CARO applicability has two separate layers that are easy to collapse into one question but shouldn't be. The first layer is whether the order applies to the company at all: a private company that is not a holding or subsidiary of any company, with paid-up capital and reserves at or below ₹1 crore, borrowings from any bank or financial institution at or below ₹1 crore, and revenue at or below ₹10 crore, is exempt from CARO reporting entirely. The second layer only starts once a company clears that threshold and is not exempt: each individual clause in the order — inventory, loans and investments, deposits, statutory dues, cash losses, and the rest — has its own separate trigger condition, and a company can be well within scope of the order overall while still having most of its individual clauses genuinely not apply.
Why this gets treated as one question when it's really two
The exemption threshold is simple enough that it's tempting to treat CARO scoping as finished once it's checked: not exempt, therefore CARO applies, therefore report on everything. That's where the actual work gets shortchanged. CARO applying to a company at the threshold level doesn't mean every clause is relevant to that specific company — a manufacturing company with inventory and bank borrowings faces a very different clause list than a holding company with no operations of its own, even if both clear the same exemption threshold in the same direction.
A sample of how differently the clauses actually trigger
- Inventory and physical verification (clause ii) only applies if the company actually holds inventory — a pure services or holding company often has none.
- Deposits (clause v) only applies if the company has accepted deposits from the public or its members under sections 73–76 — most companies simply haven't.
- Cash losses (clause xvii) only applies if cash losses were actually incurred in the current year or the immediately preceding one.
- Preferential allotment (clause x(b)) only applies in the year shares or debentures were actually issued that way — dormant in every other year.
- Statutory dues (clause vii) is close to universal in principle, but the specific reporting obligation around arrears only bites where dues have actually been outstanding for more than six months.
Carrying forward last year's applicability list without re-checking it is one of the more common CARO scoping errors — a company that took no deposits last year and accepted one this year has a newly-applicable clause that a copy-forward checklist will miss entirely.
Why this matters before the report is drafted, not after
Reporting "not applicable" on a clause that was actually triggered, or spending review time drafting a paragraph for a clause that genuinely doesn't apply, both come from treating CARO applicability as a single switch instead of a checklist of independent triggers. Getting the clause list right at the scoping stage — before fieldwork starts — is what keeps the eventual report from needing a late rewrite.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- CARO & Companies ActCARO 2020 reporting checklist for statutory auditorsThe topic areas CARO reporting covers, what evidence each one needs, and how the clauses fit together across the audit file.
- CARO & Companies ActCARO clause 3(xvii): cash losses, and why it's measured over two years, not oneA cash loss and an accounting loss aren't the same figure. The clause is specifically about one of them, measured across two consecutive years.
- CARO & Companies ActCARO statutory dues clause: testing approachHow to test timely deposit of statutory dues for CARO reporting, handle disputed dues disclosure, and avoid redoing work already done in the GST and payroll sections.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- Payroll red-flag scannerBank accounts shared across employees, and records missing an ID, PAN or salary.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.