Does Your Business Need Audited or Reviewed Financial Statements for Your Bank or Lender? (Ontario, 2026)

Reviewed by Bader A. Chowdry, CPA, CA, LPA on September 2, 2026.

What’s the actual difference between an audited and a reviewed financial statement?

An audit and a review engagement are both forms of assurance under Canadian Auditing Standards and the Canadian Standard on Review Engagements (CSRE 2400), but they provide different levels of comfort to a reader — and very different amounts of work for your accountant.

An audit is the highest level of assurance a CPA firm can provide on historical financial statements. The practitioner obtains independent, corroborating evidence — bank confirmations, accounts-receivable confirmations, inventory counts, and testing of internal controls — and expresses an opinion on whether the statements are free of material misstatement. The audit opinion states the statements “present fairly, in all material respects,” the company’s financial position.

A review engagement provides a lower, but still meaningful, level of assurance. The practitioner performs analytical procedures and makes inquiries of management, without independently corroborating account balances the way an audit does. The review report states that nothing has come to the practitioner’s attention causing them to believe the statements are not, in all material respects, in accordance with the applicable framework — usually ASPE for private companies. This is sometimes called negative assurance.

A third option — a compilation engagement (formerly “Notice to Reader”) — provides no assurance at all. The accountant compiles the information management provides into a financial-statement format without verifying it. Most lenders will not accept a compilation beyond the smallest, most straightforward facilities.

What in a loan agreement actually triggers a lender’s audit requirement?

This is the most common point of confusion we see. A covenant stating the borrower must deliver “annual financial statements” within a set number of days of year-end does not, on its own, require an audit. Many businesses assume it does, and pay for an audit they were never actually required to obtain.

The requirement to audit only exists if the loan agreement, credit agreement, or lease specifically uses the word “audited” — for example, “the Borrower shall deliver annual audited financial statements prepared by a firm of chartered professional accountants acceptable to the Lender.” If the document instead says “financial statements” or “reviewed financial statements” without that qualifier, a review engagement — or in some cases a compilation, depending on facility size — will typically satisfy the covenant.

In our experience preparing statements for Ontario CCPCs, the practical pattern lenders use is roughly this:

• Smaller operating lines and equipment loans: compilation or review, depending on the lender’s internal risk policy.
• Standard term loans and most renewing lines of credit: a review engagement is the common minimum.
• Larger, syndicated, or covenant-heavy credit facilities: audited statements are more frequently specified, particularly where multiple lenders rely on the same statements.

These are not statutory thresholds — no Canadian law sets a dollar figure that automatically requires an audit for a private commercial loan. The requirement is whatever your specific lender wrote into your specific agreement, and different lenders — even different relationship managers at the same bank — apply different internal policies. The only way to know for certain is to read your covenant wording, or ask your account manager directly what “financial statements” means in your agreement.

How much more does an audit cost than a review engagement?

Audit fees vary with company size, industry, and control environment, but as a general order of magnitude, moving from a review engagement to a full audit commonly adds several thousand dollars to the annual engagement fee for a typical small or mid-size private company — the incremental cost tends to grow with complexity: multiple locations, inventory, related-party transactions, or weak internal controls all add audit hours. A compilation engagement is the least expensive of the three, but provides no assurance a lender can rely on.

Because the cost gap compounds every year the covenant remains in place, it’s worth confirming — before your engagement is booked, not after — whether your agreement actually requires an audit or whether a review would satisfy the lender.

Can you negotiate a covenant down from audit to review?

Often, yes — particularly at renewal, renegotiation, or when a facility is refinanced. Lenders write audit covenants to manage their own risk, and many will accept a review engagement — sometimes paired with additional reporting, such as more frequent interim statements or a borrowing-base certificate — if the borrower has a track record of timely, accurate reporting and the facility size doesn’t clearly warrant the added assurance.

The best time to raise this is before signing a new facility or renewing an existing one — not after your accountant has already told you the current-year statements need to be audited. A few things help the conversation:

• A clean compliance history — no covenant breaches, no late filings.
• A relationship, not just a transaction, with your banker — ask directly what would need to be true for them to accept a review instead of an audit.
• Offering something in exchange — more frequent interim reporting, a personal guarantee, or additional collateral can sometimes offset a lender’s comfort gap from stepping down to a review.

If your current agreement already specifies an audit and you believe a review would be sufficient, that’s a conversation for your relationship manager — an accountant cannot unilaterally decide your statements no longer need to be audited if your loan agreement says otherwise.

Who is legally allowed to sign the audit or review report in Ontario?

This is a licensing question, not just a credentials question, and it catches business owners off guard. In Ontario, a CPA designation by itself does not authorize someone to sign an audit or review engagement report. Under the Public Accounting Act, 2004, only a CPA who additionally holds a Public Accounting Licence (PAL) — commonly called a Licensed Public Accountant, or LPA — may be the person who signs the audit or review report, or any compilation report intended to be relied on by a third party.

A PAL is required specifically when the CPA is the lead engagement person responsible for signing a report on an assurance engagement relating to a financial statement, where the report is issued in Ontario and the work is primarily performed here. Practising public accounting without a valid PAL is prohibited under the Act — see CPA Ontario’s guidance on when a Public Accounting Licence is required. Before engaging a firm for an audit or review, it’s reasonable to ask directly whether the signing accountant holds a current LPA licence — CPA Ontario notes that not every member does. See also CPA Ontario’s public accounting standards for the framework these engagements follow.

Bader A. Chowdry, CPA, CA, LPA is a Licensed Public Accountant under CPA Ontario — the credential required to sign audit and review engagement reports in this province.

What happens if you breach a financial-statement covenant?

Delivering the wrong level of assurance — for example, providing a review when the agreement specifies an audit — is technically a covenant breach, the same as missing a payment or exceeding a debt-to-equity ratio. Most lenders will not call a loan over a first-time, good-faith reporting gap, but the practical consequences can still include a formal notice of default, a request for a waiver (sometimes with a fee), tighter terms at the next renewal, or — in a syndicated facility — cross-default provisions being triggered under other agreements.

The lowest-risk approach is to confirm the exact assurance level required well before your fiscal year-end, so your accountant can plan and price the correct engagement rather than scrambling to convert a review into an audit after the fact.

How do you prepare for your first audit or review engagement?

If this is the first year your business needs an audit or review — commonly triggered by a new credit facility, a franchise disclosure requirement, or crossing a size threshold that changes your reporting obligations — a few steps reduce both the cost and the disruption:

• Reconcile major balance-sheet accounts (bank, receivables, payables, intercompany) before your accountant arrives.
• Gather supporting documentation for related-party transactions, shareholder loans, and any unusual transactions during the year.
• Confirm your engagement letter specifies the correct level (audit vs. review) and framework (ASPE, unless you have a specific reason to use IFRS).
• Ask for a fixed-fee quote before work begins, rather than an open-ended hourly estimate. A Canada Small Business Financing Program (CSBFP) loan or a bank facility both benefit from this clarity going in.

Frequently asked questions

Do all bank loans require audited financial statements?

No. Most standard term loans and operating lines of credit for Ontario CCPCs are satisfied by a review engagement. Audits are more commonly specified for larger, syndicated, or higher-risk facilities, and only when the loan agreement explicitly uses the word “audited.”

Is a compilation (Notice to Reader) engagement ever enough for a lender?

Sometimes, for smaller facilities or at an individual lender’s discretion, but it’s the exception rather than the rule. A compilation provides no assurance, so many banks won’t accept one once a facility reaches a meaningful size.

Does a Canada Small Business Financing Program (CSBFP) loan require an audit?

The CSBFP itself is a federal loan-loss-sharing program administered under Innovation, Science and Economic Development Canada; the specific financial-reporting requirement is set by the participating financial institution issuing the loan, not by the federal program directly — confirm the requirement with your lender.

How long does a review engagement take compared to an audit?

A review engagement is generally faster than an audit of the same company, since it relies on analytical procedures and inquiry rather than independent corroboration of account balances — though exact timing depends on how organized your records are going in.

Can the same CPA firm handle both my bookkeeping and my audit or review?

For a review engagement, generally yes, subject to independence safeguards. For a statutory or lender-required audit, independence rules are stricter, and a firm that also prepares your books may need additional safeguards, or you may need a separate firm, to maintain independence. Ask your CPA directly how they manage this.