Nonprofit Audit Requirements: The Complete 2026 Guide to Federal, State, and Funder Rules

A nonprofit audit is an independent examination of your organization's financial records, transactions, internal controls, and compliance with applicable laws. Whether your nonprofit needs one depends on four factors: federal law, state law, funder requirements, and your board's governance decisions.

The short answer: If your organization spends $1,000,000 or more in federal awards annually, a Single Audit is required by law. Below that threshold, your state's charitable registration rules and your funders' grant agreements determine whether an audit is mandatory. Even when not legally required, many nonprofits choose to get audited to build donor confidence and strengthen financial oversight.

This guide covers every scenario — with the updated 2026 federal threshold, state-by-state requirements, real cost data, and a step-by-step preparation checklist.

When Is a Nonprofit Required to Have an Audit?

There are four distinct triggers for a nonprofit audit. Understanding which ones apply to your organization prevents both unnecessary spending and compliance violations.

1. Federal Single Audit (2 CFR Part 200 — Uniform Guidance)

The most common federal audit trigger applies to nonprofits receiving government grants and contracts. As of October 2024, the Office of Management and Budget (OMB) increased the Single Audit threshold from $750,000 to $1,000,000 — the first increase since 2003 and part of the most significant revision to the Uniform Guidance since 2013.

Key distinction: The threshold measures actual federal expenditures — not total revenue, not grant awards, and not the amount received in a given year. If your organization received a $2 million federal grant but only spent $800,000 of it during the fiscal year, you are below the threshold for that year.

Organizations spending less than $1,000,000 in federal awards are exempt from Single Audit requirements but must still maintain records available for review and make their financial statements available to the federal awarding agency upon request (2 CFR 200.501).

2. State Charitable Registration Requirements

Every state that requires charitable solicitation registration sets its own audit threshold. These vary dramatically — from no requirement in some states to mandatory audits for organizations with as little as $250,000 in revenue.

Important: These thresholds change. Always verify current requirements with your state's attorney general office or charitable registration authority before relying on any published list — including this one.

Multi-state solicitation: If your nonprofit solicits contributions in multiple states, you must meet the audit requirements of every state where you solicit. A California-based nonprofit soliciting in New York must meet both states' thresholds. Organizations registered in 10+ states often find that audit requirements in any single state trigger the need for audited financials across all registrations.

3. Funder and Grant Requirements

Many funding sources require audited financial statements independent of legal mandates:

Federal grants — Even below the $1M Single Audit threshold, individual federal agencies may require audited statements as a grant condition

State government contracts — Especially service delivery contracts in health, education, and human services

Private foundations — Large foundations (Ford, Gates, Robert Wood Johnson) typically require audits for grants above $100,000-$250,000

United Way — Requirements vary by local affiliate, but most require audits for allocations above $100,000

Community foundations — Increasingly requiring audited financials for grants above $50,000

Corporate partnerships — Major corporate funders often require audited financials before committing significant funding

Bond covenants — Organizations with tax-exempt bond financing almost always require annual audits

Strategy note: If your organization is applying for its first major federal grant, get an audit before you need one. Funders want to see a track record of clean audits — an organization that has never been audited raises questions about financial management capacity.

4. Board-Directed Audits

Even when no external requirement exists, boards may authorize audits for legitimate governance reasons:

Executive director transition — Incoming leaders need independent verification of the financial picture they are inheriting

Significant organizational growth — Revenue doubling or tripling signals the need for stronger financial oversight

Donor confidence — Major donors and planned giving prospects often request or expect audited financials

Fraud concerns — If the board suspects financial mismanagement, an audit provides independent verification

Merger or acquisition discussions — Due diligence requires audited financials from both parties

Grant readiness — Proactively building an audit history before applying for grants that will require one

Types of Nonprofit Audits

Not all audits examine the same things. Understanding the different types helps you prepare for the right scope.

Financial Statement Audit

The most common type. An independent CPA firm examines your financial statements — statement of financial position (balance sheet), statement of activities (income statement), statement of functional expenses, statement of cash flows, and notes to financial statements.

The auditor issues an opinion: unmodified (clean — the best outcome), modified (material issues found), or adverse (significant misstatements). A clean audit opinion means the statements are "fairly presented in all material respects."

Single Audit (Uniform Guidance Compliance Audit)

Required when federal expenditures exceed $1,000,000. Includes everything in a financial statement audit PLUS compliance testing for each major federal program. The auditor tests whether federal funds were spent in accordance with program requirements, grant terms, and applicable federal regulations.

Single Audits produce two additional deliverables beyond the standard audit report:

Schedule of Expenditures of Federal Awards (SEFA) — Lists every federal program and amount expended

Report on Internal Control Over Financial Reporting and Compliance — Details any findings, questioned costs, or material weaknesses

Agreed-Upon Procedures (AUP)

A targeted examination of specific areas rather than the full financial statements. Funders sometimes request AUPs for specific grants or programs. Less expensive than a full audit but provides no overall opinion on the financial statements.

IRS Audit (Examination)

Entirely different from the audits described above. An IRS examination reviews your tax-exempt status compliance — not your financial statements. The IRS conducts two types: field audits (an agent visits your offices) and correspondence audits (conducted by mail). Common triggers include excessive executive compensation, significant unrelated business income, political activity concerns, and late or incomplete Form 990 filings.

Audit vs. Review vs. Compilation: Which Does Your Nonprofit Need?

If your organization is not legally required to have a full audit, two less expensive alternatives may meet your needs:

Rule of thumb: A review costs roughly one-third of an audit. A compilation costs roughly one-third of a review.

Critical difference: Only an audit involves the CPA testing your transactions, confirming account balances with third parties (banks, donors, grantors), and evaluating your internal controls. A review relies primarily on inquiries and analytical procedures — the CPA asks questions and looks for inconsistencies but does not verify underlying transactions.

If a funder requires "audited financial statements," a review will NOT satisfy that requirement. Verify exactly what your funders and state registrations require before choosing a lower level of service.

How Much Does a Nonprofit Audit Cost in 2026?

Audit fees depend on your organization's size, complexity, number of federal programs, geographic location, and the CPA firm you select. The accounting profession is currently experiencing significant staffing shortages, which has pushed fees higher and extended timelines across the industry.

Recent trend: A 2025 survey of community-based nonprofits found average audit fee increases of 9% year-over-year, driven by CPA firm staffing shortages and increased regulatory complexity.

What Drives Audit Costs Up

First-year audit — Auditors spend 20-40% more time in year one establishing baseline understanding

Multiple federal programs — Each major program requires separate compliance testing

Weak internal controls — More testing required when the auditor cannot rely on your systems

Disorganized records — Every hour the auditor spends looking for documents costs you money

Complex funding structure — Multiple restricted grants, government contracts, and program-specific reporting

Staff turnover — New finance staff who cannot answer auditor questions increase time and cost

Late engagement — Booking your auditor in October for a December fiscal year-end costs more

How to Reduce Audit Costs

Reconcile monthly, not annually. Monthly bank reconciliations, grant reconciliations, and balance sheet reviews reduce year-end cleanup time dramatically.

Maintain organized grant files. Each grant should have its own folder with award letter, budget, modification letters, reports submitted, and drawdown documentation.

Prepare the PBC list early. The "Prepared by Client" list comes from your auditor — start gathering documents 60 days before fieldwork begins.

Respond to auditor requests within 48 hours. Delays extend the engagement timeline and increase fees.

Keep the same audit firm for 3-5 years. Continuity reduces learning curve costs — but get competitive bids every 3-5 years to ensure fair pricing.

Invest in your accounting system. Moving from spreadsheets to proper nonprofit accounting software (Sage Intacct, Blackbaud Financial Edge, QuickBooks Nonprofit) reduces auditor time.

Hire or develop competent finance staff. A qualified controller or finance director who can prepare schedules and answer auditor questions reduces reliance on auditor time.

The Nonprofit Audit Preparation Checklist

Preparation is the single biggest factor in audit cost and outcome. Organizations that prepare well have shorter audits, lower fees, and cleaner opinions.

6-12 Months Before Your Audit

• Reconcile all bank accounts monthly — do not let them accumulate
• Record all transactions in your accounting system within 30 days of occurrence
• Document internal controls for cash receipts, disbursements, payroll, and procurement
• Maintain separate grant files with all required documentation
• Conduct a mid-year internal review of your financial statements for obvious errors
• Ensure your chart of accounts aligns with your Form 990 functional expense categories

3 Months Before

• Select your auditor and sign the engagement letter (if new engagement)
• Request the PBC (Prepared by Client) list from your auditor
• Begin gathering items on the PBC list
• Confirm your audit committee or finance committee will be available during fieldwork
• Review prior-year audit findings and confirm corrective actions are complete

1 Month Before

• Close your books for the fiscal year — all transactions recorded, all accounts reconciled
• Prepare required schedules: fixed assets, grants receivable, prepaid expenses, accounts payable, deferred revenue, net assets with donor restrictions
• Compile board minutes for the entire fiscal year
• Gather conflict of interest disclosures from all board members and key employees
• Prepare a schedule of federal awards (if Single Audit applies)
• Have bank confirmation letters ready for auditor countersignature

During Fieldwork

• Designate one staff member as the auditor liaison — all requests flow through this person
• Set a 48-hour response target for all auditor document requests
• Schedule a weekly check-in with the audit team lead to address questions in batches
• Review proposed adjusting journal entries before accepting them
• Discuss any findings or management letter comments before the report is finalized

Common Nonprofit Audit Findings and How to Avoid Them

The most frequent findings fall into predictable categories. Knowing them in advance lets your organization address weaknesses before the auditor arrives.

1. Inadequate Segregation of Duties

The same person should not authorize transactions, record them, and have custody of the related assets. Small nonprofits with limited staff can mitigate this through board-level review of bank statements, dual-signature requirements on checks above a threshold, and independent review of journal entries.

2. Missing or Incomplete Documentation

Invoices, contracts, timesheets, and approval records that cannot be located during fieldwork. Implement a document retention policy and use digital filing systems that make retrieval straightforward.

3. Revenue Recognition Errors

Contributions with donor restrictions recorded as unrestricted. Multi-year pledges recognized in the wrong period. Grant revenue recorded when received rather than when conditions are met. Revenue recognition under ASC 958 is the area where nonprofit accounting differs most from for-profit accounting.

4. Functional Expense Allocation Issues

Expenses not properly allocated between program services, management and general, and fundraising. The allocation methodology must be reasonable, consistently applied, and documented. Allocation of shared costs (rent, IT, leadership salaries) is the most scrutinized area.

5. Internal Control Deficiencies

Weak approval processes, missing reconciliations, lack of board oversight of financial activity, no formal procurement policy for purchases above a threshold. These generate management letter comments even when they do not result in financial misstatements.

6. Federal Grant Compliance Issues (Single Audit)

Time-and-effort reporting that does not meet the requirements of 2 CFR Part 200, procurement procedures that bypass competitive bidding thresholds, unallowable costs charged to federal programs, and late or incomplete financial reports to federal agencies.

7. Related Party Transactions Not Disclosed

Transactions between the organization and board members, key employees, or their family members must be disclosed in the financial statements. Failure to identify and disclose these is both an audit finding and a Form 990 reporting issue.

How to Choose a Nonprofit Auditor

Selecting the right audit firm affects both the quality and cost of your audit.

What to Look For

Nonprofit specialization — Firms with dedicated nonprofit practice groups understand ASC 958, Uniform Guidance, and the unique aspects of nonprofit accounting

Relevant experience — Ask for client references from organizations of similar size, complexity, and mission area

Yellow Book qualification — If you need a Single Audit, the firm must meet Government Auditing Standards (Yellow Book) requirements

Staff continuity — High staff turnover at the audit firm means re-learning your organization every year

Peer review results — Every CPA firm undergoes peer review. Ask to see their most recent report.

Engagement team, not just the firm — Who will actually do the work? Meet the manager and senior, not just the partner.

Red Flags

• A firm that also provides bookkeeping services to your organization (independence violation)
• Bids significantly below market rate (may indicate inexperienced staff or insufficient scope)
• Inability to complete the audit within the required timeline
• No dedicated nonprofit practice or government audit capability
• Fees quoted as a fixed price with no discussion of scope assumptions

The RFP Process

For audit procurements, send your Request for Proposal (RFP) to 3-5 qualified firms. Include your most recent financial statements, prior audit report, organizational budget, number of federal programs, and expected timeline. Allow at least 30 days for responses and schedule interviews with finalists before making a selection.

The Role of the Audit Committee

Every nonprofit receiving more than $2 million in annual revenue should have a functioning audit committee (required in some states — California's Nonprofit Integrity Act mandates audit committees for charities with gross revenue of $2 million or more).

Core Responsibilities

Select and oversee the external auditor — The audit committee, not management, should hire the auditor

Review the audit scope and approach — Understand what the auditor will examine and why

Review the audit results — Discuss findings, management letter comments, and corrective actions

Monitor internal controls — Ensure management is maintaining adequate financial controls

Review the Form 990 — Before filing, the audit committee should review the return for accuracy and completeness

Serve as a confidential reporting channel — Employees and stakeholders should be able to report financial concerns to the audit committee directly

Composition

Audit committee members should be independent board members — not employees, not related to employees, and not receiving compensation from the organization beyond board service. At least one member should have financial expertise (CPA, CFO, financial executive, or equivalent experience).

Frequently Asked Questions

Does my nonprofit need an audit if we have 501(c)(3) status?

Not automatically. Tax-exempt status itself does not trigger an audit requirement. The triggers are federal spending above $1,000,000 (Single Audit), state charitable registration thresholds, funder requirements, and board governance decisions. Many small 501(c)(3) organizations never need an audit.

What is the difference between an audit and a Form 990?

Form 990 is an informational tax return filed annually with the IRS. An audit is an independent examination of your financial statements by a CPA firm. They are entirely separate — but some states require audited financials as an attachment to state charitable filings, and the Form 990 asks whether your organization had its financial statements audited.

Who can perform a nonprofit audit?

Only Certified Public Accountants (CPAs) licensed in your state can issue audited financial statements. The CPA firm must be independent of your organization — meaning they cannot also be providing bookkeeping, payroll processing, or other accounting services that would compromise their objectivity. For Single Audits, the firm must also meet Government Auditing Standards (Yellow Book) qualifications.

How long does a nonprofit audit take?

From engagement letter to final report: 8-16 weeks for most organizations. The on-site fieldwork portion is typically 1-3 weeks. However, the current shortage of CPAs nationwide has extended timelines — some firms are quoting 4-6 months for new engagements. Book early.

What happens if our nonprofit fails an audit?

There is no pass/fail — the auditor issues an opinion on your financial statements. An unmodified (clean) opinion is the best outcome. A modified opinion indicates material issues but is not necessarily catastrophic. The auditor may also issue a management letter with recommendations for improvement. The more serious concern is material weaknesses in internal controls or questioned costs in a Single Audit — these can affect future federal funding eligibility.

Can we change auditors?

Yes. Organizations should periodically (every 3-5 years) solicit competitive proposals. There is no legal requirement to rotate auditors in most states, but fresh eyes can identify issues that a long-tenured auditor may overlook. The new auditor will communicate with the prior auditor as part of the transition — this is standard professional practice, not a red flag.

How do we request an audit of a nonprofit we donate to?

If the nonprofit is required to file audited financials with a state regulatory agency, those statements may be publicly available through the state's charitable registration database. You can also request audited financials directly from the organization — most nonprofits with audits make them available to donors. Organizations filing Form 990 must make it publicly available, but the 990 is not the same as audited financial statements.

What is the updated federal Single Audit threshold for 2026?

The OMB revised 2 CFR Part 200 in April 2024, increasing the Single Audit threshold from $750,000 to $1,000,000 in federal expenditures. This applies to fiscal years beginning on or after October 1, 2024, meaning most organizations will first apply the new threshold for fiscal years ending September 30, 2025 or later.

Building Audit-Ready Financial Systems

The most cost-effective approach to nonprofit audits is not finding the cheapest auditor — it is building financial systems that make audits efficient and predictable.

Organizations with strong year-round accounting practices consistently experience lower audit fees, faster turnaround times, fewer findings, and cleaner opinions. The investment in competent finance staff, proper accounting systems, and disciplined monthly close processes pays for itself in reduced audit costs within 1-2 years.

Giddings Consulting Group works with nonprofit leaders to strengthen organizational infrastructure — including financial management, board governance, and operational systems. Whether your organization is preparing for its first audit or working to improve findings from prior years, we help you build systems that work.

Contact us to discuss your organization's audit readiness and strategic planning needs.