Accounting Firms in Sri Lanka: How to Compare and Shortlist in 2026

Last verified against the primary sources on 15 October 2026.

You shortlisted three accounting firms. All three quoted within 20% of each other. How do you choose? Most SMEs default to price. This guide gives you eight factors that matter more, including the two that predict IRD penalties and audit problems before they happen.

Use it as a scoring sheet against any shortlisted firm, including us.

The four tiers of accounting firm in Sri Lanka

Each tier is built for a different type of work. Getting this wrong is expensive in both directions: overpaying a large firm for bookkeeping, or asking a sole practitioner to carry audit work they lack the capacity for. Identify your tier first, then evaluate price.

Tier 1. Large international networks. Audit-led, large-team capability, BOI, listing and cross-border specialism. Suited to listed groups, BOI projects, multinational subsidiaries and high-stakes audits.

Tier 2. Mid-tier practices. Audit and tax depth, often with an outsourced finance arm. Suited to mid-market businesses that need audit, advisory and monthly management accounts.

Tier 3. SME-focused practices. Often bundling bookkeeping, payroll, tax filing and company secretarial. Suited to SMEs that need monthly numbers and reliable IRD, EPF and ETF compliance, not high-touch advisory.

Tier 4. Independent practitioners. Solo or two-person practices. Cost-effective for the smallest entities, but capacity and continuity risk is real. Suited to micro-businesses, dormant entities and sole proprietors with simple positions.

Match the tier to the work first. A large firm doing monthly bookkeeping is expensive and inattentive. A sole practitioner running a multi-entity audit is over-stretched.

What to look for: the 8-factor scorecard

Use this scorecard on every shortlisted firm. Score each factor 0 to 2. Anything under 11 out of 16 is a structural risk.

1. Qualifications and regulation

• Are the people who will do and review your work qualified (CA Sri Lanka, CIMA, ACCA or CMA), and can the firm evidence it?
• If the firm will act as your auditor, is the signing auditor a member of the Institute of Chartered Accountants of Sri Lanka (ICASL) with a current practising certificate?
• For specialist work (tax, valuations, company secretarial), are the relevant credentials evidenced?

The directors of a company approve and sign its financial statements; only the audit report has to be signed by a qualified auditor under the Companies Act No. 7 of 2007 [1]. So a firm that prepares your accounts does not need to be an audit practice. A firm that audits them does.

2. Scope alignment

The firm should be willing to describe, in writing, which workflows they own and which they exclude. Watch for vague language like "full accounting support". Insist on a deliverables matrix:

• Monthly bookkeeping (vouchers, ledger, bank reconciliation, receivables and payables)
• Monthly management accounts (P&L, balance sheet, cash flow)
• Monthly filings on RAMIS (VAT, SSCL, WHT)
• Quarterly instalments and the annual income tax return
• Annual financial statements (SLFRS / LKAS)
• Statutory audit (only if the firm is your auditor)
• Payroll (EPF, ETF, APIT)
• Company secretarial (annual returns, AGM minutes, Form 15)

A firm that bundles everything verbally and refuses to itemise should be treated cautiously.

3. Pricing transparency

A good Sri Lankan accounting firm should be able to give you:

• A fixed monthly retainer for routine work, or
• A rate card with realistic monthly estimates, and
• A clear list of out-of-scope items (for example IRD audits and queries, appeals, ROC penalty resolution).

Watch for: "we'll bill as the work demands" with no estimate, or proposals that are deliberately vague on scope so that variation fees become the real revenue line. If one quote is far below the others, ask what is being excluded. If one is far above, ask what specialism is being charged for.

4. Technology fit

Ask which ledger or accounting system the firm prefers to operate in. Common options in Sri Lanka:

• Xero. Popular with SMEs and outsourced providers.
• Zoho Books. Common in tech-forward SMEs and groups using Zoho One.
• QuickBooks Online. Common in service businesses and consultancies.
• Sage 50 / 200. Legacy in manufacturing and trading houses.
• SAP B1 / Acumatica / NetSuite. Mid-market ERP territory.
• Tally. Still widely used in regional SMEs and traditional businesses.

A firm that insists on doing everything in Excel for a 25+ person business is signalling capacity or skill constraints. A firm that can work in your existing system without forced migration is signalling flexibility.

5. IRD, EPF, ETF and APIT fluency

This is non-negotiable, and the cost of a late filing falls on you, not the firm. Penalties are charged to the taxpayer even when the delay was the accounting firm's fault. For a late income tax return, section 178(1) of the Inland Revenue Act charges the greater of 5% of the tax owing plus 1% for each month or part of a month, or Rs 50,000 plus Rs 10,000 for each month or part of a month [2]. That is an Inland Revenue Act penalty on income tax returns; VAT and SSCL carry their own penalties under their own Acts. Ask for:

• A sample APIT schedule showing the five-band calculation that has applied since 1 April 2025 [3].
• A sample EPF and ETF contribution schedule, signed by the payroll controller.
• Evidence of RAMIS filings (date stamps, acknowledgement receipts) from the last 12 months.
• Their process for handling late-filing notices and IRD queries.

Late EPF and ETF payments carry a surcharge that starts at 5% of the contributions for up to 10 days late and rises in steps to 50% beyond twelve months [4] [5]. The firm's filing record is the leading indicator of your future cost.

6. PDPA and data handling

The core duties of the Personal Data Protection Act No. 9 of 2022, Part I (processing of personal data) and Part III (controllers and processors), start on 1 January 2027 under Gazette Extraordinary 2498/16 of 22 July 2026 [6]. The earlier 18 March 2025 date was withdrawn by Gazette 2427/34 [7], and the Amendment Act No. 22 of 2025 changed several of the duties [8]. An accounting firm that handles your employee and customer personal data will be processing it on your behalf, so set the terms now.

Ask for:

• A data processing agreement that follows the Act.
• Documented retention periods for accounting data that meet the statutory record-keeping periods.
• A documented process for telling you promptly about a data breach.
• Role-based access to your data within the firm.

7. Audit and adviser relationships

Whether or not the firm is itself an auditor, ask how they work with auditors:

• Can they produce audit-ready schedules (lead sheets, supporting workings, control narratives)?
• How do they handle audit queries? Is there a named accountable lead?
• Have they worked with your auditor, or with firms of a similar size?

Audit season is the moment your accounting firm justifies their year of work. The wrong firm makes it expensive; the right firm makes it routine.

8. Continuity and capacity

The most overlooked risk factor: what happens if your relationship manager leaves?

• How many staff does the firm have?
• What is the staff turnover rate?
• Is there a documented backup for your account?
• Is your data and process knowledge held only in one head, or in documented procedures?

Smaller firms have higher single-person concentration risk. Larger firms have lower concentration risk but more handoffs. Pick the firm that matches your tolerance, and write a continuity clause into the engagement letter.

Walk-away signals: seven accounting firm red flags

• The firm cannot show a sample monthly management pack.
• "Tax planning" is offered without a written engagement letter or scope.
• Late-filing track record is not disclosed.
• The responsible partner is unreachable; you only meet a junior.
• Pricing is verbal; no written proposal.
• Data is handled over personal email or unsecured messaging.
• The firm declines to sign a data processing agreement.

Talk to us. If you are comparing firms, see our accounting services and tax services, and send us your shortlist through our contact page if you want a second view on the scorecard.

This guide is general information on the law as at 15 October 2026 and is not advice on your specific situation.

References

1. Parliament of Sri Lanka. Companies Act, No. 7 of 2007, provisions on financial statements and auditors (sections not cited). https://drc.gov.lk/en/wp-content/uploads/2018/04/Act-7-of-2007-English.pdf . Primary. Accessed 15 October 2026.

1. Inland Revenue Department. Inland Revenue Act, No. 24 of 2017, consolidated, s.178(1). https://www.ird.gov.lk/en/publications/Acts_Income%20Tax_2017/IRA_Cons_Act_-_2025_Changes.pdf . Primary. Accessed 15 October 2026.

1. Parliament of Sri Lanka. Inland Revenue (Amendment) Act, No. 2 of 2025, individual rate table from 1 April 2025. https://www.ird.gov.lk/en/publications/Acts_Income%20Tax_2017/IR_Act_No_02-2025_E.pdf . Primary. Accessed 15 October 2026.

1. Central Bank of Sri Lanka. Employees' Provident Fund Act, No. 15 of 1958 (reprint), ss.10 and 16. https://www.cbsl.gov.lk/sites/default/files/cbslweb_documents/laws/acts/en/epf_act.pdf . Primary. Accessed 15 October 2026.

1. Employees' Trust Fund Board. Employees' Trust Fund Act, No. 46 of 1980, ss.16 and 27. https://etfb.lk/wp-content/uploads/2021/03/ETF-Act.pdf . Primary. Accessed 15 October 2026.

1. Government of Sri Lanka. Gazette Extraordinary 2498/16 (22 July 2026), appointing 1 January 2027 for Parts I and III of the Personal Data Protection Act. https://documents.gov.lk/view/egz/2026/7/2498-16_E.pdf . Primary. Accessed 15 October 2026.

1. Government of Sri Lanka. Gazette Extraordinary 2427/34 (14 March 2025), withdrawing the 18 March 2025 commencement. https://documents.gov.lk/view/extra-gazettes/2025/3/2427-34_E.pdf . Primary. Accessed 15 October 2026.

1. Parliament of Sri Lanka. Personal Data Protection (Amendment) Act, No. 22 of 2025. https://dpa.gov.lk/acts/22-2025_E_251104_201549.pdf . Primary. Accessed 15 October 2026.