Shariah External Audit
Independent Shariah compliance assurance for Islamic financial institutions. Comprehensive audit. Contract review. Investment screening. Compliance certificate.
Independent Shariah Compliance Assurance
Internal Shariah audits are important. They help you catch problems early. But internal audits are conducted by your own staff. Your staff may miss things because they are too close to the operations. They may be reluctant to report problems that make themselves or their colleagues look bad. That is why you need an external Shariah audit.
An external audit provides independent assurance to stakeholders that your operations are Shariah compliant. Your board can trust the findings because the auditor has no conflict of interest. Your customers can trust your products because an independent third party has verified them. Your regulator can trust your compliance because the audit follows professional standards.
Our Shariah External Audit service is suitable for annual statutory requirements, regulatory submissions, or due diligence for investors. We audit all aspects of your institution. Contracts. Transactions. Product approval processes. Fund management. Customer communications. Staff compliance. Governance. We follow AAOIFI auditing standards which are the international benchmark for Islamic finance.
You receive a detailed audit report with findings, risk ratings, and recommendations. Where non compliance is found, we advise on remediation. We also calculate purification amounts for any impermissible income that was received. We issue a Shariah compliance certificate upon successful completion of remediation.
Do not wait for a regulator to find a problem. Conduct an external audit proactively. Protect your reputation. Protect your customers. Protect your business.
What's Included
Full Scope Audit
We conduct a comprehensive audit of all your Islamic finance operations. The scope includes every contract you have signed with customers for Murabaha, Ijarah, Mudarabah, Musharakah, or any other Islamic structure. It includes every investment you have made on behalf of customers or for your own treasury. It includes every product approval process to ensure new products went through proper Shariah review before launch. It includes every customer communication including marketing materials, website content, and disclosure documents. It includes your internal Shariah compliance procedures and how they are implemented. Nothing is outside our scope.
Contract Audit
We examine a statistically significant sample of your active customer contracts. For Murabaha contracts we verify that the bank actually purchased the asset before selling it to the customer. We verify that the profit margin is disclosed upfront. We verify that there are no hidden interest clauses. For Ijarah contracts we verify that the lease terms are fair. We verify that the bank retains ownership of the asset. For Mudarabah and Musharakah contracts we verify that the profit sharing ratio is clear. We verify how losses are allocated. We also check that contracts are properly signed and dated and stored. Missing documentation is a compliance risk. We flag it.
Investment Portfolio Screening
We screen your entire investment portfolio for Shariah compliance. This includes your bank own investments such as liquidity holdings and treasury assets. It includes any customer investments you manage such as Islamic funds or discretionary accounts. We apply the same screening criteria we use for individual investors. We check each holding business activity for any haram revenue. We check financial ratios for acceptable debt levels. We identify any non compliant holdings. We calculate any purification amounts needed for impermissible income received. We provide a report that you can share with your Shariah board and with your customers.
Marketing Disclosure Review
We review all your customer facing communications. This includes your website content, your product brochures, your social media posts, your email newsletters, and any other marketing materials. We check for accurate claims about your products being Islamic. We check for proper disclosure of risks and costs. We check for any language that could mislead customers about how your products work. We also review your customer contracts for plain language disclosures. Customers should understand what they are signing. If your contracts are too complex or hide important terms, we flag that as a compliance risk.
Staff Interviews
We interview a sample of your staff across different departments. We talk to customer service representatives about what they tell customers when questions arise. We talk to sales staff about how they explain Islamic products to potential customers. We talk to operations staff about how they process transactions. We talk to compliance staff about how they monitor Shariah compliance. These interviews help us understand whether your staff truly understands Islamic finance or whether they are just following procedures without comprehension. We also review your staff training materials. If training is inadequate we recommend improvements.
Audit Report and Certificate
You receive a comprehensive audit report within 15 to 20 business days after completing our fieldwork. The report is typically 30 to 60 pages. It includes an executive summary of overall compliance rating. It includes a detailed findings table with each finding categorized by risk level from critical to low. For each finding we describe the issue, reference the relevant Shariah standard, explain why it is a problem, and provide a specific recommendation for remediation. We also provide a recommended timeline for fixing each issue. After you remediate the findings, we issue a Shariah Compliance Certificate. The certificate is valid for one year.
How It Works
Engagement
We meet with your management and your Shariah board. We define the audit scope. We agree on the timeline. We sign an engagement letter. We provide a fixed price quote.
Planning
We develop an audit program. We define sampling methodology. We create document request lists. We schedule staff interviews. We share the audit plan with you for feedback.
Fieldwork
We review documents. We interview staff. We test transactions. We screen investments. Fieldwork typically takes one to four weeks depending on the size of your institution.
Draft Report
We prepare a draft audit report. We share it with your management for response. You have the opportunity to provide additional context or to correct factual errors. You can also propose remediation plans for the findings.
Final Report
We issue the final audit report. We present the findings to your board and your Shariah board. We answer questions. We provide guidance on remediation.
Certificate
After you have remediated the findings, we conduct a follow up review to verify remediation. We then issue the Shariah Compliance Certificate. The certificate is valid for one year from the date of the follow up review.
Frequently Asked Questions
We recommend conducting an external Shariah audit at least once per year. This is the minimum frequency to maintain customer trust and regulatory compliance. Some institutions conduct audits semi annually or quarterly especially if they have high transaction volumes or complex products. Regulated entities like banks may be required by HKMA to have quarterly Shariah reviews. Your Shariah board may also require more frequent audits. Even if you are not required to audit frequently, an annual external audit provides value. It catches small problems before they become big problems. It gives your Shariah board confidence that their fatwas are being followed. It gives your customers confidence that your products are truly Islamic.
Internal audit is conducted by your own staff. They are employees of your institution. They may be knowledgeable and well intentioned. But they have an inherent conflict of interest. They may be reluctant to report problems that make themselves or their colleagues look bad. They may be too close to the operations to see obvious issues. External audit is conducted by an independent third party. We have no conflict of interest. We are not your employees. We do not report to your management. We report to your board and your Shariah board. We have no incentive to hide problems. In fact our reputation depends on finding problems and helping you fix them. External audit is more expensive than internal audit. But it is also more credible. Regulators and customers trust external audit findings more than internal audit findings.
Yes our audit methodology follows AAOIFI which stands for the Accounting and Auditing Organization for Islamic Financial Institutions. AAOIFI is the international standard setting body for Islamic finance. Their Shariah standards are used by Islamic banks and financial institutions in over 45 countries. Their auditing standards provide a framework for conducting Shariah audits. We also consider local regulatory requirements. For clients in Hong Kong we ensure our audit also meets HKMA expectations for Islamic banking governance. For clients in other jurisdictions we adapt to local requirements. We are flexible but we always anchor our work in AAOIFI because it is the most rigorous and widely accepted standard.
Finding non compliance is not a disaster. It is an opportunity to improve. Most issues we find are minor and can be fixed quickly. For example we may find that a contract template uses incorrect language that could be interpreted as interest. We recommend corrected language. You update the template. The issue is resolved. For more serious issues such as a product that was launched without proper Shariah approval, we work with you to develop a remediation plan. You may need to suspend the product, communicate with affected customers, and seek retrospective approval from your Shariah board. In rare cases where the non compliance involves impermissible income, we calculate the purification amount that must be donated to charity. We guide you through the entire remediation process. Our goal is not to punish you. Our goal is to help you become more compliant.
Yes absolutely. We sign strict confidentiality agreements with every client. Your audit findings are shared only with authorized personnel you designate. This typically includes your board, your Shariah board, and your senior management. We do not share your audit report with any third party without your explicit written permission. This includes regulators. If a regulator requests our audit report you would need to provide it to them directly. We would not provide it without your consent. Our auditors also sign internal confidentiality agreements. Your data is stored on encrypted servers. We delete audit files after the engagement is complete unless you request ongoing storage.
The cost depends on the size of your institution, the complexity of your products, and the scope of the audit. For a small Islamic finance company with limited products and customers, an annual audit typically costs HKD 20,000 to HKD 40,000. For a medium sized institution with multiple products and a significant customer base, the cost is typically HKD 40,000 to HKD 80,000. For a large bank or financial institution with complex products and high transaction volume, the cost can range from HKD 80,000 to HKD 200,000 or more. Our fee includes the planning, fieldwork, draft report, final report, and follow up review for remediation. Travel expenses if needed are billed separately. We provide a fixed price quote before you engage us. No surprises. You know exactly what you will pay.