Nonprofit Audit: When You Need One and What It Costs
Most small nonprofits are not required to have an audit and many buy one they do not need. Three things can trigger the requirement: your state, a funder, or federal money above the Single Audit threshold. Otherwise it is a choice.
An audit is an independent examination of your financial statements resulting in an opinion on whether they are fairly presented. It is not a fraud investigation, not a review of whether you spend money wisely, and not an IRS process.
That last point causes real confusion. The IRS does not require an audit. Your annual return from the 990 series is the federal requirement, and it is prepared from your books rather than from an audit.
The three things that actually trigger one
| Trigger | Detail |
|---|---|
| State law | Many states require an audit above a revenue threshold, usually tied to charitable solicitation registration. Thresholds vary widely by state and change. |
| A funder or lender | Written into the grant agreement or loan covenant. Read before signing, not after. |
| Federal awards | Organizations expending federal money above the Single Audit threshold must have a Single Audit, which is a different and more demanding exercise. |
Your own bylaws may also require one, which organizations sometimes discover years later. Worth checking.
State thresholds are the item most often quoted wrongly. They differ substantially between states, several states have changed theirs in recent years, and some tie the requirement to gross revenue while others use contributions received. Check your state’s charity regulator, usually within the Attorney General’s office, rather than relying on a figure from a blog.
Audit, review, compilation
Three different services at three very different prices, and organizations routinely buy the most expensive when a funder would have accepted the middle one.
| Audit | Review | Compilation | |
|---|---|---|---|
| What the accountant does | Tests transactions, confirms balances, assesses controls | Analytical procedures and inquiry, no testing | Presents your numbers in proper form |
| What you get | An opinion | Limited assurance | No assurance |
| Relative cost | Highest | Roughly a third to a half of an audit | Lowest |
| Accepted by funders | Always | Frequently | Rarely |
Before commissioning an audit because a funder asked for financial statements, ask them whether a review would satisfy the requirement. It often does, and the saving is substantial for an organization at this size.
What it costs
Fees vary by region, by organization complexity and by how ready your records are, so any single figure quoted online is unreliable. What is reliable is what drives the number.
Your complexity, not your size. A $2m organization with one funding source and clean books can cost less to audit than a $600,000 organization with fifteen restricted grants, a federal award and disorganised records.
How prepared you are. An auditor who has to reconstruct your reconciliations bills for it. Audit-ready books are the single largest lever you control over the fee.
Whether it is your first. First-year audits cost more because the auditor must establish opening balances and understand your systems.
Get three quotes, from firms with genuine nonprofit experience, and ask each what would make the engagement cheaper. Good auditors will tell you.
Preparing, which is where you save money
Most of an audit’s cost is the auditor doing work you could have done. A prepared organization pays less and finishes sooner.
| Have ready | Why |
|---|---|
| All twelve bank reconciliations, completed | The first thing requested and the most common gap |
| A schedule of restricted funds with balances | Substantiating restrictions from tags rather than balances is slow |
| Grant agreements and award letters | The auditor tests restrictions against the documents |
| Board minutes for the year | Evidence of approvals, and of conflicts disclosed |
| Payroll records and contractor 1099s | Classification is tested |
| Fixed asset register with depreciation | Frequently missing entirely at small organizations |
| Signed conflict of interest statements | Requested more often than organizations expect |
The restricted funds schedule is the one that hurts. In general accounting software, restrictions live as tags rather than as fund balances, so reconstructing what each fund actually holds as of year end is manual work. That reconstruction is where sloppy setup presents its bill.
The management letter is the useful part
Alongside the opinion, the auditor usually issues a management letter identifying weaknesses in your controls. Small organizations often receive the same findings: inadequate segregation of duties, because one person does everything, and reliance on a single individual for financial records.
Those findings are real and largely unavoidable at small scale, and there are practical mitigations. A board member reviewing bank statements independently. Two signatures above a threshold. Someone other than the person who enters transactions reviewing the monthly reconciliation.
Take the letter to the board and record what you decided to do about each point. An organization that receives the same finding three years running, with no minute showing it was considered, is telling its auditor and its funders something.
What an audit does not do
Four things organizations expect from an audit and do not get, and the gap is where board confidence goes wrong.
It is not a fraud investigation. An audit is designed to give reasonable assurance that statements are free of material misstatement. It is not designed to detect a determined individual concealing small thefts, and auditors say so in their own engagement letters.
It does not assess whether you spend money well. An audit can conclude that your statements fairly present a year in which you wasted every dollar.
It does not check most compliance. Whether you filed your 990, registered in the states where you fundraise, or followed your grant conditions is generally outside an ordinary financial statement audit, unless it is a Single Audit covering federal awards.
It does not substitute for internal control. It happens once, months after the year ended. A monthly close with someone independent reviewing the reconciliation catches things while they are still small.
The practical conclusion for a board: an unqualified opinion is good news about the statements, not a clean bill of health for the organization, and treating it as the latter is how boards stop asking questions.
Whether to have one voluntarily
If nothing requires it, an audit is a purchase, and it should be judged as one.
Reasons that justify it: you are about to apply to funders who require audited statements, you are taking on debt, your revenue is approaching your state’s threshold, or the board genuinely cannot get assurance any other way.
Reasons that do not: it feels more professional, or a board member from the corporate world assumes it is standard. For an organization under a few hundred thousand dollars with straightforward funding, the same money spent on a competent bookkeeper and a proper monthly close buys considerably more financial control than an annual audit does.
A useful middle position is a review, plus a board-level financial oversight routine that actually happens each month. That combination catches more, sooner, and costs less.
Questions people ask
Does the IRS require nonprofits to be audited?
No. The IRS requires an annual return from the 990 series, not an audit, and the return is prepared from your books.
Audit requirements come from three other places: state law, usually tied to charitable solicitation registration above a revenue threshold; a funder or lender writing it into an agreement; and federal award rules, where organizations expending federal money above the Single Audit threshold must have a Single Audit.
Your own bylaws may also require one, which is worth checking since organizations sometimes discover the requirement years after adopting the document.
Separately, the IRS can examine an exempt organization. That is an examination rather than an audit in the accounting sense, and it is not something you commission.
At what revenue does a nonprofit need an audit?
There is no single national threshold, which is why figures quoted online contradict each other.
Many states require an audit above a revenue level, commonly tied to charitable solicitation registration, and those thresholds vary substantially between states. Several states have changed theirs in recent years. Some measure gross revenue and others measure contributions received, which produces different answers for the same organization.
Check with your state's charity regulator, usually within the Attorney General's office, and check every state where you are registered to solicit, since the strictest requirement governs.
Federal awards are separate, with a Single Audit required above a specified level of federal spending in a year.
How much does a nonprofit audit cost?
It varies enough by region and complexity that a single figure would mislead. What is dependable is what drives it.
Complexity matters more than size. An organization with many restricted funds, a federal award or disorganised records costs more to audit than a larger one with simple funding and clean books.
Preparedness is the lever you control. An auditor reconstructing your bank reconciliations bills for it, and that work is avoidable.
First-year engagements cost more, because opening balances and systems have to be established.
Get three quotes from firms with real nonprofit experience, ask each what would reduce the fee, and ask whether a review would satisfy whoever is requiring this.
What is the difference between an audit and a review?
The level of assurance and the amount of work behind it.
In an audit, the accountant tests transactions, confirms balances with third parties such as banks, assesses your internal controls, and issues an opinion on whether the statements are fairly presented.
In a review, they perform analytical procedures and make inquiries, without testing transactions, and provide limited assurance, essentially that nothing came to their attention suggesting material misstatement.
A review typically costs somewhere between a third and a half of an audit, and many funders accept one. Ask before commissioning the more expensive service, because organizations frequently buy an audit for a requirement a review would have met.
How do we prepare for an audit?
Have the documents ready before the auditor arrives, because most of the fee is them doing work you could have done.
Twelve completed bank reconciliations. A schedule of restricted funds with balances and the underlying grant agreements. Board minutes for the year. Payroll records and contractor 1099s. A fixed asset register with depreciation. Signed conflict of interest statements.
The restricted funds schedule is usually the hardest, because in general accounting software restrictions are tags rather than fund balances, so what each fund holds has to be reconstructed.
Ask the auditor for their document request list in advance and work through it before fieldwork starts. Organizations that do this finish faster and pay less.
What is a Single Audit?
A specific audit required of organizations that expend federal award money above a threshold in a fiscal year, conducted under federal requirements rather than ordinary audit standards.
It covers more than your financial statements. It examines compliance with the requirements attached to each federal programme: allowable costs, eligibility, reporting, procurement and cash management among them.
It is more demanding and more expensive than a standard audit, and it requires an auditor experienced in the framework. Not every firm does them well.
The threshold is set federally and has been revised, so confirm the current figure before assuming you are below it. Note that it turns on federal money expended in the year, not received, and that federal money passed through a state or another nonprofit still counts.
Who chooses the auditor?
The board, not management, and the distinction matters.
The auditor's role is to provide independent assurance, including to the board about the financial statements management prepared. An auditor selected and directed solely by the person whose work they are examining is not independent in substance, whatever the engagement letter says.
Larger organizations use an audit committee of the board for selection and to receive the results, and to meet the auditor without management present at least once. That last practice is worth adopting even at small scale, because it is where an auditor will raise a concern they would not put in writing.
Consider rotating firms periodically. There is no fixed rule for nonprofits, and long unbroken relationships can dull independence.
Should a small nonprofit get a voluntary audit?
Usually not, if nothing requires one. It is a purchase, and it should compete with other uses of the same money.
Good reasons to buy one anyway: imminent applications to funders who require audited statements, taking on debt, approaching your state's threshold, or a board that genuinely cannot obtain assurance otherwise.
Weak reasons: it feels more professional, or a director from the corporate world assumes it is standard practice.
For an organization under a few hundred thousand dollars with straightforward funding, the same money spent on a competent bookkeeper and a disciplined monthly close buys far more actual financial control. An audit looks backwards once a year; a monthly close catches problems while they are still small.
This is reference information, not legal or tax advice. Rules vary by state and change over time. For a decision that carries real consequences, check the current text at irs.gov or your state registry, and talk to a nonprofit attorney or CPA.