How IFSCA's Annual Compliance Audit Requirement Will Impact Capital Market Intermediaries

The International Financial Services Centres Authority has introduced a standardised Annual Compliance Audit Report (ACAR) framework, a structural shift in how GIFT City regulates its capital market ecosystem, with mandatory deadlines, auditor independence requirements, and a three-part checklist that every registered CMI must now navigate.

30 Sep 2026 ACAR submission deadline for all CMIs

6 CMI Types Broker-Dealers to GAPs  all covered

3+2 Rule Max 3yr tenure + 2yr cooling-off for auditors

The Regulatory Context: Why IFSCA Introduced the ACAR

India's International Financial Services Centres Authority has, since its establishment, been engaged in a systematic effort to build a regulatory architecture for GIFT City that is credible, comparable to global peer centres like Singapore and Dubai, and rigorous enough to attract institutional participation from globally reputed financial intermediaries. The introduction of the Annual Compliance Audit Report (ACAR) framework under the IFSCA (Capital Market Intermediaries) Regulations, 2025, represents the latest and arguably most operationally significant step in this direction.

Before the ACAR framework, compliance oversight of Capital Market Intermediaries in IFSCs was not structured around a standardised, independently audited annual reporting mechanism. Each entity's compliance posture was assessed through supervisory engagement, but without the uniformity, independence standards, and structured checklist-based verification that the new framework introduces. The ACAR changes this fundamentally, making independent compliance auditing a mandatory, recurring, and structured obligation for every registered CMI.

Scope: Every CMI, No Exceptions

The framework's applicability is comprehensive. All Capital Market Intermediaries registered with IFSCA under the 2025 Regulations are covered, without exception. This includes Broker Dealers, Clearing Members, Depository Participants, Global Access Providers (GAPs), Introducing Brokers, and any other entity registered as a CMI. The breadth of application signals IFSCA's intent to establish a uniform compliance governance baseline across the entire capital market intermediary ecosystem, regardless of entity type or size. 

A robust compliance culture is no longer just a regulatory expectation; it is a strategic necessity for operating successfully within the IFSC ecosystem.

The Dual Deliverable: ACAR and ACAC

The framework requires every CMI to submit two distinct documents to IFSCA: the Annual Compliance Audit Report (ACAR), a formal report produced by the independent compliance auditor summarising the entity's compliance status, and the Annual Compliance Audit Checklist (ACAC), which serves as the structured evidence-based compliance verification instrument underlying the audit.

The ACAC is structured across three parts, each addressing a different layer of compliance obligations. Part A covers General Compliance Obligations applicable to all CMIs, the baseline that every registered entity must satisfy regardless of its category.

Part B addresses Category-Specific Obligations, tailored to the particular regulatory requirements applicable to each entity type. Broker-dealer requirements differ from those of a Global Access Provider or a Clearing Member, and Part B captures these distinctions. Part C is the MII Compliance Checklist, applicable to Market Infrastructure Institutions, which are required to submit consolidated ACAC reporting to IFSCA by 30 November annually.

The ACAC in Detail

ACAC Part	Coverage	Who It Applies To
Part A	General Compliance Obligations	All CMIs are a mandatory baseline for every registered entity
Part B	Category-Specific Obligations	Broker-Dealers, Clearing Members, Depository Participants, GAPs, Introducing Brokers  tailored to entity type
Part C	MII Compliance Checklist	Market Infrastructure Institutions  consolidated reporting to IFSCA by 30 November annually

Auditor Standards: Rigour by Design

The ACAR framework's credibility rests significantly on the independence and quality standards set for the compliance auditor. IFSCA has specified that the auditor must be a member of ICAI (Institute of Chartered Accountants of India), ICSI (Institute of Company Secretaries of India), ICMAI (Institute of Cost Accountants of India), or an eligible foreign auditor recognised under applicable IFSCA provisions. This opens the framework to internationally qualified professionals while ensuring professional accountability.

Independence is central. The auditor must be peer-reviewed and fully independent of the CMI being audited, a standard that rules out any auditor with a commercial relationship, ownership interest, or prior engagement that could compromise objectivity. Auditor tenure is capped at three consecutive years, after which a mandatory cooling-off period of two years must elapse before re-appointment. This rotation requirement, modelled on best practices in corporate audit governance, prevents regulatory capture and ensures a fresh perspective in each audit cycle.

Auditor & Timeline Requirements

Requirement	Specification
Eligible Auditor	ICAI / ICSI / ICMAI member OR eligible foreign auditor recognised by IFSCA
Independence	Must be peer-reviewed and fully independent from the CMI being audited
Maximum Tenure	3 consecutive years with the same CMI
Cooling-Off Period	Mandatory 2-year gap before re-appointment
Submission Deadline (FY 2025-26)	30 September 2026  ACAR + ACAC to cmi-supervision@ifsca.gov.in
MII Consolidated Reporting	30 November annually  Market Infrastructure Institutions

Immediate Action Required: The CMI Compliance Roadmap

With the FY 2025-26 submission deadline of 30 September 2026 approaching, CMIs operating in GIFT City and other IFSCs must act immediately. The compliance preparation timeline is not generous; auditor appointment, gap assessment, evidence compilation, internal testing, and ACAC completion across all three parts collectively require several months of structured effort. Entities that have not yet begun this process are already behind schedule. 

CMI ACTION CHECKLIST FY 2025-26 ACAR COMPLIANCE

• Compliance Gap Assessment: Map current compliance posture against ACAR/ACAC requirements. Identify gaps in General (Part A) and Category-Specific (Part B) obligations.

• Documentation Review: Audit all existing compliance records, policies, and procedures for completeness and currency.

• Auditor Appointment Planning: Identify an eligible ICAI/ICSI/ICMAI or foreign auditor. Confirm independence, peer-review status, and tenure eligibility.

• Internal Compliance Testing: Run pre-audit internal testing across all ACAC sections to identify and remediate issues before the formal audit.

• ACAC Preparation & Evidence Collection: Compile evidence against each checklist item. Assign responsibility for Parts A, B, and C across compliance teams.

• Submission by 30 September 2026: File completed ACAR + ACAC to cmi-supervision@ifsca.gov.in before the FY 2025-26 deadline.

Strategic Significance: What the ACAR Framework Signals

The ACAR framework is more than a compliance obligation; it is a regulatory signal. By mandating independent, structured, annually recurring compliance audits across all CMI categories, IFSCA is demonstrating to global financial markets that GIFT City's regulatory environment meets institutional-grade governance standards. This matters enormously for the IFSC's competitive positioning.

Global banks, institutional asset managers, and internationally active broker-dealers assess regulatory environments before committing capital and operational resources.

A jurisdiction where compliance is self-certified or inconsistently enforced is less attractive than one where independent audit standards, auditor rotation requirements, and structured checklist-based verification are embedded in the regulatory framework. The ACAR framework moves GIFT City measurably closer to the standards of Singapore MAS and the Dubai DFSA, both of which have long-established independent compliance audit requirements for regulated entities.

For CMIs already operating in GIFT City, the ACAR framework represents both an obligation and an opportunity: to demonstrate governance quality, differentiate on compliance culture, and build the institutional credibility that attracts higher-quality counterparties, clients, and capital. The deadline of 30 September 2026 is the first test. The time to act is now.

DISCLAIMER: This article is published for informational, educational, and analytical purposes only. It does not constitute legal advice, regulatory guidance, compliance advice, or a solicitation of any kind. All information is based on publicly available IFSCA communications and the IFSCA (Capital Market Intermediaries) Regulations, 2025, as understood at the time of publication (June 2026). Regulatory requirements, deadlines, and procedural details are subject to amendment by IFSCA without notice. CMIs and other regulated entities must refer directly to official IFSCA circulars and communications from cmi-supervision@ifsca.gov.in for authoritative compliance requirements. All CMIs are strongly advised to engage qualified legal, compliance, and audit professionals to assess their specific obligations.