Nonprofit Compliance Audit Standard Operating Procedure Template
Free compliance audit SOP for nonprofits. Covers grant compliance, IRS reporting, and funder requirement verification.
Purpose
Verify the organization meets all federal, state, and funder compliance requirements before external auditors find what you missed. For nonprofits receiving $750,000+ in federal funds, a Single Audit is required — and findings can affect future funding eligibility.
Scope
Covers grant compliance, IRS reporting requirements, state charitable registration, board governance compliance, and funder-specific requirements. Does not cover financial statement preparation or programmatic evaluation.
Prerequisites
- Chart of grants with compliance requirements for each award
- IRS determination letter and current Form 990 on file
- Board governance documents (bylaws, conflict of interest policy, whistleblower policy)
- State charitable registration records
- Prior audit reports and management letters
Roles & Responsibilities
Finance Director
- Lead internal compliance audits quarterly
- Prepare for external Single Audit or financial audit
- Maintain grant compliance documentation
Executive Director
- Certify compliance with board governance requirements
- Review and respond to audit findings
- Ensure corrective action plans are implemented
Program Director
- Verify programmatic compliance with grant terms
- Maintain outcome data and participant records
- Prepare program sections of grant reports
Procedure
Create a master document listing every compliance obligation: each grant's specific requirements, IRS filing deadlines, state registration renewals, insurance requirements, and board governance mandates. This matrix becomes the audit checklist. Update it whenever a new grant is received or requirements change.
- aList all active grants with their specific compliance requirements
- bDocument IRS filing requirements (Form 990, 990-T, state equivalents)
- cList state charitable registration and renewal deadlines
- dDocument insurance requirements (D&O, general liability, workers comp)
- eList board governance requirements (meetings, policies, disclosures)
- fRecord all compliance deadlines in a shared calendar
Completion Checklist
Key Performance Indicators
Internal audit completion
Quarterly audits completed on schedule
External audit findings
Zero material findings or questioned costs
Grant report timeliness
100% of reports submitted by deadline
Corrective action closure rate
100% of critical findings resolved within 30 days
Why This Matters for Nonprofits
Nonprofits operate under layers of compliance obligations from the IRS, state regulators, and each individual funder. A Single Audit finding can trigger increased monitoring, restricted funding, or required repayment of disallowed costs from unrestricted funds. Loss of tax-exempt status — while rare — can be catastrophic. State registration lapses can result in cease-and-desist orders that halt fundraising. Internal compliance audits catch these issues before they become findings, protecting the organization's funding, reputation, and mission.
Common Mistakes
- ×Treating compliance as once-a-year audit preparation instead of an ongoing quarterly process
- ×Not tracking time and effort for grant-funded employees, leading to the most common (and expensive) Single Audit finding
- ×Letting state charitable registrations lapse because nobody tracks the renewal deadlines across 40+ states
- ×Not maintaining board meeting minutes with documented quorum, making it impossible to prove governance compliance
- ×Filing for a Form 990 extension and then forgetting to file before the extended deadline expires
Nonprofits-Specific Notes
Nonprofits receiving $750,000+ in federal awards in a fiscal year are required to have a Single Audit under the Uniform Guidance (2 CFR 200 Subpart F). The audit tests both financial statements and federal award compliance. Major programs are selected for detailed testing based on a risk assessment. Common compliance requirements tested: activities allowed/unallowed, allowable costs, cash management, eligibility, matching, period of performance, procurement, reporting, and subrecipient monitoring. The Federal Audit Clearinghouse (FAC) publishes all Single Audit reports — funders review them when making award decisions. A clean audit is a competitive advantage.
Frequently Asked Questions
Learn More About Compliance Audit Preparation
For a deeper look at building onboarding documentation, see our complete guide.