How to Prepare for a Business Audit: A Step-by-Step Checklist

What Triggers Small-Business Audits

First, some perspective: audit rates for small businesses are low, and an audit is not an accusation. Returns are selected by a mix of random sampling, computer scoring (returns that deviate from statistical norms for similar businesses), and mismatches between what you reported and what third parties reported about you - a 1099 a client filed that does not appear in your income is the classic trigger.

Common flags include large swings in income or deductions year over year, expenses that are unusually high relative to revenue, round numbers everywhere (real expenses are $47.83, not $50.00), repeated losses in a business that looks like a hobby, and sloppy home-office or vehicle claims. None of these mean you did anything wrong - but all of them mean your records need to speak for you.

The Pre-Audit Checklist

Work through these in order; each step makes the next one possible.

1. Reconcile every account. Bank accounts, credit cards, loans, and payment processors should each tie out to the ledger, ending balances matching statements exactly. Unreconciled accounts are the first thing an examiner notices and the root of most downstream problems. SimplyLedger's reconciliation tools walk you through this account by account.
2. Gather bank statements for the full period. All business accounts, all twelve months (or the period under review), downloaded and organized. Include PayPal, Stripe, and any platform that holds money.
3. Match receipts to expenses. Every expense - especially travel, meals, and large purchases - should have its receipt or invoice attached or filed alongside. Digital copies are fine. An expense without documentation is a deduction you may lose.
4. Verify payroll and contractor records. W-2s and 1099s issued, payroll tax filings made, W-9s on file for every contractor paid $600 or more, and per-contractor payment totals that match the forms you filed. Contractor management with built-in 1099 tracking turns this from a scramble into a report.
5. Review fixed assets and depreciation schedules. For each asset: purchase date, cost, and the depreciation claimed each year should be consistent and documented. Automated depreciation schedules keep this arithmetic honest.
6. Confirm sales-tax filings. Returns filed for every period, amounts matching your sales records, and exemptions documented where claimed.
7. Lock prior periods. Once a period is closed and filed, it should not change. If corrections are genuinely needed, make them as dated, documented adjustments - never silent edits. An immutable audit log of every change is your best evidence that nothing was rewritten after the fact.

What Auditors Actually Ask For

The initial document request is more predictable than people expect. Typically:

• Bank statements (all business accounts) for the period.
• General ledger or books of account - this is where clean software beats shoeboxes; a complete general ledger exports in one click.
• Receipts and invoices supporting the specific expense categories under review.
• Mileage logs if vehicle deductions are claimed.
• Payroll records and contractor 1099s.
• Prior-year tax returns.
• Formation documents, if you operate as an LLC or corporation.

Respond with exactly what was requested - no more, no less. Volunteering extra records invites extra questions. Answer questions about facts; leave interpretation to your accountant or tax professional, whose involvement is strongly recommended the moment an audit notice arrives.

How Long to Keep Records

General IRS guidance as a baseline:

• 3 years from filing for most records (the standard audit window).
• 6 years if there is a possibility of substantial underreported income (more than 25% of gross income).
• 7 years for claims involving bad-debt deductions or worthless securities.
• Indefinitely for asset purchase records (keep until the statute expires after you dispose of the asset) and for the tax returns themselves.

States may impose longer windows. Digital storage makes "keep everything, organized" cheap - there is little reason to delete business records at all.

Habits That Make Audits Boring

The businesses that sail through audits are not luckier; they run on habits that leave no gaps to investigate:

• Monthly close. Reconcile, review, and lock each month while memory is fresh.
• Consistent categories. The same expense type lands in the same account every time - anomalies stand out only when the baseline is consistent.
• Receipts captured in the moment, attached to the transaction, not stuffed in a drawer.
• Clean separation of business and personal money, so nothing needs explaining.

Do these and an audit shrinks from a threat to a chore: export the requested reports, hand over the documentation, done.

If You Get an Audit Notice: The First 48 Hours

The envelope arrives and your stomach drops. Here is the correct sequence:

1. Read it carefully - it is usually narrower than you fear. Most audits are correspondence audits covering specific line items (your home office, your vehicle expenses), not your entire return, and many are resolved entirely by mail.
2. Note the deadline. Response windows are strict and extensions are easier to get before the deadline than forgiveness after it.
3. Do not call to argue, and do not ignore it. Both extremes cost money. Nothing you say improvisationally helps; everything you document carefully does.
4. Pull the records for the specific items named. With reconciled books and attached receipts, this is an export, not a project.
5. Engage a professional before responding. A CPA or enrolled agent who handles audits regularly knows what the examiner needs, what to concede, and what to push back on. Their fee for a narrow correspondence audit is usually modest - and you may even authorize them to handle it entirely on your behalf.

What not to do: do not amend the return preemptively, do not send your entire filing cabinet, and do not treat the examiner as an adversary. Audits are administrative processes with rules; calm, documented, punctual responses close them fastest.

Don't Forget State and Local Layers

Federal preparation is only part of the picture. States with income tax run their own audits, sales-tax authorities audit filing histories against reported revenue, and cities with business-license taxes may examine gross-receipts declarations. The good news: the same records answer all of them. A reconciled ledger, complete bank statements, and filed returns for every jurisdiction you operate in cover federal, state, and local inquiries from one organized archive - which is the strongest argument for keeping everything in a single system rather than scattered across email, paper, and spreadsheets.

Start the checklist this month, not when the notice arrives. Reconciliation done monthly is maintenance; reconciliation done under an audit deadline, across three years of records, is an emergency.

Key Takeaways

• Audits are usually triggered by mismatches and statistical outliers, not suspicion.
• Reconcile first; every other preparation step depends on it.
• Answer the document request precisely - exactly what was asked, nothing extra.
• Keep records at least 3-7 years; digital storage makes keeping everything easier than deciding what to purge.
• Get professional representation the moment a notice arrives.

Most audit pain is really documentation pain - our tax deductions guide covers the record-keeping side, and the small business overview shows how audit logs and reconciliation are built in.