How to Run Tax Audit Season End to End: A Workflow for CA Firms

Short answer: Treat each tax audit as one engagement per client per assessment year and move it through fixed stages: intake and eligibility, appointment, document collection, books finalised, Form 3CD preparation, manager review, partner sign-off with a UDIN, upload and taxpayer acceptance on the e-filing portal, then billing. For AY 2026-27, CBDT extended the audit report date to 21 October 2026 and the return date for audit cases to 21 November 2026.^[1]

Last updated 14 October 2026. Dates and limits checked against CBDT, the Income Tax Department and ICAI on that date; the due date can change again, so check the latest CBDT notification. Where we mention MyPract, every claim comes from our facts page.

Tax audit season fails in the same places every year: books that arrive in the last fortnight, a review queue that piles up on one partner, a report uploaded but never accepted by the client, a DSC that expired the week of filing. None of these is a technical audit problem. They are workflow problems, and a fixed set of stages with a visible status fixes most of them.

What are the key dates and limits for tax audit season 2026?

Three details matter for planning:

• Check who the extension covers. Circular 07/2026 extends the return date for the persons in serial number 2 of the table under Explanation 2 to section 139(1), and the audit report date follows from that.^[1] Transfer-pricing reports and other forms have their own dates, so confirm the category for each client.
• AY 2026-27 is still a 1961 Act year. The circular was issued under section 119 of the Income-tax Act, 1961, read with section 536 of the Income-tax Act, 2025.^[1] For later years, check the sections and forms that apply under the 2025 Act before you build next season's templates.
• The 60-audit limit changed basis this year. From 1 April 2026 it counts per financial year by signing date, not per assessment year. Revised reports, and audits under clauses (c), (d) and (e) of section 44AB for presumptive cases under sections 44AE, 44ADA and 44AD, don't count. Assignments a partner takes in other firms or individually are aggregated.^[5]

What are the stages of a tax audit engagement?

Use the same stages for every client so that one status column tells a partner where the whole season stands.

How should you handle client intake?

Start intake as early as the books allow, and decide three things for each client before any fieldwork:

1. Is an audit required, and which form? Apply the section 44AB thresholds to the year's turnover, including the cash test for the ₹10 crore limit.^[2] If the client's accounts are audited under another law, you'll use Form 3CA; otherwise Form 3CB.^[3]
2. Can this partner sign it? Check eligibility as an accountant under section 288(2) and the partner's running count against the limit of 60. ICAI's tax audit referencer includes an eligibility checklist, asks for an appointment letter for every assignment and requires communication with the previous auditor where the auditor has changed.^[4]
3. When will the books be final? Agree a date in writing. Every later stage hangs off it.

Keep a tax audit register per partner from day one: client, form, clause of section 44AB, whether it counts towards the limit, signing date. ICAI's guidelines require members to maintain a record of tax audit assignments accepted and signed in each financial year.^[5]

How do you collect tax audit documents without chasing?

Send one dated request list per client at appointment, not a stream of messages. Typical items: final trial balance and ledgers, fixed asset register, stock records, loan and related-party details, GST returns and reconciliations, TDS returns, Form 26AS and AIS, and confirmations for clause-specific items in Form 3CD. ICAI's referencer suggests the engagement letter itself ask for information useful for the audit, such as the books maintained, the method of accounting and Form 26AS.^[4]

Then track each item as received, pending or not applicable, with a due date. A list that shows "7 of 12 received" ends arguments about what was sent. Collect files in one place per engagement, not across email and chat, so the reviewer finds the version the preparer used.

How should Form 3CD work move through preparation and review?

Form 3CD is long, and the work splits naturally by clause. Run it in three passes:

• Prepare by clause group. Assign groups of clauses (for example, the general particulars, the disallowance clauses, TDS and loans) to named staff, each with working papers referenced against the clause.
• Review with a written list. The manager raises review points against clauses; preparers clear them; the manager closes them. Don't let review happen in conversation only.
• Partner sign-off last. The partner reviews the open points, the report and the overall reasonableness, then signs.

Make the dependencies explicit: review can't start until preparation is complete, sign-off waits on review, upload waits on the UDIN. Dependencies stop the common shortcut of uploading while review points are still open.

When do you generate the UDIN, and how do you file?

ICAI's referencer says the auditor should generate the UDIN when issuing the tax audit report and refer to it in the report.^[4] The e-filing portal's upload flow for Form 3CB-3CD includes a UDIN step before the CA verifies with a DSC.^[3] UDIN generation is also where ICAI applies the limit of 60: the portal aggregates a member's tax audit UDINs across firms and individual capacity.^[5]

The filing itself needs, per the e-filing manual: both the taxpayer and the CA registered on the portal with active PANs, the CA assigned to the form by the taxpayer, and valid DSCs.^[3] After the CA uploads and verifies, the taxpayer accepts the form from their worklist (or rejects it with a reason) and verifies it.^[3]

Two habits save the last week: check DSC validity for every signing partner and client at intake, not at upload; and make "taxpayer accepted" its own status, with a named person who calls the client.

How do you track tax audit status across the firm?

Partners need one view, refreshed daily in the last month: every client, its stage, owner, due date and blocker. Whatever tool you use, it should:

• hold one engagement per client per assessment year, with a due date that works back from 21 October;
• break each engagement into tasks with owners and dependencies, following the stages above;
• show the season in a board view by stage, so a column that's piling up (usually review) is visible;
• give clients one place to upload documents, tied to the engagement;
• record time against each engagement, so next year's fee and staffing are based on actual hours.

Spreadsheets can do the first point; they struggle with the rest once a firm has more than a few dozen audits. For staffing the season, see audit season capacity planning.

Where does MyPract fit, and where doesn't it?

In MyPract, each tax audit is an engagement with a client, manager, dates, budget hours and fee, in list and Kanban views. You add the stages as tasks with assignees, due dates, subtasks and dependencies, so "Upload" can't be closed before "Partner sign-off". The client portal gives each engagement one link, opened by the client contacts mapped to it with a code sent to their email, where they upload documents and message the team; documents keep their version history. The DSC register shows each certificate's expiry status and who holds the token. Staff record time against the engagement, managers approve it, and invoices are created from approved, billable time. The overdue tasks report and engagement burndown show what's slipping.

What it doesn't do, stated plainly: MyPract does not track UDINs or count audits against the ICAI limit, so keep your own register. It doesn't file returns or audit reports and has no Income Tax portal sync. It doesn't hold audit workpapers or send DSC expiry reminder emails or automated client reminders, and it can't apply a checklist template to an engagement in one step, so you create the stage tasks yourself (the AI assistant can suggest a kickoff checklist). See /facts for the full list and the roundup of practice management software for CA firms for alternatives; if UDIN tracking matters most, our MyPract vs Jamku comparison covers a tool that offers it. For company audits, use the statutory audit engagement checklist, and to bill the season, see invoicing clients from approved timesheets.

How we checked

We read CBDT Circular No. 07/2026 on the Income Tax Department's e-filing site, the Memorandum to the Finance Bill 2021 for the section 44AB thresholds, the Income Tax Department's Form 3CB-3CD user manual, ICAI's Quick Referencer for Tax Audit, and ICAI's FAQs on the tax audit ceiling with the Chartered Accountants (Limit on Number of Tax Audits) Guidelines, 2025. All were checked on 14 October 2026. The stage list is a practical workflow, not a legal requirement. MyPract features come from our facts page. No prices or exchange rates are used in this guide.

Frequently asked questions

What is the tax audit report due date for AY 2026-27?

CBDT Circular No. 07/2026 of 28 September 2026 extended the specified date for the tax audit report for AY 2026-27 to 21 October 2026, and the return due date for audit cases from 31 October to 21 November 2026. Check the latest CBDT notification before relying on any date.

How many tax audits can a chartered accountant sign?

Sixty per financial year per member under ICAI's Chartered Accountants (Limit on Number of Tax Audits) Guidelines, 2025, in force from 1 April 2026. In a firm the limit applies to each partner. Audits under clauses (c), (d) and (e) of section 44AB, for presumptive-taxation cases under sections 44AE, 44ADA and 44AD, are not counted.

When is Form 3CA used and when is Form 3CB used?

Form 3CA is the audit report where the accounts are already audited under another law, such as a company audited under the Companies Act. Form 3CB is for everyone else. Both are filed with Form 3CD, which carries the particulars.

Is a tax audit complete once the CA uploads the report?

No. After the CA uploads and verifies the form, the taxpayer has to accept it from their own e-filing worklist and verify it. Track acceptance as a separate step, because a report the client hasn't accepted isn't filed.

Can MyPract track UDINs or file tax audit reports?

No. MyPract runs the work around the audit (one engagement per client, tasks with dependencies, client document requests, a DSC register, time and invoicing), but it does not track UDINs, file anything on the income tax portal or sync with it. Generate UDINs on the ICAI portal and keep your own UDIN register.

Run tax audit season on MyPract

One engagement per audit, stage tasks with dependencies, client uploads through the portal and billing from approved time. Three months free, no card, and the trial never converts automatically.

Sources

[1] Central Board of Direct Taxes, "Circular No. 07/2026" on extending audit report and return dates for AY 2026-27, 28 September 2026 (checked 14 October 2026).

[2] Ministry of Finance, "Memorandum explaining the provisions in the Finance Bill, 2021" (section 44AB thresholds) (checked 14 October 2026).

[3] Income Tax Department, "Form 3CB-3CD User Manual" (checked 14 October 2026).

[4] ICAI Taxation Audits Quality Review Board, "Quick Referencer for Tax Audit under Section 44AB of the Income Tax Act, 1961", 2023 (checked 14 October 2026).

[5] ICAI UDIN Directorate, "FAQs on Ceiling for UDIN Generation under Tax Audit", with the Chartered Accountants (Limit on Number of Tax Audits) Guidelines, 2025 (Gazette notification of 25 July 2025) as Annexure I (checked 14 October 2026).