Audit engagement letter: what to include and track

An audit engagement letter looks simple on paper. In practice, it is one of the most important contracts in an audit file.

Key takeaways

• An audit engagement letter is the written contract for audit work. It defines scope, responsibilities, deliverables, timeline, fees, and limitations.
• It is not always required by statute, but professional standards often require or strongly support putting the understanding in writing for every audit, review, or compilation.
• Good engagement letter contents cover audit scope, management's responsibilities, access to records, independence, confidentiality, liability limits, term, and termination.
• A firm may start from an audit engagement letter sample or template, but each letter must be adapted to the client, period, entity, and services.
• Contracko helps store signed letters, extract key details with AI, and track review dates, deliverables, liability caps, and related client agreements.

What an audit engagement letter is for

An audit engagement letter is the agreement between an independent auditor and a client for a specific audit engagement. It confirms the objective and nature of the audit, which financial statements are covered, and the period involved, for example "year ending 31 December 2025."

The letter should define what the auditor is engaged to do and what management must prepare. That usually includes financial statements, internal control, access to records, and written confirmations through a representation letter at the conclusion of the audit.

The benefits are practical. The letter helps both parties identify scope, timing, deliverables, and fees before audit procedures are performed. It can also reduce risk if the client later says the firm was expected to cover other things.

Similar documents are used for tax, bookkeeping, and advisory services. Many firms use a separate engagement letter for each service line, and some compare alternative contract repository and automation tools when deciding how to manage all of those agreements centrally.

What an audit engagement letter usually includes

This article is not legal advice. Requirements vary by jurisdiction, professional body, and client type. Using a dedicated platform for contract management features such as reminders, repositories, and AI analysis can also help ensure those requirements are consistently reflected in every letter. Generally, an audit engagement letter will cover the following:

• Parties and period: the audit firm, client company, relevant entity or group, fiscal year, and expected duration.
• Scope: whether the work is a financial statement audit, integrated audit, review, agreed-upon procedures, or another engagement.
• Management responsibilities: preparing the financial statements, maintaining systems and internal control, making staff and resources available, and disclosing fraud or known issues.
• Auditor responsibilities: performing the audit in accordance with relevant professional standards, applying judgment, and providing an expression of opinion with reasonable, not absolute, assurance.
• Access: the auditor's right to obtain records, minutes, contracts, personnel access, and support from management.
• Deliverables: the audit report, management letter, internal control findings, and any communication to the board or audit committee. For public companies, PCAOB AS 1301 addresses audit committee communications.
• Fees: fixed fees, hourly rates, retainers, progress billing, fee caps, and what happens if the firm cannot proceed because information is late.
• Confidentiality and data: how client information is handled, including any NDA or DPA provision.
• Liability and disputes: caps where permitted, governing law, indemnity, and dispute process.
• Independence: confirmation that the auditor is independent in respect of applicable rules.
• Termination: when either party can terminate, notice periods, and obligations that extend after termination.

The letter should also state who may sign. That could be a CFO, controller, chief executive officer, board representative, or another person with authority.

Audit engagement letter sample, template, and format

An audit engagement letter sample shows concrete wording. It helps you understand tone, structure, and detail, and founder-led insights into simple, cost-effective contract management for growing firms can help you decide how much of that structure to standardize across all client engagements.

An audit engagement letter template is a starting file with placeholders for the client name, period, services, fees, and signatures. The audit engagement letter format is the order of clauses: introduction, scope, responsibilities, standards, limitations, fees, confidentiality, liability, and signatures.

Do not copy a sample verbatim. A new engagement letter should take account of local rules, firm policy, independence considerations, and the specific audit engagement. In complex or cross-border instances, counsel may review the base template so every new one starts from a sound position.

When to issue and update audit engagement letters

Most firms obtain a signed audit engagement letter before fieldwork starts. Many issue a new engagement letter every year, tied to the fiscal period, and rely on structured contract notifications and reminders so key issuance and renewal dates are not missed.

Some practices use multi-year letters, but the content should still be reviewed annually. Changes in laws, standards, ownership, fee structure, risk allocation, or scope can make an old letter stale.

Scope changes may need a supplemental letter. If you add interim review work, internal control testing, advisory services, or a corporate tax engagement, use a separate engagement letter where that creates a clearer understanding.

Key fields to track after the engagement letter is signed

Once the letter is signed, the hard part is no longer writing. It is tracking.

Capture these fields in a structured way:

• Client legal name, entity, group structure, and service line.
• Engagement type, such as financial statement audit, tax engagement letter, bookkeeping engagement letter, accounting services agreement, or client advisory agreement.
• Audit period, fiscal year end, and timeline.
• Responsible partner, manager, CFO, controller, audit committee chair, and signer.
• Fees, hourly rates, retainers, billing milestones, and fee update letter references.
• Deliverable dates for draft financial statements, signed auditor statement, final report, and management letter.
• Liability cap, indemnity, governing law, termination notice, and dispute terms.
• Related documents, including NDA, DPA, retainer agreement, scope-change letter, and professional liability insurance policy.

This enables reporting, reminders, and consistent risk management across the practice, especially for legal teams that benefit from AI-powered contract analysis and organization over hundreds of active client agreements.

How Contracko helps manage audit engagement letters and related agreements

Contracko is a contract management platform. It does not replace audit judgment or professional review. It helps you manage the signed contract after acceptance, and its documentation on organizing and tracking contracts shows how to adapt the system to audit engagement letters and related agreements.

You can store engagement letters in a central contract repository, upload PDF or DOCX files, and organize them by contract type. With AI contract analysis, Contracko can extract key details such as audit period, parties, fees, liability caps, termination clauses, and renewal or review dates.

Firms can create an "engagement letter" type with custom fields for service line, responsible partner, audit period, and report due date. Smart reminders can notify teams before re-issuance dates, notice periods, and deliverable deadlines, and you can configure contract notifications and reminders to match your firm's escalation and review practices.

Permissions keep sensitive client files limited to the right users. Calendar sync pushes key dates to Google Calendar, Apple Calendar, or Outlook. Reporting gives a view of open audits, upcoming renewals, or letters with specific liability caps, while dedicated contract tracking across all agreements gives partners and managers a shared view of status and risk.

Contracko also supports email import, version control, audit logs, EU-based servers, GDPR compliance, encryption, and full export. Setup for engagement letter tracking usually takes hours, not weeks.

How audit engagement letters connect to other client agreements

An audit engagement letter rarely exists alone. A single client may have a tax engagement letter, bookkeeping engagement letter, advisory agreement, NDA, DPA, retainer agreement, scope-change letter, and fee update letter.

Keeping these documents in one system makes the connection visible. You can determine whether obligations overlap, whether fees changed mid-year, and whether one document creates a conflict with another. That is hard to do from email, spreadsheets, or a paper file, especially for purchasing and supplier contracts where procurement-focused contract management can dramatically reduce missed renewals and unmanaged risks.

FAQ

Is an audit engagement letter legally required, or just good practice?

It depends on the jurisdiction and the applicable professional standards. Even where law does not require it, most firms treat an engagement letter as part of client acceptance and risk management.

How often should we refresh our audit engagement letter for a recurring client?

Many firms refresh it annually. Others use multi-year letters, but still review the content each year. A material change in scope, fees, ownership, regulation, or services should trigger a new or supplemental letter.

Can one engagement letter cover both audit and tax services?

Sometimes, but many firms prefer a separate engagement letter for audit and a separate tax engagement letter. It keeps responsibilities, independence issues, scope, and fees clearer.

Who should sign the audit engagement letter on the client side?

Someone with authority to bind the entity should sign. Common signers include the CFO, controller, chief executive officer, board representative, or audit committee chair.

Does Contracko provide audit engagement letter templates?

No. Contracko focuses on managing signed agreements. Bring your own template from your professional body, firm policy, or counsel, then use Contracko to track dates, obligations, risks, and review cycles.

Contracko plans start at $75/month (billed annually). You can review pricing and plans and start a 7-day free trial with no credit card required.

Sources

[1] PCAOB AS 1301, pcaobus.org

Images in this article were generated with the assistance of AI.