Nonprofit Audit Requirements: Does Your Organization Need One?

Most nonprofits are not required by law to obtain an independent financial statement audit every year, but many organizations still need one. The nonprofit audit requirements that most commonly apply come from three sources: the federal Single Audit triggered by spending $1,000,000 or more in federal awards in a fiscal year, conditions written into individual grant agreements or loan covenants, and provisions in the organization’s own bylaws. This article explains when an audit becomes mandatory, how state charitable registration laws factor in, how an audit differs from a review or compilation, and what your team can do to prepare.

Where Nonprofit Audit Requirements Come From

Many boards assume every 501(c)(3) must be audited annually. In practice, the requirement almost always flows from a specific obligation rather than a blanket rule. Identifying which obligation applies to your organization is the essential first step before budgeting for and scheduling the right engagement.

The Federal Single Audit Threshold

The most clearly defined audit trigger for nonprofits is the federal Single Audit. Under the Uniform Guidance at 2 CFR 200.501, a non-federal entity that expends $1,000,000 or more in federal awards during its fiscal year must have a Single Audit or a program-specific audit conducted for that year. This threshold rose from $750,000 to $1,000,000 under the 2024 OMB revisions, and it applies to fiscal years beginning on or after October 1, 2024. That means the new threshold first affects organizations whose fiscal years end on or after September 30, 2025.

The key measure is federal expenditures, not federal revenue or the face value of awards received. A nonprofit holding a multi-year grant can still stay below the threshold in any single year if it draws down and spends less than $1,000,000 during that year. Federal funds passed through a state agency or another nonprofit also count toward the total, so pass-through dollars must be tracked as carefully as direct awards.

A few additional points are worth noting. Organizations below the threshold are exempt from the federal audit requirement for that year, but their records remain available for review by federal agencies, pass-through entities, and the GAO. OMB released a proposed rewrite of 2 CFR Part 200 in May 2026, with a potential effective date as early as October 1, 2026. Because that proposal is still in rulemaking and has not been finalized, the $1,000,000 threshold and current Single Audit framework remain operative. Organizations near the threshold should watch for the final rule.

If your organization receives significant federal funding, the mechanics of the Single Audit deserve their own deep read. Our Single Audit resource walks through scope, reporting deadlines, and auditor selection in detail.

Grantor, Funder, and Contract Requirements

Even below the federal Single Audit threshold, individual funders frequently impose their own audit requirements. Many private foundations, community foundations, and state or local government grantors condition their support on receipt of annual audited financial statements, or, for smaller grants, on a review. These requirements live in the grant agreement, so every award letter and contract deserves a careful read before you assume an audit is optional.

Some funders set their own dollar thresholds, requiring an audit only once your total budget or their specific award exceeds a stated amount. Others require audited financials regardless of organization size. When multiple funders each impose a requirement, the strictest one generally governs the level of assurance you must provide.

Lender and Bylaw Requirements

Banks and other lenders often include financial reporting covenants in loan and line-of-credit agreements. A covenant may require audited financial statements delivered within a set number of days after fiscal year end, and failing to deliver can constitute a technical default even if all payments are current. If your organization carries any debt, confirm what level of assurance your lender expects and whether the agreement specifies a delivery deadline.

Your own governing documents can also create an audit obligation. Many nonprofit bylaws direct the board or audit committee to arrange an annual independent audit, and once that language is adopted the audit becomes a matter of governance compliance. Boards should periodically confirm that their bylaws reflect the organization’s actual practices and current needs.

Nonprofit Audit Requirements by State

Federal rules apply uniformly across the country. State charitable registration laws are a different matter. Requirements vary widely, and multistate fundraisers face the broadest compliance surface.

Many states impose their own audit thresholds that apply when a charitable organization registers to solicit contributions in that state. The threshold is typically based on total gross revenue or total contributions received during the fiscal year. Common examples include California at $2,000,000 in gross revenue, New York at $1,000,000, Pennsylvania at $750,000, and Massachusetts and Connecticut at $500,000, though exact figures and exclusions differ by state and can change through legislation or regulation. The National Council of Nonprofits maintains a 50-state chart of nonprofit audit requirements that is the most reliable starting point for understanding the rules in each jurisdiction.

Not every state imposes a threshold. Some states accept an IRS Form 990 as the annual financial report for charitable registration purposes and do not mandate audited or reviewed financial statements at any revenue level, meaning for those organizations the decision to audit is driven by funders and lenders rather than by state law.

Multistate Solicitation

Nonprofits that fundraise or solicit contributions across state lines should check the registration and audit requirements of every state where they operate, not just their home state. An organization that is below the audit threshold in its own state may still trigger another state’s requirement based solely on the contributions it raises from residents of that state. National fundraisers, especially those running online donation campaigns, should treat this as a compliance checklist item rather than an afterthought.

Audit vs. Review vs. Compilation

When a funder or lender asks for “financial statements,” it is worth clarifying exactly which level of service they require. A CPA can provide three levels, and they differ in rigor, cost, and the degree of confidence a reader can place in the numbers.

Independent Financial Statement Audit

An independent financial statement audit is the highest level of assurance. The CPA gathers evidence, tests transactions and balances, evaluates internal controls, confirms information with third parties such as banks and donors, and issues an opinion on whether the financial statements are presented fairly in accordance with generally accepted accounting principles. An audit is the most rigorous and the most expensive option, and it is the level demanded by the federal Single Audit, most large grantors, and many lenders.

Review

A review provides limited assurance. The CPA performs analytical procedures and inquiries but does not test transactions or confirm balances at the level required for an audit, and the report states that the accountant is not aware of any material modifications that should be made. A review costs less than an audit and satisfies many mid-size funders, but it does not carry an opinion and it is not sufficient for Single Audit compliance.

Compilation

A compilation provides no assurance. The CPA assembles financial statements from information the organization provides, formatting them into proper statements without verifying the underlying data or issuing any conclusion. Compilations are the least costly option and are typically used for internal purposes or for smaller stakeholders who simply need presentable statements. Before accepting a compilation, confirm that the requesting funder or lender will accept that level of service.

For a full comparison of the three service types, see our audit vs. review vs. compilation overview.

Additional Situations That May Require an Audit

Beyond federal and state law and funder requirements, two additional circumstances can make an audit necessary for a nonprofit.

Employee benefit plans. A nonprofit that sponsors a 401(k) or 403(b) plan with enough eligible participants may be required to include an independent audit of the plan with its annual Form 5500 filing under ERISA. The participant count rules governing that threshold changed for plan years beginning on or after January 1, 2023, shifting from a total-participant count to a count of participants with account balances. Organizations with retirement plans should review this requirement separately. Our team covers the benefit plan audit rules in detail at modusalliance.com/services/.

Board governance expectations. Even when no legal or contractual requirement exists, many nonprofit boards choose to commission an annual audit as a matter of good governance. Audited financial statements strengthen donor confidence, support grant applications, and create accountability to the communities these organizations serve.

How to Prepare for a Nonprofit Audit

A well-prepared organization shortens fieldwork, reduces fees, and avoids the scramble of hunting for documents after the auditor has already arrived. Preparation is largely about reconciling accounts and organizing evidence before the engagement begins. The following checklist covers the core items.

• Reconcile every balance sheet account, including all bank and investment accounts, to supporting statements as of fiscal year end.
• Prepare a trial balance and draft financial statements that tie to the general ledger.
• Assemble all grant agreements, award letters, and contracts, and prepare a Schedule of Federal Expenditures if you are at or near the Single Audit threshold.
• Document contributions with and without donor restrictions and reconcile net asset balances to prior-year audited figures.
• Gather board minutes, current bylaws, conflict-of-interest policies, gift acceptance policies, and any other governance documents the auditor may request.
• Pull payroll records, retirement plan filings, and the most recent IRS Form 990.
• Prepare fixed asset and depreciation schedules reconciled to the general ledger.
• Compile a schedule of functional expenses, since nonprofits must present expenses by both function (program, management, fundraising) and nature under FASB ASC 958.

The functional expense schedule deserves particular attention because how costs are allocated across program services, management, and fundraising affects both your financial statements and the Form 990 ratios that donors and watchdog groups scrutinize.

One last practical step: engage your auditor early. Reputable firms fill their nonprofit audit slots months before year end, and starting the conversation well in advance lets you identify and correct bookkeeping gaps while they are still easy to fix. Firms that use AI-assisted audit technology, including source-linked workpapers and automated reconciliations, can sometimes work more efficiently through your records and return a completed report faster, which matters when a grant deadline depends on delivering audited financials.

Related reading: Yellow Book (GAGAS) Audits: When Are They Required?

Frequently Asked Questions

Does my nonprofit need an audit?

Not necessarily. There is no universal federal or state requirement that every 501(c)(3) obtain an annual independent audit. An audit becomes mandatory when a specific trigger applies: spending $1,000,000 or more in federal awards in a fiscal year (triggering the Single Audit requirement under 2 CFR 200.501), a state charitable registration law that requires audited financials above a revenue threshold, a funder or lender requirement written into a grant agreement or loan covenant, or a provision in the organization’s own bylaws.

What is the current Single Audit threshold?

The current federal Single Audit threshold is $1,000,000 in federal award expenditures in a single fiscal year. A nonprofit that meets or exceeds this amount must obtain a Single Audit or a permitted program-specific audit. The threshold applies to fiscal years beginning on or after October 1, 2024, and is measured by federal dollars actually expended, including pass-through funds from state agencies or other nonprofits.

Do state laws require nonprofits to submit audited financial statements?

Many states do impose audit requirements tied to revenue or contribution levels for charitable registration purposes, but the rules vary significantly. California requires an audit above $2,000,000 in gross revenue; New York sets its threshold at $1,000,000; other states range from $500,000 to $750,000 or more. Some states have no audit threshold at all and accept the IRS Form 990 as the annual financial report. Nonprofits that solicit in multiple states need to check each state’s requirements.

What is the difference between a nonprofit audit and a review?

A financial statement audit provides the highest level of assurance: the auditor tests transactions, confirms balances with third parties, evaluates internal controls, and issues an opinion on whether the statements are fairly presented. A review provides limited assurance through inquiry and analytical procedures only, costs less, and does not produce an opinion. The Single Audit requires a full audit; many individual funders will accept a review if their grant agreement allows it.

How much does a nonprofit audit cost?

Cost varies with the size and complexity of the organization, the quality and completeness of the accounting records, and whether a Single Audit is required. A Single Audit involves additional procedures, a Schedule of Federal Expenditures, and a reporting package for the federal clearinghouse, which increases cost and time compared to a standard financial statement audit. Requesting quotes from qualified firms and providing a clear picture of your organizational complexity upfront leads to more accurate estimates.

How long does a nonprofit audit take?

For a well-prepared organization, fieldwork often runs one to three weeks, followed by additional time for drafting and finalizing the report. Preparation quality is the biggest variable. Complete reconciliations, organized grant documentation, and a draft functional expense schedule can substantially compress the timeline. Missing records or unreconciled accounts extend fieldwork and push the final report past important deadlines.