Provider menus for outsourced audit support read alike: tie-outs, workpapers, testing, confirmation administration. Most of that list can move to an outside team without touching your opinion. One item on it only moves in part, because both confirmation standards, the PCAOB's and the AICPA's, put the confirmation process itself in the auditor's hands and name the acts that have to stay there.
Sort your own task list along that line before you read a single proposal.
What Outsourced Audit Support Buys
Capacity inside your own engagement. The engagement letter, the opinion and the report stay with your firm, and what an outside team adds is hours on the preparation work that surrounds the evidence.
That is narrower than the phrase suggests, and worth settling first, because two adjacent purchases share the same words: a company handing its internal audit function to an outside provider, and a company hiring somebody to perform its external audit. Independence, client notice and confidentiality each have written answers of their own.
The Audit Support Work That Moves
Five kinds of work move well, and each one moves for a different reason.
- The client request list. Chasing, logging and reconciling what the client still owes the audit. It produces no audit conclusion, it runs on a calendar, not on judgment, and it quietly consumes senior hours in the weeks when those hours are worth most.
- Tie-outs and lead schedules. Agreeing the draft financial statements to the trial balance, and the trial balance to the supporting schedules. The work is mechanical, re-performable and wrong in ways a reviewer can see immediately, which is why it usually moves first.
- Workpaper preparation. Building the documentation around evidence somebody else obtained. It moves, and it changes your template: AU-C 230, Audit Documentation requires at .09 that the record show who performed the audit work and the date it was completed, so the preparer field has to hold a name from outside your payroll.
- Test of details on selections you have already made. Vouching invoices, recalculating balances, agreeing amounts to source documents. AU-C 530, Audit Sampling puts both upstream decisions on the auditor: at .07, determining a sample size sufficient to reduce sampling risk to an acceptably low level, and at .08, selecting items in such a way that the sample can reasonably be expected to represent the relevant population. Keep those two on your side of the wall and the execution can move without the conclusion moving with it.
- Analytical procedure preparation. Assembling comparatives, ratios and variance schedules so the procedure can be performed. Building the data is preparation. Setting the expectation and the threshold that makes a variance worth investigating is the judgment the procedure exists to exercise.
Where the List Stops: The Confirmation Process
Confirmation administration is one of the tasks those menus offer, and it is the one that does not delegate cleanly.
AS 2310, The Auditor's Use of Confirmation, effective for audits of financial statements for fiscal years ending on or after June 15, 2025, says at .14 that the auditor should maintain control over the confirmation process to minimize the likelihood that information exchanged between the auditor and the confirming party is intercepted or altered. Paragraph .15 assigns three acts to the auditor: select the items to be confirmed, send confirmation requests, and receive confirmation responses. Paragraph .16 adds that the request goes directly to the confirming party and the response comes directly back from it.
Private company audits land in much the same place through the other rulebook. Under AU-C 505, External Confirmations at .07, the auditor using external confirmation procedures should maintain control over the requests, which covers determining the information to be confirmed, selecting the appropriate confirming party, designing requests that are properly directed and provide for being responded to directly to the auditor, and sending the requests, including follow-ups.
The consequence is mechanical rather than philosophical. AS 2310 says at .22 what the auditor does when a confirmation response is returned by the confirming party to anyone other than the auditor: contact the confirming party, ask for the response to be re-sent directly, and treat the situation as a nonresponse if it never arrives. A nonresponse buys you alternative procedures, which is more work than the administration you were trying to hand off.
Electronic confirmation platforms are contemplated, and they are not a way around this. Paragraph .17 lets the auditor or the confirming party engage an intermediary to facilitate direct electronic transmission, and Appendix B then puts the evaluation back on the auditor: understand the intermediary's controls against interception and alteration, determine whether those controls are designed and operating effectively, and assess whether the company can override them. Where it can, the auditor should not use that intermediary.
So the workable split is narrow, and it is easy to write into a scope. An outside team can build the request population from the ledger, draft the forms, maintain the log and chase the follow-ups your file will need. The sending and the receiving stay with the people whose report carries the result.
The Preparer Is on Your Engagement Team
Bringing in an outside preparer does not move audit work outside the audit. It moves a person inside the engagement team.
AU-C 220 defines the engagement team at .12 as all partners and staff performing the audit engagement and any other individuals who perform audit procedures on the engagement, excluding an auditor's external specialist and internal auditors who provide direct assistance. That version applies to engagements conducted under generally accepted auditing standards for periods beginning on or after December 15, 2025.
Neither exclusion is the person you are buying. An auditor's external specialist brings expertise in a field other than accounting or auditing, and direct assistance means using the audited company's own internal auditors under the external auditor's direction, supervision and review.
Read the definition as a staffing test, not a payroll test. If a person performs audit procedures on your engagement, your firm's direction, supervision and review reach that person, and their name belongs in the workpaper. The arrangement you are buying is extra hands inside your quality system, not a piece of the audit performed somewhere outside it.
The Audit File Still Has to Be Yours
Documentation moves easily, and the standard is specific about what still has to end up in your hands.
Alongside the preparer field, AU-C 230 requires at .09 that the record also show who reviewed the audit work, with the date and extent of that review. At .08 the documentation has to be sufficient to enable an experienced auditor with no previous connection to the audit to understand the nature, timing and extent of the procedures performed, the results and the evidence obtained, and the significant findings, conclusions and judgments reached.
Then the file has to come home. Under .16 the auditor assembles the final audit file no later than 60 days following the report release date, and the day that assembly is complete is the documentation completion date. After it, .17 bars deleting or discarding audit documentation of any nature before the end of the retention period, which should not be shorter than five years from the report release date, as set out in AU-C 230.
Two questions follow, and a sales deck rarely answers either. How does a completed file export out of the provider's platform into yours, and what happens to your documentation on the day the engagement ends?
Sort the List Before the First Call
The delegable side of outsourced audit support is real, and almost all of it is preparation: request chasing, tie-outs, lead schedules, workpaper drafting, procedure execution on items you selected, and the data behind your analytics. The other side is not about trust or seniority. Selection, the confirmation process, supervision, review and the file itself sit with the firm whose report goes out.
Write your own audit task list in two columns before the first vendor call, then ask each provider which column its named services fall into. One that answers with the standard rather than with reassurance has read the same page you have.
One honest limit. If you run a couple of audits a year, the ramp cost of teaching an outside preparer your documentation standard lands on the senior whose hours you were trying to buy back.
Accountably places trained offshore accountants and tax preparers inside US CPA, EA and accounting firms, working on the firm's software and SOPs, with the signature and the final judgment staying with the firm. The scope is accounting and tax work rather than audit fieldwork. Since 2022 that has meant 20+ US firms and 30+ placements.
The way in is small on purpose. A Free 40-Hour Proof Pilot puts a fixed block of your own representative work through the offshore team and your review chain, so your reviewer grades real output before a client file is committed. If a placement is not the right fit inside the first 30 days, the 30-Day Fit Guarantee replaces them free.
Don't trust us. Test us.