Nonprofit Audit Requirements in Maryland — Thresholds, Rules, and What to Expect

Maryland Nonprofit Audit Requirements — State Thresholds Explained

Maryland's Charitable Organizations Act sets two financial thresholds that determine whether your nonprofit needs a CPA-performed audit, a review, or neither — and the trigger is annual charitable contributions received, not total revenue.

When does a Maryland nonprofit need an audit? Maryland requires a full financial statement audit when a nonprofit receives $750,000 or more in charitable contributions in a fiscal year, as enforced by the Maryland Secretary of State under the Charitable Organizations Act. Organizations receiving between $300,000 and $749,999 must obtain a financial statement review performed by a licensed CPA. Below $300,000, neither engagement is required under state law.

What is the revenue threshold for nonprofit audits in Maryland? Maryland requires a full financial statement audit when a nonprofit receives $750,000 or more in charitable contributions annually. Organizations receiving between $300,000 and $749,999 must obtain a financial statement review instead.

The distinction between charitable contributions and total revenue matters more than most nonprofits realize. A nonprofit with $2 million in program service revenue — fees for services, government contracts, earned income — but only $200,000 in charitable contributions does not trigger the Maryland Secretary of State's audit requirement under the Charitable Organizations Act. The $750,000 threshold counts only what donors give: grants from private foundations, individual donations, and corporate contributions designated as charitable gifts. Program service revenue, investment income, and other earned revenue are not counted toward this threshold.

We see this gap regularly: organizations in our auditing and attestation services practice that file Form 990 on time every year but haven't separately tracked their charitable contributions. Midway through a fiscal year, they cross the $750,000 threshold with no CPA engaged — and no audit scoped.

Consider a community foundation in Frederick County whose fundraising campaign crosses $800,000 in contributions in a year it hadn't budgeted for an audit. Or a social services nonprofit in the D.C. metro area that grows its grant base past $750,000 for the first time. In both cases, the obligation arises with the organization's fiscal year — not when the Maryland Secretary of State sends a notice. Knowing your charitable contribution total in real time is the first line of compliance.

The Maryland Secretary of State enforces the Charitable Organizations Act, which sets the $300,000 and $750,000 thresholds. CPA firms licensed in Maryland perform the required engagements under Generally Accepted Accounting Principles (GAAP).

Key Takeaway: Under Maryland's Charitable Organizations Act, the audit threshold is $750,000 in annual charitable contributions — not total revenue. A review applies between $300,000 and $749,999. Track charitable contributions separately from program service revenue throughout the fiscal year.

Federal Single Audit Requirements — Does Your Nonprofit Qualify?

If your nonprofit expends $1,000,000 or more in federal awards in a single fiscal year, the Single Audit Act requires a federal compliance audit — regardless of whether you also meet Maryland's state audit threshold.

What is a Single Audit? A Single Audit is a combined financial statement and federal program compliance audit required under the Single Audit Act and the Office of Management and Budget's (OMB) Uniform Guidance (2 CFR Part 200) for any organization — nonprofit, government, or institution — that expends $1,000,000 or more in federal awards during a fiscal year. Results are submitted to the Federal Audit Clearinghouse, operated by the U.S. Census Bureau, which publishes them publicly.

The $1,000,000 threshold for a Single Audit applies to expenditures of federal funds, not receipts. The compliance clock starts when funds are spent — not when they are awarded or when your organization receives them into its accounts. An organization that received a $1,000,000 federal grant but only expended $600,000 in a given fiscal year has not crossed the threshold for that year.

A Single Audit has two components. First, a financial statement audit conducted under Generally Accepted Government Auditing Standards (GAGAS) — the standards the Government Accountability Office's (GAO) Government Auditing Standards document sets, commonly called the Yellow Book. Second, a compliance audit of the federal programs your organization administers, examining whether funds were spent according to the terms and federal regulations that govern each program.

Results must be submitted to the Federal Audit Clearinghouse within 30 days of receiving the audit report, or nine months after the fiscal year end — whichever is earlier. Late submissions are flagged findings that affect your organization's federal funding relationship.

One point that catches many nonprofits off guard: pass-through funding counts. If your organization receives federal dollars distributed by a Maryland state agency, a county government, or another nonprofit acting as a fiscal sponsor, those expenditures count toward your $1,000,000 Single Audit threshold under the Uniform Guidance. The money's federal origin doesn't change based on how many intermediaries it passed through.

If your organization is approaching the $1,000,000 federal expenditure level, reach out to learn more about single audit and Uniform Guidance compliance before your fiscal year closes.

Key Takeaway: The Single Audit threshold under the OMB's Uniform Guidance is $1,000,000 in federal award expenditures in a fiscal year — not receipts. Pass-through federal funding from state agencies counts toward this threshold. Engage a qualified CPA before the fiscal year ends, not after.

Financial Statement Audit vs. Single Audit — What's the Difference?

Maryland nonprofits receiving both state-regulated charitable contributions and federal grants may face two separate audit requirements — and understanding which determines who you need, what they'll examine, and where the results get filed.

What is the difference between a single audit and a financial statement audit? A financial statement audit examines whether your financial statements are free from material misstatement under GAAP, as required by the Maryland Secretary of State when charitable contributions reach $750,000. A Single Audit includes a financial statement examination plus a compliance audit of federal programs, conducted under GAGAS, and is required by the OMB's Uniform Guidance when federal expenditures reach $1,000,000.

Here's what that last row means for your budget. When a nonprofit meets both thresholds — $750,000 in charitable contributions under the Maryland Charitable Organizations Act and $1,000,000 in federal expenditures under the Uniform Guidance — it doesn't automatically need two separate engagements.

A properly scoped Single Audit satisfies both requirements simultaneously. The federal compliance component is additive; the financial statement component serves both purposes. Our team regularly evaluates whether a combined engagement is appropriate when clients face both triggers — it's one of the ways we help nonprofits avoid over-engaging when one well-scoped audit can satisfy two regulatory obligations. If you're not sure whether a combined approach applies to your organization, when your business needs an audit is a useful starting point, and we're happy to walk you through your specific situation.

Actual engagement costs depend on the size and complexity of your organization. The ranges above reflect the Maryland CPA market as of Q1 2026 — they are not binding quotes.

Key Takeaway: A Single Audit, when properly scoped, can satisfy both Maryland's state financial statement audit requirement and the federal Uniform Guidance requirement. Nonprofits subject to both thresholds don't always need two separate engagements — verify with a CPA experienced in both tracks.

Yellow Book and GAGAS — What Government-Funded Nonprofits Need to Know

The Yellow Book — formally the Government Accountability Office's (GAO) Government Auditing Standards, commonly called the Yellow Book, and the standards it codifies known as Generally Accepted Government Auditing Standards (GAGAS) — sets a higher bar than a standard financial statement audit. Government-funded nonprofits often encounter these standards without realizing it.

What are GAGAS and the Yellow Book? GAGAS is the set of auditing standards issued by the Government Accountability Office (GAO) — not the American Institute of Certified Public Accountants (AICPA), which issues Generally Accepted Auditing Standards (GAAS) for standard financial statement audits. The Yellow Book, the GAO's published standards document, governs engagements that involve federal funding: Single Audits and any other engagement where federal or state grant terms require government-level scrutiny.

A Yellow Book audit includes all requirements of a standard financial statement audit conducted under GAAS, plus additional layers: stricter independence standards, required reporting on internal controls and compliance with laws and regulations, and continuing professional education requirements for every member of the audit team. Specifically, auditors performing Yellow Book engagements must complete 24 hours of government auditing CPE every two years — a requirement that not all licensed CPAs meet.

Do I need a Yellow Book audit if I receive government grants? If your organization expends $1,000,000 or more in federal awards in a fiscal year, a Single Audit under GAGAS is required by the OMB's Uniform Guidance. But the threshold is not the only trigger. Some foundation and government grant agreements require Yellow Book-standard audits even when your total federal expenditures fall below $1,000,000. The grant terms govern — always read them before assuming the Uniform Guidance threshold is the only relevant standard.

This is a practical compliance gap we see frequently. A nonprofit secures a $400,000 state agency grant and assumes it's safely below the Single Audit threshold. But the grant agreement includes an audit clause requiring GAGAS standards. The organization isn't subject to a Single Audit — but it is subject to a Yellow Book engagement. Two different triggers. Two different requirements. The Uniform Guidance threshold is one; individual grant language is another.

Not all CPA firms hold the GAGAS CPE qualifications required to perform Yellow Book engagements — verify this before engaging a firm for a Single Audit or any government-funded audit.

Key Takeaway: Yellow Book (GAGAS) requirements apply both when the $1,000,000 Uniform Guidance threshold is crossed and when individual grant agreements require GAGAS-level audits independently. Always review grant terms — the Uniform Guidance threshold is not the only trigger. Confirm your CPA holds the required GAGAS CPE qualifications.

Common Compliance Gaps — What Frederick County Nonprofits Miss

In our work with nonprofits across Frederick County and the D.C. metro area, we see the same compliance gaps surface repeatedly — and most of them are avoidable with the right framework in place before fiscal year end. The region's density of government-funded nonprofits — federal grant recipients, social services organizations, workforce development nonprofits operating at the intersection of state and federal funding streams — makes these gaps especially consequential here.

To address this, we've built a structured process that evaluates which audit track, or tracks, apply to your organization based on three inputs:

1. State Track — Annual charitable contributions reported to the Maryland Secretary of State, measured against the $300,000 and $750,000 thresholds under the Charitable Organizations Act.
2. Federal Track — Total federal award expenditures in the fiscal year, measured against the $1,000,000 threshold under the OMB's Uniform Guidance.
3. Grant Terms Track — Individual grant agreements reviewed for audit clauses that impose Yellow Book or other audit requirements independently, below the statutory thresholds.

Nonprofits that run through all three inputs before fiscal year end avoid both non-compliance (missing a required audit) and over-engagement (paying for a Yellow Book audit when a standard financial statement audit suffices). Here are the five gaps we identify most often.

1. Misidentifying the trigger metric. Many nonprofits track total revenue but don't separately identify charitable contributions — the actual threshold metric for Maryland Secretary of State requirements. Organizations realize mid-year they've crossed the $750,000 threshold with no CPA engaged, no engagement scoped, and no timeline to complete the audit by filing deadline. Tracking charitable contributions as a separate line item in real time eliminates this risk.

2. Overlooking pass-through federal funding. Federal dollars received through Maryland state agencies or fiscal sponsors count toward the $1,000,000 Single Audit threshold under the Uniform Guidance. Nonprofits frequently don't realize their grant traces back to a federal program until they're already subject to Single Audit requirements.

3. Assuming Form 990 substitutes for an audit. It does not. Form 990 is a tax disclosure document — a public-facing information return filed with the IRS. A financial statement audit is an independent assurance engagement performed by a licensed CPA. Filing Form 990 on time satisfies your federal tax reporting obligation. It does not satisfy Maryland's charitable organization audit requirement. These are separate obligations with separate governing authorities.

4. Not checking individual grant terms. Some foundation and government grants require Yellow Book-standard audits for organizations below the Uniform Guidance threshold. Grant terms govern — and many nonprofits don't review the audit clause until renewal time, when they're already mid-engagement with a CPA who isn't qualified to perform GAGAS work. Review the audit requirements in every grant agreement when it is signed, not when the audit window opens.

5. Waiting until year-end to engage a CPA. Audit preparation — reconciling accounts, documenting internal controls, compiling the Schedule of Expenditures of Federal Awards (SEFA) required for a Single Audit — takes months. Engaging a CPA firm in Q4 for a Q1 audit deadline creates avoidable cost and schedule risk. Organizations that engage their auditors in Q1 or Q2 can build the audit timeline into their operational calendar instead of scrambling at year end.

Schedule a complimentary consultation to run through the Audit Readiness Map with this framework for your organization. We'll help you determine exactly what your organization needs — and what it doesn't.

Key Takeaway: Maryland nonprofits most commonly miss their audit obligation by tracking total revenue instead of charitable contributions, overlooking federal pass-through funding, and not reviewing individual grant audit clauses.