Audit vs Review vs Compilation: How to Choose the Right Level of Financial Statement Assurance

What Is the Difference Between an Audit, Review, and Compilation?

The differences between an audit, review, and compilation center on three dimensions: what the CPA does, what level of assurance the report provides, and what it costs. All three are formal CPA engagements governed by AICPA professional standards; they are not informal bookkeeping services.

The right choice depends on who is requesting the financial statements, what level of confidence they need, and the business's budget. All three services produce formal CPA reports that follow professional standards but the depth of work, the assurance conveyed, and the cost differ substantially.

Key Takeaway: Compilations provide no assurance at $3,000–$8,000, reviews provide limited assurance at $8,000–$20,000, and audits provide the highest assurance with a formal opinion at $15,000–$50,000+ in the Maryland market the comparison table above is the definitive reference for matching service to need.

What Does a Compilation Include?

A compilation is the lowest-cost CPA financial statement service governed by SSARS (AR-C Section 80). The CPA takes client-provided financial data, typically a trial balance and general ledger, and organizes it into properly formatted financial statements consistent with GAAP, cash basis, tax basis, or another applicable financial reporting framework. The CPA reads the financial statements to determine whether they are appropriate in form and free from obvious material errors.

No testing occurs. No verification. No opinion. The compilation report states explicitly that no assurance is provided on the accuracy or completeness of the financial statements.

What You Get

The deliverable includes formatted financial statements (balance sheet, income statement, and optionally a statement of cash flows) accompanied by the CPA's compilation report, a brief, typically one-paragraph document. Compilations carry a unique advantage: financial statement disclosures (notes) can be omitted entirely, provided the omission is noted in the report. Omitting disclosures is common for internal-use compilations and can reduce the cost by 30–50%.

When a Compilation Is Sufficient

Compilations work for internal management reporting, basic lender requirements for smaller loan amounts, angel investor conversations, and situations where a contract or agreement requires "CPA-prepared financial statements" without specifying an assurance level. They also work when your business has a strong internal accounting function and simply needs a CPA to format the output professionally.

The compilation's independence exception is its most distinctive feature. Under SSARS, CPAs can issue compilation reports even when they lack independence from the client, provided the lack of independence is disclosed. This means the same firm handling your bookkeeping can compile your financial statements advantage for cost-conscious businesses that use one firm for multiple services.

Key Takeaway: Compilations provide CPA-formatted financial statements with no assurance at $3,000–$8,000, with the unique advantage that disclosures can be omitted (reducing costs 30–50%) and the CPA doesn't need to be independent making it the right choice when stakeholders need professional formatting but not third-party verification.

What Does a Financial Statement Review Include?

A review engagement provides limited assurance the middle ground between a compilation's zero assurance and an audit's comprehensive opinion. Governed by SSARS (AR-C Section 90), the CPA performs analytical procedures and management inquiries to reach a conclusion expressed in the negative: "Nothing came to our attention that would require material modifications." This is called negative assurance, the CPA isn't certifying the statements are correct, but is reporting that their procedures didn't reveal problems.

What You Get

The CPA compares current-year financial data to prior periods, industry benchmarks, and expected trends. They ask management about accounting policies, significant transactions, unusual items, and any known fraud or suspected fraud. They read the financial statements for conformity with the applicable reporting framework. Under SSARS 25 (effective for periods ending after December 15, 2023), the CPA must also determine and apply materiality, directing attention to the financial statement areas most likely to contain material misstatements.

Reviews require full-disclosure financial statements; notes cannot be omitted, unlike compilations. CPA independence is mandatory with no exception. If the same firm handles your bookkeeping, they typically cannot also perform your review.

When a Review Is the Right Choice

Reviews fit when bank loan covenants specify "reviewed financial statements," when a board of directors requires independent verification beyond a compilation, or when SBA loan applications need moderate assurance (SBA accepts reviewed financials for businesses under $20M gross revenue). Reviews also serve businesses where lenders want more confidence than a compilation provides but where audits aren't required by regulation.

A critical planning note: a review cannot be "upgraded" to an audit mid-engagement. Review and audit procedures differ fundamentally. If you start a review and later discover you need an audit, you typically must restart the engagement paying for both. Coordinate with your CPA early to avoid duplicate costs.

Key Takeaway: Reviews provide limited (negative) assurance at $8,000–$20,000 through analytical procedures and management inquiries, require CPA independence and full disclosures, and cannot be upgraded to audits mid-engagement plan ahead if there's any chance you'll need an audit within the year.

What Does a Financial Statement Audit Include?

A financial statement audit provides reasonable assurance, the highest level of confidence a CPA can offer that financial statements are free from material misstatement. Governed by GAAS (Generally Accepted Auditing Standards), audits involve significantly more work than reviews or compilations, which explains both their higher cost and their greater stakeholder value.

What You Get

The CPA independently examines financial statements through risk assessment, internal control evaluation, transaction testing via sampling, third-party confirmations (banks, customers, vendors, attorneys), analytical procedures, and physical observations such as inventory counts. The audit concludes with an opinion of the CPA's professional judgment on whether financial statements are fairly stated per GAAP. Opinions range from unqualified (clean the best outcome) to qualified, adverse, or disclaimer of opinion.

When an Audit Is Required or Recommended

Certain situations mandate an audit by law or regulation:

1. Government contracts requiring audited financials for pre-award determinations
2. Nonprofit organizations exceeding Maryland's $750,000 charitable contributions threshold
3. Employee benefit plans with 100+ participants with account balances (ERISA requirement)
4. Organizations receiving $1 million+ in federal awards (single audit under Uniform Guidance)
5. Publicly traded companies (SEC/PCAOB requirement)
6. SBA loans exceeding $20M gross revenue

Voluntary audits make strategic sense for businesses planning to seek venture capital or private equity investment, preparing for a business sale or merger, or scaling into government contracting where audit-readiness is a competitive advantage.

First-year audits cost 20–30% more than recurring engagements because the CPA must establish opening balances, understand the business from scratch, and perform additional procedures. An audit does not guarantee absolute accuracy; it provides "reasonable assurance," meaning auditors can miss immaterial errors or sophisticated fraud schemes. Understanding the full audit processhelps set appropriate expectations.

Key Takeaway: Audits provide the highest assurance (a formal opinion) at $15,000–$50,000+ in the Maryland market, are required for government contracts, nonprofits above the $750K threshold, benefit plans with 100+ participants, and publicly traded companies first-year audits cost 20–30% more than recurring engagements.

How Much Do Audits, Reviews, and Compilations Cost?

Cost is often the deciding factor when businesses have flexibility in choosing their service level. In the Maryland and D.C. metro market, mid-market businesses ($1M–$25M revenue) should budget based on these ranges:

The single biggest cost driver across all three services is the quality of accounting records. Businesses with disorganized books, incomplete reconciliations, and missing documentation pay significantly more the CPA spends additional hours requesting, organizing, and verifying information that should have been ready before the engagement started. Investing in [audit preparation](link-target: How to Prepare for a Financial Audit) reduces costs across every service level.

Cost also varies by reporting framework. GAAP-basis financial statements with full disclosures cost more to compile, review, or audit than tax-basis or cash-basis statements. If your loan document doesn't specify GAAP, ask whether tax-basis reporting is acceptable. This single change can reduce your engagement cost by 15–20%.

Key Takeaway: The quality of your accounting records is the single biggest controllable cost factor. Businesses with clean, reconciled books pay less for every service type, and switching from GAAP-basis to tax-basis reporting (when stakeholders accept it) can reduce costs by 15–20%.

How Do You Decide Which Service You Need?

Choosing the right service starts with what your stakeholders require, then factors in growth trajectory and internal value.

Start With What Your Stakeholders Require

Check your loan covenants, operating agreements, partnership agreements, regulatory filings, and grant agreements. If a specific service level is stipulated, that's your answer there's nothing to decide. If the document says "CPA-prepared financial statements" without specifying a level, you have room to negotiate.

Choose a compilation if:

• Financial statements are for internal management use
• Your lender accepts compiled statements for your loan size
• You need CPA formatting but not third-party verification
• Your CPA also handles your bookkeeping (independence exception applies)

Choose a review if:

• Your loan covenant specifies "reviewed financial statements"
• Your board or investors want more confidence than a compilation provides
• You're applying for an SBA loan under $20M gross revenue
• You need moderate assurance at a fraction of audit cost

Choose an audit if:

• Any regulation, statute, or contract specifically requires "audited financial statements"
• You're preparing for a capital raise (Series A or later)
• You're pursuing government contracts requiring audited financials
• Your employee benefit plan has 100+ participants with account balances
• Your nonprofit exceeds Maryland's $750K charitable contributions threshold

Consider Your Growth Trajectory

If your business plans to seek investment, pursue government contracts, or apply for larger credit facilities within 12–24 months, consider starting with an audit now rather than upgrading later. Reviews cannot be upgraded to audits mid-engagement, and switching from reviews to audits in a subsequent year means the auditor must verify opening balances adding cost that proactive planning avoids.

Factor In Internal Value

Even when not externally required, reviews and audits provide internal benefits: identifying control weaknesses, validating accounting policies, and building management confidence in reported numbers. For businesses approaching the $5M–$10M revenue mark, a voluntary review often pays for itself through improved financial processes and identified inefficiencies.

Key Takeaway: Start with what your stakeholders require (loan covenants, regulations, grant agreements), then factor in your 12–24 month growth trajectory. Proactive engagement selection prevents the cost of switching service levels mid-stream.

Can You Negotiate the Level of Financial Statement With Your Bank?

Yes, in many cases, the service level specified in loan documents is negotiable, especially for existing clients with strong repayment histories. The first step is simply asking your banker whether a review would satisfy the requirement instead of an audit, or whether a compilation could work for a smaller facility.

Check whether your loan document specifies GAAP-basis financial statements. Many businesses operate on a tax basis or cash basis, and GAAP-basis statements cost more to prepare due to additional disclosure requirements. If the document says "audited" but doesn't specify GAAP, you may be able to provide a tax-basis audit at a meaningfully lower cost.

Competitive lending markets give borrowers more negotiating power. If your business is a desirable client, banks may accept a lower service level, defer the requirement for a year to let you build up, or accept compiled statements for the initial draw with reviewed statements required at renewal.

Your CPA should be involved in this conversation before loan documents are finalized, not after. A strategic financial partner who understands both the lender's objectives and the cost implications of each service level can help structure the right requirement at the right price. This advisory role connecting financial strategy to specific engagement requirements is where experienced CPA firms add value beyond the engagement itself.

Key Takeaway: Loan document requirements for specific financial statement service levels are often negotiable and switching from GAAP-basis to tax-basis reporting can reduce costs significantly. Involve your CPA before loan documents are finalized to optimize both the service level and the reporting framework.