Halvorsen & Reith

Statutory registers audit for private company boards

A statutory registers audit checks whether the registers a company is legally required to keep – members, directors, charges, and in most jurisdictions a register of beneficial ownership or significant control – actually match what has been filed, what the board has resolved, and what a counterparty or a regulator would find on inspection. Boards commission the exercise before a financing round, a change of directors, a cross-border restructuring, or a due diligence request that asks for the registers themselves. The gap between the register as maintained and the register as required is where personal exposure for directors tends to sit, and it is rarely visible until someone outside the company asks to see it.

A holding company incorporated a decade ago has changed directors four times, moved its registered office twice, and issued shares on three occasions since anyone last checked whether the internal register matched the public filing. The current board inherited the file. Nobody on it signed the resolutions behind half the entries, and nobody has confirmed that the register a buyer's lawyers will ask for next quarter tells the same story as the one held at the registry.

This page sets out when the audit is triggered, what it produces, and where the engagement stops.

The situation a statutory registers audit addresses

Most boards do not think about their statutory registers until someone outside the company asks to see them. A buyer's counsel requests certified copies during due diligence. A bank's onboarding team asks for the register of members before opening an account for a new subsidiary. A regulator conducting a routine check on the beneficial ownership register finds an entry that no longer matches the group structure. In each case the question is the same: does the register held by the company match what was actually resolved, filed and disclosed, or has it drifted.

Drift is the normal state of a register nobody has checked since the last director change. Shares get issued and the internal register is updated weeks after the resolution that authorised them. A director resigns and the filing at the registry lags the resignation letter. A registered office moves and three of the company's own registers still show the old address. None of this is unusual in a cross-border structure with several entities and more than one set of local advisers. It becomes a problem only when someone with the authority to ask finds a register that tells more than one story.

A statutory registers audit exists to close that gap before someone else finds it first. It is not a filing exercise and not a compliance checklist ticked once a year without consequence. It is a reconciliation between three things that ought to agree and frequently do not: the resolutions the board actually passed, the registers the company holds internally, and the record the corporate registry shows to the outside world.

When the audit is triggered, and why timing matters

Four situations account for most instructions to carry out a statutory registers audit. A financing round or an acquisition where the counterparty's lawyers will review the register as a condition of closing. A change of director or company secretary, which is the point at which an old entry is most often discovered. An update to the beneficial ownership register following a change in shareholding. And a cross-border restructuring, where the register of one entity has to be consistent with the constitutional documents of another before either can be relied on. Each of these creates regulatory exposure that sits with the board, not with whichever adviser last touched the file.

The mechanics differ enough between jurisdictions that one group entity's timetable can run on a different register cycle to its parent's. In the Abu Dhabi Global Market, for example, the jurisdiction-specific version of this audit sets out what actually changes on the ground, rather than assuming one jurisdiction's process applies everywhere else in the structure.

Timing matters because the audit has to happen before the register is relied on, not after. Once a register has been produced to a counterparty, a lender or a regulator, it becomes the version of events the company is treated as standing behind. A gap between the internal register and the public filing becomes visible on the register the moment a third party checks it, and at that point it can be corrected on the record but not withdrawn from whoever already relied on it. A board that commissions the review only once due diligence has started is working against a deadline set by someone else.

What the work produces, in sequence

The audit runs in a fixed sequence, because each step depends on the one before it. Skipping ahead produces a register that looks tidy without being accurate, and company law treats the register and the resolution behind it as two separate things that happen to need to agree.

The engagement produces, in order:

A register corrected without board approval of the resolutions behind it is not a corrected register; it is a different set of unverified entries. The board resolutions required to support this kind of correction are addressed in more detail in a separate note on the resolutions a statutory registers audit relies on, and a board reviewing its own file before instructing external work will find that reference useful preparation.

A holding company relying on a register nobody has checked since the last director change is carrying exposure that only becomes visible once someone outside the company looks. The way to find out what that exposure actually is, in the jurisdictions the structure actually touches, is to have it checked before a counterparty does.

Check what your jurisdiction requires. Write to info@hreithlaw.com with the jurisdiction and the structure.

Where this differs by jurisdiction

The registers a company law regime requires it to keep are not the same everywhere, and neither is what becomes public. Common-law offshore centres typically require a register of directors and a register of charges to be held at the registered office, with beneficial ownership held on a separate, less public register. Onshore jurisdictions within the European Union layer a public beneficial ownership register on top of the company's own records, so a gap that would only ever surface internally offshore can be visible to any member of the public onshore. A group with entities on both sides of that line has to treat the two audits as related but not identical exercises.

Once a beneficial ownership entry is filed on a public register, filing a correction does not withdraw the original entry from anyone who already searched it. The correction simply becomes a new, visible entry, and the interval between the two closes off any possibility of treating the original disclosure as though it had not been made.

Two comparative points come up often enough to name directly, without pretending either is settled the same way in every jurisdiction. Where a group is unwinding one entity in favour of another, the register of the exiting entity has to stay consistent with its own filings until deregistration, even where the group's commercial attention has already moved on; the mechanics of one such deadlock between an EU jurisdiction and an offshore one are set out in a comparison of an exit deadlock between Ireland and the BVI. And where a group is verifying the identity of directors across several entities as part of the same exercise, the regimes for doing so are not uniform; a comparison of how several jurisdictions approach director identity verification is useful background before assuming one jurisdiction's process applies to the others.

A statutory registers audit is frequently run alongside, rather than instead of, a beneficial ownership review, because the two records are meant to agree and rarely start out that way in a group with more than two entities. This page addresses the audit at the level that applies across the jurisdictions in this practice; where a jurisdiction has its own mechanics worth setting out separately, that is done on the corresponding jurisdiction page rather than folded into a general description here.

What a statutory registers audit does not include

The audit maps requirements, corrects records, and tells the board where it stands. It does not include acting as a director, secretary, nominee shareholder or trustee for any entity in the structure, and it does not include supplying, sourcing or introducing anyone to fill those roles. Nor does it include any activity that requires a trust or corporate service provider licence, including the ongoing holding of a company's statutory registers as its registered office or registered agent.

That boundary is not a matter of preference. Advising on what a register should contain and who should hold which office is legal advice; holding the register, filing on the company's behalf as its registered agent, or standing in as an officer is a licensed activity in most of the jurisdictions this practice covers, and the firm does not hold that licence. Blurring the two would put the client's own filings at risk of being made by an unlicensed party.

What the client receives instead:

Frequently asked questions

How often should a statutory registers audit be reviewed?
There is no fixed interval that suits every group. The audit is best repeated whenever one of the trigger events described above occurs – a financing round, a change of director, a shareholding change – rather than on an annual cycle that may miss the point at which the register actually drifted.
Does a statutory registers audit change for a foreign-owned company?
Yes. A foreign-owned entity usually sits inside a wider cross-border structure, so the audit has to check consistency between that entity's register and the constitutional documents and registers of its parent, not only its own filing history.
What does a statutory registers audit require in practice?
Access to the board's own resolutions, the company's internal registers, and the current filing held at the relevant registry, so that all three can be compared entry by entry rather than assumed to agree with one another.
Who inside the company is responsible for a statutory registers audit?
Responsibility sits with the board, not with whichever officer last updated the file. A director who relies on a register maintained by a predecessor without checking it is still the one answering for it if the register turns out to be wrong.
What evidence should the board keep on a statutory registers audit?
The reconciliation memorandum and the discrepancy schedule, kept as the board's own record of what was found and corrected and when, separate from whatever is eventually filed at the registry.

Mira Solberg is a partner working with boards on secretarial compliance and disclosure across multi-entity groups. Her focus is the point at which a group's internal records and its public filings stop agreeing with each other, and what a board has to do once that happens. She writes on register maintenance, beneficial ownership disclosure and the licensing boundary between legal advice and corporate service provision.

By Emil Rask