Know exactly what to verify before buying a CPA audit practice — from peer review records to client retention risk and staff licensing obligations.
Acquiring a financial audit firm in the $1M–$5M revenue range requires diligence that goes well beyond standard business acquisitions. Audit practices carry unique regulatory obligations, licensing requirements, and client relationship dynamics that can make or break a deal post-close. The recurring, non-discretionary nature of audit engagements is a major value driver — but only if clients transfer and staff stays. This checklist covers the five most critical due diligence areas so you can assess true risk, negotiate deal structure, and protect your investment from day one.
Audit firm value is built on recurring client relationships. Verify that revenue is stable, diversified, and transferable before proceeding.
Request a full client list with revenue by client, industry, engagement type, and tenure.
Identifies concentration risk and reveals how defensible the recurring revenue base actually is.
Red flag: Any single client exceeds 20–30% of total annual revenue.
Review the last three years of engagement letter renewals and client retention history.
Confirms whether clients re-engage annually and whether relationships are firm-based or partner-dependent.
Red flag: Engagement letters are expired, unsigned, or contain non-assignability clauses.
Analyze revenue by service type — audits, reviews, compilations, agreed-upon procedures.
Audit engagements command higher fees and retention rates than lower-margin services.
Red flag: Majority of revenue comes from one-time or non-recurring engagements rather than annual audits.
Interview the seller to understand how client introductions and relationship management are handled.
Reveals whether client loyalty sits with the firm or solely with the departing founding partner.
Red flag: Seller is the sole contact for all major clients with no staff involvement in relationships.
Audit firms must maintain AICPA peer review standing and adhere to quality control standards. Any compliance gap creates acquisition risk.
Obtain the most recent peer review report, including all findings, responses, and remediation letters.
A clean peer review is required to maintain audit licensure and signals operational quality.
Red flag: Peer review shows a rating of 'fail' or unresolved material findings requiring corrective action.
Confirm the firm's peer review is current and the next scheduled review date is documented.
An overdue or lapsed peer review can result in loss of audit authority and client termination.
Red flag: Peer review is more than three years old or renewal is pending with unresolved issues.
Review any PCAOB registration status if the firm audits SEC-registered entities or broker-dealers.
PCAOB-registered firms face additional inspection obligations that affect post-acquisition compliance costs.
Red flag: Outstanding PCAOB inspection findings or registration lapses not disclosed during initial conversations.
Verify the firm has documented quality control policies meeting AICPA standards (SQCS No. 8 or SSQM equivalents).
Absence of quality control documentation signals operational risk and peer review vulnerability.
Red flag: No written quality control manual or procedures exist beyond informal partner-level oversight.
Licensed audit staff are the firm's most critical asset. Retention risk must be assessed before close and addressed in deal structure.
Confirm active CPA licensure for all audit staff, including CPE credit hours and renewal dates.
Unlicensed or lapsed staff cannot supervise audits, creating immediate compliance and delivery risk.
Red flag: Key audit seniors or managers have expired licenses or CPE deficiencies not yet remediated.
Review employment agreements for all licensed staff, including compensation, non-solicitation, and at-will terms.
Unprotected staff can leave and take client relationships immediately post-acquisition.
Red flag: No non-solicitation agreements exist for staff who manage direct client relationships.
Assess current compensation benchmarks against market rates for licensed audit professionals.
Below-market compensation increases post-close attrition risk in an already tight CPA labor market.
Red flag: Staff compensation is materially below regional CPA salary benchmarks for comparable experience levels.
Request organizational chart and identify who manages each client engagement day-to-day.
Reveals depth of staff involvement and whether the firm can operate without the selling partner.
Red flag: All client-facing work flows exclusively through the selling partner with no staff delegation.
Validate that reported revenue is collectible, billings are current, and the practice can sustain its financial performance under new ownership.
Review three years of profit and loss statements, normalized for owner compensation and discretionary expenses.
Normalization reveals true economic earnings and supports accurate valuation at 0.8x–1.4x revenue multiples.
Red flag: Significant revenue decline in the most recent year without credible explanation from the seller.
Analyze accounts receivable aging and identify invoices outstanding beyond 90 days.
Stale receivables signal collection problems, client dissatisfaction, or disputed engagements.
Red flag: More than 15–20% of total AR is aged beyond 90 days without clear collection plan.
Request current work-in-progress schedules to assess unbilled time and near-term revenue recognition.
WIP represents billable value in progress — gaps indicate billing delays or underpriced engagements.
Red flag: WIP schedule is absent, unreconciled, or reveals systematic write-downs exceeding 20% of billed rates.
Confirm billing rates for audit engagements and compare against regional market benchmarks.
Below-market rates compress margins and limit post-acquisition fee adjustment without client churn risk.
Red flag: Audit billing rates have not increased in three or more years, indicating fee stagnation risk.
Audit firm acquisitions require careful deal structuring to protect against client attrition and ensure a clean regulatory handoff.
Negotiate a revenue-based earnout tied to client retention thresholds over 24–36 months post-close.
Aligns seller incentives with smooth client transition and protects buyer from immediate revenue loss.
Red flag: Seller refuses any earnout or retention-based contingency, demanding full payment at close.
Require a non-compete and non-solicitation agreement from the selling partner covering clients and staff.
Prevents the seller from immediately competing for the clients and employees they just sold.
Red flag: Seller declines a non-compete or requests geographic and temporal carve-outs that eliminate protection.
Confirm the state CPA board permits the acquisition structure and any required notifications or approvals.
CPA firm ownership rules vary by state and can restrict non-CPA buyers or require license transfers.
Red flag: Target state has CPA firm ownership restrictions that the acquiring entity does not currently satisfy.
Plan a structured client introduction process where the seller introduces the buyer before exit.
Warm handoffs from trusted partners dramatically improve client retention rates post-acquisition.
Red flag: Seller is unwilling to participate in client introductions or requests an accelerated exit timeline.
Find Financial Audit Firm Businesses For Sale
Vetted targets with diligence packages — skip the cold search.
Financial audit firms in the lower middle market typically trade at 0.8x to 1.4x annual revenue, depending on client concentration, peer review record, staff depth, and the strength of recurring engagement history. Practices with clean regulatory records, diversified client bases, and retained licensed staff command multiples at the higher end of that range.
Yes, financial audit firm acquisitions are generally SBA-eligible. The SBA 7(a) loan program can finance the purchase of an established CPA or audit practice, including goodwill, provided the buyer meets lender qualifications and the business demonstrates sufficient cash flow to service debt. Work with an SBA lender experienced in professional services acquisitions to structure the loan alongside any seller financing or earnout component.
The most effective protections are a structured earnout tied to client retention thresholds, a non-solicitation agreement from the selling partner, and a formal client introduction plan where the seller introduces you to every major client before exit. Many buyers also retain the selling partner as a consultant for 12–24 months to maintain continuity during the transition period.
Request the last two full peer review reports including all findings, letter of responses, and any corrective action plans. Confirm the review was conducted by an AICPA-approved peer review organization and that the firm received a 'pass' rating. Also verify the next scheduled peer review date and confirm there are no interim quality control issues that could affect the firm's audit authority post-close.
More Financial Audit Firm Guides
More Due Diligence Checklists
Stop cold-searching. Find signal-scored Financial Audit Firm targets with seller motivation already identified.
Create your free accountNo credit card required
For Buyers
For Sellers