Audit AssuranceAfter Approval: What Continuesdepth

DP Audit NSDL & CDSL: After Approval: What Continues

PNPC Global·

Key takeaways

  • What happens if a DP misses the audit submission deadline? A missed or delayed submission can draw follow-up from the depository, and repeated lateness may be read as a weak compliance signal; confirm the current submission deadline and consequences in the applicable NSDL/CDSL circulars.
  • What is a Power of Attorney (POA) in the DP context, and why does the audit focus on it so heavily? A POA is an authorisation a client gives their broker/DP to operate the demat account on their behalf for specified, limited purposes — for example, transferring securities for pay-in against a sale. Since 1 July 2022, SEBI's Demat Debit and Pledge Instruction (DDPI) is the instrument for that purpose and for pledging securities for margin, while POAs already executed remain valid until the client revokes them.
  • What is the role of the DP's compliance officer during the audit? The compliance officer is typically the primary point of coordination — assembling documents, facilitating access to branch records and systems, and being the first point of discussion on draft findings before the report is finalised.
  • What if the DP has no exceptions at all — is a clean report unusual? A genuinely clean report is possible for a well-run DP with disciplined processes, but auditors are expected to test rigorously rather than aim for a clean outcome.
  • Where this sits in the wider engagement: The statutory basis and the current requirements are set out on the DP Audit NSDL & CDSL service page, and the related services are grouped under Audit Assurance.

DP Audit NSDL & CDSL: After Approval: What Continues

DP Audit NSDL & CDSL does not end at approval — a set of obligations continues afterwards. The questions below are the ones raised most often in practice; the full scope of the service is on the DP Audit NSDL & CDSL page.

What happens if a DP misses the audit submission deadline?

A missed or delayed submission can draw follow-up from the depository, and repeated lateness may be read as a weak compliance signal; confirm the current submission deadline and consequences in the applicable NSDL/CDSL circulars.

In practice: We build the audit into the DP's compliance calendar well in advance, with document requests sent out early enough that fieldwork is not compressed against the deadline.

What is a Power of Attorney (POA) in the DP context, and why does the audit focus on it so heavily?

A POA is an authorisation a client gives their broker/DP to operate the demat account on their behalf for specified, limited purposes — for example, transferring securities for pay-in against a sale. Since 1 July 2022, SEBI's Demat Debit and Pledge Instruction (DDPI) is the instrument for that purpose and for pledging securities for margin, while POAs already executed remain valid until the client revokes them, and a broker may not compel a client to sign either. POA misuse — operating beyond its stated scope — has historically been a significant source of client grievances and regulatory action in the industry, which is why depository audits test POA usage closely, especially given SEBI's margin pledge/re-pledge framework and its 2022 DDPI circular, which govern how client securities may be moved and pledged.

In practice: We specifically check whether any securities movement is happening through a POA or DDPI beyond the purposes it permits, or for purposes that should be routed through the margin pledge/re-pledge mechanism instead — a lag here is a finding worth guarding against.

What is the role of the DP's compliance officer during the audit?

The compliance officer is typically the primary point of coordination — assembling documents, facilitating access to branch records and systems, and being the first point of discussion on draft findings before the report is finalised. A well-prepared compliance officer materially speeds up the audit and improves the quality of the ATR that follows.

In practice: We work closely with the compliance officer throughout, not just at the start and end of the engagement — flagging emerging observations as fieldwork progresses so there are no surprises at the draft-report stage.

What if the DP has no exceptions at all — is a clean report unusual?

A genuinely clean report is possible for a well-run DP with disciplined processes, but auditors are expected to test rigorously rather than aim for a clean outcome. A report with zero findings across a large, complex DP operation, cycle after cycle, can itself invite depository scrutiny of the audit's rigor rather than being taken purely as reassurance.

In practice: We would rather report a small number of genuinely tested, well-documented findings than present an unrealistically clean report that does not reflect the depth of testing actually performed.

Can PNPC also help with the broader SEBI/capital-market compliance calendar beyond the DP audit itself?

Yes. PNPC's audit and assurance practice also supports related capital-market engagements — stock broker internal and concurrent audits, Ind AS and company audits for broking/DP entities, and internal financial controls reviews — so a client's overall capital-market compliance calendar can be coordinated by one practising CA team rather than split across unrelated firms with no shared context.

In practice: The most value comes when the DP audit, the statutory audit, and any internal financial controls work are planned together — findings in one engagement are often directly relevant context for the others, and a fragmented approach loses that connection.

Does PNPC provide a management letter in addition to the formal audit report submitted to the depository?

Yes. Alongside the formal report filed with NSDL/CDSL in their prescribed format, PNPC provides the DP's management and compliance officer with a supplementary management letter that explains findings in plain language, prioritises them by practical urgency, and sets out our specific recommendations for closing each one — beyond what the prescribed regulatory format itself requires.

In practice: The prescribed depository format is necessarily structured and terse. The management letter is where we can be direct about which two or three issues actually deserve the compliance team's attention first.

Where this sits in the wider engagement

DP Audit NSDL & CDSL rarely arrives on its own. The statutory basis and the current requirements are set out on the DP Audit NSDL & CDSL service page, and the related services are grouped under Audit Assurance.

What PNPC does

PNPC Global has practised since 1986 across India and the UAE. On DP Audit NSDL & CDSL we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.

Related service · Audit & Assurance

Depository Participant (DP) Audit (NSDL / CDSL)

Conduct mandatory DP audits for NSDL and CDSL participants as per SEBI regulations.

Explore this service →View all Audit & Assurance services

Related reading

Continue exploring

Need expert guidance?

Our chartered accountants in India and UAE handle exactly what you've read about. Get a direct answer — not generic advice.

India TeamUAE Team← Back to Blog