Private companies are not required to be audited as a general rule. No federal statute imposes an annual independent audit on every private business. The obligation appears only when a company crosses a specific regulatory threshold, accepts certain kinds of funding, or signs a contract that requires verified financials. In practice, many mid-size and larger private companies end up audited anyway because a lender, investor, or federal program makes it a condition of the relationship.
The sections below walk through the situations that actually trigger an audit, so you can check your company against each one.
SEC Thresholds That Pull a Private Company In
Most private companies never touch the Securities and Exchange Commission, but Section 12(g) of the Securities Exchange Act sets a hard line. A private company must register its securities with the SEC once it has total assets above $10 million and either 2,000 shareholders of record or 500 shareholders who are not accredited investors. Registration brings the same annual reporting obligations as a public company, including a Form 10-K with audited financial statements from an independent accounting firm.
Federal securities law also spells out what those audits must include: procedures to detect illegal acts affecting the financial statements, identification of material related-party transactions, and an evaluation of whether the company can keep operating for the next year.1Office of the Law Revision Counsel. 15 USC 78j-1 – Audit Requirements Failing to comply can bring SEC enforcement, fines, and personal liability for corporate officers.
Regulation Crowdfunding
A private company raising money from the public through an online crowdfunding platform runs into a separate set of rules under Title III of the JOBS Act. The SEC uses tiered disclosure requirements based on the size of the offering. Smaller raises need only financial statements certified by the company’s principal officer or reviewed by an independent accountant. Once an offering crosses the top tier, audited financial statements become mandatory.2U.S. Securities and Exchange Commission. Regulation Crowdfunding The dollar thresholds are adjusted periodically for inflation, so check the current Regulation Crowdfunding guidance before launching an offering.
If a company fails to provide the required level of disclosure, it can lose the crowdfunding exemption entirely and be forced into full securities registration, which is far more expensive.
Retirement Plans With 100 or More Participants
The Employee Retirement Income Security Act of 1974 requires an annual independent audit for employee benefit plans with 100 or more eligible participants at the start of the plan year. This is a common trigger for private employers offering 401(k)s. The participant count includes active employees, former employees who still have account balances, and beneficiaries receiving benefits. Plans meeting the threshold file a Form 5500 with audited financial statements attached.
The audit looks at whether the plan holds enough assets to cover promised benefits and whether payroll contributions are being deposited on time. A qualified public accountant independent of the company has to do the work. The Department of Labor can impose daily civil penalties for late or missing Form 5500 filings, and the IRS can strip the plan’s tax-exempt status if the audit surfaces serious fiduciary or compliance failures.
Federal Award Spending: The Single Audit
A non-federal entity that spends $1,000,000 or more in federal awards during a fiscal year must undergo what’s known as a Single Audit. The requirement comes from the Uniform Guidance in Title 2 of the Code of Federal Regulations and reaches any organization receiving significant federal money through direct grants, cooperative agreements, or pass-through funding from a state agency.3eCFR. 2 CFR Part 200 Subpart F – Audit Requirements
Organizations spending less than $1,000,000 in federal awards are exempt from this specific audit requirement, though federal agencies and the Government Accountability Office keep the right to review their records.3eCFR. 2 CFR Part 200 Subpart F – Audit Requirements
One boundary worth knowing: the Single Audit rules in Subpart F do not directly apply to for-profit subrecipients. Instead, the pass-through entity awarding the funds sets its own monitoring requirements, which may include pre-award audits, ongoing oversight, and post-award audits. A for-profit private company receiving federal pass-through money may still face audit obligations, but those come from the pass-through entity’s contract terms rather than from Subpart F.
State Corporate Law
State corporate codes add another layer. Many states require boards of directors to provide annual financial reports to shareholders, and some go further by mandating independent audits for companies above certain asset or revenue thresholds. These rules exist mainly to protect minority shareholders who cannot verify the numbers themselves. In states with stronger protections, shareholders who are denied required reports or given falsified data can pursue civil claims for breach of fiduciary duty.
Because the rules vary significantly by state, a company incorporated in one state may have very different reporting obligations than a competitor incorporated elsewhere. The corporate code of your entity’s state of incorporation is the only reliable place to check.
Benefit and Social Purpose Corporations
Companies organized as benefit corporations or social purpose corporations face additional transparency requirements in many states. These entities typically publish annual reports covering social and environmental performance alongside standard financial data. Some states require an independent third-party assessment of those impact reports. Officers who fail to provide the required disclosures may face administrative penalties or risk losing the special corporate designation. These obligations sit entirely under state law and are separate from any federal audit requirement.
Contracts That Make an Audit Unavoidable
Even when nothing in the law requires an audit, the deals a private company signs often do. This is where most audits actually come from.
Bank Loans
Commercial loan agreements are the single most common reason private companies get audited. Banks routinely include affirmative covenants requiring the borrower to deliver audited financial statements within 90 to 120 days after the fiscal year ends. Lenders use those reports to verify debt-service coverage ratios and confirm the value of pledged collateral.
Missing the deadline is usually a technical default. The lender then has the contractual right to accelerate the debt and demand full immediate repayment, raise the interest rate, impose forbearance fees, or pursue attorneys’ fees and other enforcement costs. Most banks don’t immediately call the loan over a late audit, but the leverage shifts hard in their favor, and any forbearance typically comes with additional fees.
Venture Capital and Private Equity
Venture capital and private equity investors almost universally require portfolio companies to produce annual audited financial statements. Investors who have put millions into a company want independent verification that management isn’t inflating valuations or hiding liabilities. Investment agreements typically specify that the audit be done by a reputable firm, sometimes one with specific industry expertise. Audit costs for private companies commonly range from $15,000 to well over $60,000 depending on complexity, revenue, and number of locations, and the company bears the full cost. Maintaining current audited financials is also a practical prerequisite for raising later rounds or setting up an eventual sale or IPO.
Government Contracts and Supply Chain Partners
Federal agencies awarding cost-reimbursement contracts keep broad rights to examine a contractor’s books. Under the Federal Acquisition Regulation, the contracting officer or an authorized representative may examine and audit all records reflecting costs claimed under cost-reimbursement, incentive, time-and-materials, labor-hour, and price-redeterminable contracts, and may inspect any company facilities involved in contract performance.4Acquisition.GOV. FAR 52.215-2 Audit and Records-Negotiation
Large private-sector buyers also frequently require key suppliers to demonstrate financial stability through audited or reviewed statements before awarding multi-year contracts. If a critical supplier fails mid-contract, the disruption can cost the buyer far more than the contract itself. For companies chasing those partnerships, the audit is a cost of admission.
If You Are Required to Be Audited
Whether the trigger is a statute, a loan covenant, or an investor agreement, preparation controls both the cost and the pain of the process. The auditor will send a “Provided by Client” list well before fieldwork, and having the requested documents organized is the single biggest factor in keeping the fees down.
Expect to gather your trial balance, complete financial statements, supporting schedules, and bank and account reconciliations for every balance sheet line item. The auditor will also want general ledger detail, cash receipts and disbursements journals, board meeting minutes, copies of significant contracts and lease agreements, loan documentation, and records of fixed asset additions or disposals during the year. Companies with payroll should have quarterly payroll tax reconciliations ready.
The auditor will also evaluate internal controls, typically against the 2013 COSO Internal Control-Integrated Framework, which covers control environment, risk assessment, control activities, information and communication, and monitoring. Private companies don’t need the elaborate documentation public companies maintain under Sarbanes-Oxley, but basic written procedures, clear separation of duties in accounting, and documented approval workflows for significant transactions will speed the audit and reduce reported control deficiencies.
One requirement catches some companies off guard: auditor independence. The firm conducting your audit cannot also handle bookkeeping, prepare your financial statements from scratch, or hold financial interests in your company. If your regular accountant has been doing your books all year, you’ll need a different firm for the audit. Sorting that out early avoids a year-end scramble when audit firms are booked solid.