Grant Compliance Audit Prep for Nonprofits

Grant compliance audits test a straightforward question: did your organization spend restricted funds the way the funder approved, and can you prove it?

Most nonprofits that receive audit findings spent the money appropriately. They cannot produce the documentation to demonstrate it. The gap between good financial management and good record-keeping is where audit findings live.

Who Needs a Single Audit

The Uniform Guidance (2 CFR 200, Subpart F) requires a single audit for any non-federal entity that spends $750,000 or more in federal awards during a fiscal year. That threshold covers:

Direct federal grants (awards received directly from a federal agency)
Pass-through funds (federal money received through a state agency, county, or another nonprofit acting as a fiscal agent)
Federal contracts (less common for nonprofits but included in the threshold calculation)

The $750,000 figure is cumulative. An organization with three federal grants totaling $800,000 in expenditures triggers the requirement even if no single grant exceeds $750,000.

If your organization is below the threshold, you are not required to have a single audit. Individual funders — especially state agencies and large foundations — may still require program-specific audits or agreed-upon procedures engagements.

What Auditors Actually Examine

A single audit has two components: a financial statement audit and a compliance audit of federal awards. The compliance component is where grant-specific findings originate.

Expenditure allowability. For each major program (determined by a risk-based formula), auditors test whether costs charged to the grant meet the federal cost principles in 2 CFR 200, Subpart E. Costs must be necessary, reasonable, allocable to the award, and consistent with the approved budget. An expense that is reasonable and necessary but coded to the wrong budget category is still a finding.

Documentation completeness. Every dollar charged to a federal award should have a supporting document: an invoice for purchased goods, a payroll register for personnel costs, a contractor agreement for consulting fees, a time-and-effort report for split-funded staff. Auditors pull samples and trace costs back to source documents. Missing documentation for any sampled transaction is a finding.

Internal controls. Auditors evaluate whether the organization has procedures to prevent and detect noncompliance. Key controls include: segregation of duties for expenditure approval and recording, policies for charging indirect costs, written procedures for restricted fund management, and subrecipient monitoring (if the organization passes federal funds through to other entities).

Funder reporting accuracy. Auditors compare financial figures in funder reports (SF-425 Federal Financial Reports, or funder-specific formats) against the general ledger. Discrepancies between what you reported to the funder and what your books show are findings.

The Audit Preparation Timeline

Start audit preparation 60 days before your expected audit window. For organizations with a June 30 fiscal year-end, audits typically occur between September and December. For December 31 year-ends, expect audits between March and June.

60 Days Out: Reconcile Restricted Fund Balances

Pull every active restricted fund balance from your tracking system (CRM, grant management software, or spreadsheet) and compare it to your general ledger. For each grant, verify:

Total award amount matches the grant agreement
Cumulative expenditures match the general ledger totals for that cost center or fund code
Remaining balance is correct (award minus expenditures minus any returned funds)
Budget category breakdowns (personnel, consultants, supplies, indirect) match between your tracking system and your books

Discrepancies between systems are the single most common source of audit findings for mid-sized nonprofits. Finding a $3,000 difference between your spreadsheet and your general ledger during audit preparation is a problem you can resolve. Finding it when the auditor asks about it is a finding.

45 Days Out: Assemble Documentation Packages

For each active grant (and each grant that closed during the audit period), compile:

Original award letter and grant agreement
Any budget modifications or amendments approved by the funder
All interim and final funder reports submitted during the audit period
Expenditure supporting documents for each transaction charged to the grant
Time-and-effort reports for personnel charged to the grant
Subrecipient monitoring documentation (if applicable)
Funder correspondence related to compliance questions

This package should be assembled and accessible before the auditor requests anything. Organizations that assemble records under audit pressure make more errors and take longer to respond to auditor requests, which extends the audit timeline and increases its cost.

30 Days Out: Verify Expenditure Classifications

Review each grant’s actual expenditures against the approved budget categories. Federal grants typically budget by category: personnel, fringe benefits, travel, equipment, supplies, contractual, indirect costs, and other direct costs.

If any expenditure is coded to a category that does not match the approved budget, determine whether the discrepancy requires a budget modification. Most federal agencies allow reallocation of up to 10% of the total budget between categories without prior approval. Reallocations exceeding that threshold require written funder approval before the cost is incurred.

Expenditure category mismatches that are not covered by an approved budget modification are findings. Initiating a budget modification request before the audit is better than explaining the discrepancy during the audit.

15 Days Out: Check Indirect Cost Rate Application

If your organization charges indirect costs to federal awards, verify that the rate applied is consistent across all grants and matches your documented methodology. Two common approaches:

Negotiated indirect cost rate agreement (NICRA). If you have a NICRA with your federal cognizant agency, verify that the rate applied to each grant matches the approved rate and that the base calculation (modified total direct costs, typically) is correct.

De minimis rate. Organizations without a NICRA may charge a 10% de minimis rate on modified total direct costs under 2 CFR 200.414(f). If you use this rate, verify it is applied consistently and that your modified total direct cost base excludes capital expenditures, subrecipient costs above $25,000, and other costs specified in the regulation.

Inconsistent indirect cost application — using different rates for different grants without a documented rationale, or applying the rate to the wrong cost base — is a common and avoidable finding.

7 Days Out: Review Funder Report Accuracy

Pull copies of every funder report submitted during the audit period. Verify that the financial figures in each report match your general ledger balances as of the reporting date. Verify that narrative claims about program activity are supported by documentation.

If you discover errors in previously submitted reports, proactive disclosure to the funder before the audit begins is received better than an auditor-discovered discrepancy.

Common Findings and How to Prevent Them

Missing supporting documentation. Prevention: require source document attachment at the point of expenditure entry, not at audit time. Systems that link invoices and receipts to transactions as they are recorded maintain a complete trail automatically.

Time-and-effort reporting gaps. Prevention: implement monthly time-and-effort certification for all personnel charged to federal awards. Semi-annual certifications are the minimum requirement under the Uniform Guidance, but monthly certifications catch errors faster and are easier for staff to complete accurately.

Expenditure category misclassification. Prevention: code every transaction to a grant budget category at entry. If your chart of accounts does not align with grant budget categories, create a mapping document and review it quarterly with finance staff.

Indirect cost rate errors. Prevention: document your indirect cost methodology in writing and review it at the start of each fiscal year. Apply the same rate to every grant unless a specific award restricts indirect cost recovery.

Subrecipient monitoring failures. Prevention: if you pass federal funds through to other organizations, maintain a monitoring file for each subrecipient that includes their single audit report (or certification that they are below the threshold), a risk assessment, and documentation of any site visits or desk reviews.

The Role of Software in Audit Readiness

Organizations that track grants in software with native restricted fund tracking, expenditure-to-grant linking, and automated balance calculations spend significantly less time on audit preparation than organizations using spreadsheets.

The difference is not about sophistication. It is about whether audit-ready records are a byproduct of normal operations or a separate exercise performed under deadline pressure.

A system that tags every transaction to a grant and budget category at entry, automatically updates restricted fund balances, and generates expenditure reports in funder-required formats makes audit preparation a matter of pulling reports rather than assembling documentation.

GrantPipe was built with this principle in mind: compliance documentation should be a natural output of grant management, not a quarterly or annual project.

Continuous Compliance Versus Audit-Time Reconciliation

Organizations that reconcile grant records monthly and review funder report accuracy before submission spend 1-2 weeks on audit preparation. They are confirming what they already know.

Organizations that reconcile only at audit time spend 4-6 weeks assembling records, finding discrepancies, and resolving issues while auditors wait. The discrepancies they find during those weeks are the same ones they would have caught with a monthly reconciliation practice, but discovered under pressure rather than on their own schedule.

The financial cost of both approaches is similar. The audit risk is not.

Like what you're reading?

Try GrantPipe free for 30 days — manage donors + grants in one system.

The median nonprofit spends 6-8 hours per grant per year on reporting, with cumulative lifetime compliance effort reaching 30+ hours per grant

Source: Center for Effective Philanthropy Grantee Perception Reports (2021-2023)

Single audit: An organization-wide audit required for non-federal entities that spend $750,000 or more in federal awards during a fiscal year. Covers both financial statements and compliance with federal award requirements. Governed by 2 CFR 200 Subpart F (the Uniform Guidance audit requirements). Formerly known as an A-133 audit.

A-133: The former OMB Circular that governed single audits of federal award recipients before it was superseded by the Uniform Guidance in 2014. Many practitioners still refer to single audits as A-133 audits. The requirements are now codified in 2 CFR 200 Subpart F.

Uniform Guidance (2 CFR 200): The federal regulation that consolidates grant management requirements for non-federal entities receiving federal awards. Covers cost principles, administrative requirements, and audit requirements. Replaced eight previous OMB circulars including A-133, A-21, A-87, and A-110.

Allowable costs: Expenses that may be charged to a federal award. Must be necessary, reasonable, and allocable to the award. Must conform to the approved budget and comply with 2 CFR 200 Subpart E cost principles. Costs that do not meet all tests are disallowed and may require repayment.

Questioned costs: Costs flagged by the auditor as potentially unallowable, undocumented, or unreasonable. Questioned costs are not automatic disallowances — the federal agency reviews them and makes a final determination. However, questioned costs above $25,000 for a single award type trigger a finding that must be reported.

Material weakness: A deficiency in internal controls severe enough that there is a reasonable possibility of material noncompliance with federal award requirements. Material weaknesses must be reported in the audit report and communicated to the federal cognizant agency. They indicate systemic problems, not isolated errors.

Q&A

What triggers a single audit requirement for nonprofits?

Spending $750,000 or more in federal awards during a fiscal year. This threshold includes direct federal grants and federal funds passed through state or local agencies (subrecipient awards). The threshold applies to total federal expenditures across all awards, not to any single grant. If your organization is below $750,000 in federal spending, you are not subject to a single audit, though individual funders may still require program-specific audits.

Q&A

What do auditors examine during a grant compliance audit?

Three areas: (1) whether restricted funds were spent within approved budget categories, (2) whether expenditures are supported by documentation — invoices, payroll records, contractor agreements, time-and-effort reports, (3) whether funder reports accurately reflect financial activity. Auditors also evaluate internal controls: does the organization have procedures to prevent commingling of restricted and unrestricted funds, to approve expenditures before they are charged to grants, and to reconcile grant records against the general ledger?

Q&A

What are the most common single audit findings for nonprofits?

Documentation gaps top the list: expenditures without supporting invoices, missing time-and-effort records for personnel charged to grants, and incomplete subrecipient monitoring files. Next are expenditure misclassifications — costs coded to the wrong budget category. Indirect cost rate errors (applying an informal rate without a documented cost allocation plan) and late or inaccurate funder reporting round out the most frequent findings. Most findings are record-keeping failures, not misuse of funds.

Q&A

How does grant management software reduce audit risk?

Software with native restricted fund tracking creates an audit trail automatically. Every transaction tagged to a grant and budget category at entry eliminates the need for manual reconciliation between separate systems. Expenditure reports match the funder's budget format because the data was structured that way from the start. The practical benefit: audit preparation becomes a report pull rather than a documentation assembly exercise. Organizations using integrated grant tracking software report spending days rather than weeks on audit preparation.

Q&A

How do nonprofits prepare for a single audit?

Start with the five most common failure areas: verify all costs against grant terms (unallowable costs are the top finding), ensure your SEFA is complete including state-administered federal funds, reconcile cash draws with expenditures, confirm all reports were submitted on time, and document subrecipient risk assessments. The 2024 OMB revision raised the audit threshold to $1,000,000 in federal expenditures.

Go deeper

Federal Grant Reporting Requirements: A Compliance Reference

What 2 CFR Part 200 requires for federal grant reporting, including SF-425 deadlines, Single Audit thresholds, record retention rules, and agency-specific systems.

5 Best Grant Management Software [2026 Ranked]

5 grant management tools compared for nonprofits. Most are built for grantmakers, not recipients. Pricing from $20/mo to $15K+/yr.

Best Salesforce Nonprofit Cloud Alternative , Without the Consultants

Salesforce Nonprofit Cloud can do everything, but it costs $30,000-$100,000+ in consultant customization. GrantPipe does it out of the box for $20-$99/month.