Polish corporate governance works best when legal form, group policy and the company’s actual risk profile are treated as one system. A foreign-owned Polish entity may not be listed or classified as a public-interest entity, yet lenders, shareholders, customers and headquarters still expect reliable reporting, clear decisions and credible oversight. The objective is not to reproduce the parent company’s board pack. It is to create governance that fits Polish company law, accounting rules and the entity’s operating reality.
Separate Three Questions at the Start
Governance projects often stall because statutory audit, corporate organs and internal assurance are discussed as if they were the same obligation. Begin by answering three separate questions and document the legal analysis behind each answer.
Financial-statement audit – Is the entity required to obtain a statutory audit because of its legal form, regulated status, group position or applicable financial thresholds?
Corporate governance – Which management, supervisory and shareholder bodies are required, and which reserved matters, approvals and reporting duties apply under the articles of association and shareholder arrangements?
Voluntary assurance – What additional internal audit, controls testing, ESG assurance, cyber review or lender reporting is commercially necessary even when the law does not require it?
The answers can change after a transaction, restructuring, threshold test, debt financing, listing plan or change of activity. Reassess them before year-end rather than waiting until the financial statements are nearly complete.
Determine Statutory Audit Scope Early
Poland’s Accounting Act requires audits for specified categories of entities and for other entities that meet statutory conditions. The official Biznes.gov.pl guidance identifies, among others, banks, certain regulated entities, joint-stock companies and qualifying entities that meet at least two size conditions. The published thresholds and rules can change, so finance teams should confirm the current test for the relevant financial year with a qualified Polish adviser rather than relying on an old group checklist.
Make the determination through a short audit-scope memorandum. State the entity, legal form, reporting framework, financial year, group relationship, public-interest status, threshold calculations and conclusion. Attach the evidence used. If the audit is voluntary, record the business reason: financing, shareholder assurance, transaction readiness, grant conditions, internal policy or preparation for future growth.
Choose the Auditor with Independence in Mind
A statutory audit is carried out by licensed statutory auditors on behalf of a registered audit firm. Select and appoint the firm under the applicable Accounting Act rules. Verify the individual and firm through the relevant Polish public registers, including resources maintained by the Polish Chamber of Statutory Auditors and the Polish Agency for Audit Oversight. Registration is the entry point, not the full selection decision.
- Define the required sector knowledge, reporting framework, group-audit coordination, language capability, technology approach and geographic coverage.
- Disclose existing advisory, tax, accounting, technology and personal relationships before appointment and assess threats to independence.
- Evaluate the proposed team, partner involvement, timetable, data requests, component-auditor model and approach to significant risks.
- Use transparent selection criteria and preserve the recommendation, approvals and conflict checks in the governance record.
- Agree to a communication protocol covering misstatements, control deficiencies, suspected fraud, going-concern issues and escalation to the supervisory body.
Public-interest entities are subject to additional Polish and EU requirements, including detailed rules for audit committees, auditor selection and independence. Do not transfer those requirements automatically to every private company, but consider whether parts of the discipline would improve oversight voluntarily.
Create a Year-Round Financial Reporting Calendar
Audit quality is usually determined months before fieldwork. Build one calendar covering monthly close, inventory counts, impairment reviews, provisions, confirmations, related-party mapping, tax reconciliations, management estimates, subsequent events, consolidation instructions, board approval, shareholder approval and filing. Assign an owner and reviewer for every critical item.
Close the evidence gap as work is performed. A reconciled balance without review evidence, a provision without assumptions or a related-party transaction without approval may require expensive reconstruction. Use version control for financial statements and board papers, restrict editing rights, retain source documentation and maintain a clear route from reported numbers to underlying records.
Design Governance Around the Polish Entity
The parent group’s delegation framework should be mapped to the Polish entity’s governing documents and statutory organs. Define what management can approve locally, what requires supervisory-board consent where such a body exists, and what is reserved for shareholders. Cover contracts, borrowing, guarantees, capital expenditure, litigation, related-party transactions, appointments, compensation, banking authority and changes to business activity.
Avoid shadow governance in which headquarters makes decisions informally and the Polish body signs minutes afterwards. Directors and board members need sufficient information, time and freedom to exercise their own duties. Material decisions should show the issue considered, information reviewed, alternatives, conflicts disclosed, advice obtained, decision made and implementation owner.
Supervisory Oversight Must Be More Than a Calendar
A supervisory board or audit committee adds value when it tests management’s assumptions and follows unresolved risks. The board pack should lead with decisions and exceptions rather than hundreds of pages of operational detail. Include financial performance, cash and covenant outlook, major estimates, control deficiencies, litigation, compliance incidents, cybersecurity, people risk, investment status and material related-party matters.
Members need a structured induction into the Polish business: legal duties, articles, strategy, sites, major customers and suppliers, accounting policies, tax position, permits, insurance and crisis plans. Refresh training when regulation, reporting standards or the company’s risk profile changes. Independence is not merely the absence of a prohibited relationship; it also requires the confidence to request evidence and challenge incomplete answers.
Internal Control Should Produce Audit-Ready Evidence
Start with the processes that could create a material error, legal breach or loss: revenue, purchasing, payroll, treasury, inventory, fixed assets, tax, financial close, IT access and management estimates. For each process, identify the risk, control owner, frequency, evidence, reviewer and escalation route. Separate preparation and approval where practical, and design compensating review where staffing is limited.
Track control deficiencies by severity, root cause, owner and due date. Repeated late reconciliations or access exceptions are not isolated housekeeping issues; they may indicate capacity, system or accountability problems. Internal audit should prioritize risk and report independently enough to raise uncomfortable findings. Management remains responsible for remediation.
Listed and Public-Interest Entities Face Higher Expectations
Companies listed on the Warsaw Stock Exchange should assess the current Best Practice for GPW Listed Companies and applicable disclosure rules. The framework addresses management and supervisory bodies, internal systems, shareholder relations, conflicts, remuneration and information policy. Compliance statements should reflect actual practice, not a generic annual exercise.
For public-interest entities, the Polish Financial Supervision Authority monitors compliance with rules on the appointment, composition and operation of audit committees or equivalent supervisory bodies. EU Regulation 537/2014 also establishes specific requirements for statutory audits of public-interest entities, including auditor selection and independence safeguards. These rules require specialist current advice, particularly when the statutory auditor’s network provides other services.
Prepare Carefully for Sustainability Assurance
Sustainability reporting and assurance scope has been changing at EU and national level. Companies should verify their current position before planning the reporting year. Even where mandatory scope or timing is uncertain, boards should establish ownership of environmental, workforce and value-chain data, document calculation methods, define controls and preserve evidence. Sustainability information should be governed with the same discipline as financial information when it informs investors, lenders or customers.
How Expand2Poland Can Help
Expand2Poland helps match foreign investors with local partners who can help organize the local governance and audit-readiness workstream: mapping Polish obligations, coordinating advisers, aligning headquarters delegations with local bodies, preparing evidence requests, building reporting calendars and tracking remediation.
The information provided in this article is for general informational and educational purposes only and does not constitute legal, financial, or tax advise.