TLDR: The 3 services differ by how much assurance the CPA gives you. An audit gives reasonable assurance (the highest level), a review gives limited assurance, and a compilation gives no assurance at all. The right pick depends on who relies on your financial statements: if a lender, investor, regulator, or board sets the requirement, their requirement wins, and if nobody outside the business is asking, a compilation may be all you need.
Why This Question Trips Up So Many Business Owners
Somebody just asked for your financial statements, and the email said something like "CPA-prepared" or "audited" or "reviewed." Maybe all 3. Now you are searching audit vs. review vs. compilation at 9:40 on a weeknight, which is a perfectly normal thing to do and also a sign that nobody explained it to you up front.
Here is the short version. These are 3 different levels of service a CPA can perform on financial statements, and the real difference is assurance: how much comfort the CPA's work gives anyone who relies on your numbers. Poston Denney & Killpack (PDK) has been working with businesses in Idaho Falls since 1984, and partners Bruce Denney (CPA, CVA) and Kevin Killpack (CPA) have spent their careers on exactly this kind of work. This guide covers what each level involves, who usually requires it, and how to pick the right level before you find out you picked wrong in the middle of a loan renewal.
Audit Vs. Review Vs. Compilation At A Glance
Here is the side-by-side. Everything after this table explains the rows.
| Compilation | Review | Audit | |
|---|---|---|---|
| Level of assurance | None | Limited | Reasonable (high, but not absolute) |
| Governing standards | SSARS, AR-C Section 80 | SSARS, AR-C Section 90 | AICPA auditing standards (GAAS), including AU-C Section 200 |
| What the CPA does | Helps management present financial information as financial statements; reads them for obvious problems; does not verify the numbers | Asks questions and runs analytical procedures to look for unusual trends or variances; does not test controls or accounting records | Assesses risk, including fraud risk; evaluates internal controls; tests records; confirms balances with outside parties |
| What you receive | Statements plus a report stating no assurance is provided | Statements plus a review report with a limited-assurance conclusion | Statements plus an auditor's opinion |
| Independence required? | No, but a lack of independence must be disclosed in the report (per Armanino) | Yes | Yes |
| Who typically requires it | Usually nobody outside the business; owners and management who want properly formatted statements | Lenders, investors, and other outside parties whose agreement calls for reviewed statements | Lenders with significant loans, regulators, grantors, boards, and some investors; public companies follow PCAOB standards |
| Best fit when | Only management or owners rely on the numbers | Outsiders want some comfort, but no rule or agreement demands an audit | An agreement, rule, or stakeholder names an audit, or the highest comfort level matters |
Quick read: more assurance means more evidence gathered, and more evidence gathered means more work on both sides of the table. The level is set by who needs to trust the numbers, not by which word sounds most impressive.
Key Facts Worth Knowing Before You Decide
- 3 levels of assurance: none (compilation), limited (review), reasonable (audit)
- 2 separate rulebooks: compilations and reviews fall under SSARS; audits fall under auditing standards, not SSARS
- 4 core SSARS sections: AR-C 60 (general principles), 70 (preparation), 80 (compilation), and 90 (review)
- SSARS No. 25 (materiality in a review and adverse conclusions) took effect for periods ending on or after December 15, 2021
- Independence: required for reviews and audits; a compilation can be issued without it if the report says so
- The agreement wins: whatever your lender, investor, regulator, or board wrote down sets the minimum level
- PDK since 1984: BBB accredited with an A+ rating, led by Bruce Denney (CPA, CVA) and Kevin Killpack (CPA)
What Is An Audit?
An audit is the highest level of assurance a CPA can provide. The auditor gathers enough evidence to give reasonable assurance, a high but not absolute level, that the financial statements are free of material misstatement, then issues an opinion on whether they are fairly presented under the applicable framework, usually U.S. GAAP. Audits of private companies follow auditing standards issued by the AICPA, and AU-C Section 200 lays out the auditor's overall objectives. Audits of public companies follow PCAOB standards instead. The Journal of Accountancy frames the auditor's goal as accumulating greater evidence to reach a reasonable, or high, level of assurance.
Reasonable assurance is not a guarantee. An audit is built to catch material errors and fraud, not every small mistake in the file.
What The Auditor Does
- Learns your business, your industry, and your internal controls
- Assesses where a material misstatement, including fraud, is most likely
- Tests transactions, balances, and disclosures against supporting records
- Confirms balances directly with outside parties, such as banks and customers
- Evaluates significant estimates and management's judgments
- Issues an auditor's opinion on the financial statements
The auditor also has to be independent of your business. That independence is part of why lenders, regulators, and boards trust the result. Bruce Denney and Kevin Killpack lead this kind of work at PDK, and the firm has been building that track record in Idaho Falls since 1984.
What Is A Review? How A Review Engagement Works
A review gives limited assurance. In plain English, the CPA is telling you they did not find anything that makes them think the statements need material changes, based on questions and analytical procedures rather than detailed testing. Reviews follow the Statements on Standards for Accounting and Review Services (SSARS), specifically AR-C Section 90, Review of Financial Statements.
What The CPA Does In A Review Engagement
- Learns your business, your industry, and your accounting policies
- Makes inquiries of management about transactions and unusual items
- Runs analytical procedures: comparing periods, ratios, and expectations to spot trends or variances
- Follows up on anything that looks off
- Gets written representations from management
- Issues a review report with a limited-assurance conclusion
What A Review Does Not Do
A review does not evaluate your internal controls, assess fraud risk, or test your accounting records, according to Armanino's comparison. That gap is exactly why a review cannot stand in for an audit when an agreement calls for it.
The standard has also been updated. SSARS No. 25, issued in February 2020, added requirements on materiality in a review and on adverse conclusions, and it applies to periods ending on or after December 15, 2021.
What To Have Ready
Your CPA expects the books to be closed and the major balance sheet accounts reconciled before the review starts, as GRF CPAs notes. Show up with open items and the engagement turns into a cleanup project. PDK's team returns calls quickly, so if you are not sure your books are ready, ask before the work begins rather than halfway through.
What Is A Compilation?
A compilation is the CPA helping management present financial information in the form of financial statements, with no assurance. It falls under AR-C Section 80, Compilation Engagements. The CPA gets a general understanding of your business and reporting practices and reads the statements for anything that looks inappropriate in form or obviously wrong. The CPA does not verify the numbers, and the report says so.
Independence works differently here. A CPA can issue a compilation report without being independent, as long as the report discloses that fact, per Armanino. Reviews and audits do not allow that.
A compilation tells you the statements are put together properly. It does not tell you the numbers are right. If only the owners and management use the statements, that is often fine. If a lender or investor is relying on them, they may want more.
The 4th Option People Forget: Preparation
Sometimes the right answer is none of the 3. AR-C Section 70, Preparation of Financial Statements, applies when a CPA is engaged to prepare financial statements but is not engaged to audit, review, or compile them. No assurance, no formal compilation report. If you just need clean statements for internal planning, ask whether preparation covers it before you pay for a bigger scope than you need.
Review Vs. Audit: Where The Line Actually Falls
Review vs. audit is the comparison that trips people up most, because the finished statements can look nearly identical. The difference is what happened behind them.
- Evidence: a review relies mainly on inquiry and analytics; an audit adds testing of records and outside confirmations
- Internal controls: an audit evaluates them; a review does not
- Fraud risk: an audit assesses it; a review does not
- Assurance: limited in a review, reasonable in an audit
- Output: a review report with a conclusion versus an auditor's opinion
- Standards: SSARS for reviews versus auditing standards for audits
If an agreement says "audit," a review will not meet it. If it says "review," an audit is more than it asks for. Either way, the document in your hand decides.
Compilation Vs. Review Vs. Audit: Which Does Your Business Actually Need?
Start with who is asking, not with which service sounds most official. Here is how the common situations line up.
| If this is your situation | Start here | Why |
|---|---|---|
| Your loan agreement or covenant letter says "audited" | Audit | The agreement sets the level; nothing lower satisfies it |
| Your loan agreement says "reviewed" | Review | It matches the requirement exactly |
| Outside investors or partners want comfort on the numbers, and no rule requires an audit | Review | Limited assurance gives outsiders something to rely on without the full scope of an audit |
| A grant, regulator, or board names the requirement | Audit (confirm the exact wording) | These requirements are commonly written as audits, but the document controls |
| You are a public company | Audit | Public company audits follow PCAOB standards |
| Only the owners and management use the statements | Compilation or preparation | No outside party needs assurance |
| You are planning for a sale, new financing, or larger contracts | Ask the other party what they will accept, in writing | The requirement can change faster than your books do |
5 Questions To Settle Before You Pick
- Who will read these statements, and what did they ask for in writing?
- Does the agreement use the exact words audit, review, or compilation, or just "CPA-prepared"?
- Does anyone need an opinion, a conclusion, or neither?
- Could a new lender, buyer, or bonding company ask for more in the next 12 to 24 months?
- Are your books closed on time and reconciled?
A short conversation with Bruce Denney or Kevin Killpack is a good way to settle this before you commit to a scope. They can read the agreement with you and tell you what it actually requires.
4 Mistakes That Derail Financial Statement Projects
- Assuming "audit" means what the banker meant. Many people use the word audit to mean any financial statement service, and accountants know the difference even when clients do not. Ask the lender to name the level in writing.
- Treating a review like a mini audit. A review is its own service with its own scope. It does not test controls or records, so it does not satisfy an audit requirement. Some owners assume a review is an easy on-ramp to an audit, and that is not always how it plays out.
- Reading a compilation as a clean bill of health. A compilation provides no assurance. It is a formatting and presentation service, not a verification service.
- Starting before the books are ready. Unreconciled accounts and open items slow every level of service. Close the period before anything else.
Why Business Owners Across Southeast Idaho Bring This Question To PDK
PDK opened in 1984 and is BBB accredited with an A+ rating. Bruce Denney, CPA, CVA, brings 20+ years of public accounting and tax experience. Kevin Killpack, CPA, has spent his career in accounting and management consulting for small and large businesses. PDK's business services include audited and reviewed financial statements, multistate tax, and business tax, so the financial statements and the tax work that follows from them stay under 1 roof.
Responsiveness matters here, because a lender's deadline does not move. PDK's approach is simple: return the call and give a straight answer on which level fits.
Frequently Asked Questions
What Is The Difference Between An Audit, A Review, And A Compilation?
The difference is how much assurance the CPA gives you. An audit provides reasonable assurance, which is high but not absolute. A review provides limited assurance, and a compilation provides no assurance at all. The more assurance an outside reader needs, the more evidence the CPA has to gather.
Is A Review The Same As An Audit?
No. A review relies mainly on inquiries and analytical procedures, while an audit adds testing of records, outside confirmations, and a look at internal controls and fraud risk. A review ends with a report expressing limited assurance, and an audit ends with an opinion on the financial statements. If your loan agreement says audit, a review will not satisfy it, even though the finished statements can look similar on the surface.
What Happens During A Review Engagement?
The CPA learns your business, then asks questions about your accounting policies, transactions, and unusual items. Next, the CPA runs analytical procedures, which means comparing numbers across periods and against expectations to find trends or variances that need an explanation. Your CPA expects the books to be closed and the major balance sheet accounts reconciled before the work starts. The engagement ends with a review report that states the CPA's conclusion and explains that a review is substantially less in scope than an audit.
Which Level Will My Bank Or Lender Require?
Your loan agreement or covenant letter decides, not a general rule of thumb. Some lenders ask for CPA-prepared statements, some ask for reviewed statements, and some require audited statements, particularly when the loan is large. Plenty of people use the word audit loosely to mean any CPA-prepared financials, so ask the lender to confirm the exact level in writing before you engage anyone. A single email can prevent a wasted season.
Can A Review Turn Into An Audit Later?
Not automatically. An audit requires its own evidence, including testing and outside confirmations that a review does not include. Some owners treat a review as an easy on-ramp to an audit, but that does not always work out. If you expect an audit requirement within the next 1 to 2 years, tell your CPA early so your books and documentation can be built with that in mind.
Do Private Companies Need An Audit?
Usually only when someone else requires it. Public companies are audited under PCAOB standards, but a private business generally needs an audit when a lender, investor, regulator, grantor, or board says so. If no outside party requires an audit, a review or compilation may fit better. The decision comes down to who relies on the statements and what they need to feel comfortable.
What Is The Difference Between A Compilation And A Preparation Engagement?
A compilation produces a CPA report stating that no assurance is provided, and it is governed by AR-C Section 80. A preparation engagement falls under AR-C Section 70 and applies when the accountant prepares financial statements without performing an audit, review, or compilation on them. In plain English, both involve the CPA helping you present the numbers, but only a compilation comes with a formal compilation report. Ask your CPA which service fits what the statements will be used for.
What Should I Have Ready Before The CPA Starts?
Close your books for the period and reconcile the major balance sheet accounts, such as cash, receivables, payables, and debt. Gather your loan agreements, leases, and any other documents that set reporting requirements. Have your prior-year statements and accounting software access ready, because the CPA uses them to understand how you report. For an audit, plan for extra requests, including outside confirmations and supporting documents for specific transactions.
How Do I Know Which Level Fits My Business?
Start with who relies on the statements and what they have asked for in writing. If a lender, investor, regulator, or board names the level, that requirement wins. If nobody outside the business is asking, think about who might ask in the next 12 to 24 months, such as a new lender, a buyer, or a bonding company. A short conversation with a CPA like Bruce Denney or Kevin Killpack at Poston Denney & Killpack can settle it before you commit to a scope.
Get A Straight Answer On Which Level Fits
Not sure whether your situation calls for an audit, a review, or a compilation? Bring the lender email, loan agreement, or investor request, and Bruce Denney, Kevin Killpack, and the PDK team will tell you what the document actually requires.
- Call the Idaho Falls office at (208) 522-0886
- Contact PDK online to start the conversation
- Read more about PDK's business services
Standards And Sources Referenced
- Journal of Accountancy: SSARS AR-C Sections 60, 70, 80, and 90
- CPA Practice Advisor: SSARS No. 25 on materiality in a review
- Journal of Accountancy: compilation and review standards compared with audit objectives
- AU-C Section 200: Overall Objectives of the Independent Auditor (codification index; full text requires a subscription)
- Armanino: Audit vs. Review vs. Compilation
- GRF CPAs: Alternatives to the Financial Statement Audit
This article is general information, not tailored accounting advice. Your agreements and circumstances determine which service applies.

.png)
.png)