Audit software for Tanzania's NBAA-registered firms and public sector internal audit units.
NBAA expects every signed opinion to rest on working papers kept for at least five years, and its reviewers score each firm's files. AuditEDMS keeps the record around those working papers: client documents filed to your own SharePoint with a receipt, the statutory audit staged from tender to archive, with your firm's filing of audited statements with NBAA added as a stage at implementation, request lists that clients and auditees answer online, and time and fee notes. The same engine runs internal audit engagements for Accounting Officers in ministries, regions, LGAs and agencies.
Built for NBAA's practising by-laws and the Internal Auditor General's framework.
The Practising By-Laws of 2023 turn good practice into firm rules: working papers behind every signed opinion, kept five years, reviewed by NBAA at least every three years, with the audited statements filed with NBAA electronically. In government, the Public Finance Act gives every Accounting Officer an internal audit unit and every ministry, department and agency an audit committee. The rows below show where AuditEDMS holds the evidence for each duty.
Support every signed opinion with working papers, signed by a partner holding a valid certificate of practice (Practising By-Laws 2023, by-laws 14(3) and 15)
The sign-off stage records who signed and when, and an evidence gate can require the signed report to be filed before the engagement moves to archive
Keep working papers accessible for at least five years from the end of the accounting period (by-law 21), and assemble the file promptly after the report (ISA 230)
An archive clock from sign-off to your deadline (45 days by default, ceiling 60), then retention dates by document type set to whichever period ends later
Ask the outgoing auditor in writing for access to audit information, and decide on professional judgement if fourteen days pass without a reply (Practising By-Laws 2023, by-law 20)
A clearance stage before the engagement letter, whose timer waits fourteen days by default and closes early only when the outgoing auditor's reply is recorded; the written request is filed against it
Stand ready for an NBAA audit quality review at least every three years, and submit the latest AQR report (by-laws 16(f) and 25)
A printable compliance view of each engagement a reviewer samples, with every stage, gate, date and approver, and an audit trail of any change after archive
Submit the audited financial statements to NBAA electronically (by-laws 26 and 27)
A submission stage, set up with you at implementation, completed only when NBAA's acknowledgement is filed against it
Keep a company's books for six years (Companies Act Cap. 212 s.154) and tax records for five, and until any objection or appeal is decided (Tax Administration Act Cap. 438 s.43)
Different retention dates for ledgers and tax computations; legal hold while an objection or appeal is open
Run the Accounting Officer's Internal Audit Service to the Internal Auditor General's standards and manuals, reporting to an audit committee (Public Finance Act Cap. 348 ss.42 to 44; Public Finance Regulations 2001, regs 28 to 34)
Engagement stages set to the manual, request lists to the audited department, region or LGA, evidence and sign-offs on one record; findings and management's agreed actions followed up in a findings register, with open and overdue actions listed for the audit committee
Register with the Personal Data Protection Commission, which also issues a Cross-Border Data Transfer Permit for personal data sent abroad (Personal Data Protection Act, ss.31 and 32)
Deployed in your own Azure subscription and region, documents in your own SharePoint, sign-in under your Entra ID policies
This maps software capability to obligations; it is not professional advice. AuditEDMS does not submit anything to NBAA itself, hold working papers, or hold an audit universe or risk-based annual plan: it records that each step happened and holds the evidence that it did.
For NBAA-registered firms, and for internal audit across government and banking.
Every company appoints an auditor, and the auditor and every partner of an audit firm must be certified public accountants; partners who sign hold CPA(PP) status with a certificate of practice, and NBAA may review any firm's practice (Companies Act ss.173 and 178; Cap. 286 s.29).
Every Accounting Officer sets up an Internal Audit Service unit, and each ministry, department or agency has an audit committee of three to five members. The Controller and Auditor General then audits them under the Public Audit Act 2008.
The Internal Auditor General, reporting to the Paymaster General, evaluates audit committees in LGAs as well as ministries, regions and agencies.
The Bank of Tanzania's 2021 governance regulations (GN 767) require a board audit committee with at least two independent members with accounting, auditing or financial expertise, and an internal audit function whose independence management respects.
Firms and entities in Zanzibar should note that this page covers mainland law only.
Frequently asked questions.
How long must a Tanzanian audit firm keep its working papers?
At least five years from the end of the accounting period, in a form NBAA can access (by-law 21). ISA 230 counts its five years from the date of the auditor's report, which falls later, so keeping the file to the later date meets both. The client's own books run six years from the date they are made up (Companies Act s.154), and tax records five years, and until any objection or appeal is finally decided (Tax Administration Act s.43). AuditEDMS gives each document type its own retention date and puts a file on legal hold when it must stay longer.
What does an NBAA audit quality review score, and what happens after a Poor result?
NBAA may visit a firm at least once every three years and scores it from Excellent (81 to 100) down to Poor (0 to 40). A Poor firm is kept under review for a year, and failing again leads to sanctions. The reviewer samples engagement files; in AuditEDMS each one has a compliance view showing the acceptance, clearance, engagement letter, sign-off and archive steps with their dates and evidence.
Does AuditEDMS file our audited financial statements with NBAA?
No. The submission is made through NBAA's own electronic channel. AuditEDMS can carry it as a stage in the statutory audit, so the engagement cannot be treated as complete until the acknowledgement is filed against it.
Does it fit the Internal Auditor General's manual for MDAs and LGAs?
The internal audit template is ready to use and adjusted at implementation to the manual your unit follows, from notification and entrance meeting through fieldwork, exit meeting and draft report to management responses, the final report and archiving. Requests for information go to the audited department or LGA as upload links. Management's agreed actions are followed to verified implementation in the findings register, and the follow-up register shows the audit committee what is open and overdue. The annual audit plan is not in AuditEDMS today.
What does professional clearance look like under NBAA's by-laws?
By-law 20 obliges the outgoing auditor to give the incoming auditor access to audit information on a written request. If fourteen days pass with no reply, the incoming auditor may decide on professional judgement whether to accept. AuditEDMS's clearance stage waits fourteen days by default, holds the written request as its evidence, and closes early only when the reply is recorded, so the file shows which of the two routes was taken.
Where is the data hosted, and what does the Personal Data Protection Act require?
In your own Azure subscription, in the region you choose, with documents in your own SharePoint. There is no Azure region in East Africa today; the nearest are in South Africa. The Act, in force since 1 May 2023 with its 2023 Regulations, requires controllers and processors to register with the PDPC, which also issues a Cross-Border Data Transfer Permit. Settle whether your registration and a permit cover the region before you choose it; we will explain exactly what the deployment stores and where.
Does it issue EFD or VFD receipts?
No. At implementation AuditEDMS is set up for Mainland Tanzania: fees in shillings, VAT at the standard 18 percent (one rate for every fee note, so a fee note that qualifies for TRA's 16 percent rate cannot yet use it), a tax template that files with the TRA, and books kept six years. Billing milestones raise fee notes at the stages you choose, with VAT, part payments, and work in progress and yield from approved time, but the fee notes stay in AuditEDMS: they are not fiscal receipts, and nothing posts to TRA or to an accounting system.
How much does it cost?
On Microsoft Marketplace, Basic is US$200 a month for firms of up to 30 staff and Enterprise US$500 a month for firms of up to 75 staff, with priority support; a 90-day pilot is free, by invitation. Azure costs are billed to your own subscription, typically US$45 to 80 a month for 20 to 50 staff; implementation is quoted on its own.