How do you audit client file completeness before selling a practice?

What does file completeness mean for a practice sale?

A client folder can contain many documents while still omitting the current agreement, an unresolved issue, or evidence of required review. The operations hub treats completeness as a defined operating question: can an authorized successor understand the engagement, locate the relevant evidence, and identify what remains to be done?

This article uses audit in its everyday process sense, not as an assurance opinion. Do not represent the review as an audit of financial statements or a guarantee of compliance. Qualified professionals should determine the actual documentation, review, and retention requirements for each service and jurisdiction.

How should the review scope be defined?

List the service categories, relevant periods, record systems, and criteria to be examined. Separate tax, bookkeeping, advisory, payroll, and attest records where their requirements differ. A generic folder template may organize files, but it does not establish that the appropriate evidence exists for every engagement.

State exclusions explicitly. The review may assess whether a reconciliation is present without reperforming it, or whether a signed term is located without determining its enforceability. Those are different questions. A buyer should know what the review actually tested before relying on the result as evidence of broader service quality.

Which records should be considered?

Depending on the actual engagement, examine current terms, client responsibilities, supporting information, delivery records, review evidence, correspondence affecting scope, unresolved matters, and authorized access. Identify the approved record location and whether the team can retrieve it. A file stored only in the seller’s personal email can be a continuity problem even when the document exists.

The AICPA Code of Professional Conduct addresses member responsibilities, including competence, confidential client information, and records issues within its scope. Apply the relevant provisions and other governing requirements to the actual engagement. An internal checklist cannot replace the responsible professional’s assessment or override client rights and applicable law.

How should the sample be selected?

Choose files across services, staff owners, fee levels, tenure, complexity, and exception history. Include recently onboarded clients, older engagements, and known problem files. Document why the sample was selected. A sample composed only of the best-organized clients cannot support a broad claim about the entire practice.

For each file, record the criteria tested, evidence location, reviewer, date, and exception. Preserve the original status rather than overwriting it after remediation. That lets a buyer distinguish a clean starting position from a gap identified and addressed during preparation. Both can be useful, but they are not the same evidence.

What should an exception register show?

Use categories that support action: missing document, outdated term, inaccessible record, unexplained balance, absent review evidence, unresolved client request, or permission issue. Describe the observable gap without assuming its cause. Assign a responsible person and the professional review needed to determine the response.

Do not rank every gap equally. A misplaced duplicate may be administrative, while an unresolved technical issue could affect service delivery. The responsible professional should assess consequence and urgency. Record that assessment and its basis, rather than relying on a simple count of incomplete folders.

What does an illustrative sample result demonstrate?

Suppose a fictional review examines 24 files under defined criteria. Eighteen meet those criteria, three have outdated service terms, two have inaccessible supporting records, and one has an unresolved review question. These invented counts illustrate reporting; they do not establish an acceptable completion percentage or industry benchmark.

The useful next step is to investigate categories and consequences. The inaccessible records may share a system problem, while the outdated terms may reveal a broader scope process issue. The unresolved review question needs qualified attention. Do not infer that the unexamined files are complete simply because most of the sample met the stated criteria.

How should missing evidence be addressed?

Preserve what exists and identify the gap accurately. Obtain records through appropriate channels where possible, and have the responsible professional decide the proper remediation. Never fabricate signatures, reconstruct a historical review as though it occurred at the time, or backdate a current note to make a file appear complete.

If a current explanation or additional work is appropriate, date it truthfully and distinguish it from contemporaneous evidence. Record who performed the remediation and what it established. A missing historical record may remain a limitation even after current corrective work; the review should make that limitation visible.

How do onboarding and review capacity affect completeness?

The onboarding guide connects current terms, starting records, permissions, and readiness. Repeated missing opening information may point to an onboarding weakness rather than isolated filing mistakes. Review the intake process so new gaps do not replace the ones being remediated.

The reviewer capacity guide identifies who performs review and when. Incomplete review evidence can require examination of workload, role clarity, or actual completion. Do not assume that adding a document field will solve a qualified capacity shortage. Determine whether the necessary work was performed and how future responsibilities will be covered.

Which disclosure restrictions matter during diligence?

For tax return information, the IRS Section 7216 information center explains use and disclosure restrictions, exceptions, and consent requirements. A potential sale does not justify unrestricted distribution of every file. Evaluate the proposed diligence process and transaction with qualified advisors using the actual facts and applicable rules.

Start with appropriate anonymized summaries and controlled evidence where practical. Determine who needs access, for what purpose, and at which stage. An NDA can support confidentiality arrangements without being treated as universal permission. Keep sensitive files in approved systems and preserve a record of authorized access.

How should security and retrieval be tested?

IRS Publication 4557 discusses taxpayer data safeguards, including access limits, authentication, backup, and security responsibilities. A completeness review should not create an uncontrolled duplicate archive in the name of convenience. Examine whether authorized retrieval works while maintaining appropriate protection of the records.

The access succession guide covers owner-only administration and recovery dependencies. Test that the approved successor role can locate the required records through the intended system. A screenshot showing that the seller can open a file is not proof that the post-closing team has authorized, reliable access.

What should the final review record contain?

Preserve the scope, criteria, sample design, original findings, consequence assessments, remediation, remaining exceptions, and retrieval limitations. Date the report and identify the responsible reviewers. Distinguish completed corrective work from proposed actions. The successor should receive a clear open-item list rather than a broad assurance that the folders were checked.

This preparation makes the operating record easier to inspect and transfer appropriately. It does not guarantee client retention, compliance, or transaction value. Its practical result is a truthful map of what exists, what was tested, and which responsibilities still require attention before or after the handover.