Hiring an audit and assurance firm without verifying licenses and regulatory standing is like signing a contract you haven't read. Before you hand over financial records or rely on their opinion, you need concrete proof they're qualified, insured, and compliant with industry standards.
Why Licensing & Compliance Matter for Audit Firms
Audit and assurance work demands direct access to sensitive financial data and the ability to issue reports that stakeholders—lenders, investors, regulators—actually trust. A firm without proper credentials can't legally perform audits in most jurisdictions, and their findings carry zero weight. More importantly, unlicensed practitioners expose your business to liability and reputational damage if their work falls short of professional standards.
Key Certifications to Check
The foundation of any reputable audit firm rests on individual CPA (Certified Public Accountant) credentials. Verify that the lead auditor and senior team members hold active CPAs in your state or relevant jurisdiction—not just a certificate from years ago. Request proof of current licensure directly from your state's Board of Accountancy (most maintain searchable databases online).
For firms handling specific industries, look for additional designations:
- CIA (Certified Internal Auditor)—required for internal audit work
- CISA (Certified Information Systems Auditor)—essential for IT-focused audits
- CFF (Certified Fraud Examiner)—if forensic or investigative audits are part of your engagement
Firms that conduct audits under AICPA (American Institute of Certified Public Accountants) standards should display membership and good standing status on their website or provide it on request.
Regulatory Registrations & Oversight
Audit firms operating above a certain revenue threshold must register with the PCAOB (Public Company Accounting Oversight Board) if they audit public companies or their affiliates. If you're considering a firm for compliance audits or work touching public-company clients, confirm PCAOB registration and review their most recent inspection report—these are public documents that reveal compliance gaps.
State-level oversight also matters. Confirm the firm holds an active license from your state's Board of Accountancy. Many states require CPAs to complete continuing professional education (CPE) annually—ask firms how many hours their team completes and whether they're current.
Insurance & Quality Control Verifications
Professional liability insurance isn't optional—it's a safety net. Ask for proof of active D&O (errors and omissions) coverage with limits appropriate to your engagement size. Typical coverage ranges from $250,000 to $2 million depending on firm size and client base; smaller engagements under $1 million may operate with $500K–$1M policies.
Request evidence of the firm's internal quality control program. Reputable firms should describe their engagement review processes, how they supervise junior staff, and whether they've undergone peer reviews. A peer review (conducted by another firm) every three years is standard for AICPA members and shows external validation of quality.
Red Flags to Watch
If a firm can't provide license verification within 24 hours, decline the engagement. Legitimate firms keep this documentation readily accessible. Similarly, avoid any auditor who claims they can expedite a full audit in under three weeks for a business with complex transactions—this signals corner-cutting that could render findings unreliable.
Check regulatory databases for disciplinary history. Most state Boards of Accountancy maintain searchable records of complaints and enforcement actions. A single old violation isn't necessarily disqualifying, but multiple recent issues suggest systemic problems.
Comparing Firms: A Simple Checklist
Before requesting proposals, run each firm through this filter:
- License status confirmed via state Board of Accountancy website
- CPAs on your engagement team currently active and in good standing
- Professional liability insurance with limits matching your needs
- PCAOB registration (if applicable to your work)
- No unresolved disciplinary actions
- Clear quality control documentation available on request
- Engagement letter specifying scope, timeline, and fee structure
When evaluating proposals, fees typically range from $4,000–$15,000 for small-business annual audits, $20,000–$60,000 for mid-market reviews, and significantly higher for larger or complex audits. Use compliance verification as a tiebreaker between similarly priced firms—licensed, insured, and peer-reviewed practitioners justify their costs through reduced risk.
Mercoly helps you find and compare trusted audit and assurance providers in one place, with transparent credentialing information upfront.
Frequently Asked Questions
Q: How do I verify a CPA's license if they claim to hold one? Visit your state's Board of Accountancy website (search "[state] board of accountancy") and use their license lookup tool—most are free and updated daily.
Q: What's the difference between AICPA membership and state CPA licensure? State licensure is mandatory and legally required to practice; AICPA membership is voluntary but signals adherence to professional standards and continuing education.
Q: Can a firm operate without PCAOB registration? Yes, if they don't audit public companies or their subsidiaries—but if they do, lack of PCAOB registration is an immediate disqualifier.
Get started by verifying credentials for your top candidate today.