Review Engagement Letter Template for the United States

Generate a bespoke document

What is a Review Engagement Letter?

The Review Engagement Letter serves as a crucial document in the United States accounting practice, establishing the professional relationship between accounting firms and their clients. This document is required when a client seeks a limited assurance review of their financial statements, providing more assurance than a compilation but less than an audit. The Review Engagement Letter explicitly outlines the scope of services, responsibilities, limitations, and terms of the engagement while ensuring compliance with AICPA standards and state-specific regulations. It serves as both a legal and professional framework for the review services to be performed.

Frequently Asked Questions

Is a Review Engagement Letter legally binding in the United States?

Yes, a Review Engagement Letter is a legally binding contract in the United States once signed by both the accounting firm and client. The document creates enforceable obligations regarding the scope of review services, professional responsibilities, and liability limitations. Courts recognize these letters as valid contracts that define the professional relationship and can be enforced under state contract law.

Can I conduct a financial statement review without a signed engagement letter?

No, SSARS standards require a signed engagement letter before beginning any review engagement in the United States. Proceeding without this document violates AICPA Professional Standards and can result in professional sanctions, loss of CPA license, and potential malpractice liability. State Boards of Accountancy also mandate proper engagement letters for all review services.

How does a Review Engagement Letter differ from an Audit Engagement Letter?

A Review Engagement Letter provides limited assurance through inquiry and analytical procedures, while an Audit Engagement Letter provides reasonable assurance through extensive testing and verification. Review engagements are less comprehensive, cost less, and result in negative assurance statements rather than positive opinions. The liability exposure and professional responsibilities also differ significantly between the two engagement types.

How long does it typically take to prepare a Review Engagement Letter?

A well-drafted Review Engagement Letter typically takes 2-4 hours to customize properly for each client. This includes reviewing the client's specific circumstances, ensuring SSARS compliance, incorporating appropriate liability limitations, and addressing any unique engagement requirements. Rush jobs often result in inadequate terms that can create significant professional liability exposure.

Which SSARS standards must be referenced in a Review Engagement Letter?

The engagement letter must reference SSARS compliance, specifically AR-C Section 90 (Review of Financial Statements), and adherence to AICPA Professional Standards. The letter should also mention compliance with the AICPA Code of Professional Conduct and any applicable state CPA board regulations. These references establish the professional framework governing the engagement and help limit liability exposure.

Can clients modify the standard liability limitations in Review Engagement Letters?

Clients can request modifications to liability limitations, but accounting firms should carefully evaluate such changes with legal counsel. Standard liability caps, indemnification clauses, and dispute resolution provisions are designed to protect the firm while remaining enforceable under state law. Excessive modifications may void important protections or create uninsurable risks for the accounting practice.

Do Review Engagement Letters need to be updated annually for recurring clients?

Yes, best practice requires updating Review Engagement Letters annually or when circumstances change significantly. SSARS standards recommend confirming engagement terms each period to ensure continued understanding of responsibilities and scope. Changes in client operations, ownership, or applicable standards may require modified terms to maintain proper professional compliance and liability protection.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

United States

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Review Engagement Letter

A Review Engagement Letter is an essential document that establishes the terms and conditions for review services between you and your accounting firm. This letter creates a binding professional relationship while ensuring compliance with United States accounting standards, including Statements on Standards for Accounting and Review Services (SSARS) and AICPA Professional Standards.

When do you need this document?

You need a Review Engagement Letter when your business requires financial statement review services that provide limited assurance. This typically occurs when banks, investors, or creditors request reviewed financial statements for loan applications, investment decisions, or ongoing compliance requirements. Companies often choose review services as a cost-effective alternative to full audits while still providing stakeholders with professional accountant assurance. Private companies, non-profit organizations, and partnerships commonly use review engagements for annual financial reporting, especially when they need more credibility than compiled statements but cannot justify the expense of a full audit.

Key legal considerations

Your Review Engagement Letter must clearly define the scope and limitations of review services to avoid misunderstandings about the level of assurance provided. The document should specify that a review provides limited assurance and is substantially less in scope than an audit, meaning the accountant will not express an audit opinion. Management responsibilities must be detailed, including your obligation to provide complete and accurate financial information, maintain adequate internal controls, and acknowledge responsibility for preventing and detecting fraud. The letter should address professional liability considerations, including indemnification clauses, limitation of liability provisions, and compliance with state-specific statute of limitations requirements. Data protection and confidentiality provisions are crucial, especially regarding compliance with the Gramm-Leach-Bliley Act and applicable state privacy laws.

Legal requirements in United States

Under United States law, Review Engagement Letters must comply with SSARS standards, specifically AR-C Section 90, which governs review engagements for non-public entities. The letter must reference applicable AICPA Professional Standards and Code of Professional Conduct requirements. State Board of Accountancy regulations vary by jurisdiction and may impose additional engagement letter requirements, so you must ensure compliance with your specific state's CPA regulations. For certain entities, federal requirements may apply, including Sarbanes-Oxley Act provisions and Internal Revenue Code considerations. The engagement letter must be signed before commencing review procedures and should be updated for any changes in engagement scope or terms. State contract law principles govern the enforceability of engagement letter terms, including professional liability limitations and dispute resolution procedures.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it