Most private-company loans do not need an audit: SBA and smaller bank loans are usually underwritten on tax returns plus company-prepared or compiled statements. A CPA can prepare, compile, review or audit statements, and each gives a lender more assurance than the last. Preparation and compilation offer none; a review offers limited assurance from inquiry and analysis; an audit offers reasonable assurance, based on testing, and an opinion. Reviews are common for larger bank relationships and lines of credit, and audits for larger credits and many private credit funds. Where no review exists, lenders lean on tax returns, bank statements and, in acquisitions, financial due diligence.
- Preparation
- CPA prepares the statements; no report, no assurance
- Compilation
- CPA formats management's figures and reports on them; no assurance
- Review
- Inquiry and analytical procedures; limited assurance; CPA must be independent
- Audit
- Testing and outside confirmation; reasonable assurance and an opinion
- What most small loans need
- Tax returns plus company-prepared or compiled statements
- What sets the requirement
- The lender's credit policy, the loan structure and the size of the credit
Four levels of CPA involvement
Owners usually speak of three levels, but accounting standards recognize four. The difference between them is not how polished the statements look. It is what the CPA did to check the numbers, and therefore what a lender can infer from the CPA's name being on them.
| Level | What the CPA does | What the CPA says | Independence required | What a lender reads into it |
|---|---|---|---|---|
| Preparation | Assembles statements from the company's records | Nothing beyond a legend that no assurance is provided | No | The numbers are organized, not checked |
| Compilation | Formats management's figures into statements and reads them for obvious errors | A report stating that no assurance is given | No, but a lack of it must be disclosed | Presentation is professional; accuracy rests on management |
| Review | Asks management questions and runs analytical procedures: ratios, trends, comparisons with prior periods | It is not aware of material changes needed to the statements | Yes | Someone independent looked for anything that does not make sense |
| Audit | Tests transactions, confirms balances with customers and banks, observes inventory counts, evaluates controls | An opinion on whether the statements are fairly presented | Yes | The balances have been checked against outside evidence |
Two details matter more than they appear to. A compilation may omit substantially all the notes to the statements, and often does; a review generally carries full notes. And a review or audit requires the CPA to be independent of the company. A firm that also keeps the books can keep that independence only if management takes responsibility for the records and the firm meets the profession's other safeguards; where it cannot, or where a lender prefers a separation, owners moving up a level find they need a second firm.
Which lenders ask for which
No law sets these requirements for private-company loans. Each lender's credit policy does, usually by the size of the total credit relationship, the loan structure and the risk. Dollar thresholds vary from lender to lender, so the table describes the pattern rather than a line.
| Lender and loan type | What is usually required | Why |
|---|---|---|
| SBA 7(a) and 504 lenders | Business and personal tax returns, verified with IRS transcripts, plus company-prepared or CPA-prepared statements and a year-to-date P&L | SBA underwriting centers on tax returns; some lenders add a review for larger loans |
| Banks, smaller term loans and equipment | Tax returns plus company-prepared or compiled statements | The loan is sized on cash flow the returns already show |
| Banks, larger relationships and lines of credit | Reviewed statements annually, internal statements quarterly or monthly | Covenants are tested on the statements, so the lender wants someone independent looking at them |
| Asset-based lenders | Reviewed or audited annual statements plus field exams of the collateral | The field exam tests the receivables and inventory directly; the statements cover the rest |
| Private credit funds and unitranche lenders | Audited statements, sometimes with the first audit due in the first year after closing | Larger, more leveraged loans with covenants that depend on precise figures |
| Acquisition lenders | Financial due diligence or a quality of earnings report on the target, whatever its statements | The earnings being bought matter more than the level of past assurance |
The most useful question to ask a lender early is not "do you need an audit" but "what level of statements do you need at closing, and what level will the loan agreement require each year after." The first determines whether you can close on what you have; the second becomes a reporting covenant you pay for every year.
Underwriting without a review
Many established businesses have never had anything beyond tax returns and the owner's accounting software. That is not a barrier to most loans. Lenders simply build their own assurance from sources that are hard to manipulate.
- Tax returns are the anchor. Lenders verify them against IRS transcripts, obtained with Form 4506-C, so the returns on file are the returns that were filed.
- Internal statements are reconciled to the returns. Revenue and profit on the P&L should tie to the return, and the return's own reconciliation of book income to taxable income explains legitimate differences.
- Bank statements test revenue. Deposits over a year should support the sales the P&L reports, after transfers between accounts and loan proceeds are taken out.
- Agings and schedules test the balance sheet. A receivables aging, a payables aging and a debt schedule should each tie to the balance sheet at the same date.
- Interim results bring the picture current. A year-to-date P&L through the last month-end shows whether the most recent tax year is still representative.
When the internal figures and the returns disagree, the lender uses the returns unless the difference is explained and documented. A P&L that shows more profit than the return, with no bridge between them, is the most common reason small-business files stall. See when the financials don't match the tax returns.
A lender can work with unreviewed statements that reconcile. It cannot work with reviewed statements that don't.
Acquisitions: diligence stands in for assurance
In a business purchase, the lender is lending against the target's earnings, and a seller's statements are rarely reviewed or audited. Lenders fill that gap with diligence on the target rather than by asking the seller to commission an audit it does not have time to complete.
On SBA loans the requirement is becoming explicit. From 1 October 2026, SOP 50 10 8.1 requires financial due diligence on every change of ownership, and a quality of earnings report on acquisitions of $3 million or more excluding real estate. Conventional acquisition lenders commonly ask for a quality of earnings report on larger deals already. A quality of earnings report is not an audit: it analyzes whether earnings are real and repeatable rather than whether the balance sheet is fairly stated. The difference is covered in quality of earnings vs audit.
Before you commission a review or audit
Upgrading the level of assurance costs money every year once a loan agreement requires it, so it is worth doing for a reason rather than out of caution.
- Ask the lenders first. If the lenders suited to the deal underwrite on tax returns and compiled statements, a review adds cost without changing the answer.
- A first audit takes preparation. Auditors need to establish opening balances. If no one observed the count of opening inventory, the auditor may not be able to give a clean opinion on the first year's results without additional procedures. Businesses that expect to need an audit should plan the first year-end count with the auditor.
- Reviews are a common middle step. A business moving toward larger credit often goes from compiled to reviewed statements a year or two before it needs an audit, which also surfaces the accounting questions an auditor would raise.
- Check the accounting basis. Statements at any level can be prepared on the cash or tax basis rather than the accrual basis lenders prefer for lines of credit and covenants. A review of cash-basis statements answers a different question than the lender is asking. See accrual vs cash basis.
- Negotiate the reporting covenant. If a lender requires reviewed statements now and an audit later, the loan agreement should say when, and the timing should be realistic.
What Transparent does with the statements you have
Transparent's checklists ask for the statements a business already has: tax returns, a P&L, a year-to-date P&L and a balance sheet, whatever the level of CPA involvement. The financing model reconciles them to the returns and flags every difference before a lender sees it, and the underwriting memo tells lenders what kind of statements they are reading. Of the 1,800+ lenders in Transparent's book, many underwrite on tax returns and compiled statements as a matter of course; a business without a review is matched to those. See how we underwrite and the package.
Common questions
- Does an SBA loan require audited financial statements?
- Generally no. SBA underwriting centers on business and personal tax returns, verified with IRS transcripts, together with the company's own statements. Individual lenders may ask for a review on larger loans, and from 1 October 2026 every SBA change of ownership needs financial due diligence.
- What is the difference between a review and an audit?
- A review relies on inquiry and analytical procedures and gives limited assurance. An audit tests transactions, confirms balances with outside parties and observes inventory, and ends in an opinion that gives reasonable assurance.
- Are CPA-compiled statements better than my own?
- They are better organized and usually more consistent, but a compilation gives no assurance that the numbers are right. Lenders still reconcile compiled statements to tax returns and bank statements.
- Can my bookkeeper's CPA firm do the review?
- Sometimes. A review or audit requires independence, and a firm that keeps your books keeps it only if management takes responsibility for the records and the profession's safeguards are met. If they are not, the firm can still compile the statements, and a second firm does the review.
- Will a lender require an audit after closing?
- Some will, especially on larger or more leveraged loans. The requirement appears as a reporting covenant, and its timing is negotiable before the loan agreement is signed.