How to Prepare for a Nonprofit Financial Statement Audit: Timeline, PBC List, Checklist

Key takeaways

• Confirm whether you need a financial statement audit, a single audit, a review, or a compilation before you engage a CPA. They are different engagements at different costs.
• For federal awards issued on or after October 1, 2024, the single audit threshold is generally $1 million in federal awards expended during the fiscal year. Awards issued earlier may remain subject to the previous $750,000 threshold, so organizations with mixed award vintages should confirm which requirement applies.
• Begin auditor selection and PBC planning before fiscal year end rather than waiting for the books to close.
• Assign every requested schedule to a named owner, and make sure each one ties to the final trial balance.
• Monthly reconciliations, transaction-level dimensions, and documented prior-year remediation reduce avoidable audit delays and rework.

To prepare for a nonprofit financial statement audit, confirm which assurance engagement you actually need, engage the auditor before fiscal year end, assign every prepared-by-client request to a named owner, complete all account reconciliations, document grants and donor restrictions, and resolve prior-year findings. Organizations subject to a single audit must also prepare the Schedule of Expenditures of Federal Awards and federal compliance records.

• What this covers: which engagement applies, a working timeline, the PBC package, the reconciliations to finish first, the findings that recur, and how to reduce delays.
• What it skips: a long definition of what an audit is. You know. You have a date.

Your engagement letter is signed, fieldwork starts in eleven weeks, and the prepared-by-client list arrived last Thursday.

This guide is written for finance leaders at mid-sized and large US nonprofits, particularly nonprofit finance teams managing multiple funds, grants, entities, or reporting dimensions across systems such as Sage Intacct, NetSuite, Blackbaud Financial Edge NXT, and Microsoft Dynamics. Complexity is what drives audit effort at these organizations, and one variable drives most of it: whether financial information can be reproduced, reconciled, and explained on demand. Before any of that matters, confirm which engagement you are actually buying.

Do You Need an Audit, Review, or Compilation?

Start by separating two things that often get merged. A financial statement audit examines whether your organization’s financial statements are fairly presented under GAAP. Organizations that meet the federal expenditure threshold may also need a single audit, which incorporates the financial statement audit and adds testing of federal award programs and compliance requirements. They are related, not interchangeable. If your organization has no federal awards, nothing in this guide about the SEFA, major program determination, or Clearinghouse filing applies to you. For a refresher on the statements themselves, see our breakdown of the four required financial statements.

• Financial statement audit: an opinion on whether the statements are fairly presented under GAAP. This is the engagement the rest of this guide is built around.
• Single audit: the financial statement audit plus testing of federal award programs and compliance requirements, a Schedule of Expenditures of Federal Awards, and a federal filing. Triggered by federal expenditure, not by size alone.

The second question is whether a full audit is required at all. Four assurance engagements exist at materially different price points, and organizations sometimes commission the most expensive one because a funder used the word "audited" without specifying what it meant.

 Read the funder agreement and the applicable statute in the exact words they use before you commission anything. A review sometimes clears the bar, and that check has saved organizations a five-figure line item. Once you know which engagement applies, the next question is what obliges you to commission it.

When Is a Nonprofit Required to Have an Audit?

Four categories account for most nonprofit audit requirements. They are common categories rather than a complete legal taxonomy, and they operate independently, so clearing one does not clear the others.

 Other requirements sit outside these four and are easy to miss. Local government contracts, parent or affiliated entity policies, bond and financing agreements, licensing arrangements, and individual program rules can each carry their own audit or reporting obligation. Check every funding stream, not just the largest.

How the new $1 million single audit threshold applies

OMB’s 2024 revision to the Uniform Guidance raised the single audit threshold from $750,000 to $1 million, codified at 2 CFR 200.501. The revised threshold applies to federal awards issued on or after October 1, 2024. Because many organizations expend funds from awards issued across multiple years, the transition cannot always be determined from fiscal year end alone. Three details cause most of the confusion.

• Aggregation, not per-award: The test is total federal expenditure across all awards. Two grants at $600,000 and $500,000 put you at $1.1 million, even though neither award reached the threshold alone.
• Mixed award vintages: Awards issued before October 1, 2024 may remain subject to the $750,000 threshold. An organization holding both older and newer awards can therefore trigger a single audit below $1 million. Maintain a tracking schedule of awards by issue date and confirm the applicable threshold with your auditor.
• Certain healthcare payments are excluded: Certain Medicare payments and Medicaid payments to subrecipients for patient care are excluded under the Uniform Guidance. Healthcare organizations should confirm the treatment of their specific payment arrangements with their auditor rather than assuming a blanket exclusion.
• The companion change: The Type A program threshold also rose to $1 million for entities expending between $1 million and $34 million, which affects major program determination and therefore audit scope.

Falling below the threshold removes the federal single audit requirement for that year and nothing else. Procurement standards, subrecipient monitoring, and cost principles still apply, and a state, funder, or governance trigger may still require an audit.

Check your state’s nonprofit audit requirements

Most states require charitable nonprofits to register before soliciting, and many attach an audit obligation above a revenue or contribution threshold. Those thresholds differ widely by jurisdiction and change through legislation, and secondary sources frequently contradict each other on the specific figures.

• Verify at the source: Confirm the current threshold with the state charity regulator or the statute itself rather than a published comparison chart.
• Multi-state solicitation compounds: Soliciting in several states can mean several registrations, each with its own threshold and documentation standard.
• Professional fundraisers can change the math: In some states, engaging a paid fundraiser lowers or removes the exemption.

Funder, lender, and governance requirements

Grant agreements, bond documents, and debt covenants can require an audit independently of any statute, and so can bylaws, which are rarely consulted at year end. Pull the largest grant agreements, the financing documents, and the bylaws before drawing any conclusion about your obligation.

 With the requirement confirmed and the engagement scoped, the remaining variable is time, and it is the one finance teams most often underestimate.

A 20-Week Nonprofit Audit Preparation Calendar

Preparation time varies substantially with close maturity, audit type, entity count, federal program volume, and auditor availability. The table below is a recommended planning framework rather than a universal standard: a practical audit preparation calendar can span roughly twenty weeks around fiscal year end (FYE). Adjust the spans to your own close cycle.

 If a single audit applies, note the filing deadline precisely. Under 2 CFR 200.512, the audit, the data collection form, and the reporting package must be submitted to the Federal Audit Clearinghouse within 30 calendar days after the auditee receives the auditor’s report, or nine months after the end of the audit period, whichever is earlier. For a December 31 year end, the outside date is September 30. For a June 30 year end, it is March 31. The milestone that generates the most work is the PBC package, so it is worth breaking down what your auditor expects to receive.

What Should Be Included in the PBC Package?

The prepared-by-client list names documents. It rarely specifies the format the auditor expects, which is where delay originates. A bank reconciliation delivered as a screenshot is not the same deliverable as a reconciliation that ties to the locked trial balance with supporting detail. Group the list into five buckets, assign each an owner, and note that where fund accounting is handled through year-end journal entries rather than transaction-level coding, every schedule has to be rebuilt by hand.

• Governance records: Board and committee minutes for the full year and through the report date, current bylaws, conflict-of-interest disclosures, and the approved budget with any amendments.
• Trial balance and ledger support: Locked trial balance, general ledger detail, and the journal entry listing with approval evidence. Material manual entries need supporting documentation attached rather than referenced.
• Reconciliations and tie-outs: Bank and investment reconciliations, receivable and payable aging, fixed asset rollforward with additions and disposals, and prepaid and accrual schedules. Each should agree to the trial balance without a reconciling plug.
• Revenue and contribution documentation: Grant agreements and award letters, gift instruments with restriction language, pledge schedules with discount and allowance calculations, and the in-kind contribution log with valuation basis.
• Federal award documentation: Draft SEFA by Assistance Listing number and award year, subrecipient monitoring files, procurement documentation for covered purchases, and prior-year findings status with remediation evidence.

Four of those five buckets stand or fall on reconciliations that agree to the trial balance, which is where preparation either holds together or comes apart.

Reconciliations to Complete Before Fieldwork

This is the checklist that does the most to keep last year’s comment off this year’s management letter. Work through each area, confirm it agrees to the locked trial balance, and retain the supporting detail in the same place you will deliver it from.

 Two of these areas generate a disproportionate share of comments, and both depend on how transactions are coded at entry rather than reconstructed at year end. Our guides to functional expense allocation and nonprofit accounting standards go deeper on both. These reconciliations exist because of what tends to go wrong without them.

Common Nonprofit Audit Issues and How to Prevent Them

Six issues appear repeatedly in nonprofit audit findings and management letters. Each maps to a specific control that reduces the chance of recurrence, which is why the third column matters more than the first. A repeat comment is generally read as a control weakness regardless of the dollar amount attached.

These issues are not only a fee and timeline problem. Where a single audit applies, they also become part of the public record.

Are Nonprofit Single Audit Findings Public?

Yes, where a single audit applies. Reporting packages submitted to the Federal Audit Clearinghouse are public records, and that data is republished. ProPublica’s Nonprofit Explorer has carried audit documents alongside Form 990 data since 2017, with filters for organizations where auditors flagged serious financial issues or a significant theft was reported.

• Who reads them: Institutional funders during due diligence, journalists, charity raters, and the AI assistants donors increasingly use to research organizations.
• What persists: A finding does not expire when the fiscal year does. It sits in a searchable public record.

That is worth carrying into the boardroom. If board reporting frames the audit as a finance department chore, the audit committee will keep funding it as one. The practical response is to work on the two things management controls, the fee drivers and the close itself.

How to Reduce Audit Delays and Additional Fees

Published fee ranges vary so widely across sources that quoting a single band would mislead more than it helps. Size, entity count, scope, federal programs, locations, transaction volume, accounting complexity, prior findings, deadlines, and the local auditor market all move the number. One of the largest controllable drivers of audit effort is how easily the organization can reconstruct and support its balances. Ask three firms for a scoped quote against your actual structure, then work the levers below.

• Reconcile monthly rather than annually: Twelve small reconciliations generally cost less staff time than one reconstruction, and they surface errors while the supporting detail is still findable.
• Deliver the PBC package complete: Complete delivery on the agreed date is one of the largest schedule levers management controls. Partial delivery interrupts the auditor’s workflow.
• Resolve and document known issues before fieldwork: Known discrepancies that remain unresolved or undocumented at fieldwork can lead to additional testing, proposed adjustments, delays, or reported control deficiencies.
• Turn open items around quickly: Fieldwork hours are billed. An open-item list managed daily closes faster than one reviewed weekly.
• Avoid prior-period restatements: Restatement expands scope, triggers additional testing, and typically appears in the management letter.
• Track prior-year findings with named owners: Assign each management response an owner and a date, then check progress monthly. Repeat findings are often unowned findings.

Auditor capacity is worth planning around as a scheduling constraint. The US Bureau of Labor Statistics projects about 124,200 openings for accountants and auditors each year on average over the 2024 to 2034 decade, and the AICPA has described a constrained talent pipeline, though its 2025 Trends Report also indicates that most public accounting firms that hired in 2024 expected to hold or increase hiring. The practical takeaway is not that the profession is collapsing. It is that good firms book early, so selecting your auditor several months before year end is how you secure a workable slot. Those levers reduce the cost of the audit you are about to have. Changing the close changes the cost of every audit after it.

How to Build an Audit-Ready Monthly Close

Teams that treat audit preparation as an annual six-week project tend to pay for it twice, in fees and in staff time. Teams whose monthly close already produces reconciled, dimensioned data start from a stronger position. A good close will not eliminate audit preparation, because confirmations, minutes, subsequent-events work, and auditor-selected samples still have to be handled. It does remove the reconstruction work that consumes most of the calendar.

• Reconcile every account monthly: Close the month properly and the year-end close gets substantially shorter.
• Code dimensions at transaction level: Fund, grant, program, department, and functional expense category should be attributes of the transaction rather than of a year-end allocation spreadsheet.
• Retain budget versions with variance commentary: When the auditor asks why program expense moved sharply, the explanation should already be recorded from the month it happened.
• Work from one source for board and audit reporting: When the board pack and the audit schedule come from different files, reconciling them becomes a fieldwork task.

Most organizations can begin these improvements without adding headcount, although teams with material capacity or expertise gaps may still need additional support. What it does require is a financial reporting layer that holds dimensional data continuously instead of a folder of exports rebuilt each year. That is the practical case for putting a planning and reporting layer above the ledger.

How Limelight Supports Audit-Ready Reporting

Limelight is FP&A software that sits above the ledger rather than replacing it, pulling actuals from Sage Intacct, NetSuite, QuickBooks, Microsoft Dynamics, or Blackbaud Financial Edge NXT. Four mechanisms are relevant to audit preparation, stated with their boundaries.

• Live actuals instead of exports: Schedules built on a live connection do not go stale between the close and the PBC delivery date, which removes a reconciliation step.
• Dimensional reporting across funds and grants: Restricted and unrestricted balances, grants, programs, and functional categories become easier to review and reconcile, provided the source transactions and accounting policies are correct. The underlying controls still live in GL configuration, coding, restriction documentation, release policies, and allocation methodology.
• Retained budget versions with commentary: Variance explanations captured monthly support audit inquiry from the record rather than from recollection, which is also the foundation of ongoing budget variance analysis.
• Role-based input: Budget assumptions, supporting commentary, and departmental submissions stay in a controlled workflow, reducing time spent reconciling competing spreadsheet versions during audit inquiries.

On evidence, Communication Service for the Deaf cut budget cycle times in half after moving off spreadsheets. That case study concerns budgeting rather than audit preparation, so it does not prove an audit outcome. What it indicates is that the organization was able to replace fragmented spreadsheet work with a faster, more controlled reporting process. Review-platform evidence points the same direction, with the caveat that several of the underlying reviews are several years old.

G2 Rating: 4.7/5

Capterra: 4.5/5.

A Gartner Peer Insights profile is also available.

 Tooling aside, the preparation work itself compresses into a short list you can run each year.

Nonprofit Audit Preparation Checklist

Use this as the short form. Each line maps to a section above.

• Confirm the engagement: Financial statement audit, single audit, review, or compilation. Read the statute and the funder agreement in their own words.
• Test all four requirement categories: Federal expenditure, state registration, funder and lender agreements, and governing documents. Record the conclusion in the board packet.
• Engage the auditor before year end: Sign the engagement letter with fee and timeline agreed, ideally four months out.
• Assign the PBC list line by line: Named owner and due date for every request, tracked in one place.
• Work the reconciliation checklist: All ten areas agreeing to the locked trial balance, with supporting detail retained.
• Build the SEFA before fieldwork: By Assistance Listing number and award year, with subrecipient monitoring files assembled, where federal awards apply.
• Close out prior-year findings: Remediation documented with evidence, not asserted.
• Calendar the filing deadline: The earlier of 30 days after receiving the report or nine months after period end, where a single audit applies.

Working formats for several of these schedules, along with budgeting and forecasting models, are available in the Limelight template library, and our guide to nonprofit budgeting covers the planning side of the same data. Work the list in order and the audit becomes a review of work already done rather than a deadline that consumes a quarter.

Conclusion

The audit is scored largely on data your organization already owns. Your auditor is not the main variable, the fee schedule is not the main variable, and the calendar only becomes one if you ignore it until the books are closed. What matters most is whether a given schedule can be produced on request or has to be rebuilt from exports and recollection.

Frequently asked questions

1. What is a nonprofit financial statement audit?

An independent CPA’s examination of your financial statements and supporting records. The auditor obtains an understanding of relevant internal controls, tests selected balances and transactions, and issues an opinion on whether the statements are fairly presented under GAAP.

2. What is the difference between a financial statement audit and a single audit?

A financial statement audit addresses whether the statements are fairly presented under GAAP. A single audit incorporates that work and adds testing of federal award programs and compliance requirements, plus a Schedule of Expenditures of Federal Awards and a federal filing.

3. When is a nonprofit required to have an audit?

Four common categories apply: federal award expenditure, state charitable registration thresholds, funder or lender agreements, and your own bylaws. Local contracts, bond documents, and program rules can also require one. Any single requirement creates the obligation.

4. What is the single audit threshold for nonprofits?

For federal awards issued on or after October 1, 2024, the threshold is generally $1 million in federal awards expended during the fiscal year, up from $750,000. Awards issued earlier may remain subject to the prior threshold.

5. When is the single audit reporting package due?

Under 2 CFR 200.512, the earlier of 30 calendar days after the auditee receives the auditor’s report or nine months after the end of the audit period. For a December 31 year end, the outside date is September 30.

6. How long does nonprofit audit preparation take?

A practical planning calendar spans roughly twenty weeks around fiscal year end, though actual time varies with close maturity, entity count, and federal program volume. Auditor selection should begin several months before year end rather than after it.

7. What is a PBC list?

The prepared-by-client list is the document request your auditor issues after engagement. It covers governance records, trial balance support, reconciliations, revenue documentation, and federal award files. Assign every line to a named owner with a due date.

8. What is the difference between an audit and a review?

A review provides limited assurance through analytical procedures and inquiry, without the testing and confirmation work an audit requires, and costs materially less. Some state thresholds and funder conditions accept a review, so confirm the requirement first.