Review vs. Compilation vs. Audit: What’s the Right Level of Assurance for Your Business?

You need financial statements, but which kind?

Your bank’s asking for a review. Your bookkeeper says a compilation is enough. Someone else mentions an audit. What’s the difference?

If you’re a business owner, especially of a growing small or medium-sized business, this situation might sound familiar. When stakeholders (e.g., lenders, investors, potential buyers) ask for “financials,” what they really mean can vary. And that means you need to understand the different types of financial statement engagements your accountant can provide.

Let’s break down the three core service levels—compilation, review, and audit—so you can confidently decide what makes the most sense for your business and your goals.

Understanding the three types of financial statement engagements

In Canada, CPA firms like DMCL offer three primary types of financial statement services, each offering a different level of assurance:

Compilation engagement

A compilation is the most basic level. Your accountant takes financial information provided by management and compiles it into financial statements—typically for internal use, tax filings, or to satisfy very simple reporting needs. There’s no attempt to verify the accuracy of the information, and no assurance is provided. It’s often the right fit for owner-managed businesses that are closely held and don’t have outside users relying on the statements.

Review engagement

A review provides limited assurance, which means your accountant performs analytical procedures and inquiries to assess whether the financial statements are plausible and free from material misstatement. It doesn’t involve testing of transactions or systems, but it goes well beyond a compilation.

The outcome is a set of financial statements that includes a Review Engagement Report, which can be used to satisfy lenders, investors, and other stakeholders who need a higher level of credibility—without the cost and complexity of an audit.

Audit engagement

An audit is the most in-depth and expensive option. It involves extensive verification procedures, including confirmation of balances with third parties, testing internal controls, and detailed substantiation of transactions. The auditor provides reasonable assurance that the statements are free from material misstatement, which is the highest level of confidence available.

Audits are often mandatory for public companies or large, complex entities and are sometimes requested in high-stakes investment or sale scenarios.

How to know which one you need

This is where business owners often get stuck, and where an experienced advisor can help. The right level of assurance depends on who will be using the financial statements and why.

If you’re preparing statements strictly for internal management or to file corporate taxes, a compilation might be all you need. It’s quick, cost-effective, and provides the necessary structure without extra effort.

If you’re applying for a business loan or line of credit, your bank may specifically ask for a review. This is especially common with SMEs that don’t have audited statements but still need to demonstrate credibility. The limited assurance offered in a review gives lenders more confidence than a compilation—without the time and expense of an audit.

An audit is typically only necessary in more complex or regulated situations. For example, if you’re preparing to sell your company or bring on institutional investors, they may request audited financials. Similarly, some not-for-profit organizations or businesses that receive government funding may be required to provide audited statements as a condition of their funding.

In some cases, you may choose a review now and later move to an audit as your business evolves.

What “assurance” really means and why it matters

“Assurance” is a term that often gets tossed around without much explanation. At its core, assurance refers to the level of confidence a third party can place in your financial statements.

With a compilation, the accountant provides no assurance. They’re simply formatting your numbers into a presentable set of statements.

A review, on the other hand, offers what’s called “negative assurance”. That means your accountant has performed enough work to say that, based on the information reviewed, they haven’t found anything that suggests the financial statements are materially misstated. It’s not a guarantee, but it does carry professional credibility.

An audit offers “positive (reasonable) assurance”. Here, your accountant actively tests the financial data and internal systems to express an opinion that the financial statements are free of material error. This is the gold standard in terms of credibility—but it’s also the most demanding for both the accountant and the business owner.

Choosing the right level of assurance ensures you’re not over- or under-delivering based on what your stakeholders expect.

What to expect from a compilation, review, or audit

While each type of engagement has a different scope, the process generally follows a few core steps, with the depth of work increasing at each level.

Here’s a simplified overview of what to expect:

• Initial planning and understanding of your business: This is included in all three engagements to some degree. For a compilation, it’s minimal—just enough to assemble your numbers accurately. In a review or audit, your accountant will invest more time understanding your operations, accounting processes, and any key risk areas.
• Inquiries with management: A key part of the review process. Your accountant will ask questions to clarify business activity and investigate unusual or material items. In a compilation, this step is skipped. In an audit, it’s just the starting point, which is followed by more in-depth verification work.
• Analytical procedures: Performed during a review, these procedures help identify inconsistencies or red flags by comparing financial trends and ratios. A compilation doesn’t include this analysis. An audit goes further by supplementing analytics with direct testing and confirmations.
• Detailed testing and verification: This only occurs in an audit. It includes reviewing supporting documents, confirming balances with third parties, and evaluating internal controls. Neither Compilations nor Reviews include this level of assurance work.
• Final report issued:
  • A compilation comes with a Compilation Engagement Report stating no assurance was provided.
  • A review includes a Review Engagement Report with limited (negative) assurance.
  • An audit concludes with an Independent Auditor’s Report offering reasonable assurance.

By understanding what’s involved in each type of engagement, you can choose the one that gives your stakeholders the confidence they need without committing to more time or cost than necessary.

Whether you’re applying for a loan, planning for growth, or just looking to clean up your year-end reporting, understanding the difference between a Compilation, Review, and Audit can help you make a more confident and cost-effective decision.

At DMCL, we work with small and mid-sized businesses every day to deliver the right level of assurance based on their goals, industry, and stakeholder expectations. If you’re not sure which engagement is right for your situation, your DMCL advisor is here to help.