TL;DR: Charities can significantly reduce audit stress by starting preparation early—reviewing internal controls, reconciling financial records, updating donor documentation, and ensuring compliance with CRA requirements. The most audit-ready organizations treat preparation as a year-round discipline, not a last-minute scramble.
Audit season has a way of arriving faster than expected. For charity finance teams, that familiar mix of urgency and anxiety tends to set in the moment the calendar flips—and if your records aren’t in order, a few weeks can feel very short.
The Information Returns Program (IRP) Charity Program audit, commonly referred to as the IPC audit, is the Canada Revenue Agency’s (CRA) primary mechanism for reviewing whether registered charities are complying with the Income Tax Act. These audits examine everything from how a charity spends its funds to whether it has met its disbursement quota, maintained proper records, and operated within its stated charitable purposes.
The good news? Most audit findings are avoidable. The charities that come through IPC audits with the fewest complications are those that treat compliance as a continuous process rather than a seasonal fire drill. This guide walks through exactly what your organization should be doing—and when—to enter audit season with confidence.
What Does an IPC Charity Audit Actually Examine?
Before diving into preparation steps, it helps to understand what the CRA is actually looking for. An IPC audit from Koh Lim Audit typically reviews:
- Charitable activities: Are your programs and activities consistent with your registered purposes?
- Disbursement quota compliance: Has your charity spent the required minimum on charitable activities or gifts to qualified donees?
- Financial records: Are your books accurate, complete, and maintained in Canada?
- Receipting practices: Are your official donation receipts complete and compliant with CRA requirements?
- Governance and accountability: Do you have appropriate internal controls, board oversight, and documented policies?
- Directed giving and fundraising arrangements: Are any third-party fundraising or agent arrangements structured and documented correctly?
Understanding the scope of the audit helps your team prioritize where to focus preparation efforts.
How Far in Advance Should Charities Begin Preparing for an IPC Audit?
The honest answer is that preparation should never really stop. That said, a structured pre-audit review should begin at least three to six months before your fiscal year-end—or immediately upon receiving notice of an audit from the CRA.
Many smaller charities operate with lean finance teams and limited administrative capacity, which makes early preparation even more important. Starting late compresses your timeline and increases the risk of submitting incomplete or inconsistent documentation.
Step 1: Conduct an Internal Compliance Review
The first task is getting an accurate picture of where your charity stands. A comprehensive internal review should cover:
Are your charitable activities aligned with your registered purposes?
Pull your charity’s registered purpose from the CRA’s charities listing and compare it against your actual program activities from the past fiscal year. Any activity that falls outside your registered purposes is a red flag. If your mandate has evolved, consult with a legal advisor about whether an amendment to your registration is required before the audit occurs.
Is your disbursement quota being met?
For fiscal years ending after January 1, 2023, the disbursement quota increased to 3.5% of property not used in charitable activities or administration, for charities with investment assets exceeding $1 million. Review your financials carefully to confirm compliance. If you’re close to the threshold, document your rationale and any accumulation resolutions formally.
Are your books and records complete?
The CRA requires charities to keep books and records for a minimum of six years from the end of the fiscal year they relate to. Before an audit, verify that financial statements, general ledgers, bank statements, board minutes, contracts, and correspondence are all accessible and organized.
Step 2: Review and Reconcile Financial Statements
Auditors will scrutinize your financial statements closely, so internal reconciliation before the audit is essential.
Work through the following:
- Bank reconciliations: Ensure all accounts are reconciled for each period in the fiscal year, with no unresolved discrepancies.
- Revenue categorization: Confirm that donations, grants, fundraising revenue, and program revenue are correctly classified. Misclassification can misrepresent your charity’s financial health and compliance.
- Expense allocation: Expenses should be allocated accurately between charitable program costs, management and administration, and fundraising. Auditors look for unusual expense patterns or costs that appear inconsistent with your activities.
- Restricted and endowment funds: These must be tracked separately and disbursed in accordance with the donor’s intent. If your charity holds restricted funds, document how each fund has been managed.
- T3010 reconciliation: Cross-reference your most recently filed T3010 (Registered Charity Information Return) against your financial statements. Inconsistencies between these two documents are a common trigger for deeper scrutiny.
Step 3: Audit Your Donation Receipting Practices
Receipting errors are among the most frequently cited findings in CRA charity audits—and they’re entirely preventable.
Every official donation receipt must include the following mandatory elements, as required under the Income Tax Act:
- A statement that it is an “official receipt for income tax purposes”
- The charity’s name and address as registered with the CRA
- The charity’s registration number
- The receipt’s serial number
- The date or year the donation was received
- The date the receipt was issued (if different from the donation date)
- The donor’s full name and address
- The amount of the donation (for cash gifts) or the eligible amount (for non-cash gifts)
- The signature of an authorized individual
Walk through a sample of receipts issued during the fiscal year and check each one against this list. Pay particular attention to receipts for non-cash donations, advantage situations (where the donor received something in return), and gifts of property—these carry additional requirements and are frequently handled incorrectly.
Step 4: Review Third-Party and Fundraising Arrangements
If your charity uses external fundraisers, contracted agents, or directed giving arrangements, these relationships require careful documentation.
The CRA holds registered charities accountable for the activities of their agents. This means that if a third-party fundraiser issues non-compliant receipts, solicits donations using misleading materials, or handles funds improperly, your charity bears the regulatory consequences.
Before your audit, gather:
- Written agreements with all fundraising agents, detailing their responsibilities and compensation structure
- Records showing oversight of fundraising activities
- Documentation confirming that fundraising costs are reasonable relative to revenue raised
For charities that make grants to non-qualified donees as part of a directed giving arrangement, be prepared to demonstrate that the charity maintained direction and control over how those funds were used.
Step 5: Strengthen Governance Documentation
Auditors assess whether a charity has adequate oversight and internal controls in place. Weak governance documentation is a common weakness, particularly for smaller organizations.
Before audit season, ensure you have:
Up-to-date board minutes
Minutes should document all major decisions, including approvals of financial statements, significant transactions, program changes, and any related-party dealings. If minutes are incomplete or missing for any meetings, work with your board secretary to reconstruct them with appropriate caveats.
A conflict of interest policy
The CRA expects charities to have a written conflict of interest policy and evidence that it is followed. This is especially relevant if board members or executives have relationships with vendors, contractors, or other parties that receive funds from the charity.
Financial signing authorities and controls
Document who has authority to approve expenditures and at what threshold. Show evidence that controls are operating—dual signing requirements, expense approvals, purchase authorization workflows.
Compensation disclosure documentation
If your charity pays any compensation to directors, officers, or other related parties, ensure this is fully disclosed in your T3010 and supported by documentation showing the compensation is reasonable.
Step 6: Prepare a Document Index
One of the most practical steps you can take is creating a master document index before the audit begins. This is a centralized reference list of all key records—where they’re located, which period they cover, and who is responsible for each.
A well-organized document index achieves two things. First, it demonstrates to auditors that your charity operates with discipline and transparency. Second, it dramatically reduces the time your team spends locating documents under the pressure of an active audit.
Organize your index by category: financial records, governance documents, program records, receipting documentation, and contracts. Include both physical and digital file locations.
Step 7: Brief Your Team and Board
An IPC audit is not solely a finance team concern. Board members, program managers, and executive staff may all be asked to provide information or participate in interviews. Ensure that key stakeholders understand:
- What the audit entails and what period it covers
- What their individual roles are if contacted by a CRA auditor
- The importance of providing accurate, consistent information
- How to handle requests for documentation they’re not sure about (direct to the primary contact)
Designating a single point of contact for all CRA communications during the audit is strongly advisable. This reduces the risk of inconsistent messaging and ensures that all requests are tracked and responded to in a timely manner.
What Happens If the CRA Identifies Issues?
Non-compliance findings can range from minor administrative corrections to serious compliance agreements, sanctions, or in the most severe cases, revocation of charitable status. The CRA’s approach is generally graduated—minor issues are addressed through education and compliance agreements before more serious consequences are considered.
That said, cooperating fully, responding promptly, and demonstrating good faith efforts to correct issues significantly influences how the CRA handles findings. Charities that can show they identified and addressed a problem proactively—before the audit—are in a much stronger position.
Building a Culture of Year-Round Compliance
The charities that navigate IPC audits most effectively share a common trait: they don’t treat compliance as a once-a-year exercise. Strong governance, accurate records, and documented processes are maintained continuously, which means audit preparation becomes a relatively straightforward review rather than a high-stakes scramble.
If your organization doesn’t already have a quarterly compliance checklist, this is the right time to build one. Schedule regular internal reviews of receipting practices, financial reconciliations, and governance documents throughout the year. When the CRA does come knocking, you’ll be ready.
Frequently Asked Questions About IPC Charity Audits
How does the CRA select charities for an IPC audit?
The CRA selects charities for audit through a combination of risk-based criteria, random selection, and referrals from other CRA programs. Red flags that may increase audit risk include inconsistencies on T3010 returns, significant year-over-year financial changes, receipting complaints, or referrals from anonymous tips.
How long does an IPC charity audit typically take?
The duration varies depending on the complexity of the charity’s activities and the completeness of its records. A straightforward audit with well-organized documentation can be completed in a few weeks. More complex audits involving multiple programs, third-party arrangements, or compliance concerns can extend for several months.
What should a charity do immediately upon receiving an audit notification from the CRA?
Designate a primary contact, notify your board, and begin gathering the documents requested in the CRA’s initial letter. If your charity has legal counsel or an accountant experienced in CRA charity audits, contact them promptly. Respond to all CRA requests within the specified timeframes.
Can a charity be audited even if its T3010 has always been filed on time?
Yes. Timely T3010 filing is a compliance requirement, but it does not exempt a charity from audit. The CRA audits the substance of a charity’s activities and financial management, not just whether administrative filings were submitted.
What is the difference between a compliance audit and a financial audit?
A financial audit is conducted by an independent external auditor and provides assurance on the accuracy of financial statements. An IPC audit is conducted by the CRA and assesses whether the charity is complying with the requirements of the Income Tax Act for registered charities. Some charities are required to undergo both.
