How to Prepare for a Small Business Audit: A Checklist

The word "audit" makes most owners' stomachs drop. In practice, an audit is a records check, and businesses with organized records usually get through it with a few hours of work and no drama. Here is how to prepare, whether the letter arrives tomorrow or you simply want to be ready.

Stacks of paper documents and file folders arranged on a desk — An audit is a request for evidence. The businesses that fare best are the ones that can find it quickly.

Key takeaways

"Audit" covers several different checks: tax, financial statement, sales tax, insurance premium and payroll. Know which one you are facing.
Most audits are about documentation. If every number on your return or statements traces to a receipt, invoice or statement, you are most of the way there.
Respond on time, answer only what is asked, and route communication through one person, ideally your accountant.
The best preparation happens before any letter arrives: organized records, monthly reconciliations and a clear separation of business and personal spending.

Audits are rarer than the anxiety around them suggests. The IRS reports in its annual Data Book that it examines well under 1% of returns in a typical year, and the majority of those examinations are handled by mail rather than in person. Other audits, such as a workers' compensation premium audit or a financial statement audit required by a lender, are routine and scheduled rather than triggered by suspicion.

None of that means you should ignore preparation. An audit with messy records can drag on for months, cost thousands in professional fees and end with penalties for things you could easily have proven. The same audit with clean records is often over in weeks. This checklist covers both the long-term habits that make audits painless and the specific steps to take when one is announced.

First, know which kind of audit this is

Each type has a different auditor, a different scope and different documents. Read the notice carefully before doing anything else.

Audit type	Who runs it	What they check	Typical trigger
Income tax audit	IRS or state tax agency (or your national tax authority)	Income, deductions, credits and the records behind them	Random selection, mismatched third-party reports, unusual ratios
Sales tax audit	State or local revenue department	Taxable sales, exemption certificates, tax collected and remitted	Industry focus, customer or vendor audits, large refunds
Payroll or employment audit	Tax agency or labor department	Worker classification, wages, withholding, overtime	Worker complaints, contractor-heavy businesses
Workers' comp premium audit	Your insurer	Actual payroll and job classifications versus the estimate your premium was based on	Annual, at policy end
Financial statement audit or review	An independent CPA firm	Whether your financial statements are fairly presented	Lender, investor, grant or buyer requirement

In the US, an IRS tax audit comes in three forms: a correspondence audit handled entirely by mail, an office audit where you bring documents to an IRS office, and a field audit where an agent visits your business. Correspondence audits are by far the most common and usually concern one or two specific items. Other countries have their own equivalents, so check the notice and your local tax authority's guidance.

Common mistake

Ignoring the letter or missing the response deadline. Tax notices usually give 30 days to respond. Silence does not make the question go away; it typically results in the agency assuming the worst, disallowing the item and assessing tax, interest and penalties. If you need more time, ask for an extension in writing before the deadline.

The long-term habits that make audits easy

These practices are the real audit preparation. If you already do them, a notice is an inconvenience rather than a crisis.

Keep business and personal money completely separate. A dedicated business bank account and card mean every transaction is presumptively business. Mixed accounts invite the auditor to question everything.
Attach evidence to every transaction. Receipt images, invoices and contracts attached in your accounting software. For meals, travel and vehicle use, note who, where and why. The IRS requires substantiation for these categories, and auditors look at them first.
Reconcile every account every month. Reconciled books mean your reported income matches your bank deposits, which is one of the first things any auditor tests.
Keep records for the required period. The IRS says to keep records that support a return for at least three years from filing, longer in certain cases: four years for employment tax records, seven years for bad debt deductions, and indefinitely for property records while you own the asset. The IRS can also go back six years if a return omits more than 25% of gross income, and there is no time limit for fraudulent or unfiled returns. Rules differ by country, so check your local requirements.
File on time, every time. Late filings and late payments draw attention and add penalties on their own.
Document unusual items when they happen. A big equipment purchase, a loan from the owner, a write-off of a customer debt. Write a short memo and attach the paperwork at the time, because in three years you will not remember the details.

3 years The general period after filing during which the IRS can audit a return. It extends to 6 years for substantial underreporting and has no limit for fraud or an unfiled return IRS statute of limitations rules; other countries set their own periods

When the notice arrives: the first 48 hours

Read every line. Note the tax years or periods, the specific items questioned, the response deadline and the contact details.
Verify it is genuine. Tax scams imitate audit letters. In the US, the IRS initiates audits by mail, not by phone call, text or email demanding immediate payment. If in doubt, call the agency using a number from its official website, not from the letter.
Call your accountant. For a tax audit, a CPA, enrolled agent or tax attorney can represent you and communicate with the agency on your behalf. This is usually worth the cost, because professionals know what to provide and what not to volunteer.
Create an audit folder. One place, digital or physical, for the notice, every document you send, every letter you receive and a log of every call with the date and what was discussed.
Do not alter any records. Clean up presentation, assemble documents, fill gaps with legitimate third-party copies. Never change dates, amounts or descriptions in existing records. That turns a records problem into something far more serious.

A tall stack of thick file folders on a white surface — Assemble documents by the auditor's question, not by where they happen to be stored.

Assembling the documents

Organize by the item being questioned, then by date. For each item on the notice, you want a clear chain from the number on the return or statement back to the original evidence.

For income

Bank statements for every business account for the period
Payment processor and merchant statements showing gross sales and fees
Sales invoices or point-of-sale summaries
A reconciliation that shows how deposits add up to reported revenue, with non-income deposits (loans, owner contributions, transfers, refunds) identified

For expenses

Receipts or invoices for each questioned category, matched to the bank or card transaction
Contracts, leases and loan agreements
Mileage logs with dates, destinations, business purpose and miles
For meals and travel: date, place, amount, attendees and business purpose
Fixed asset records: purchase documents, in-service dates, depreciation schedules

For payroll and contractors

Payroll registers, filed payroll tax returns and deposit confirmations
Employee files with the required tax and eligibility forms
Contractor agreements, invoices and the information returns you filed for them
Any analysis that supports treating a worker as a contractor rather than an employee

For sales tax

Sales records split between taxable and exempt sales
Exemption or resale certificates for every exempt customer
Filed returns and payment records
Purchase records showing tax paid on items you bought for use in the business

Worked example

Imagine a small catering company receives a correspondence audit questioning $18,400 of vehicle expenses on last year's return. The owner's accountant assembles three things: the lease agreement and fuel and maintenance receipts totaling $18,400, a mileage log from a phone app showing 14,200 business miles out of 17,300 total, and a short cover letter explaining that the business claimed 82% of actual vehicle costs based on the log. Suppose the log has a gap of two weeks where the app was not running. Rather than inventing entries, the accountant notes the gap, excludes those weeks, and recalculates the business share at 79%. The company concedes about $650 of the deduction, pays the small adjustment and the audit closes. Honest, documented, done in three weeks.

How to behave during the audit

Preparation is half the job. Conduct is the other half.

Answer the question asked, and only that. Volunteering extra information or extra years invites the audit to expand. Let your representative handle open-ended questions.
Be polite and organized. Auditors are people doing a job. A tidy, labeled set of documents makes their work faster, and a faster audit is a cheaper audit for you.
Provide copies, not originals. Keep your originals. Give the auditor clean copies or a secure digital upload where the agency allows it.
Hold field audits somewhere neutral if possible. Your accountant's office is often better than your workplace, where an agent may observe things unrelated to the question at hand.
Keep the log current. Every document sent, every call, every promise made.
Ask for the findings in writing. At the end, you receive a report or examination letter. Review it with your accountant before agreeing to anything.

Pro tip

If an auditor asks for a document you do not have, say so, and then look for a substitute. A missing receipt can often be replaced with a bank record plus a vendor's duplicate invoice, a calendar entry, an email or a photo. Credible secondary evidence beats silence, and it beats invention every time.

If you disagree with the result

Audit findings are not final until you accept them. In the US you can ask to speak with the auditor's manager, request a formal appeal through the IRS Independent Office of Appeals, or ultimately take the matter to court. Most disagreements are settled at the appeals stage, often by compromise on items where the law or facts are unclear. Appeals have deadlines, usually 30 days from the examination report, so decide quickly. State and foreign authorities have their own processes; your accountant or a tax attorney can explain the options where you are.

What helps your case

Contemporaneous records made at the time of the transaction
Third-party documents: bank statements, vendor invoices, contracts
A consistent story between your books, your return and your bank
A professional handling communication

What hurts your case

Round-number estimates with no backup
Personal expenses mixed into business accounts
Records created or edited after the notice arrived
Missed deadlines and unanswered letters

Preparing for a financial statement audit

If a lender, investor or grant requires audited or reviewed financial statements, the process is different. You hire the CPA firm, the timeline is planned, and the firm will send a "prepared by client" list of schedules it needs: bank reconciliations, receivables and payables aging, fixed asset and depreciation schedules, loan statements, lease agreements, payroll summaries, and support for revenue recognition. Clean monthly closes make this list quick to produce. A first audit often takes longer than later ones because the firm is learning your business, so start early and ask for the request list well before year-end.

Your audit readiness checklist

Separate business and personal accounts completely
Attach a receipt or document to every expense over your chosen threshold
Reconcile all bank, card and processor accounts monthly
Keep a mileage log and a note of purpose for meals and travel
Store tax returns and supporting records for at least the required period in your country
When a notice arrives: verify it, call your accountant, create an audit folder, note the deadline
Assemble documents by question, provide copies, answer only what is asked
Review findings in writing before accepting, and know the appeal deadline

Frequently asked questions

What increases the chance of a tax audit?

No one outside the tax agency knows the exact formula, but commonly cited factors include income that does not match third-party reports, deductions far outside the norm for your industry and size, large cash businesses, heavy use of contractors, and repeated losses. The best defense is not avoiding these features but documenting them well.

Should I represent myself in a small correspondence audit?

If the question is narrow and you have clear documentation, many owners handle it themselves. If the amount is significant, the question is broad, or you are unsure what the agency wants, a professional is worth the fee. In the US, you can authorize a representative with a power of attorney form.

How long does an audit take?

A correspondence audit with a complete response can close within a couple of months. Office and field audits often run several months. Financial statement audits for small businesses typically take a few weeks of fieldwork plus the time it takes to produce the schedules requested.

What if I genuinely lost records in a fire, flood or crash?

Reconstruct them from third parties: bank and card statements, vendor duplicates, payroll provider reports, and tax agency transcripts of what was reported to them. Document the loss itself as well. Auditors deal with reconstructed records regularly, and a good-faith reconstruction is treated very differently from missing records with no explanation.

The bottom line

An audit is a test of whether your numbers trace to evidence. Keep business money separate, attach documents as you go, reconcile monthly and store records for the required period, and most audits become a short exercise in handing over a folder. When a notice does arrive, read it carefully, respond on time, bring in a professional for anything substantial, and never alter a record. Calm, organized and honest wins.