.

As China’s compliance environment continues to place greater emphasis on governance, documentation and accountability, foreign companies should not view annual audit as the only control point. A well-managed China entity needs accurate accounts, clear processes, reliable approvals and evidence that the company is being run properly throughout the year.

---

Woodburn Accountants & Advisors is one of China and Hong Kong’s most trusted business setup advisory firms.

Woodburn Accountants & Advisors is specialized in inbound investment to China and Hong Kong. We focus on eliminating the complexities of corporate services and compliance administration. We help clients with services ranging from trademark registration and company incorporation to the full outsourcing solution for accounting, tax, and human resource services. Our advisory services can be tailor-made based on the companies’ objectives, goals and needs which vary depending on the stage they are at on their journey.

Contact us