Colorado Nonprofit Audit Requirements: 2026 Thresholds, Statute, and Deadlines

If you run a nonprofit in Colorado, the audit question lands somewhere between an annoying compliance line item and a structural threat to your funding. Get it right and the Colorado Secretary of State renews your registration, your grantmakers see a clean Form 990, and your board sleeps. Miss it and you can lose registration mid-grant cycle - which means a foundation officer somewhere learns about it before you do.

This guide is the precise version of what Colorado actually requires in 2026: the revenue thresholds, the statute behind them, the deadlines, and how the state rules interact with the federal Single Audit at $1,000,000 in federal expenditures. It is built for executive directors and finance leads who want one document instead of three half-correct blog posts.

For a multi-state view, the nonprofit audit requirements by state hub compares thresholds across the major fundraising jurisdictions. For software that tracks the underlying grant compliance evidence - restricted fund balances, federal expenditure totals, audit working papers - see grant management software for nonprofits.

The Colorado Audit Threshold in One Page

Colorado’s charitable financial reporting tiers as of 2026 are:

• Independent audit required: Colorado does not impose a CPA-audit threshold under the Charitable Solicitations Act; the state requires registration and IRS Form 990 disclosure at all revenue levels.
• CPA review acceptable: Not statutorily required
• Compilation or no CPA work required: Not statutorily required
• No registration required: $25,000 in contributions and an all-volunteer organization may file as exempt

The form for the annual filing is Charitable Solicitations Registration Statement, due Earlier of November 15 or 4-1/2 months after fiscal year end. The state filing fee is $10 initial, $10 renewal. The current statutory authority is C.R.S. § 6-16-104 - Colorado Charitable Solicitations Act, and enforcement runs through the Colorado Secretary of State, Charitable Solicitations.

Two things to keep straight from the start. First, the threshold is calculated on the revenue figure Colorado defines - usually gross contributions or gross revenue as reported on the IRS Form 990, sometimes excluding certain government grants and in-kind contributions. Read the statute and the agency’s filing instructions before estimating which tier you are in; misclassifying revenue is the most common error. Second, the obligation follows where you solicit, not where you incorporate. A nonprofit incorporated in another state that actively asks Colorado residents for money - through email campaigns, direct mail, or even a “donate” button on a website targeting Colorado donors - generally needs to register and meet the same threshold as a Colorado-incorporated organization. The Colorado nonprofit startup guide walks through the registration mechanics in detail.

What Triggers Each Tier

The Colorado statute structures financial reporting as a stair-step. Below the lowest threshold, there is no state-imposed audit work at all - you still file the registration and (in most cases) attach a Form 990, but no CPA engagement is required. Cross into the review tier and you must engage an independent CPA to perform a review under SSARS (Statements on Standards for Accounting and Review Services), which provides “limited assurance” - the CPA states that nothing came to their attention suggesting the financials are materially misstated. Cross into the audit tier and the CPA performs a full GAAS audit and issues an opinion (clean, qualified, adverse, or disclaimed) on whether the financial statements are presented fairly in accordance with GAAP.

The economic difference between tiers is real. A review for a $400,000 organization typically costs in the low five figures and takes a CPA a few weeks. A full audit for a $2,000,000 organization runs longer, costs roughly $8,000 to $24,000, and pulls a meaningful share of the finance staff’s time for two to three months around fieldwork. The Single Audit add-on, when triggered, can add 30 to 50 percent to that cost.

How Colorado Rules Interact with the Federal Single Audit

The federal Single Audit framework, governed by 2 CFR Part 200 Subpart F (Audit Requirements), is independent of state-level charitable solicitation thresholds. It is triggered when a nonprofit expends $1,000,000 or more in federal awards in a fiscal year (raised from $750,000 for fiscal years ending on or after September 30, 2025). Federal expenditures include both direct federal grants and federal funds passed through other entities - a HUD pass-through from a state housing department counts.

A CO nonprofit can land in any of four positions:

1. Below the Colorado threshold and below $1,000,000 federal: no audit required by either rule.
2. Above the Colorado audit threshold (Colorado does not impose a CPA-audit threshold under the Charitable Solicitations Act; the state requires registration and IRS Form 990 disclosure at all revenue levels.) but below $1,000,000 federal: state audit only.
3. Below Colorado threshold but above $1,000,000 federal: Single Audit only.
4. Above both: one audit engagement, scoped to satisfy both. The Single Audit’s GAAS financial statement opinion piece typically covers the state requirement; confirm the engagement letter explicitly references both.

The four-quadrant analysis is the single most useful framing when planning audit budget and timeline. The Single Audit Prep Timeline lead magnet provides the month-by-month task list that keeps both tracks aligned. The 2 CFR 200 audit prep checklist covers the documentation a CPA will request when the federal piece is in scope - Schedule of Expenditures of Federal Awards (SEFA), internal control documentation by major program, allowable cost evidence under Subpart E, and procurement records under §200.318-§200.327.

What the Audit Must Include

A Colorado-acceptable audit is a full-scope GAAS engagement resulting in audited financial statements prepared under FASB ASC 958 (Not-for-Profit Entities). The auditor’s report and financial statements package must include:

• Statement of Financial Position - assets, liabilities, and net assets segmented into “without donor restrictions” and “with donor restrictions” per ASC 958-205.
• Statement of Activities - revenue, expenses, and changes in net assets, again split by restriction class.
• Statement of Functional Expenses - natural classifications crossed with program / management & general / fundraising. Required for all nonprofits under ASC 958-720.
• Statement of Cash Flows - direct or indirect method.
• Notes to Financial Statements - significant accounting policies, liquidity disclosure (ASC 958-210-50), endowment composition (ASC 958-205-50), related-party transactions, and any going-concern considerations.
• Auditor’s opinion letter - the report addressed to the board.

When the Single Audit is in scope, the package adds the Schedule of Expenditures of Federal Awards (SEFA), the Schedule of Findings and Questioned Costs, the Summary Schedule of Prior Audit Findings, and a Corrective Action Plan when findings exist.

Deadlines and Filing Mechanics

The annual filing window in Colorado is Earlier of November 15 or 4-1/2 months after fiscal year end. Missing the deadline does not trigger an automatic audit failure - the audit itself is performed and dated separately by the CPA - but it does suspend or expire your charitable solicitation registration. Solicitation suspension is the practical penalty: foundations and corporate donors increasingly verify state registration status as part of due diligence, and a lapsed registration during a grant period is exactly the kind of finding that flows into a future audit’s “Schedule of Prior Findings.”

Most Colorado nonprofits build a calendar that anchors on fiscal year end and works backward: CPA engagement letter signed within 30 days of year-end, fieldwork starting two to three months in, draft financials issued by month four or five, board audit committee review, full board acceptance, and state filing assembly. Build buffer for two predictable surprises: late-arriving 1099s and W-2s that change reconciliation, and revenue-recognition questions on multi-year grants where the donor restriction is ambiguous.

Typical Findings in Colorado Nonprofit Audits

The findings that actually appear on Colorado nonprofit audits, ranked by frequency:

• Net asset misclassification. Restricted contributions booked as unrestricted, or restrictions released without documented purpose-met or time-met evidence. Almost always a process issue, not a malice issue. Software that tracks restrictions at the gift level and produces a clean release log is the standard fix - see GrantPipe’s restricted fund accounting.
• Inadequate segregation of duties. Common in organizations under $1,500,000 in revenue where one person handles both deposits and reconciliation. Auditors flag it as a material weakness or significant deficiency depending on compensating controls.
• Functional expense allocation methodology not documented. ASC 958-720 requires that the methodology used to allocate shared costs across program / management / fundraising be disclosed. “We split it 80/10/10” without a documented basis fails the test.
• Federal grant noncompliance. When the Single Audit applies, the most common findings are subrecipient monitoring gaps (§200.332), procurement documentation under §200.318, and time-and-effort certification weaknesses for personnel charged to multiple federal awards.
• Missing or stale conflict-of-interest disclosures. Annual board-member disclosures not collected or not reviewed.

What an Audit Costs in Colorado

For nonprofits in the $500K-$10M revenue range that Colorado typically captures in its audit tier, an independent CPA audit runs roughly $8,000 to $24,000 for a clean engagement, depending on complexity (number of restricted funds, number of grants, presence of foreign operations or government contracts). Expect the lower end for a single-program organization with strong internal controls and the upper end for a multi-program organization with federal pass-through funding.

Adding the Single Audit (when federal expenditures hit $1,000,000) generally adds another 30 to 50 percent to total fees and four to six weeks to the timeline. Audit fee inflation has run at 4-6% annually since 2020, driven by CPA staffing pressure and post-2024 Yellow Book updates.

The cost-management lever most Colorado nonprofits underuse is preparation. A clean trial balance, restricted-fund tie-out schedule, SEFA reconciled to the GL, and pre-organized PBC (prepared by client) list shaves real hours off the engagement. The grant management software comparison covers tools that produce these schedules without a manual spreadsheet rebuild every year.

When You Should Talk to a CPA Earlier Than the Threshold

Three situations argue for engaging a CPA before Colorado requires it:

1. Approaching a major grant. Many foundation grants over $250,000 require audited financials regardless of state law.
2. First federal subaward. Federal pass-through awards push you toward Single Audit complexity. A CPA who has done Yellow Book work can scope a “review with Single Audit prep” that gets you ready cheaply.
3. Board governance reset. A new audit committee or new ED is the right moment to reset financial controls, and a CPA’s management letter will tell you precisely where the gaps are.

The cost of an early review is significantly less than the cost of failing your first required audit two years later because the underlying records were never built right.

Bottom Line

Colorado’s audit threshold sits at Colorado does not impose a CPA-audit threshold under the Charitable Solicitations Act; the state requires registration and IRS Form 990 disclosure at all revenue levels., with secondary tiers for review (Not statutorily required) and compilation (Not statutorily required). The agency is the Colorado Secretary of State; the statute is C.R.S. § 6-16-104; the form is Charitable Solicitations Registration Statement, due Earlier of November 15 or 4-1/2 months after fiscal year end. Treat the federal Single Audit at $1,000,000 in federal expenditures as a separate parallel obligation, not a substitute. Build the audit calendar backward from fiscal year end, not forward from the filing deadline. And keep the underlying records - restricted fund tracking, SEFA, functional expense allocation methodology - clean year-round so audit fieldwork is verification, not reconstruction.

When you are ready to compare the systems that produce these records, the grant management software for nonprofits guide is the right next step. For the multi-state version of this analysis, return to the nonprofit audit requirements by state hub.