Audit vs Review for Selling a Business: Which CPA-Issued Statements Buyers Actually Want (2026)

Christoph Totter · Managing Partner, CT Acquisitions

20+ home services M&A transactions across HVAC, plumbing, pest control, roofing · Updated May 1, 2026

There is a structural difference between compilation, review, and audited financial statements — and most sellers don’t learn it until a buyer’s LOI requires something they don’t have. By that point, the deal has 30-60 days of exclusivity running, the buyer has time leverage, and getting an audit done from scratch is a 6-12 week project that doesn’t fit the diligence window. The result is either a re-trade on price, a delayed close, or a dead deal.

This guide is for owners with $750K-$10M of EBITDA who are 12-36 months from going to market. We’ll walk through what each assurance level actually means in CPA terms, what each costs and how long each takes in 2026, which buyer types require which, how a Quality of Earnings engagement fits in, and the most common owner mistakes — including the ‘upgrade the last year only’ trap and the misconception that the buyer’s QoE replaces seller-side assurance.

The framework draws on direct work with 76+ active U.S. lower middle market buyers and the broader sub-LMM ecosystem. We’re a buy-side partner. The buyers pay us when a deal closes — not you. That includes search funders who specifically ask for reviewed financials, family offices that flex on assurance level when they have strategic conviction, LMM PE platforms with hard internal rules, and strategic consolidators whose lenders dictate what’s required. Knowing what each buyer expects is the difference between a smooth diligence and a stalled deal.

One reality check before you start. If you’re reading this and thinking ‘the buyer’s QoE will handle the financial diligence,’ you’re half right and half wrong. The QoE will analyze and adjust the earnings — but it does not vouch for the underlying books. If your books aren’t credible going in, the QoE comes back with a long list of qualifications, the buyer underwrites conservatively, and you lose 10-25% on the multiple. Assurance is the foundation; QoE is the analysis on top of it.

CPA reviewing financial statements at a desk with ledger binders — audit vs review decision for business sellers
Compilation, review, or audit — three CPA assurance levels with very different costs, timelines, and buyer credibility. Picking the wrong one wastes money or kills a deal.

“The mistake most owners make is asking ‘do I need an audit?’ in isolation. The right question is ‘what assurance level does the buyer pool I’m targeting actually require?’ A $700K-EBITDA SBA-financed exit doesn’t need an audit and shouldn’t pay for one. A $4M-EBITDA exit to lender-backed LMM PE without one is going to get re-traded. The right answer isn’t a generic ‘more is better’ — it’s a buy-side partner who already knows what each buyer type expects.”

TL;DR — the 90-second brief

  • There are three CPA-issued assurance levels — compilation, review, and audit — and they are not interchangeable. Compilation provides no assurance ($2-5K, 1-2 weeks). Review provides limited assurance via analytical procedures and inquiries ($8-20K, 2-4 weeks). Audit provides reasonable assurance with full testing, sampling, and third-party confirmations ($25-100K+, 6-12 weeks).
  • Buyer requirements scale with deal size and buyer type. SBA buyers usually accept a compilation plus tax returns. Search funders prefer a review. Lower middle-market PE typically requires reviewed financials at minimum and increasingly an audit at $3M+ EBITDA. Strategic buyers and lender-funded LMM PE often want a Big-4-or-equivalent audit.
  • A buyer-side Quality of Earnings (QoE) is not a substitute for seller-side audited or reviewed financials. QoE is a buyer’s diligence tool ($25-75K, 2-4 weeks) that adjusts and tests reported earnings — it relies on the underlying financial statements being credible. Owners who skip the assurance step assuming ‘the QoE will sort it out’ consistently get re-traded.
  • Most buyers want at least three years of consistent statement type. Switching from compilation to review to audit across the trailing three years signals instability. The right move is to invest in the appropriate level 18-36 months before going to market — not to upgrade the most recent year only.
  • Across hundreds of seller engagements, owners who match the assurance level to the buyer pool they’re targeting close cleaner deals at higher multiples. We’re a buy-side partner who works directly with 76+ buyers — including search funders, family offices, lower middle-market PE, and strategic consolidators — and they pay us when a deal closes, not you.

Key Takeaways

  • Three assurance levels: compilation (no assurance, $2-5K, 1-2 weeks), review (limited assurance, $8-20K, 2-4 weeks), audit (reasonable assurance, $25-100K+, 6-12 weeks).
  • Buyer requirement by type: SBA = compilation often OK; search funder = review preferred; LMM PE = review minimum, audit often required at $3M+ EBITDA; strategic + lender-backed = audit, sometimes Big 4.
  • QoE is a buyer’s diligence tool (not the seller’s) and does not replace seller-side audit or review — it analyzes earnings, it doesn’t verify books.
  • Buyers want 3 consecutive years of consistent statement type; upgrading only the most recent year signals instability and can raise more questions than it answers.
  • Decision rule: $1M+ EBITDA = invest in review minimum; $3M+ EBITDA = invest in audit if going broad market or to LMM PE platforms.
  • Common owner mistake: starting the assurance engagement 60-90 days before going to market. Right answer: 18-36 months earlier so you have multi-year history.

The three CPA assurance levels: what each actually means

‘Audited financials,’ ‘reviewed financials,’ and ‘compiled financials’ are not marketing terms — they are formally defined service categories under AICPA Statements on Standards for Accounting and Review Services and Auditing Standards. Each represents a different level of work performed, a different level of assurance the CPA is willing to attach their professional opinion to, and a different cost. Buyers and their lenders know the difference and parse seller financials based on which level was performed.

Compilation: no assurance, $2-5K, 1-2 weeks. The CPA takes the company’s books and presents them in proper GAAP format. No testing. No analytical procedures. No verification. No third-party confirmations. The CPA’s report explicitly says ‘we have not audited or reviewed the accompanying financial statements and accordingly do not express an opinion or any other form of assurance.’ Useful as a baseline of GAAP-formatted statements but offers no credibility lift to a sophisticated buyer.

Review: limited assurance, $8-20K, 2-4 weeks. The CPA performs analytical procedures (year-over-year comparisons, ratio analysis, trend analysis) and makes inquiries of management. They are looking for items that appear unusual or inconsistent with prior periods or industry norms. No detailed transaction testing, no sampling, no third-party confirmations. The CPA’s report says they are ‘not aware of any material modifications that should be made to the financial statements for them to be in conformity with GAAP.’ This is the workhorse for $1-3M EBITDA businesses.

Audit: reasonable assurance, $25-100K+, 6-12 weeks. Full testing of significant balances, sampling of transactions, third-party confirmations of receivables and bank balances, evaluation of internal controls, observation of physical inventory counts, search for unrecorded liabilities, going concern assessment. The CPA’s opinion is the strongest the AICPA framework offers: the financial statements ‘present fairly, in all material respects’ the financial position and results. Big 4, regional firms, and audit-credentialed local firms all deliver audits — but with significantly different price points and buyer-side credibility.

There is no ‘mini-audit’ or ‘light audit.’ If your CPA tells you they can do ‘something between a review and an audit,’ what they’re describing is either an agreed-upon procedures engagement (different scope, narrow tests, doesn’t produce financial statements) or a non-standard arrangement that won’t carry weight with sophisticated buyers. Pick a defined level and pay the price for it.

What each level costs in 2026 and why the range is so wide

Pricing is driven by three factors: business complexity, statement type, and CPA firm tier. A simple service business with one operating account, no inventory, and clean books will be at the low end of every range. A multi-entity business with intercompany transactions, inventory, AR/AP complexity, and multiple revenue streams will be at the high end — or above it. Big 4 audit fees for a $5M-EBITDA business can run $80-200K+; the same business audited by a regional firm runs $30-60K.

Compilation: $2-5K typical, sometimes higher. Most CPAs include compilation work as part of an annual tax-prep engagement — sometimes for an extra $1-2K, sometimes bundled. If you’re paying a CPA $5-15K/year for tax prep, ask whether compiled GAAP statements are already in scope. If they aren’t, getting them added is straightforward. Don’t pay $5K for compilation as a standalone if your CPA is already in your books for tax purposes.

Review: $8-20K typical for $1-5M revenue businesses; higher for complexity. The labor in a review is mostly partner and senior-staff inquiry time plus analytical procedures. A clean-books $2M-revenue services business is at the low end. A $10M-revenue distributor with inventory and customer concentration is mid-range. A multi-entity business with intercompany transactions is at the high end. Most LMM-target businesses spend $10-15K/year on a review once it’s an established annual engagement.

Audit: $25-100K+ depending on size, complexity, and firm tier. First-time audits typically cost 30-50% more than recurring audits because the firm has to understand the business, evaluate internal controls from scratch, and audit opening balances. Plan for a $40-60K first-year audit on a $10M-revenue business at a regional firm; $25-40K in subsequent years. Big 4 fees are typically 2-3x regional firm fees for the same business. The Big 4 premium is real and is paid for by buyers who specifically value the brand — mostly large strategics and PE platforms with institutional LPs.

Hidden costs to plan for. Audit prep is usually $5-15K of additional CPA work to clean up and document items the audit team will need (lead schedules, account reconciliations, supporting documentation). If your books aren’t audit-ready — and most owner-managed businesses aren’t — budget another $10-30K for cleanup the first year. Subsequent years drop dramatically once you have the muscle memory for monthly-close and reconciliation discipline.

Timeline: how long each level actually takes

Owners consistently underestimate audit timelines because they’re thinking about CPA hours, not calendar weeks. An audit is 200-600 hours of CPA work, but it’s also 6-12 weeks of calendar time because of dependencies on third-party confirmations, physical inventory observation, document requests with management, and partner review cycles. You cannot rush an audit by paying more — the calendar bottleneck is structural.

Compilation: 1-2 weeks of calendar time. The CPA has the books, drops them into GAAP format, runs a quick sanity check, issues the report. If your books are clean and you’ve already given the CPA your tax returns, this can be a 3-5 day turnaround at smaller firms. Don’t plan for less than a week even in the best case — partner review and report issuance are scheduled.

Review: 2-4 weeks of calendar time. Initial fieldwork (inquiries with management, document requests) takes 1-2 weeks. Analytical procedures and partner review take another 1-2 weeks. Report issuance is typically 3-5 days after fieldwork wraps. If you’re engaging a CPA for a review for the first time, add 1-2 weeks for the engagement letter, retainer, and onboarding.

Audit: 6-12 weeks for an established engagement; 12-20 weeks for a first-time audit. Year-end fieldwork is 3-6 weeks. Confirmation responses (banks, customers, attorneys) take 4-8 weeks of calendar time, often running in parallel with other audit procedures. Inventory observation has to happen at year-end — you can’t do it later. Manager and partner review cycles add 2-3 weeks. Report issuance is usually 2-3 weeks after fieldwork concludes.

What this means for sale timing. If you want audited 2026 financials available when you go to market in early 2027, the audit firm needs to be engaged by late 2026, fieldwork starts in January 2027, and the report is typically issued in March-April 2027. Telling a CPA ‘I want an audit done in 30 days’ in May to support a sale in July is unrealistic for first-time audits. Plan 12-18 months ahead — ideally longer.

Which buyer types require which level of assurance

The single most useful framework: match assurance level to buyer pool. Different buyer types have different internal rules, different lender requirements, and different risk tolerances. Investing in a Big 4 audit when your buyer pool is going to be SBA-financed individuals is wasted money. Skipping a review when your buyer pool is lender-backed LMM PE is a deal-killer. The right level isn’t the most expensive one — it’s the one that matches the buyers you’ll actually transact with.

SBA-financed individual buyers: compilation plus tax returns is usually enough. The SBA bank does its own underwriting on the buyer (credit, equity, debt service capacity) and on the business cash flow (3 years of tax returns and bank statements). They are not requiring audited financials at the deal sizes SBA covers. Investing in audited financials for an SBA-target deal is over-investment. A quality compilation plus organized tax returns plus 24-36 months of monthly P&Ls is the right package.

Search funders: review preferred, audit a plus. Search funders are MBA-trained operators backed by 10-20 sophisticated investors. They typically want reviewed financials as a baseline of credibility. They’ll buy without audited financials at sub-$2M EBITDA, but they often ask for an audit as a closing condition financed at deal close. If you’re targeting search funders specifically, invest in 2-3 years of reviewed financials and you’ll be ahead of most of the competing deal flow they see.

Lower middle-market PE: review minimum, audit increasingly required at $3M+ EBITDA. LMM PE platforms have institutional capital with LP reporting requirements. They almost always want reviewed financials at minimum. At $3M+ EBITDA — especially when the deal includes leveraged financing — they typically require audited financials, either pre-LOI or as a closing condition. Lender requirements often dictate this: senior debt providers in LMM-financed deals frequently require audited target financials before they’ll fund.

Strategic acquirers: audit, often Big-4-or-equivalent. Public-company strategic buyers have SEC reporting obligations that effectively require audited target financials. Large private strategics typically have internal policies modeled on the same standard. If your buyer pool includes strategic consolidators, plan on Big 4 or top regional firm audited financials. The cost premium ($30-80K extra/year) is real, but the buyer-side credibility lift is also real and shows up in pricing and re-trade resistance.

Family offices and independent sponsors: situational. Family offices vary widely. Some flex on assurance level when they have strategic conviction; others have institutional discipline. Independent sponsors are typically more flexible because their capital structure is built deal-by-deal — they care more about clean numbers and supportable add-backs than they do about formal assurance level. A review is usually sufficient; an audit is sometimes overkill at this buyer type.

Don’t over-invest or under-invest in assurance. Match the level to the buyer.

We’re a buy-side partner working with 76+ buyers — search funders, family offices, lower middle-market PE, and strategic consolidators — who tell us exactly what they need to see in seller-side financials. We can give you a 30-minute read on which buyer pool fits your business, what assurance level those buyers actually require, and whether you have time to build a multi-year track record before going to market. The buyers pay us, not you, no contract required. Try our free valuation calculator first if you want a starting-point range before the call.

Book a 30-Min Call

Quality of Earnings vs audit: they are not the same thing

This is the most expensive misconception in the seller-side market. Owners regularly ask ‘do I need audited financials if the buyer is going to do a QoE anyway?’ The answer is yes, you usually do, because QoE and audit answer different questions and operate at different levels of the financial-credibility stack.

What QoE actually does. Quality of Earnings is a buyer-commissioned diligence engagement, typically performed by a transaction services firm (Big 4, mid-tier, or specialist boutique) that costs the buyer $25-75K and runs 2-4 weeks. The QoE adjusts reported earnings to reflect normalized run-rate EBITDA: it removes one-time items, validates add-backs, normalizes for owner compensation, identifies unusual revenue or expense patterns, and produces a quality-of-earnings report the buyer uses to underwrite the deal.

What QoE does NOT do. QoE does not audit the underlying books. It does not verify that the bank balances reconcile. It does not test the existence of inventory. It does not confirm receivables with customers. It does not evaluate internal controls. It takes the financial statements as the starting point and analyzes them — if the underlying statements are unreliable, the QoE’s adjustments sit on top of unreliable data and the resulting report is heavily qualified.

How buyers actually use the two together. A sophisticated LMM PE buyer reads reviewed or audited financials as the credibility foundation, then commissions a QoE to translate those statements into adjusted-EBITDA terms for their valuation model. Without the seller-side assurance, the QoE comes back with comments like ‘we were unable to verify cash balances at year-end’ or ‘customer concentration figures rely on management representations.’ Those comments cost real money in the form of lower offers and aggressive working-capital pegs.

When QoE alone is enough. Smaller deals (sub-$1M EBITDA, SBA territory) often skip seller-side review/audit entirely and rely on the buyer’s CPA review of tax returns plus the SBA bank’s underwriting. This works because the buyer pool isn’t commissioning a QoE either — the deal is small enough that the costs don’t justify the diligence machinery. Above ~$2M EBITDA, this approach starts to break down.

The multi-year history requirement: why one good year isn’t enough

Buyers want three consecutive years of consistent statement type. If you’ve been doing compilations for 2023 and 2024 and you upgrade to a review for 2025 because you’re going to market, the buyer reads that as ‘the seller suddenly cared about credibility because they’re selling.’ It raises more questions than it answers. The right pattern is three years of consistent assurance — ideally with no level changes.

What ‘consistent’ means in practice. Same firm preferred (firm changes within the audit window are explainable but raise questions). Same accounting policies (no GAAP method changes for inventory, revenue recognition, or capitalization without disclosure). Same fiscal year. Same scope (don’t add or remove subsidiaries mid-window without clear restatement). Buyers parse year-over-year movements line-by-line; inconsistency forces questions.

If you’re starting late, here’s what to do. Upgrading from compilation to review is achievable for prior years. The CPA can perform a review on prior-year financials retroactively — cost is roughly the same as a current-year review per year, plus 20-30% complexity premium. Upgrading from compilation to audit retroactively is harder and more expensive (50-100% premium per back-year) and sometimes not possible if certain audit procedures (like inventory observation at year-end) can’t be reconstructed.

The 18-36 month investment runway. If you’re 12+ months from going to market and you know your buyer pool will require reviewed or audited financials, start now. Engage the CPA. Have them perform the current year and the prior year on the right level. Plan to have the third year done as a normal annual engagement. By the time you go to market, you have three consistent years and you’ve avoided the ‘upgraded last year only’ signal.

When you’re going to market in 90 days and don’t have it. Be honest about it in the CIM. ‘The Company has historically prepared financial statements on a compiled basis. Upon execution of a definitive agreement, the Company will engage [firm] to perform a review of trailing 24 months.’ This signals self-awareness and puts the assurance step on the buyer’s timeline rather than yours. It costs you on multiple but it doesn’t kill the deal. Pretending you have what you don’t kills the deal.

Common owner mistakes that cost real money

Mistake 1: assuming all CPAs can deliver all assurance levels. Many local CPA firms offer compilation and tax services but are not registered to perform reviews or audits, or they perform them so rarely that buyer-side diligence treats their reports skeptically. Confirm your CPA’s peer review status and audit/review experience before engaging. If your buyer pool is LMM PE or strategic, the audit firm’s name on the report carries weight — a regional firm with a strong audit practice will outperform a small local firm doing its first audit in years.

Mistake 2: upgrading the most recent year only. Telling the buyer ‘we just did our first review in 2025’ is worse than not doing one at all in some cases. The buyer correctly reads the timing as sale-driven and discounts the assurance accordingly. Better path: do the review for the current year and the prior year retroactively — or accept that you’re selling on compilation-quality books and price accordingly.

Mistake 3: betting on the buyer’s QoE to fix the books. Owners with messy books sometimes assume the buyer’s QoE will analyze and clean up the numbers. The QoE does not clean books — it analyzes them. If the underlying books have commingled personal expenses, missing reconciliations, sales-tax compliance gaps, and aggressive add-backs, the QoE produces a long list of findings that the buyer uses to drive the price down. Clean the books before going to market; let the QoE confirm earnings rather than discover problems.

Mistake 4: paying for an audit when a review would have sufficed. Sub-$2M EBITDA businesses targeting SBA buyers or search funders rarely need audited financials. Spending $50K/year on an audit when the buyer pool would have closed on a $15K review is a $35K/year over-investment that doesn’t move the multiple. Match the spend to the buyer pool.

Mistake 5: skipping assurance when targeting LMM PE or strategics. $3M+ EBITDA owners targeting LMM PE who go to market without reviewed financials at minimum get re-traded or rejected at the LOI stage. The cost of a review ($10-15K/year) is rounding error against a deal-size impact of 0.5-1.0x of EBITDA from buyer-side discount-for-uncertainty pricing. The math is unambiguous at this size.

Mistake 6: not reading the audit report’s qualifications. Audit and review reports can include qualifications — explanatory paragraphs noting going-concern issues, scope limitations, accounting method changes, or other items the auditor felt obligated to disclose. Buyers read the qualifications carefully. A clean unqualified opinion is the goal. If your prior year’s audit had qualifications, address them with your CPA before the next year starts so the trailing report is clean.

How to choose the right CPA firm for assurance work

Not all CPA firms are equipped to do high-quality audit and review work. Choosing the wrong firm can cost you in three ways: report quality (some firms produce reports buyers don’t respect), engagement experience (slow turnaround, missed deadlines, scope creep), and pricing (unsophisticated firms underprice and then either miss deadlines or deliver weak product). Pick the firm with care.

Tier 1: Big 4 (Deloitte, EY, KPMG, PwC). Strongest brand recognition. Highest cost (often 2-3x regional firms). Best fit for $5M+ EBITDA deals targeting strategic acquirers or PE platforms with institutional capital. Often overkill for sub-$5M EBITDA. Engagement quality varies by partner — pick the partner, not the firm. Big 4 audits sometimes have tighter scope (less hand-holding through cleanup) than mid-tier firms.

Tier 2: Top regional firms (BDO, Grant Thornton, RSM, Baker Tilly, etc.). Strong audit practices, deep LMM-deal experience, more flexible than Big 4 on scope and engagement style. Cost is typically 50-65% of Big 4 for equivalent work. Best fit for $1-10M EBITDA targets with institutional or PE buyer pools. Most LMM transactions go through this tier of firms on the seller side.

Tier 3: Strong local/super-regional firms with audit practices. Many strong local firms have dedicated audit and review practices and produce work buyers respect. Cost is typically 30-50% of Big 4. Best fit for sub-$5M EBITDA businesses where the buyer pool is search funders, independent sponsors, or smaller LMM PE. Verify peer review status (publicly available through AICPA), check the firm’s recent transaction-side experience, and ask for a list of comparable engagements.

Avoid: small local firms doing audit/review work occasionally. If a firm does 2-3 audits a year on top of mostly tax work, the audit muscle isn’t there. Buyer-side diligence will note the firm’s lack of transaction-side experience and discount the assurance accordingly. If your current CPA is in this category, that’s fine for compilation and tax work — but engage a stronger firm for the assurance work needed to support a sale.

Practical sourcing tip. Ask 2-3 deal attorneys in your geography or industry which CPA firms they see consistently produce buyer-respected work. They’ll have a short list. Ask 2-3 PE firms in your space the same question. The names that overlap across both lists are your shortlist.

Decision framework: which level you actually need

Start with two questions. First, what is your normalized EBITDA? Second, what buyer pool are you targeting? The answers determine the right assurance level. Do not start with ‘more is better’ or ‘the cheapest one will do’ — both lead to bad outcomes. Match the level to the actual buyer requirements.

Sub-$1M EBITDA, SBA / search-funder pool: compilation plus tax returns plus monthly P&Ls. Spend the assurance budget on bookkeeping cleanup and 24-36 months of monthly granularity instead. Total assurance budget: $5-10K/year. Don’t over-invest.

$1-3M EBITDA, mixed buyer pool: review. Review provides the credibility floor that opens up search funders, independent sponsors, family offices, and lower-end LMM PE. Total assurance budget: $10-20K/year. Build a 3-year review track record over 18-36 months pre-market.

$3-7M EBITDA, LMM PE pool: audit at minimum, often with senior-debt-driven requirements. At this size, lender requirements typically mandate audited financials. Plan on $30-60K/year for a regional-firm audit. First-year audit may run $40-80K once cleanup is included; subsequent years stabilize.

$7M+ EBITDA, broad pool including strategics: audit, often Big 4 or top regional. At this size, the cost of a Big 4 audit ($75-200K/year) is rounding error against the deal value, and the credibility lift is real with strategic acquirers and PE platforms with institutional LP bases. The decision becomes ‘which firm,’ not ‘which level.’

Cross-reference against your timeline. The right level only works if you have time to execute it. If you’re 90 days from going to market and you don’t have any review or audit history, you’re going to market on what you have. Be honest in the CIM, position the assurance step as a closing condition, and accept the multiple impact. Don’t try to fake a multi-year track record — sophisticated buyers see through it.

What buyers actually do with the financials in diligence

Buyers parse seller financials in three layers, in order. First, do the financials look credible on their face? (Compilation level — do they balance, do they tie to tax returns, do major lines move sensibly year over year?) Second, has a CPA done meaningful work to back them up? (Review or audit — what level, by whom, with what qualifications?) Third, what does the QoE say once the buyer commissions one? Each layer compounds the prior layer’s credibility.

What buyer-side CPAs check first. Tax-return-to-financial-statement reconciliation (do they tie?). Bank-statement-to-cash-balance match (does the cash on the books match what the bank confirms?). Year-over-year revenue and gross margin trends (smooth growth is suspect; volatile but explainable is fine). Owner-related expenses (commingled personal expenses are a major red flag). Inventory accounting (FIFO vs weighted average, count discipline).

How assurance level shifts the diligence experience. Compilation-only books: buyer-side CPA spends 40-80 hours doing what an audit firm would have done. Review-level books: buyer-side CPA spends 20-40 hours validating the review and pushing on areas not covered. Audit-level books: buyer-side CPA spends 10-25 hours reading the audit work papers and focusing on specific questions. Less buyer-side work = less surface area for re-trade.

The qualification trap. If your audit or review report contains qualifications — going concern paragraphs, scope limitations, method-change disclosures — buyers parse them carefully. A qualified audit can be worse than a clean compilation in some cases because the qualification is now a documented concern. Address qualifications with your CPA before the next year’s engagement.

What happens if the QoE finds adjustments your CPA missed. Sometimes the QoE identifies legitimate adjustments your assurance work didn’t catch — a misclassified expense, an unrecorded liability, a revenue-recognition timing issue. This isn’t catastrophic. The right response is to engage your CPA, validate or reject the adjustment, and update your reported numbers transparently. Buyers respect transparency; they punish hiding.

How to manage the assurance engagement to avoid surprises

Engagement-letter discipline matters. Get the engagement letter in writing. Specify the level (compilation, review, or audit), the year(s) covered, the deliverables (statements, footnotes, management letter), the timeline (key milestones, report issuance date), and the fee structure (fixed fee vs hourly with cap). Vague engagement letters lead to scope disputes and missed deadlines.

Pre-engagement cleanup pays back 3-5x. Before fieldwork starts, spend 2-4 weeks on bank reconciliations, account roll-forwards, accrual entries, inventory counts, and AR/AP aging cleanup. Every hour you spend on prep saves 2-3 hours of CPA-billed time at $200-450/hour. On a $40K audit, $5-10K of pre-engagement cleanup typically saves $15-30K in CPA fees and shortens the calendar timeline by 2-4 weeks.

Manage information requests proactively. The CPA will issue a Provided-By-Client (PBC) list with 50-200 items. Treat it like a project plan. Assign owners (you, your bookkeeper, your CPA, your office manager). Set deadlines. Track completion weekly. Audits and reviews stall when 5-10% of PBC items linger past the deadline — the CPA can’t close out areas waiting on documentation, and the calendar drags.

Plan for the management representation letter. At the end of an audit or review, the CPA requires a representation letter signed by management asserting that the financial statements are accurate, all known events have been disclosed, and there are no undisclosed contingencies. Don’t sign it casually — if there’s a pending lawsuit, customer dispute, IRS inquiry, or other contingent matter you haven’t disclosed, this is the moment to disclose it. Misstating the rep letter creates personal liability.

Use the management letter the CPA produces. Most reviews and all audits produce a management letter identifying internal control weaknesses, accounting concerns, and improvement opportunities. Read it. Address the items. By the next year, the management letter should be materially shorter. This shows discipline and is a positive signal to buyers reading the trailing year’s assurance package.

Conclusion

Compilation, review, and audit are not interchangeable, and the buyer pool you target dictates which one you actually need. Sub-$1M EBITDA SBA-target deals don’t need audited financials. $3M+ EBITDA LMM PE-target deals usually do. Search funders sit in the middle and reward reviewed financials. Strategic acquirers expect Big-4-or-equivalent audits. The investment is not about ‘more is better’ — it’s about matching the assurance level to the buyer pool 18-36 months before going to market so you have a multi-year track record. The QoE the buyer commissions does not replace seller-side assurance; it analyzes earnings on top of credible books. Get the level right, give yourself the runway, and pick a CPA firm whose audit reports buyers respect. Owners who do this work get cleaner diligence, fewer re-trades, and meaningfully better outcomes. And if you want to talk to someone who already knows what each buyer type expects in your specific industry, we’re a buy-side partner — the buyers pay us, not you, no contract required.

Frequently Asked Questions

Do I really need audited financials to sell my business?

It depends on the buyer pool. SBA-financed individual buyers don’t require audited financials — tax returns plus monthly P&Ls are usually enough. Search funders prefer reviewed financials. Lower middle-market PE typically requires reviewed financials at minimum and audit at $3M+ EBITDA. Strategic acquirers and lender-backed deals usually require audit. Match the assurance investment to the buyer pool you’re realistically targeting.

What’s the difference between a review and an audit in plain terms?

A review is mostly inquiry plus analytical procedures — the CPA asks management about unusual items and runs ratio analysis but doesn’t test transactions. The CPA’s opinion is ‘limited assurance’ (we’re not aware of material problems). An audit involves actual testing: sampling transactions, confirming bank balances, observing inventory, checking internal controls. The CPA’s opinion is ‘reasonable assurance’ (the financials present fairly). Audit takes 3-5x longer and costs 3-5x more than a review.

How much does an audit actually cost in 2026?

First-time audit on a $5-10M revenue business: $40-80K at a regional firm (Tier 2), $25-50K at a strong local firm (Tier 3), $80-200K+ at Big 4. Subsequent years drop 30-50% as the audit firm builds knowledge of the business. Add $10-30K of internal cleanup costs in year one if your books aren’t audit-ready. Factor in 6-12 weeks of calendar time, longer for first-time engagements.

Can my regular tax CPA do a review or audit?

Maybe, but verify. Many local CPAs do mostly tax work and either don’t perform reviews/audits or do them rarely. Buyer-side diligence parses the firm’s reputation and peer-review status. If your buyer pool is LMM PE or strategic, engage a Tier 2 or strong Tier 3 firm with a documented audit/review practice. If your buyer pool is SBA, your regular CPA doing a compilation is usually fine.

Will the buyer’s Quality of Earnings replace seller-side audited financials?

No. QoE analyzes and adjusts reported earnings — it doesn’t verify the underlying books. QoE relies on the financial statements being credible to start with. If your books are unreliable, the QoE comes back with heavy qualifications and the buyer underwrites conservatively. QoE and seller-side assurance are complementary, not substitutes.

How many years of financial statements do buyers want to see?

Three years is the standard expectation. Buyers want three consecutive years of consistent statement type from the same firm with the same accounting policies. Switching levels (e.g., compilation 2023 and 2024, review 2025 only) signals sale-driven behavior and raises questions. If you’re starting late, do the current year and prior year retroactively at the same level if possible.

Can I upgrade my prior years’ financials retroactively?

Yes, with caveats. Compilations can be upgraded to reviews retroactively at roughly current-year cost plus a 20-30% complexity premium. Compilations can be upgraded to audits retroactively at 50-100% premium per back-year, but some audit procedures (e.g., year-end inventory observation) can’t be reconstructed and may produce a qualified opinion. Plan ahead when possible — retroactive upgrades are expensive and imperfect.

What if I don’t have time to do an audit before going to market?

Be transparent in the CIM and position the audit as a closing condition. The deal proceeds with the buyer commissioning their own QoE and pre-LOI diligence; the audit is performed in parallel with definitive-agreement negotiation. This shifts the assurance step out of the seller’s timeline and onto the buyer’s, but it costs you on multiple by 0.25-0.75x of EBITDA in most cases.

Should I get a Big 4 audit or use a regional firm?

For sub-$5M EBITDA, a regional firm (BDO, RSM, Grant Thornton, Baker Tilly) is usually the right answer — same buyer credibility at 50-65% of Big 4 cost. For $7M+ EBITDA targeting strategic acquirers or PE platforms with institutional LP bases, Big 4 carries a real premium that’s often worth the cost. Pick the partner, not just the firm — engagement quality varies more by partner than by brand.

What if my audit comes back with qualifications?

Address them with your CPA before the next year’s engagement. Going-concern qualifications are particularly serious and need to be resolved before going to market. Scope-limitation qualifications signal the auditor couldn’t complete some procedure — identify why and fix the underlying issue. Method-change qualifications are usually explainable and not deal-breaking but should be disclosed clearly in the CIM. A clean unqualified opinion is the goal.

Does cash-basis accounting work for an audit or review?

Most LMM-target audits and reviews are performed under accrual GAAP. Cash-basis financials can be reviewed under a special-purpose framework (OCBOA) but most sophisticated buyers want accrual. Plan to switch to accrual 18-24 months before going to market — the conversion takes time and produces some unusual one-time entries that buyers want to see seasoned over multiple periods.

How does assurance level affect my multiple at exit?

Imperfect data, but the directional pattern is clear: at $3M+ EBITDA, going to market with reviewed-or-audited financials versus compilation-only typically lifts realized multiple by 0.25-0.75x of EBITDA, net of the assurance cost. At $1-3M EBITDA, the impact is 0.1-0.4x. Below $1M EBITDA, audit/review investment usually doesn’t pay back — the buyer pool isn’t paying for it.

How is CT Acquisitions different from a sell-side broker or M&A advisor?

We’re a buy-side partner, not a sell-side broker. Sell-side brokers represent you and charge you 8-12% of the deal (often $300K-$1M) plus monthly retainers, run a 9-12 month auction process, and require 12-month exclusivity. We work directly with 76+ buyers — search funders, family offices, lower middle-market PE, and strategic consolidators — who pay us when a deal closes. You pay nothing. No retainer, no exclusivity, no contract until a buyer is at the closing table. You can walk after the discovery call with zero hooks. We move faster (60-120 days from intro to close) because we already know who the right buyer is and what assurance level they need to see.

Related Guide: SDE Add-Backs Explained for Small Business Sellers — Which add-backs survive CPA review and which get stripped during diligence.

Related Guide: Business Sale Process: Step-by-Step Timeline — When to engage your CPA and start assurance work in the overall sale timeline.

Related Guide: Preparing a Business for Sale: 24-Month Playbook — Where audit/review fits in a complete pre-sale preparation roadmap.

Related Guide: How to Value a Small Business for Sale — How financial-statement assurance level affects valuation multiples.

Related Guide: What Is Your Business Worth in 2026? — Current-year valuation framework with adjustments for assurance and add-backs.

Want a Specific Read on Your Business?

30 minutes, confidential, no contract, no cost. You leave with a read on your local buyer market and a likely valuation range.

CT Acquisitions is a trade name of CT Strategic Partners LLC, headquartered in Sheridan, Wyoming.
30 N Gould St, Ste N, Sheridan, WY 82801, USA · (307) 487-7149 · Contact

Leave a Reply

Your email address will not be published. Required fields are marked *