Businesses and nonprofits are often told they need financial statements prepared by a CPA. But that request can quickly lead to another question:

Do you need an audit, a review, or a compilation?

Although these services all involve financial statements and a CPA, they are not interchangeable. Each engagement involves a different scope of work and, most importantly, a different level of assurance.

Choosing the right one is not simply a matter of company size or selecting the least expensive option. It starts with understanding who will use the financial statements, what level of confidence they require, and what decision those statements are intended to support.

That distinction can become particularly important when your organization is pursuing financing, working with investors, meeting grant or regulatory requirements, strengthening board oversight, or preparing for a transaction.

Why the Difference Matters

An audit, review, and compilation can all result in financial statements being presented with the involvement of a CPA, but the nature of that involvement is significantly different.

A lender may require audited financial statements as part of a financing agreement. Another lender may accept reviewed statements. A closely held business may only need compiled financial statements for internal purposes or for a stakeholder who does not require assurance.

The requirements can also change as an organization grows.

Selecting a service that does not provide the required level of assurance may mean having to perform additional work later, potentially delaying financing, compliance requirements, or a transaction. On the other hand, selecting a service beyond what is actually required can increase preparation time and cost unnecessarily.

Understanding the differences before the engagement begins can help avoid both situations.

What Is a Compilation?

A compilation is the most basic of the three services from an assurance perspective.

In a compilation engagement, management provides the underlying financial information, and the CPA assists in presenting that information in the form of financial statements.

The critical distinction is that the CPA does not express assurance on the financial statements.

The CPA is not performing the analytical procedures associated with a review or the testing and evidence-gathering procedures associated with an audit.

A compilation may therefore be appropriate when an organization needs professionally presented financial statements but the users of those statements do not require assurance.

Common situations may include closely held businesses preparing financial statements for internal purposes or organizations working with lenders or other stakeholders that specifically accept compiled statements.

The key question is not whether a compilation is “good enough.” It is whether no assurance is what the intended user actually requires.

What Is a Review?

A review provides a higher level of CPA involvement than a compilation and provides limited assurance on the financial statements.

The CPA primarily performs inquiries and analytical procedures designed to identify whether material modifications should be made to the financial statements for them to conform with the applicable financial reporting framework.

Because the scope is narrower than an audit, a review does not involve the same extent of testing, corroborating evidence, risk assessment, and other procedures associated with an audit.

That makes a review an important middle ground.

For example, a lender, investor, or board may want greater confidence in the financial statements than a compilation provides while not requiring the level of assurance provided by an audit.

The original brief specifically identifies lenders, investors, and boards among the parties that may accept reviewed statements.

Before assuming that a review will satisfy a request, however, management should confirm the exact requirement with the party requesting the financial statements.

What Is an Audit?

An audit provides the highest level of assurance among these three engagements.

The objective of an audit is for the CPA to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement and to issue an opinion based on the audit.

To reach that opinion, the audit process can involve risk assessment, testing, gathering and evaluating evidence, and evaluating financial statement presentation and disclosures.

The word reasonable is important.

An audit provides reasonable assurance—not absolute assurance. It does not guarantee that every error, misstatement, or instance of fraud will be identified.

Audited financial statements may be required or requested in connection with financing arrangements, investors, transactions, grants, regulatory obligations, or governance requirements.

For organizations facing one of these situations, understanding the requirement early can provide valuable preparation time.

This comparison is useful, but it should not be treated as a substitute for determining the actual reporting requirement. The original content specifically recommends evaluating assurance level, procedures, users, preparation burden, timing, and common triggers when comparing the engagements.

Five Questions to Ask Before Selecting a Service

Rather than beginning with, “How much does an audit cost?” or “Can we just get a compilation?”, start by understanding the reporting need.

1. Who will use the financial statements?

Identify the intended users. Is the request coming from management, a lender, investor, board, grantor, regulator, or potential transaction partner?

The answer may immediately narrow the available options.

2. Is a specific level of assurance required?

Review financing agreements, grant requirements, contracts, policies, or other relevant documentation.

If a lender explicitly requires audited financial statements, for example, a compilation will not satisfy that requirement simply because it is faster or less extensive.

3. What is the deadline?

Knowing the reporting deadline early allows the organization and CPA to plan appropriately.

The scope and preparation requirements differ significantly among the three engagements, so timing should be discussed before the deadline becomes urgent.

4. Are the books ready?

Reconciled accounts, organized supporting schedules, resolved variances, and accessible documentation can make the process more efficient regardless of the engagement selected.

5. Could your reporting requirements change soon?

Consider what is ahead for the organization.

A business that only needs compiled statements today could encounter different requirements when seeking financing, bringing in investors, pursuing an acquisition or sale, or entering another significant transaction.

These five questions form the decision framework outlined in the original content.

How Transactions Can Change the Requirement

A transaction can significantly increase the scrutiny placed on historical financial information.

Potential buyers and lenders may request audited or reviewed financial statements, and historical reporting can influence both due diligence and financing decisions.

This is why audit readiness should not begin only when a transaction is imminent.

If a business anticipates a sale, acquisition, capital raise, or significant financing event, understanding the quality and condition of its financial reporting well in advance can identify gaps while there is still time to address them.

This is also where Audit & Assurance, M&A Advisory, and CFO Advisory can intersect. Strong financial reporting supports not only compliance but also the broader ability to communicate the financial condition and performance of the business to external stakeholders.

The original strategy specifically calls for connecting audit readiness with M&A and CFO Advisory when transactions are involved.

What About Nonprofits?

For nonprofits, the decision can involve another set of stakeholders and requirements.

Boards may have governance expectations around financial reporting. Grantors and funding organizations may establish specific requirements. Regulatory or contractual obligations may also determine what type of financial statements are necessary.

Because requirements can vary, nonprofits should avoid assuming that an audit, review, or compilation is automatically required based solely on organization size.

Instead, confirm the exact requirement with the relevant grantor, regulator, board, funding source, or other requesting party.

How to Prepare for Any Assurance Engagement

Regardless of which engagement your organization ultimately needs, better financial records can make the process more efficient.

Before beginning, management should focus on several fundamentals:

• Reconcile bank and balance-sheet accounts.
• Organize supporting schedules and documentation.
• Investigate and resolve unexplained variances.
• Document important financial processes and controls.
• Assign a management point person who can coordinate requests and provide information.

These preparation steps are included in the original content because readiness matters across assurance engagements—not only during an audit.

For organizations expecting financing, investment, or transaction activity in the future, establishing these disciplines earlier can also make the financial reporting function more scalable.

Choosing the Right Level of Assurance

There is no single service that is automatically right for every business or nonprofit.

A compilation may be entirely appropriate when users do not require assurance. A review can provide limited assurance when stakeholders need greater confidence. An audit may be necessary when reasonable assurance is required by a lender, investor, grantor, regulator, transaction partner, or governance body.

The decision ultimately comes back to four things:

Who will use the financial statements? What do they require? What level of confidence is needed? And how prepared is the underlying financial information?

As your organization grows, the answer may change.

Understanding that requirement before selecting an engagement can help your organization avoid unnecessary work while ensuring that the financial reporting you provide actually meets the needs of the people relying on it.

Not sure whether your organization needs an audit, review, or compilation?

CO Capital Advisory Group can help you understand your reporting requirements and determine the appropriate engagement for your situation.

This article is for general educational purposes and does not constitute valuation, accounting, tax, legal, or investment advice. The appropriate valuation methodology and transaction analysis depend on the specific company and circumstances.