A Practical Guide to Depository Participant (DP) Audit (NSDL / CDSL)
Every Depository Participant registered with NSDL or CDSL operates under a SEBI mandate to have its operations independently audited on a periodic basis — not as an annual formality, but as a running check on how client securities are held, transferred, and safeguarded. A qualified internal auditor's report is filed with the depository as a condition of continuing to operate as a DP. At PNPC Global, we have supported capital-market intermediaries across India since 1986, and we conduct DP audits the way a depository actually expects them to be conducted — process-tested, exception-documented, and delivered on time, every audit cycle.
Understanding the Service
A Depository Participant (DP) is an agent of a depository — NSDL (National Securities Depository Limited) or CDSL (Central Depository Services (India) Limited) — registered with SEBI under the SEBI (Depositories and Participants) Regulations, 2018 to offer dematerialised account services to investors. Banks, stockbroking firms, and financial institutions that offer demat accounts to clients typically operate as DPs. " The audit is distinct from the DP's statutory financial audit; it is a compliance and process audit focused specifically on depository operations.
For the full scope, current process and what PNPC includes, see the dedicated Depository Participant (DP) Audit (NSDL / CDSL) service page.
Is This Relevant to Your Business?
- Any entity registered as a Depository Participant with NSDL and/or CDSL under the SEBI (Depositories and Participants) Regulations, 2018 — banks, broking firms, and standalone depository participants alike
- DPs operating under both depositories (dual DPs) — each depository's audit and reporting requirements apply independently and both must be completed within their respective timelines
- DPs that have recently commenced operations and need their first internal audit cycle scoped and scheduled correctly against the depository's prescribed periodicity from the outset
- DPs expanding branch or sub-broker/authorised person networks, where each additional point of client interaction adds account-opening, KYC, and POA-execution risk that the audit must specifically test
Before You Assume You Need This
- You need the DP's annual statutory financial audit under the Companies Act — that is a separate engagement from the depository-mandated operations audit described here, though PNPC can support both
- You need the IT Systems Audit for DPs required to be performed by a CERT-In empanelled auditor — this is a distinct, technically specialised engagement with its own scope and empanelment requirement
- You are a stockbroker or clearing member seeking a stock broker / trading member concurrent audit or half-yearly internal audit under exchange bye-laws — that is a related but separately scoped SEBI/exchange audit
Common Questions
What is a DP audit, in plain terms?
It is a periodic, independent check — performed by a practising CA, CS, or CWA — of how a Depository Participant (a bank or broking firm offering demat accounts) handles client securities: opening accounts correctly, processing dematerialisation and transfers accurately, using Powers of Attorney within their permitted scope, and keeping proper records. The auditor reports findings to NSDL and/or CDSL in a prescribed format, and the DP must fix and report back on anything flagged.
Who is legally required to get a DP audit done?
Every entity registered as a Depository Participant with NSDL and/or CDSL under the SEBI (Depositories and Participants) Regulations, 2018 is required, under SEBI and depository circulars, to have its depository operations audited periodically by an independent qualified auditor. This applies equally to banks and broking firms offering demat services as DPs.
How often does the DP audit need to be conducted?
The periodicity is prescribed by NSDL and CDSL bye-laws and circulars and has generally been on a half-yearly cycle for DP internal/concurrent audits (covering the half-years ended September 30 and March 31), though the exact cadence and reporting deadline should always be confirmed against the specific NSDL and CDSL circulars in force at the time — depositories do revise timelines and formats from time to time.
Working With PNPC Global
Speak directly with a PNPC Chartered Accountant who audits Depository Participants the way depositories actually expect — risk-based testing, exceptions tracked to genuine closure, and continuity from one audit cycle to the next, not a re-tendered checklist exercise every cycle.
PNPC Global has advised Chennai, Bangalore and Hyderabad businesses since 1986. Explore the full Audit & Assurance practice for related services, or go straight to the Depository Participant (DP) Audit (NSDL / CDSL) page for specifics.
This is a general explainer, not a substitute for checking today's rules with PNPC or the relevant authority — figures and deadlines move, so none are quoted here as fixed.