You've just closed your books for the year, and your program team is celebrating a major grant award. Then finance gets an email asking whether your organization needs an audit, a review, or something called a Single Audit. Someone on the board says the IRS requires it. A colleague forwards an article that still mentions a lower federal threshold. Your stomach drops a little.
That reaction is normal. Nonprofit audit requirements are confusing because there isn't one master rule. Federal grant rules, state charity registration rules, lender requests, foundation requirements, and your own bylaws can all point in different directions. A nonprofit can be under the line for one requirement and over the line for another.
The good news is that the rules make more sense once you separate them into buckets. If you do that, most of the anxiety turns into a checklist.
Your Guide to Navigating a Nonprofit Audit
A first audit usually arrives at an awkward moment. The organization is growing. The executive director is focused on programs and fundraising. The finance team is stretched. Then someone asks for audited financial statements, and suddenly everyone feels like they should already know the answer.
That's where many leaders get tripped up. They assume “audit” means one thing. It doesn't. A nonprofit might need a federal Single Audit because of federal spending. Another might need a state-required financial audit because of charitable registration rules. A third might not be legally required to get either one, but a foundation, bank, or bylaw provision may still require outside financial statements.
Practical rule: Start by asking who is asking for the audit, and why. The answer usually points you to the governing rule.
The part that causes the most confusion in 2026 is the federal threshold. Many online articles still repeat the old figure. That's outdated for the relevant fiscal years. The current rule changed, and relying on stale guidance can lead to unnecessary work or, worse, the wrong compliance decision.
If you're based in New York, there's another layer. New York has its own filing framework for charities, and the line between a full audit and a CPA review matters. Leaders often hear “we need auditeds” when the actual state requirement is different.
This offers a practical perspective on the subject. No jargon for the sake of sounding technical. Just what triggers an audit, how federal and New York rules differ, what kind of report may be required, and how to get ready without turning the process into a fire drill.
Understanding What Triggers an Audit
A common scenario goes like this. Your nonprofit closes a strong year, revenue is up, a new grant came in, and someone on the board asks, “Do we need an audit now?” The right answer depends on what triggered the requirement.
Audit requirements usually come from three separate systems working at the same time: federal funding rules, state charity filing rules, and private agreements. That is why two nonprofits with similar budgets can face very different obligations. One may need no audit at all. Another may need audited financial statements because of state law. A third may need a Single Audit because of federal spending.
Federal funding can trigger a special audit
Federal awards follow their own rulebook. If your organization spends enough federal funds during the fiscal year, a Single Audit may be required. That is different from a regular financial statement audit because it also tests compliance with federal program requirements.
The point that confuses new executive directors is simple. Receiving a federal grant does not automatically create an audit requirement. The trigger is based on federal expenditures during the year, using the federal threshold that applies to that fiscal period. In 2026, that distinction matters because many online articles still cite the old Single Audit threshold, which leads organizations to make the wrong call too early or too late.
State law may require an audit or a review
State rules are a different question entirely. Many states tie outside CPA reporting requirements to charitable registration, fundraising activity, revenue, or contribution levels. In practice, that means your nonprofit can have no federal audit requirement and still need a CPA report for state filing purposes.
New York is a good example, and it matters because leaders often use the word “audit” as a catchall. Under New York's charity filing rules, the required level of outside accountant involvement may be a full audit or a CPA review, depending on the organization's filing category and revenue. That difference affects cost, timing, and how much preparation your finance team needs to do.
If your nonprofit raises money in more than one state, the analysis gets more complicated. The home office state is only part of the answer. Fundraising registrations in other states can create separate filing obligations.
Private requirements still matter
Then there is the third source of audit requests. A bank may require audited financial statements under a loan agreement. A foundation may ask for them before renewing a grant. Your bylaws may require an annual audit once the organization reaches a certain size.
These requests stack rather than replace one another. A lender requirement does not cancel a state rule. A state filing rule does not satisfy a federal Single Audit requirement.
A practical way to sort this out is to ask three questions:
- What kind of money did we receive and spend? Federal awards raise one set of issues. Contributions, program revenue, and financing agreements raise others.
- Where are we registered or actively fundraising? State filing requirements often follow solicitation activity, not just your main office location.
- What have we already agreed to in writing? Check bylaws, grant agreements, loan covenants, and major donor conditions.
Here is the main takeaway. “Do we need an audit?” is really three questions, not one.
If your organization is growing quickly, review those triggers before year-end. It is much easier to prepare early than to discover after closing the books that a grant, a filing rule, or a loan covenant changed what your nonprofit needs.
Federal Audit Rules and The Single Audit
The federal rule that matters most for grant-funded nonprofits is the Single Audit. This is the area where outdated internet advice causes the most trouble.
The threshold changed and many websites still get it wrong
For the relevant current rule, a federal Single Audit is mandatory when a nonprofit expends $1 million or more in federal funds during a single fiscal year, and that threshold increased from the prior $750,000 level for fiscal years beginning on or after October 1, 2024. The change applies to fiscal years ending on or after September 30, 2025, as explained in Gatekeeper's summary of nonprofit audit requirements.
That means a lot of content still floating around online is stale. Some articles quote the old threshold as if it were still current for everyone. It isn't.
Brady Ware's discussion of recent nonprofit audit compliance changes also highlights that this increase is often misreported and creates a real compliance problem for organizations relying on outdated guidance.
What a Single Audit actually covers
A Single Audit is broader than a standard financial statement audit. It doesn't just ask whether the numbers in your financial statements are fairly presented. It also looks at internal controls and compliance with federal program rules.
That difference matters operationally. If your accounting records are clean but your grant documentation is weak, the Single Audit can still surface problems.
The process typically requires documentation such as:
- SEFA preparation: The Schedule of Expenditures of Federal Awards, often called the SEFA, is central to the engagement.
- Internal control documentation: Auditors need to understand how your team approves spending, tracks grants, and monitors compliance.
- Detailed accounting records: Balance sheets, general ledgers, and supporting schedules need to tie out cleanly.
If you think of a standard audit as checking the financial map, a Single Audit also checks whether you followed the federal road signs.
What the new rule means for mid-sized nonprofits
The threshold increase gives some nonprofits breathing room. An organization that would have crossed the prior federal line may no longer be required to complete a Single Audit under the updated rule. That can change budget planning, timing, staffing, and how aggressively you build your compliance calendar.
But don't oversimplify it. The new federal threshold doesn't mean you're free from all audit obligations. A state filing requirement, a lender request, or a foundation condition may still require outside financial statements.
One more point causes confusion. The IRS does not generally require regular financial audits for 501(c)(3) organizations. Gatekeeper's overview notes that this federal audit requirement is distinct from the IRS filing framework, which is one reason nonprofit leaders sometimes mix up tax reporting and audit reporting.
Cost is another practical concern. The same Gatekeeper source notes that these audits often cost roughly $10,000 or more depending on size and complexity. That's one more reason to identify the correct requirement early instead of assuming you need the highest-level engagement.
State Audit Rules with a Focus on New York
You hire a CPA because a funder asks whether your organization needs an audit. Then your development team mentions charitable registration in New York, your board treasurer finds an older PDF online, and suddenly you have two different thresholds for the same state. That confusion is common. It also leads nonprofits to buy the wrong service or miss a filing requirement.
Why state rules create confusion
State rules do not follow one uniform framework. Each state sets its own charitable filing rules, financial thresholds, and required CPA reports. For a nonprofit that raises money in several states, the result can feel like keeping track of different speed limits on connected roads. The route is continuous, but the rules change as you cross state lines.
That matters because the trigger may depend on where you solicit contributions, not only where your main office sits. One state may ask for an audit. Another may accept a review. Another may tie the filing to charitable registration rather than to a stand-alone audit law.
New York uses a tiered approach
New York is one of the states nonprofit leaders should check carefully, especially if they are based in New York or actively solicit donations there. The current New York rule, effective July 1, 2021, requires a CPA review for organizations with more than $250,000 up to $1 million in gross annual revenue and support, and a full independent CPA audit for organizations with more than $1 million.
That distinction matters in practice. A review and an audit are not interchangeable, and New York does not require every organization above $250,000 to get a full audit.
Here is the plain-English version:
| Revenue range in New York | Likely filing expectation |
|---|---|
| More than $250,000 up to $1 million | CPA review report |
| More than $1 million | Full independent CPA audit |
If you have been seeing a $750,000 New York audit threshold online, you are likely looking at older guidance that has not been updated. That older number still circulates, which is one reason so many 2026 articles on nonprofit audit requirements are out of date. The current New York audit threshold is more than $1 million, not $750,000.
Be careful with older New York guidance
The New York Attorney General's audit committee guidance document is helpful for governance points, including the role of the board or audit committee in engaging an independent CPA and the use of Form CHAR500 with the organization's filing package. But some readers get tripped up because older guidance materials may still reference the prior $750,000 threshold.
So use that document for process and oversight context, not for the current threshold amounts unless you confirm the date of the guidance. For 2026 planning, the safer rule of thumb is simple: in New York, more than $1 million points to an audit, and more than $250,000 up to $1 million points to a review.
Why multi-state nonprofits need a state-by-state check
A nonprofit can satisfy New York with a review and still owe a full audit somewhere else. That is not a contradiction. It means the organization operates under more than one state's filing rules.
This is why a generic checklist often causes trouble. A better approach is to build a state filing matrix that shows three things for each state where you solicit. The registration requirement, the financial threshold, and the type of CPA report required. That gives your executive team and board a clear compliance map instead of a stack of conflicting articles.
If New York is part of your fundraising footprint, start with the current New York thresholds and work outward from there. That one step prevents a surprising number of filing mistakes.
Audits Reviews and Compilations Explained
Financial statement services come in three levels. Each one involves a different amount of CPA work and gives boards, funders, lenders, and regulators a different level of confidence.
Many nonprofit leaders get tripped up by this. The words sound similar, but they are not interchangeable. Choosing the wrong service can mean paying twice. You may receive a compilation, then learn that New York, a grantor, or a bank expected a review or a full audit instead.
Start with the core difference. An audit provides the highest level of assurance of the three. The CPA tests selected transactions and balances, examines supporting documents, evaluates accounting policies, and issues an opinion on whether the financial statements are fairly presented.
A review is narrower. The CPA mainly performs inquiry and analytical procedures. In plain English, that means asking management focused questions and comparing financial information for items that do not make sense on their face. The CPA gives limited assurance, which is meaningfully less than an audit.
A compilation is the lightest service. The CPA takes financial information provided by management and formats it into financial statements. No assurance is provided. The accountant is not expressing an opinion or concluding that nothing came to their attention.
One practical way to compare them is by two questions. How much work does the CPA perform, and how much comfort does the report give an outside reader?
| Service | What the CPA does | Level of assurance |
|---|---|---|
| Audit | Tests selected records, gathers evidence, and issues an opinion | Highest of the three |
| Review | Performs inquiry and analytical procedures | Limited |
| Compilation | Presents management's financial data in statement form | None |
The distinction matters because the required report must match the rule or request. If New York requires a review for your filing level, a compilation does not satisfy that requirement. If a lender asks for audited financial statements, a review will not satisfy the loan covenant.
It also matters for planning. An audit usually asks more of your finance team because the CPA will request support for balances, internal process documentation, and explanations for unusual items. A review is usually lighter. A compilation is lighter still, but outside users get much less comfort from it.
For 2026, this point deserves extra attention because many online articles still blur the lines between services while also using outdated threshold amounts. The threshold confusion is especially common around the federal Single Audit change to $1 million and around state rules such as New York's review and audit requirements. The service level still has to match the actual rule that applies to your organization.
A good question for management and the board is simple: what report satisfies the legal requirement and also meets the expectations of our funders, lenders, and governance team? That question usually leads to the right answer faster than asking which report costs less.
How to Prepare for Your First Nonprofit Audit
A smooth audit starts months before fieldwork. The organizations that struggle aren't always the ones with bad finances. Often, they're the ones that wait too long to organize support.
Build the project before the auditors arrive
Treat the audit like a project, not a surprise event. That means assigning ownership, setting deadlines, and collecting documents in a central place before the first request list lands in your inbox.
Start with the CPA firm. If you need a nonprofit financial statement audit, choose a firm that handles nonprofit work regularly. If you may need a Single Audit, make sure the firm has that specific experience. Those aren't interchangeable skill sets in practice.
Then expect a Prepared by Client list, often shortened to PBC list. That list tells you what the auditors need and in what format.
Gather the records that usually slow teams down
Most first-year delays come from a few predictable categories:
- Cash support: Bank statements, reconciliations, and explanations for unusual items
- Revenue support: Grant agreements, donor restrictions, pledge schedules, and major contracts
- Governance records: Board minutes, committee minutes, and key policy documents
- Accounting detail: General ledger, trial balance, fixed asset schedules, and support for significant balances
Keep one person as the audit coordinator, even if several people help. Audits get messy when auditors ask three staff members the same question and receive three slightly different answers.
To help your team see the process visually, this short video gives a useful overview of audit preparation basics:
Focus on internal controls early
Preparation isn't just document gathering. It's also making sure your processes make sense. Auditors will notice if one person opens checks, records deposits, approves payments, and reconciles the bank account. Even in a small nonprofit, management should think about separation of duties, approval trails, and documented procedures.
A short planning checklist usually helps:
- Choose the right firm: Match the CPA's experience to the engagement you need.
- Close the books cleanly: Reconcile major accounts before the audit starts.
- Create one document hub: Shared folders work well if they're organized by request category.
- Brief the board: The board shouldn't hear about the audit only when the report is finished.
- List open issues: If there are missing invoices, unclear restrictions, or unresolved reconciliations, flag them early.
The fastest audits aren't the ones with the fewest transactions. They're the ones where management can explain the transactions clearly and produce support quickly.
Frequently Asked Questions About Nonprofit Audits
What is the board's role in the audit process
The board, or its audit committee, has an oversight role. In practical terms, that means selecting the independent CPA, understanding the scope of the engagement, reviewing the final report, and asking follow-up questions where needed. In New York, the board or audit committee also has a defined role in engaging the independent CPA for the required filing framework, as noted earlier.
Does the IRS require nonprofits to get a financial audit
Not as a general rule. The IRS focuses on annual information reporting, including Form 990. Audit requirements usually come from federal award rules, state charitable filing rules, lenders, grantmakers, or internal governance documents.
Is Form 990 the same thing as an audit
No. A Form 990 is an IRS information return. An audit is an independent CPA examination of financial statements. They often connect because audited numbers may feed into the return, but they are separate compliance items with different purposes.
If we don't legally need an audit, should we still consider one
Sometimes, yes. A voluntary audit or review can help with lender conversations, major grant applications, board governance, or internal discipline. The right answer depends on your stakeholders and your growth plans, not just whether a regulator currently requires it.
If your organization is sorting through federal grant exposure, New York filing rules, or the difference between an audit and a review, Blue Sage Tax & Accounting Inc. can help you interpret the requirement, prepare the right records, and move through the process with less confusion and more confidence.