Preparing for a CRA or financial audit starts with a focused audit ready records checklist. Below are seven record types auditors commonly request, presented as a side-by-side paper versus cloud comparison with practical remediation steps you can complete this week. Where rules or technical expectations are concrete, the guidance links to authoritative sources so you can verify requirements and produce defensible records.
How to use this checklist
Work item by item. For every period under audit, assemble both the paper artefacts (if any) and the corresponding cloud exports or scans. If a cloud system is in place, prioritise exporting trial balances, bank reconciliation reports and system audit logs. If you rely on paper files, digitize and index them, and prepare a short reconciliation note that explains how paper entries were summarised. For CRA-specific expectations about what auditors examine, see the Canada.ca business audits guidance and the CRA electronic record keeping guidance.
Checklist items
1. General ledger, trial balance and financial statements
What auditors want and why it matters: auditors trace reported totals back to transaction-level detail to verify arithmetic and classification. The CRA expects a clear audit trail from summarized accounts to source records; electronic systems must preserve that link.
- Paper artefacts: printed ledgers, manual trial-balance worksheets, year-end working papers and signed adjusting journal schedules.
- Cloud artefacts: exported trial balance (PDF/CSV), month-end closing reports and linked journal entries with drill-down to source transactions in your accounting platform.
- Quick fixes: produce a clean trial balance that ties to the financial statements, attach explanations and source documents for unusual or large journal entries, and prepare a one-page reconciliation showing how opening balances and adjustments were handled.
- When to call help: if your trial balance does not agree with the financial statements after basic reconciliations, engage a bookkeeper or accountant to prepare an audit-ready trial balance and adjusting journal documentation. See the CRA electronic record keeping guidance for expectations on linking summaries to source records.
2. Bank statements, cancelled cheques and reconciliations
What auditors look for: complete bank statements and month-end reconciliations that explain timing differences and outstanding items. Auditors will want evidence linking deposits and withdrawals to ledger entries and reconciliations for every period under review.
- Paper artefacts: stamped bank statements, cancelled cheques and manual reconciliation worksheets with initials and dates.
- Cloud artefacts: bank statement PDFs, accounting-platform reconciliation reports showing matched and unmatched items, and notes for reconciling items older than 30 days.
- Quick fixes: run reconciliations for every month under review, attach the supporting bank PDFs to each reconciliation, list outstanding cheques or deposits and explain items older than 30 days.
- Retention and evidence: retain original bank PDFs and reconciliation backups so auditors can re-create your steps. The Canada.ca business audits guidance lists the documents auditors commonly examine.
3. Sales invoices, receipts and GST/HST records
What auditors want: source invoices and receipts that substantiate revenue and reported sales tax. Auditors test the link from individual invoices to the sales ledger and to GST/HST returns, so files must let them recreate reported amounts.
- Paper artefacts: printed sales invoices, duplicate copies, physical receipts and daily sales logs.
- Cloud artefacts: PDF invoice exports, sales journals, GST/HST reports and a clear ledger link from invoice to the posted transaction.
- Quick fixes: export invoices and GST/HST reports for the audit period, reconcile sales totals to the sales ledger, and produce a short summary tying collected tax to your GST/HST return. If invoices are missing, reconstruct them from POS summaries, deposit detail or sales logs and clearly mark reconstructed items for the auditor.
- When to escalate: if you cannot reconcile collected tax to reported amounts, consult an accountant who can prepare an HST reconciliation and identify likely variance sources.
4. Purchase invoices, expense receipts and vendor contracts
What auditors inspect: vendor invoices, receipts, proof of payment and contracts to confirm deductible expenses and related-party transactions. The CRA expects sufficient detail to substantiate deductions.
- Paper artefacts: stapled vendor invoices, original receipts and filed purchase orders.
- Cloud artefacts: scanned invoice PDFs attached to transactions, payment confirmations and searchable expense records with vendor histories.
- Quick fixes: scan and attach missing receipts to the related transactions, keep a vendor file with signed contracts for recurring services, and run an expense exception report showing transactions outside written policy.
- Remediation for missing receipts: obtain vendor statements or bank evidence of payment, create a replacement record with a clear explanation and supporting bank evidence, and flag reconstructed items to the auditor.
5. Payroll records, T4 slips and payroll registers
What auditors request: payroll registers, employee files, remittance histories, T4/T4A slips and supporting calculations. Auditors test whether source deductions were correctly withheld and remitted.
- Paper artefacts: printed payroll journals, physical employee files, signed employment agreements and paper timecards.
- Cloud artefacts: payroll-system reports, remittance receipts, electronic T4 exports and timecard-to-payroll links showing approvals.
- Quick fixes: produce a payroll summary tying gross pay to remittances and T4 totals, collect missing timesheets or employment agreements, and export the payroll audit trail showing who authorised any post-payroll edits.
- If records are incomplete: reconcile payroll totals to bank payroll payments and prepare a clear explanatory memo before auditors request it. The Canada.ca business audits guidance describes common payroll documents auditors ask for.
6. Corporate records, ownership documents and registration filings
What auditors check: incorporation documents, shareholder registers, minute books, business numbers and CRA registrations. These documents prove legal structure, ownership and that the business is properly registered for GST/HST and payroll.
- Paper artefacts: physical minute books, share certificates and signed contracts.
- Cloud artefacts: scanned incorporation documents, digital minute-book entries, copies of CRA business number registrations and linked GST/HST or payroll account confirmations.
- Quick fixes: assemble a single folder containing incorporation documents, proof of business number, recent filings and signed contract copies for any material transactions. For Ontario businesses, include provincial registration evidence where applicable.
- When to involve counsel or an accountant: if ownership or registration documentation is incomplete, get specialist help to prepare corrected filings before an audit begins.
7. Electronic audit trail and system logs: timestamps, user IDs and change history
Why this matters: auditors increasingly expect an electronic audit trail that shows how records were created, altered and authorised. The Canadian Centre for Cyber Security notes that useful audit records include event descriptions, timestamps, user or process identifiers and success/failure indicators.
- Paper artefacts: none relevant. This is a digital-only requirement when your records are electronic.
- Cloud artefacts: system audit logs, exportable change histories, timestamps, user access reports and reports of created, modified or deleted records from your accounting or document-management platform.
- What to collect: export the system audit log for the audit period, include user access reports and attach approval records that explain significant edits.
- Quick fixes: enable audit-log features in your accounting, payroll and document systems, export logs to PDF or CSV and store them with the period reconciliations. If your system does not retain change history, contact your software provider or an IT-capable accountant to recreate a defensible trail. See the Canadian Centre for Cyber Security guidance on audit and accountability and the CRA electronic record keeping guidance for technical expectations.
Simple folder and naming system to make records findable
Create a digital folder structure for each fiscal period: /YEAR/Quarter/Month/Accountable Area (Bank, Sales, Purchases, Payroll, Corporate). Use file names that include YYYY-MM-DD, vendor or customer name and a short descriptor, for example: 2025-07-15_ACME_Invoice_1234.pdf. Keep an index spreadsheet that lists files, the ledger reference and a short note for reconstructed items. This speeds auditor requests and reduces time spent locating documents.
Quick remediation checklist for common gaps
- Missing receipts: obtain vendor statements or bank evidence, create a labelled reconstruction with date and reason, and attach it to the transaction.
- Unreconciled accounts: complete bank and credit-card reconciliations, document outstanding items, and provide a dated reconciliation memo.
- Payroll gaps: reconcile payroll totals to bank payments, collect employment agreements and timesheets, and produce a payroll reconciliation summary.
- No audit logs: enable logging immediately, export whatever historical logs exist, and request provider support to retrieve older logs.
When to call a professional
Contact a qualified accountant or bookkeeper when balances do not tie after basic reconciliations, when there are numerous adjusting journals, or when electronic logs are missing and you need a defensible reconstruction. Verma Accounting & Financial Services provides bookkeeping, payroll, tax and audit support and can help assemble audit-ready packages and review your audit ready records checklist; book a free consultation at Verma Accounting & Financial Services to discuss file-specific needs.
Frequently asked questions
The CRA expects businesses to retain supporting records that allow an auditor to re-create transactions and verify reported amounts. The CRA may request prior years' documents during an audit. See the CRA keeping records guidance for details and retention expectations.
An electronic audit trail is a system log that records event descriptions, timestamps, user identifiers and success/failure indicators for actions that create, modify or delete records. The Canadian Centre for Cyber Security describes these expected elements. Most mature cloud accounting and payroll systems offer audit logs or change histories; check your vendor's documentation and export those logs for audit periods.
Reconstruct the expense by obtaining vendor statements, bank evidence of payment or POS summaries. Create a clearly labelled reconstructed receipt document that includes the reason why the original is missing and attach it to the transaction in your system. Maintain a short remediation log that auditors can review.
Yes, provided the electronic records preserve an audit trail and reproduce the source information so auditors can verify transactions. The CRA electronic record keeping guidance explains the requirements for electronic records to be acceptable substitutes for originals.
Contact an accountant when reconciliations fail to tie, when journals are numerous or unclear, or when you need help exporting or interpreting system audit logs. An accountant can produce an audit-ready trial balance, prepare reconciliations and advise on defensible reconstructions.
Key next steps
Run this checklist for the period under audit, prioritise items 1, 2 and 7, and document every remediation step you take. If you want hands-on help, schedule a free consultation with Verma Accounting & Financial Services to review your records, export the necessary reports and produce an audit-ready package that meets CRA expectations.