Audit and assurance for nonprofits
An era of changing regulations, heightened transparency expectations and limited resources makes meeting audit requirements harder. Get experienced, nonprofit-friendly audit support.
How we help you
Get a smooth, effective audit process to satisfy regulators, adapt to changing requirements and build confidence in your organization’s operations and results.
Confidently complete financial statement audits.
Get Uniform Guidance support.
Perform employee benefit plan audits.
Add other attestations when needed.
Make your audits into organizational assets
Wipfli’s nonprofit audit services can help you overcome compliance challenges with support that not only understands the nonprofit industry but also delivers efficient, committed service.
Explore our services
Our nonprofit audits are performed in a customized, risk-based manner, with procedures focused on the critical issues unique to your organization. We bring new tools and a depth of knowledge to nonprofit financial reporting, streamlining the time burden on internal staff while leveraging the time-saving tools of big data.
With the increasing emphasis on transparency and accountability for federal funds, nonprofits need uniform guidance and single audit support that understands their regulations. At Wipfli, our team of dedicated single audit professionals works with you to deliver a smooth single audit process.
Wipfli conducts over 700 employee benefit plan audits annually, with plans that cover as few as 100 or as many as 50,000 participants and several billion dollars in assets. We know the complex requirements nonprofits face and can help you adhere to fiduciary responsibilities and maintain compliance.
When you need assurance beyond financial statements, Wipfli can provide third-party validation with agreed-upon procedures and other attest services. Let our team help remove doubt, offer validity and bring clarity and efficiency to the process.
Insights and resources
Learn MoreEVENT | October 6, 2026
Real-world federal grants compliance: SEFA, journal entries, and 2 CFR 200 practice plus in-kind regulations and building your plan
Join us for a focused three-day workshop designed to help strengthen your organization’s compliance with the Uniform Guidance 2 CFR Part 200. This hands-on session will guide participants through building an audit-ready Schedule of Expenditures of Federal Awards (SEFA), identifying (and correcting) commonly improperly recorded fixed asset transactions, and developing well-documented in-kind contribution plans. In days one and two, participants will tackle real-world journal entry recording scenarios while gaining access to practical, audit-ready tools, including a capital asset template, SEFA roll-forward templates and guidance for efficiently rolling forward audit footnotes. By applying these techniques, participants will improve reporting accuracy, reduce year-end preparation time and strengthen their organization’s readiness for audits and financial reviews. Through practical examples and real-world scenarios, attendees will leave with the tools and growing confidence around improving financial reporting, strengthening asset management practices and meeting federal requirements for cost sharing and documentation. Stay for day three to review non-federal share in-kind regulations and take time to begin building your plan.
- Learn More
EVENT | January 19, 2027
Uniform Guidance regulation training
Join us for a practical and engaging virtual training of the Office of Management and Budget’s (OMB) Uniform Guidance (2 CFR Part 200) — the cornerstone of federal grant compliance. This training is designed to help nonprofit and government professionals understand federal grant regulations and how to apply them effectively and avoid common pitfalls in managing federal awards. Led by experienced trainers with years of auditing and consulting expertise, this session blends regulatory review with real-world examples and actionable insights. Whether you’re new to federal
Learn MoreARTICLE
Simplify FFHS grant compliance with a compliance calendar
For federally funded human services (FFHS) organizations, federal funding helps sustain programs and services that communities rely on. But that money does not come without strings attached. It introduces a significant set of 2 CFR Part 200 compliance and audit responsibilities. Compliance with federal grant requirements is a year-round responsibility. For many FFHS organizations operating with lean administrative teams, balancing program delivery with documentation, monitoring and reporting obligations can be challenging. Without a structured approach, compliance activities often compete with mission-focused work for limited staff time. To manage these obligations more effectively, many organizations are adopting compliance calendars that help transform regulatory requirements into a structured workflow. Keep reading to learn how your organization can use a compliance calendar to organize grant compliance requirements and reduce audit surprises. What are the 2 CFR Part 200 compliance and audit requirements? Federal grant recipients and subrecipients must comply with 2 CFR Part 200, commonly known as the Uniform Guidance. These regulations establish rules for managing federal funds, maintaining accountability, demonstrating compliance throughout the grant life cycle, and meeting federal audit requirements. Core 2 CFR Part 200 compliance obligations Federal grant recipients and subrecipients must establish processes to demonstrate that funds are being spent in accordance with award requirements. Key obligations include: Written policies: Maintain documented policies governing procurement, financial management, travel, cost allowability and other grant-related activities. Internal controls: Establish controls that help safeguard federal funds, detect issues early and support ongoing monitoring. Cost principles: Ensure all expenses charged to a grant are allowable, allocable and reasonable under federal requirements and award terms. Subrecipient monitoring: If applicable, assess subrecipient risk, monitor performance and verify that downstream subrecipients comply with applicable requirements. Record retention: Retain financial records, supporting documentation and other records required by federal award terms for at least three years from the date of submission of the final financial report, unless a longer retention period applies. Uniform Guidance audit obligations Uniform Guidance also establishes the following audit requirements: Single audit threshold: Organizations that expend $1,000,000 or more in federal awards during their fiscal year must undergo a single audit or a qualifying program-specific audit. Program-specific audit: Under certain conditions, organizations may be eligible for a program-specific audit. Auditor independence: Organizations must hire an independent auditor to conduct a single audit. The auditor must be independent and comply with the ethical and independence requirements of the Generally Accepted Government Auditing Standards (GAGAS). Data collection and submission: The reporting package and data collection form must be submitted to the Federal Audit Clearinghouse within 30 calendar days of receiving the auditor’s report, or within nine months after the end of the audit period, whichever is earlier. Resolution and corrective action: Organizations must address audit findings and implement corrective actions when deficiencies are identified. Compliance needs to be continuous, not an annual event Many organizations still think about compliance as an annual event. They will wait to gather documentation and records until an audit is about to begin. Under 2 CFR Part 200, compliance activities occur throughout the grant life cycle, requiring ongoing monitoring, documentation and oversight. Internal controls, spending reviews and program performance requirements need to be ongoing between audits. If your organization focuses only on compliance in preparation for an annual audit, you are more likely to have issues with missing documentation, delayed reports or unresolved control issues. The challenge for many FFHS organizations is not understanding the requirements. It is keeping track of hundreds of tasks, deadlines and reviews across multiple programs. That is where a compliance calendar can help. What is a compliance calendar? A compliance calendar is a centralized tool that tracks grant deadlines, reporting requirements, monitoring activities, documentation reviews and other compliance tasks. In practice, a compliance calendar functions as a project management tool specifically designed for grant compliance. Rather than simply listing reporting due dates, an effective compliance calendar breaks each obligation into its required actions. It identifies who is responsible, establishes milestone deadlines and provides reminders before key deliverables are due. This approach helps transform compliance from a series of deadlines into a repeatable process. A compliance calendar will: Notify staff of upcoming due dates Compliance calendars can assign tasks to specific roles and generate reminders before deadlines arrive. Program staff, finance teams, grant managers and leadership can all receive notifications when action is required. Increased visibility into grant responsibilities helps ensure they do not slip through the cracks and reduces the risk of missed deliverables. Create a single source of truth A significant advantage of a compliance calendar is centralization. Instead of scattered spreadsheets, emails and personal reminders, organizations can maintain a single source of truth for grant requirements and upcoming tasks. This improves visibility across departments and makes it easier to coordinate activities. What should be included in a compliance calendar? An effective compliance calendar translates regulatory requirements into specific scheduled activities. Rather than tracking only final due dates, it breaks compliance obligations into the tasks that need to occur beforehand. For each grant, consider including: Financial and programmatic reporting activities: Key reports and the steps required to prepare them, such as budget-to-actual reviews, reconciliation of grant expenditures, collection of program performance data, management review and final report approval. Monitoring and internal control activities: Periodic reviews designed to identify issues early, including transaction testing, review of supporting documentation, segregation of duties assessments, cash management reviews and follow-up on previously identified concerns. Subrecipient oversight activities (if applicable): Risk assessments, monitoring visits, review of required reports, documentation of follow-up actions and verification that corrective actions have been implemented. Grant administration requirements: Budget modification deadlines, equipment inventories, policy and procedure reviews, staff training requirements and grant closeout activities. Each activity should identify a responsible person, target completion date, required documentation and any review or approval steps needed before the task is considered complete. For example, if a quarterly federal financial report is due October 30, the compliance calendar might schedule expenditure reconciliations by October 10, supporting documentation reviews by October 15, management review by October 20 and final approval before submission. By assigning responsibilities and deadlines to each step, organizations can reduce the risk of incomplete reports, missing documentation or last-minute corrections. How does a compliance calendar reduce audit findings? A compliance calendar helps organizations identify and correct issues before they become audit or monitoring findings. The calendar helps staff establish a regular cadence for performing monitoring activities and documentation reviews throughout the year. If a compliance issue emerges, it can be investigated and corrected before an audit or monitoring visit. For example, your compliance calendar can notify a staff member that it is time to review grant-related transactions. During that review, it is discovered that an invoice, approval form or other required record is missing. Thanks to the early discovery, they can locate the documentation and resolve the problem before an audit or monitoring event occurs. If the same issue is discovered by auditors or monitors and supporting evidence cannot be produced, the expense may be questioned or disallowed, even if the expenditure was legitimate. Every grant needs its own calendar Each federal award has its own timeline for compliance obligations. Track every grant individually while maintaining a centralized view of all grant activity. A compliance calendar should follow each grant from award through closeout, accounting for reporting and budget deadlines, monitoring activities and renewal requirements. How can compliance calendars reduce staff burnout? Compliance calendars help organizations plan compliance activities in advance rather than relying on reactive efforts near reporting deadlines or audit fieldwork. When staff can see upcoming deadlines weeks or months in advance, they can schedule tasks as needed, coordinate across departments and avoid emergency requests. Rather than relying on personal reminders and spreadsheets to remember due dates and monitoring requirements, employees can rely on a structured system to keep tasks organized. This structured approach is especially valuable for FFHS organizations that operate with minimal staff. People choose to work at an FFHS because they want to serve community needs, not perform administrative tasks. A compliance calendar can help organizations manage compliance demands more predictably, reducing disruptions to program operations. Compliance calendars can be used for more than grants While grant compliance may be a top priority, the same approach can support other organizational requirements. Examples include: Cybersecurity regulations and frameworks: Track risk assessments, training activities, policy reviews and security testing schedules. Procurement compliance: Monitor purchasing requirements, bid deadlines, contract renewals and procurement reviews. Internal compliance programs: Manage policy updates, board reporting requirements and other governance activities. How to get started with compliance calendars The first step in implementing a compliance calendar is to assess whether the software you already have meets your needs. Do your current tools allow you to: Clearly assign compliance responsibilities Send automated reminders to staff Consistently track reporting deadlines Provide program and finance teams access to the same information View all active grants For smaller organizations that only need to manage a handful of grants, the calendar tools in Microsoft Outlook may be sufficient. Larger organizations managing more grants will likely need a more robust tool like Microsoft D365 or Sage Intacct , which has grant management capabilities, including task tracking and checklist functionality. Read more As nonprofit funding tightens again, can clearer insights help you make more of what you do have? What potential Form 990 changes could mean to tax-exempt organizations Compensation strategies for nonprofits competing in tight labor markets
Perspective changes everything.
Receive timely industry developments, regulatory changes and other news impacting your success.
Reach out to our team
Let's talk about how we can help you enjoy a smooth, efficient audit process to meet compliance requirements and build confidence in your organization.


LET'S CONNECT
As one of the country’s most experienced nonprofit consulting firms, our specialists bring experience, knowledge and best practices to empower your organization and allow you to focus on what matters most.



