Last reviewed October 7, 2026 · By the NYBACS advisory team
Short answer
No. There is no general federal or state rule requiring a privately held US company to have its financial statements audited. An audit becomes necessary when someone with leverage requires it: public-company and certain securities-offering rules, investors through their financing documents, lenders through loan covenants, federal grant rules, industry regulators, or a foreign parent whose own auditor must cover the US subsidiary for group accounts.
Key takeaways
- Forming an LLC or C-Corp and filing US tax returns does not, by itself, create any audit requirement.
- Public companies registered with the SEC must be audited by a PCAOB-registered firm; most private companies are audited under AICPA standards when an audit is required.
- Many audit requirements are contractual: investor rights agreements and loan agreements commonly require audited annual statements within a set number of days after year-end.
- Non-federal entities that spend $1,000,000 or more in federal awards in a fiscal year beginning on or after October 1, 2024 generally need a Single Audit.
- A US subsidiary of a foreign group is often audited because the parent's auditor needs assurance over it for consolidated accounts, even though US law does not demand a standalone audit.
Why most private US companies are never audited
Many countries require every company, or every company above a size threshold, to file audited statutory accounts with a registry. The US has no equivalent for private companies. Delaware, Wyoming, New York and other states do not ask for financial statements with the annual report, and the IRS audits tax returns, not financial statements, which is a different process entirely.
Founders arriving from India, the UK or the EU sometimes assume their US company needs a statutory audit because their home entity does. It does not. The question to ask is not "does the law require an audit?" but "has anyone we depend on asked for one, or will they?"
What actually triggers an audit
| Trigger | What is usually required |
|---|---|
| SEC-registered (public) company | Annual audit by a PCAOB-registered firm under PCAOB standards |
| Regulation A Tier 2 offering | Audited financial statements in the offering circular |
| Regulation Crowdfunding | Certified, reviewed or audited statements depending on the amount raised and whether the issuer has used Reg CF before |
| Rule 506(b) with non-accredited investors | Disclosure that includes financial statement information; larger offerings can require audited statements |
| Priced equity round (often Series A or later) | Audited annual statements under the investor rights agreement, typically within 90–180 days of year-end |
| Bank or private credit facility | Audited or reviewed statements under the loan covenants, often scaled to loan size |
| Federal grants and awards | Single Audit once federal expenditure reaches the threshold |
| Franchisors | Audited statements in the Franchise Disclosure Document, with a phase-in for new franchisors |
| Regulated activities | Licensing regulators (for example money transmission, broker-dealers, insurance) commonly require audited statements |
| Foreign parent group | Component audit procedures or a full audit to support the parent's consolidated accounts |
Acquirers in an M&A process may also insist on audited or quality-of-earnings-tested numbers before signing.
Investor and lender requirements are written into documents you sign
The most common reason a growing startup gets audited is a clause it agreed to. Investor rights agreements used in many venture rounds give major investors information rights that include annual financial statements, and the clause often specifies that they be audited by an independent accounting firm. Some founders sign this at a seed or Series A stage without noticing, then receive a request a year later.
Loan agreements work the same way. A lender may accept company-prepared statements for a small facility and step up to reviewed or audited statements as the loan grows. Missing the delivery deadline can be a covenant breach even when every payment is current. Read the reporting section of every financing document and put the delivery dates on the finance calendar.
When the requirement comes from a foreign parent
If your US entity is a subsidiary of a company in India, the UK, the EU, Japan or elsewhere, the parent's statutory auditor usually has to cover the subsidiary's numbers when it audits the consolidated accounts. Depending on the subsidiary's size and risk, the group auditor may ask for a full audit by a US firm, specific procedures on selected accounts, or simply a reporting package it can review.
This requirement does not come from US law, so it is easy to discover late, typically when the parent's year-end approaches and the group auditor sends instructions. Agreeing the scope early with the parent's finance team avoids a rushed US-side close.
When a voluntary audit or review still makes sense
Some companies choose assurance before anyone demands it. A first-year audit can be more expensive than later years because the auditor must also obtain evidence about opening balances, so a company that expects a priced round or a sizeable loan within 12–18 months may prefer to start the clean-up early. A review is a lower-cost alternative when a counterparty wants independent comfort but not a full audit.
The right choice depends on who will rely on the statements, what they have asked for in writing, and when. Confirm the exact requirement (audit, review or management accounts) before engaging any firm.
Common mistakes to avoid
- Assuming the US subsidiary needs a statutory audit because the home-country entity does.
- Signing an investor rights agreement or loan agreement without noting the audited-statements delivery deadline.
- Commissioning a full audit when the counterparty would have accepted a review, or the reverse.
- Learning about the parent group auditor's instructions only weeks before the parent's year-end.
- Confusing an IRS tax examination with a financial statement audit.
NYBACS 360° support
How NYBACS helps
- Reviews your financing documents, loan agreements, grant terms and parent-company instructions to identify exactly what level of assurance is owed and when.
- Builds a reporting calendar showing each audited or reviewed statement deadline.
- Prepares accrual-basis books and schedules so the company is ready whichever level of assurance applies.
- Coordinates with the parent's finance team and group auditor to agree the US subsidiary's scope.
- Helps you obtain proposals from independent CPA firms, which you then engage directly.
Frequently Asked Questions
Does the IRS require a C-Corp to be audited?
No. The IRS requires accurate tax returns and supporting records, not audited financial statements. An IRS examination of a return is a separate process from a financial statement audit by a CPA firm.
Will a seed-stage investor ask for an audit?
It is uncommon at pre-seed and seed, where investors usually rely on management accounts and diligence. Audit requirements become more common with priced rounds, larger institutional investors and venture debt.
Is an audit required to open a US business bank account?
Not usually. Banks focus on KYC documents, ownership and expected activity. Audited statements become relevant mainly for credit facilities rather than for opening deposit accounts.
Can a review be upgraded to an audit later?
Not retroactively. If an audit is later required for the same period, the CPA firm must perform audit procedures from scratch, though good review-period records make that work faster.
Does an LLC face different audit rules from a C-Corp?
Not in principle. The triggers are the same contractual and regulatory ones; the entity type mostly affects how equity is presented, for example members' capital accounts instead of share capital.
