Audit Letter Template for the United States

Generate a bespoke document

What is a Audit Letter?

The Audit Letter is a critical document in the United States audit process, serving as a formal communication channel between external auditors and a client's legal counsel. This document is typically used during the annual audit process or special audit engagements to gather information about potential legal liabilities that could materially impact financial statements. The letter must comply with professional standards set by the AICPA, PCAOB, and relevant U.S. securities laws, particularly post-Sarbanes-Oxley Act requirements. It specifically requests information about pending litigation, unasserted claims, and legal assessments that could affect the company's financial position. The Audit Letter plays a crucial role in ensuring proper disclosure of legal matters and maintaining transparency in financial reporting, while respecting attorney-client privilege considerations.

Frequently Asked Questions

Is an audit letter legally binding under US securities law?

Yes, audit letters create legally binding obligations under US securities law and professional auditing standards. Legal counsel must provide accurate, complete responses as required by PCAOB standards and the Sarbanes-Oxley Act. False or misleading statements in audit letters can result in securities violations and professional liability.

Can an incomplete or missing audit letter response affect our SEC filing?

Yes, incomplete or missing audit letter responses can delay or prevent SEC filings and may result in audit qualification. Under Sarbanes-Oxley requirements, auditors cannot issue clean opinions without proper legal confirmations. This can trigger SEC enforcement action and impact your company's ability to access capital markets.

How does an audit letter differ from a legal opinion letter?

An audit letter is specifically requested by external auditors to confirm legal matters affecting financial statements, while a legal opinion letter provides broader legal advice to clients. Audit letters follow standardized PCAOB formats and focus on litigation, claims, and contingent liabilities. Legal opinion letters address various legal issues and don't require auditor involvement.

Are there specific PCAOB requirements for audit letter content in the US?

Yes, PCAOB Auditing Standard 2505 requires specific information including description of pending litigation, probability of unfavorable outcomes, and estimated financial impact. The letter must cover matters occurring through the audit report date and include attorney's assessment of legal contingencies. Responses must be detailed enough for auditors to evaluate material risks.

How long does it typically take to prepare an audit letter response?

Audit letter responses typically take 2-4 weeks to prepare, depending on the complexity of legal matters and number of jurisdictions involved. Large companies with extensive litigation may require 4-6 weeks. The process involves reviewing all legal files, coordinating with outside counsel, and ensuring compliance with professional standards and deadlines.

Common mistakes companies make when handling audit letters?

The most common mistakes include failing to disclose all material legal matters, providing insufficient detail about potential financial impact, and missing auditor deadlines. Companies also frequently fail to coordinate with all outside counsel or provide outdated information. These errors can result in audit delays, qualification letters, or SEC compliance issues.

Can refusing to provide an audit letter response violate securities laws?

Yes, refusing to provide required audit letter responses can violate SEC reporting requirements and Sarbanes-Oxley compliance obligations. This may result in audit qualification, delayed filings, and potential securities law violations. Public companies have legal obligations to provide auditors with necessary information for financial statement certification under federal securities regulations.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

United States

Publisher

GenieAI

Category

Audit Form

Sector

Business

Cost

Free to use

Last updated

About the Audit Letter

An Audit Letter serves as a formal bridge between your external auditors and legal counsel, ensuring that all potential legal liabilities are properly disclosed in your financial statements. This document is mandated by professional auditing standards and plays a crucial role in maintaining compliance with United States securities regulations, particularly for publicly traded companies subject to Sarbanes-Oxley Act requirements.

When do you need this document?

You need an Audit Letter during annual financial statement audits, quarterly reviews for public companies, or special audit engagements where legal matters could impact financial reporting. This document becomes essential when your company faces pending litigation, regulatory investigations, or potential claims that could materially affect your financial position. Public companies must use Audit Letters to comply with PCAOB auditing standards, while private companies typically require them to meet AICPA professional standards. The letter is also necessary when auditors need to assess legal reserves, evaluate contingent liabilities, or understand the impact of regulatory compliance issues on your financial statements.

Key legal considerations

The Audit Letter must carefully balance the need for comprehensive disclosure with attorney-client privilege protections. You should ensure that materiality thresholds are clearly defined to focus legal counsel's response on matters that could significantly impact your financial statements. The scope of inquiry must be specific enough to elicit meaningful responses while broad enough to capture all relevant legal exposures. Consider including specific time periods, types of litigation, and regulatory matters relevant to your industry. The letter should request information about both asserted and unasserted claims, as unasserted potential claims can represent significant contingent liabilities that require disclosure or reserve recognition under accounting standards.

Legal requirements in United States

Under United States law, Audit Letters must comply with multiple regulatory frameworks depending on your company type. Public companies must follow PCAOB Auditing Standards, which require specific procedures for attorney letter confirmations as part of audit evidence gathering. The Sarbanes-Oxley Act mandates that auditors obtain sufficient evidence about legal matters that could affect financial statement accuracy and completeness. AICPA Professional Standards, including Statement on Auditing Standards (SAS), provide detailed guidance on the format, timing, and content requirements for audit letters. The Securities Exchange Act of 1934 requires that material legal proceedings be properly disclosed in financial reports, making the Audit Letter a critical compliance tool. Your letter must also consider state bar association guidelines regarding attorney responses to audit inquiries, as these can vary by jurisdiction and may affect the scope and nature of legal counsel's response to your audit team.

GOVERNING LAW

Applicable law

This Audit Letter is drafted to comply with United States law. Key legislation includes:

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it