The nonprofits that move through their audit with the least friction usually aren’t doing anything complicated. They’re tracking restricted funds as contributions come in, keeping last year’s documentation somewhere the whole team can find it, and building on what worked the year before. This checklist covers what to prepare, on what timeline, and how to carry that same momentum into next year. We’ll also look at how AI is helping teams keep prior-year decisions on hand, so nothing has to be rebuilt from scratch each cycle. Audit Prep Timeline for 2026 Most nonprofits move through the same rhythm each year, even if the exact dates shift with their fiscal year. Q1: January through March Organizations close out year-end financials, reconcile bank and investment accounts, and start building the “provided by client,” or PBC, list their auditor will request. This is also when many finance teams double-check that last year’s management letter items were fully resolved. Q2 through Q3: April through August This stretch is the audit season for most nonprofits. Auditors run fieldwork, test a sample of transactions against supporting documentation, and produce a draft report for your review. Staff should expect requests for reconciliations, grant files, and interviews with anyone who touches restricted funds or payroll. Late summer through fall Auditors issue the final audited financial statements. Many organizations use this window to prepare their Form 990 filing, due on the fifteenth day of the fifth month after the fiscal year ends. For calendar-year filers, that’s May 15, though a six-month extension is available through Form 8868 if you need it. Does Every Nonprofit Need an Audit? Not every nonprofit is required to conduct an audit, and the term itself covers more than one kind of review. A nonprofit audit can mean: Independent financial audit. An external CPA firm examines your financial statements and supporting records, then issues a formal opinion on whether they’re fairly presented. This is the audit most funders and states mean when they use the word. IRS audit. A tax compliance examination conducted by the IRS, separate from your annual financial statement audit and far less common for most nonprofits. Internal audit. A review conducted by staff or board members, often through an audit committee, to test whether internal controls work the way they’re documented to work. Compliance audit. Verifies that your organization followed the specific terms of a grant, contract, or regulation, rather than evaluating your finances as a whole. Operational audit. Looks at efficiency and process rather than financial accuracy or compliance, and comes up less often than the other four. When an independent audit is required A few triggers determine whether your nonprofit needs one: Federal funding. Organizations that spend $1,000,000 or more in federal awards during a fiscal year need a Single Audit under the Uniform Guidance. The Office of Management and Budget raised this threshold from $750,000 to $1,000,000 for fiscal years beginning on or after October 1, 2024, so if you’ve been tracking the older number, it’s worth double-checking against your current award totals. State law. Thresholds vary widely and rarely match the federal number. California requires an audit once gross revenue hits $2,000,000. New York sets the line at $1,000,000. Other states, including Massachusetts and Connecticut, require one starting at $500,000, and a handful set the threshold even lower. If your nonprofit solicits donations in more than one state, you may need to meet the strictest threshold among every state where you’re registered, not just the one where you’re incorporated. Check your state’s charitable registration office directly. Don’t assume last year’s threshold still applies. Funder or grantor requirements. Many foundations and government grantors require an audit as a condition of funding, regardless of your total revenue. Bylaws or board policy. Some nonprofits commit to an annual independent audit voluntarily, as a way to build trust with donors and the board. The Nonprofit Financial Audit Checklist The checklist below covers six categories that come up in nearly every nonprofit audit. We’ll walk through proper order and why each one matters to your auditor. Financial records Financial records—general ledger, trial balance, bank and investment statements with reconciliations, accounts receivable and payable schedules, fixed asset and depreciation schedules, and prepaid expense schedules—form the backbone of fieldwork. Incomplete or unreconciled records here are the fastest way to add weeks to your timeline. Compliance and governance documents This includes articles of incorporation, bylaws, your IRS determination letter, the prior year’s Form 990, board and committee meeting minutes, and your conflict of interest policy. Auditors use these to confirm your organization is operating consistently with how it’s structured on paper. Grants, contributions, and restricted funds Grant agreements and their reporting requirements, documentation of donor restrictions, and evidence that your organization tracked restricted funds separately and spent them according to donor intent. This is the section auditors flag most often, and it deserves more attention than a quick document pull. If your team can’t show, dollar for dollar, that a restricted grant was spent on what the donor specified, that’s where findings start and where funders start asking harder questions. Organizations juggling several grants at once often run into the same problem: two funders restrict money for similar-sounding purposes, and the accounting team has to prove the funds stayed separate the whole way through. A clear system for tagging restricted contributions at the moment they arrive, rather than sorting it out at year-end, makes this section far easier to defend. Payroll and personnel Payroll records, W-2s and 1099s, timekeeping records, board-approved compensation documentation, and independent contractor agreements. For organizations with program staff paid across multiple grants, this section often takes longer than expected because time needs to be allocated correctly across funding sources. Internal controls documentation Internal controls documentation include segregation of duties, approval workflows, cash handling procedures, and your whistleblower policy. Auditors don’t collect these simply as paperwork. They test whether the controls described on paper match what actually happens day to day, which is why a policy sitting untouched since 2019 tends to raise more questions than it answers. Small nonprofits with lean staff often struggle here, since one person may approve, record, and reconcile the same transaction. Auditors expect you to name the gap and explain the compensating control, a board member reviewing bank statements each month, for example, rather than pretend the gap doesn’t exist. Prior-year audit findings Documentation showing how you addressed last year’s management letter comments. Auditors revisit these every single year, and organizations that can show a clear resolution trail typically move through the second-year review faster. Unresolved findings, on the other hand, tend to escalate, both in how auditors treat them and in how funders read your audited financials. Common Reasons Nonprofit Audits Take Longer Than They Should There are a few reasons nonprofit audits may take longer than usual: Restricted funds get reconciled after the fact. Instead of tracking donor restrictions as contributions come in, teams try to reconstruct the trail months later, once the auditor asks for it. Prior-year reasoning isn’t written down anywhere. Without a record of why the team applied a treatment a certain way, they re-litigate the same accounting judgment calls every single year. Documents live scattered across drives, inboxes, and individual laptops. Instead of one shared source, supporting evidence sits wherever the person who handled it last happened to save it. Staff turnover erases institutional knowledge. When the person who handled a transaction leaves, so does the context behind it, and the next audit starts from zero. The Next Step Successful nonprofit audit filings require treating audit readiness as a year-round habit instead of a spring scramble. Start by structuring historical data so prior-year conclusions and treatment decisions are searchable, rather than buried in an old folder or a departed employee’s inbox. Keep restricted-fund tracking and internal controls documentation current throughout the year instead of reconstructing it under deadline pressure. When a question comes up mid-audit, whether your team handled a similar grant the same way last year shouldn’t cost anyone an afternoon of searching. This is where AI is starting to help accounting and audit teams. It can surface how the team handled a similar transaction in a prior period, cross-reference GAAP or FASB guidance against your organization’s own internal methodology, and maintain a traceable record back to the original source document. Judgment still sits with the auditor and your finance team. The work AI takes on is the manual re-work around that judgment, the searching, the cross-referencing, and the re-explaining that eats up so much of every audit cycle. Trullion’s Knowledge Room grounds these lookups in your organization’s own frameworks, standards, and prior work, so your team spends less time re-explaining last year’s decisions and more time on the audit itself. See how Trullion supports faster, error-free audits. FAQs How long does a nonprofit audit take? The full process, from selecting an auditor through the final report, commonly runs a couple of months. Fieldwork itself often takes anywhere from one to several weeks, depending on your organization’s size and how ready your records are when the auditors arrive. What’s the difference between an audit and a financial review? An audit provides the highest level of assurance. The auditor tests transactions, verifies supporting documentation, and evaluates internal controls before issuing a formal opinion. A review offers a lower level of assurance, built mainly on analytical procedures and inquiries rather than detailed testing. Reviews cost less and take less time, but some funders and states require a full audit regardless of which one you’d prefer. What happens after the audit report comes back? The auditor presents the report, along with a related management letter, to your board or audit committee. The board formally accepts the audited financial statements, and staff address any findings in the management letter before the next cycle starts. Many organizations also use the finalized numbers to complete their Form 990. How often should a nonprofit be audited? Most nonprofits that meet a federal, state, or funder threshold audit annually. Organizations below every threshold aren’t required to, though some choose a periodic audit, every two or three years, for example, to build confidence with donors and the board.