Why a Small French SAS Can Need an Auditor Because of Its Group

Why a small SAS can need an auditor because of the group it sits in

An SAS that would never cross the standalone audit thresholds on its own figures can still be required to appoint a commissaire aux comptes (CAC) because of the group around it. Since the loi Pacte, the Commercial Code runs a dedicated small-group audit regime (Art. L 821-43): the head of a group above the cumulative thresholds must appoint an auditor even if it is small standalone and even if it publishes no consolidated accounts, and the significant companies it controls must appoint one too, on their own lower thresholds. Alongside it sits the separate consolidated-accounts rule, which requires at least two auditors of any SAS obliged to publish consolidated accounts. Two mechanisms, two sets of thresholds — and either can catch a company the standalone test would leave alone.

This guide covers the small-group regime end to end: the head-of-group obligation and its 5/10/50 cumulative thresholds, the significant-subsidiary obligation and its 2.5/5/25 thresholds, the control test of Art. L 233-3 that decides who is a head and who is a subsidiary, the exemptions (a head that is itself controlled by an auditor-appointed entity, a foreign controller with a statutory auditor), the interaction with the consolidated-accounts two-auditor rule, the ALPE three-year mission, and the coordination points across a group's auditors. The standalone thresholds and the appointment mechanics are covered in the companion guide to statutory-auditor thresholds; this one is about the group layer on top.

The head of a small group: audited even when small and unconsolidated

The regime's central move is to look through the standalone figures to the group. A person or entity that is not required to publish consolidated accounts but that controls, within the meaning of Art. L 233-3, one or more companies must appoint an auditor where the whole it forms with those controlled companies exceeds, in a financial year, two of three cumulative thresholds (Art. L 821-43, al. 1, and D 821-171 referring to D 221-5):

• €5 million cumulative balance-sheet total;
• €10 million cumulative turnover;
• 50 cumulative employees.

Two features make this bite. First, the head is caught even if it prepares no consolidated accounts and even if, taken alone, it would fall well under the standalone 5/10/50 audit thresholds — a pure holding company with a modest balance sheet can be a group head that must appoint an auditor because its subsidiaries, added in, push the group over the line. Second, the threshold test counts all the controlled companies whatever their size — significant and non-significant subsidiaries alike enter the cumulative totals (CNCC guidance on the loi Pacte). The head's own smallness is no shelter; what matters is the aggregate.

The head's mission is a classic six-year audit, or a three-year ALPE mission (the lighter « audit légal petite entreprise ») where the head does not itself exceed two of the three thresholds (Art. L 821-46). And one relief matters in layered structures: where the person or entity heading a small group is itself controlled by a person or entity that has already appointed an auditor, it is not required to appoint one of its own (Art. L 821-43, al. 2) — the audit obligation is not stacked twice up the same chain.

The significant controlled subsidiaries: their own lower thresholds

Below the head, the companies it controls — directly or indirectly — must each appoint at least one auditor where they exceed two of three lower thresholds (Art. L 821-43, al. 3, and D 821-172):

• €2.5 million balance-sheet total;
• €5 million turnover excluding tax;
• 25 employees during the financial year.

These are the « significant controlled companies »: a subsidiary over two of the 2.5/5/25 thresholds carries its own audit obligation, distinct from the head's. The same auditor can serve both the head and a controlled company required to appoint one (Art. L 821-43, al. 3) — a practical economy the group can organise. The subsidiary's obligation ceases, like the standalone one, once it has not exceeded two of the three figures during the two financial years preceding the mandate's expiry (D 821-172, al. 2), and its mission is again six years or a three-year ALPE (Art. L 821-46).

Two exceptions keep the regime from doubling up. The obligation on significant controlled subsidiaries does not reach companies controlled by public-interest entities or by group heads required to publish consolidated accounts — those sit under their own regimes (CNCC guidance). And in practice the 2.5/5/25 rule only operates where the subsidiary is below the ordinary standalone audit thresholds: once a subsidiary itself exceeds 5/10/50, it must appoint an auditor as a standalone company anyway, and the small-group significant-subsidiary rule adds nothing. The small-group mechanism is, in essence, a net for the mid-sized subsidiary that escapes the standalone test but is large enough — 2.5/5/25 — that the group's own audit reach should still capture it.

Where does your SAS sit in the group's audit map?

Pick your position — the check shows which group rule reaches you and on what thresholds.

The control test: who is a head, who is a subsidiary

The whole regime turns on control within the meaning of Art. L 233-3 — the same definition the change-of-control clause borrows. A person or entity controls another where it holds, directly or indirectly, a fraction of capital conferring the majority of voting rights; where it alone holds the majority of voting rights under an agreement with other shareholders not contrary to the company's interest; where it determines in fact, through the votes it holds, the decisions in the general meetings; or where, being a shareholder, it can appoint or dismiss the majority of the administrative, management or supervisory organs. Control is presumed where it holds, directly or indirectly, more than 40 % of the voting rights and no other shareholder holds more; and two or more persons acting in concert jointly control a company where they determine in fact its general-meeting decisions (Art. L 233-3, I to III).

Two consequences flow from anchoring the group definition in L 233-3. The perimeter is drawn by control, not by ownership percentages alone — a 40 % holding with no larger shareholder presumptively creates a group head, and de-facto control through dispersed votes can too. And the assessment reaches indirect control: a company controlled through an intermediate holding is inside the group for the cumulative-threshold count. The practical first step for any SAS in a corporate structure is therefore to draw the control map — who controls whom under L 233-3 — before any threshold can be applied, because the map decides who is a head, who is a controlled subsidiary, and which companies enter which cumulative total.

A useful by-product of the regime: the auditors of a small-group head and the auditors of the companies it controls are mutually released from professional secrecy toward one another (Art. L 821-35, al. 4) — with a documented limit, that only the auditors of significant controlled companies may pass their risk report, and only that report, up to the head's auditor, the head's auditor having no reciprocal right to pass documents down (CNCC guidance). The secrecy relief is what lets a group's audit function as a coordinated whole rather than a set of sealed silos.

The other group rule: consolidated accounts and the two-auditor requirement

Distinct from the small-group regime sits the consolidated-accounts rule. An SAS at the head of a group must establish and publish consolidated accounts (Art. L 233-16) unless it stays under the consolidation thresholds for two consecutive years or its subsidiaries are of negligible interest — and an SAS required to publish consolidated accounts must appoint at least two auditors (Art. L 821-41), independent of one another and, on deontology grounds, from different firms. This is a heavier obligation than the small-group audit, and it turns on different, higher thresholds than the 5/10/50 small-group figures.

The consolidation thresholds themselves were raised to align with the European levels: for financial years closed through 31 December 2024 the old figures apply — €24 million balance sheet, €48 million turnover excluding tax, 250 employees; from financial years closed on 31 December 2025, the raised figures apply — €30 million balance sheet, €60 million turnover, 250 employees (C. com. Art. L 233-17 and D 230-2, decree 2024-152). A group head above those thresholds prepares consolidated accounts and, on that footing, appoints two auditors — the consolidated-accounts obligation being the trigger for the two-auditor rule, not the standalone or small-group figures. The mechanics of establishing and exempting consolidated accounts are covered in the annual-accounts guide; the point here is the audit consequence: consolidated accounts mean two independent auditors, whatever the small-group analysis would otherwise have produced.

The relationship between the two regimes is one of escalation. Below the consolidation thresholds, a group head that is over the 5/10/50 cumulative figures runs the small-group audit — one auditor (or the ALPE mission). Above the consolidation thresholds, it publishes consolidated accounts and runs two auditors. And the significant-subsidiary rule expressly steps aside for subsidiaries controlled by heads that publish consolidated accounts — the group has already crossed into the heavier regime, and the lighter net is not needed.

Test the group: which audit obligation does it trigger?

Enter the group's cumulative figures — the calculator applies the small-group and consolidation thresholds.

The ALPE mission: the lighter audit for small groups and subsidiaries

Where the small-group regime applies but the figures stay modest, the audit can run as an ALPE mission — the audit légal petite entreprise — a three-year mandate lighter than the classic six-year audit. Both the head of a small group (where it does not itself exceed two of the three thresholds) and a significant controlled subsidiary can be given the ALPE mission (Art. L 821-46). The ALPE follows its own professional standard, is proportioned to the smaller entity, and produces a lighter set of deliverables than the full audit — which is the point of the regime: to extend audit reach across groups of modest size without imposing the full six-year audit cost on every entity in them.

The choice between the classic six-year mandate and the three-year ALPE is a real one, made in the appointing resolution and, for a voluntary or ALPE-eligible appointment, expressed clearly. For a group building its audit architecture, the sensible sequence is: draw the control map, run the cumulative and per-subsidiary thresholds, decide at each level whether the obligation is classic or ALPE, and — where possible — appoint a single auditor across the head and the controlled companies that must have one, capturing the secrecy relief and the coordination it allows. The companion guide to statutory-auditor thresholds covers the appointment mechanics, the agenda rule and the deputy-auditor question that apply at each level.

Cross-border groups: a foreign parent above a French head

The regime accommodates foreign controllers with a specific relief. Where the person or entity controlling the head of a French small group is foreign and has appointed a statutory auditor, the French controlled head is dispensed from appointing one in its capacity as small-group head — the CNCC reads the term « commissaire aux comptes » in the second paragraph of Art. L 821-43 in its generic sense of a statutory auditor (contrôleur légal des comptes), so a foreign statutory auditor at the controlling level satisfies the condition. The relief mirrors the domestic rule that a head controlled by an auditor-appointed entity need not appoint one itself; it simply extends the same logic across the border.

Two cautions frame the relief. It addresses the head obligation only: the French company's standalone position (the 5/10/50 test) and its significant-subsidiary position (the 2.5/5/25 test) are assessed separately, and either can still require an auditor regardless of the foreign parent's arrangements. And it depends on the foreign controller genuinely having a statutory auditor of accounts in place — not merely a bookkeeper or a voluntary reviewer. For an inbound group structuring a French sub-holding, the audit map is best drawn at the point of structuring: the foreign parent's audit status, the French head's cumulative group figures, and each French subsidiary's own figures together decide how many auditors the French side of the group must carry, and on which mandates.

Frequently asked questions about statutory auditors for French SAS in groups

This article is for general information only and states French law as published in the sources available at the date shown above. It does not constitute legal or accounting advice. Group-audit thresholds and rules evolve with finance and simplification laws; always verify the current framework and seek qualified advice before deciding a group's audit architecture.