Audited financial statements have been examined by an independent CPA who issues a formal opinion on whether the numbers fairly reflect the company’s financial position. Unaudited financial statements have not gone through that examination, so no one outside the company has vouched for the figures. When people weigh audited vs. unaudited financial statements, the real question is how much confidence an outside reader can place in the numbers, and that answer drives what a bank will accept, what the SEC requires, and what you should be willing to pay for.
What “Audited” Actually Means
In an audit, an independent CPA examines the company’s records to determine whether the financial statements fairly reflect its actual financial position. The auditor doesn’t just accept what management provides. They confirm account balances directly with banks and vendors, physically inspect assets, test internal controls, and sample individual transactions back to invoices, contracts, and receipts.
The result is a written opinion stating whether the statements are free of material misstatement. That opinion provides what the profession calls “reasonable assurance,” which the PCAOB defines as “a high level of assurance” obtained “by reducing audit risk to an appropriately low level through the application of due professional care.”1Public Company Accounting Oversight Board. AS 1000 – General Responsibilities of the Auditor in Conducting an Audit Reasonable assurance is not a guarantee every number is perfect, but it’s the highest level of confidence the profession offers. The final report packages the balance sheet, income statement, cash flow statement, and detailed footnotes explaining accounting policies and significant estimates.
The Four Possible Auditor Opinions
Not every audit ends the same way. The opinion the CPA issues falls into one of four categories, and the type matters enormously to anyone relying on the statements.
- Unqualified, or clean, opinion. The statements present fairly, in all material respects, the company’s financial position. This is what every company wants.
- Qualified opinion. The statements are fair except for one or more specific issues the auditor identifies. The rest of the picture is reliable, and a careful reader should zero in on whatever was flagged.
- Adverse opinion. The statements do not present fairly the company’s financial position. The reported numbers are materially misleading.
- Disclaimer of opinion. The auditor was unable to form an opinion, often because they couldn’t complete enough testing or the company restricted their access.
The line between qualified and adverse comes down to how widespread the problem is. A qualified opinion means the issue is contained. An adverse opinion means the statements as a whole can’t be trusted.2Public Company Accounting Oversight Board. AS 3105 – Departures from Unqualified Opinions and Other Reporting Circumstances So “audited” by itself isn’t the answer to whether the numbers are reliable. The opinion is.
The Three Tiers of Unaudited Statements
“Unaudited” isn’t one thing either. Under the Statements on Standards for Accounting and Review Services, which apply to nonpublic entities, a CPA can perform three different types of engagements short of an audit, each doing a different amount of work.
Preparation
The lightest service. The CPA takes the company’s financial data and organizes it into properly formatted financial statements. No report is issued, and the accountant doesn’t have to evaluate independence. The only formal requirement is that each page carry a note stating no assurance is provided. If that note can’t be included on every page, the engagement has to be upgraded to at least a compilation. Preparation engagements suit a business owner who keeps decent records and just needs the numbers presented cleanly for internal planning or a tax return.
Compilation
A compilation looks similar on the surface, but the CPA must issue a report and must evaluate whether they’re independent of the company. If they aren’t independent (say, they also handle the bookkeeping), they can still perform the compilation but must disclose that fact. The accountant doesn’t test anything, confirm balances, or analyze trends. They present management’s numbers in proper format and report on that presentation. A compilation provides no assurance the figures are accurate or comply with accounting standards.
Review
A review sits between a compilation and an audit. The CPA performs analytical procedures, comparing financial data against expected patterns and prior periods, and makes inquiries of company personnel about unusual items. If revenue jumped 40% while headcount stayed flat, the reviewer would ask management to explain. But the accountant doesn’t confirm balances with outside parties, inspect inventory, or test individual transactions. The report provides limited assurance: the accountant states they are not aware of any material modifications that should be made. That’s a much weaker statement than an audit opinion. It says “nothing came to our attention,” not “we verified this is correct.”
Assurance Levels Side by Side
Stacked against each other, the four engagements line up like this:
- Audit: reasonable assurance (high). The CPA tested evidence and issued a formal opinion. Banks, investors, and regulators treat this as the gold standard.
- Review: limited assurance. The CPA looked for red flags through analysis and questions but didn’t verify the underlying data. Useful for lenders with moderate exposure or investors monitoring an existing position.
- Compilation: no assurance. The CPA formatted the numbers but didn’t evaluate them. Acceptable for internal use or when the reader has other ways to verify the data.
- Preparation: no assurance and no report. The CPA just organized the data into financial statement format.
Assurance level tracks with the accountant’s professional exposure. An auditor who misses fraud after skipping required procedures faces real consequences. The PCAOB can impose censures, monetary penalties, and restrictions on a firm’s or individual’s ability to audit public companies.3Public Company Accounting Oversight Board. Enforcement The SEC has also brought actions against audit firms whose personnel ignored red flags or failed to obtain sufficient evidence.4U.S. Securities and Exchange Commission. The Auditor’s Responsibility for Fraud Detection An accountant who compiled the same statements has made no representation about accuracy and carries far less exposure.
Who Actually Needs Audited Statements
Whether you need audited, reviewed, or compiled statements depends on who’s reading them. Some requirements come from federal law, others from contracts, lenders, or licensing bodies.
Public Companies
Every company with securities registered under the Securities Exchange Act of 1934 must file an annual report with the SEC.5eCFR. 17 CFR 240.13a-1 – Requirements of Annual Reports The Form 10-K must include audited financial statements. Regulation S-X requires registrants to file audited balance sheets for the two most recent fiscal years, along with audited statements of income, cash flows, and changes in stockholders’ equity.6eCFR. 17 CFR Part 210 – Form and Content of and Requirements for Financial Statements The audit must follow PCAOB standards. There is no option to substitute a review or compilation.
Organizations Spending Federal Awards
Nonprofits, universities, state agencies, and other non-federal entities that spend $1,000,000 or more in federal awards during their fiscal year must undergo a Single Audit.7eCFR. 2 CFR 200.501 – Audit Requirements The threshold was raised from $750,000 to $1,000,000 in April 2024, effective for fiscal years beginning on or after October 1, 2024.8Office of Inspector General. Single Audits Frequently Asked Questions A Single Audit goes beyond a standard financial statement audit because it also examines compliance with federal grant terms. Organizations below the threshold are exempt from the federal audit requirement but still have to keep records available for review.
Employee Benefit Plans
Under ERISA, employee benefit plans with 100 or more participants at the beginning of the plan year must include an independent auditor’s report with their annual Form 5500.9U.S. Department of Labor. Reporting and Disclosure Guide for Employee Benefit Plans Plans with fewer than 100 participants generally don’t. This catches growing companies by surprise when they cross the threshold for the first time. Missing it can trigger DOL scrutiny and penalties.
Lenders, Sureties, and Licensing Bodies
Private companies most often run into audit requirements through their lenders. Commercial loan agreements routinely include covenants requiring audited or reviewed statements annually. The required level scales with loan size: smaller credit facilities may accept reviewed or even compiled statements, while larger loans almost always require a full audit. Violating a financial reporting covenant is a technical default that can trigger higher interest rates or accelerated repayment.
Contractors seeking performance bonds face similar escalation as bond amounts grow. Internal statements may work for smaller bonds; CPA-prepared statements are typical in the middle range; the largest bond programs require audits. Certain professional licenses and government contracts also specify a minimum reporting level, so check the exact requirement before assuming a compilation will do.
Cost and Timing
The cost gap between these engagements is substantial and tracks the amount of work involved. Audits take the most time because the CPA must plan the engagement, test transactions, confirm balances with outside parties, evaluate internal controls, and draft a detailed opinion. Reviews cost less because procedures are limited to analysis and inquiry. Compilations and preparations are the least expensive because the accountant is formatting information without verifying it.
For a small business, an audit can cost several times what a compilation would. The exact spread depends on the complexity of operations, the number of locations, the condition of the records, and whether the company has been audited before. First-year audits usually run higher because the auditor has no prior-year working papers to build on. If you have a choice, don’t pay for an audit when a review will satisfy your lender or partner. But don’t assume a compilation will be accepted when the contract or regulation calls for something more rigorous.
Picking the Wrong Level
The costlier mistake is providing less assurance than required. A nonprofit that submits reviewed statements when a Single Audit is required risks losing federal funding eligibility. A company that hands its lender a compilation when the covenant specifies an audit is in technical default no matter how healthy the underlying numbers look. An employer that crosses the 100-participant mark on its 401(k) and files Form 5500 without an auditor’s report can face DOL enforcement.
The opposite mistake is less dangerous but wasteful. Small businesses sometimes pay for full audits when nobody is requiring one. If the statements are for internal use, or for a lender who accepts a review, the audit fee is money spent for no added benefit. Match the engagement level to what your stakeholders actually require, and build that requirement into annual budgeting so the cost and timeline don’t catch you off guard.