Attestation Services — Agreed-Upon Procedures, Reviews & Compilations
Attestation services are CPA engagements that provide independent assurance on subject matter beyond a full financial statement audit. Under SSAE No. 18 (AICPA professional standards), attestation engagements include: agreed-upon procedures (AUP), financial statement reviews, compilations, and examination engagements. Your Virtual CPA provides all levels of attestation for nonprofits, businesses, government contractors, HOAs, and lenders throughout Washington DC, Virginia, and Maryland — and other states through our virtual model.
Who performs agreed-upon procedures, reviews and compilations?
Your Virtual CPA is a licensed CPA firm that performs attestation engagements for businesses, nonprofits, contractors and associations: agreed-upon procedures for grants, lenders and agencies, reviewed and compiled financial statements, and other examinations. We help you choose the engagement your report reader needs. Request a free consultation to talk it through.
The Attestation Hierarchy — Choosing the Right Level
Different situations require different levels of CPA assurance. Understanding the hierarchy helps you select the right service for your needs.
Audit (GAAS)
Highest — Reasonable AssuranceWhat the CPA Does:
CPA performs extensive testing of transactions, balances, and internal controls. Expresses an opinion on whether financial statements are fairly presented in all material respects.
When It's Used:
Required by: grant-makers for large nonprofits ($1M+ federal), banks for large loan covenants, government agencies, HOAs (per bylaws), state charity regulators
Review (SSARS)
Moderate — Limited AssuranceWhat the CPA Does:
CPA performs analytical procedures (ratio analysis, trend comparison) and inquiries of management. Reports that nothing came to attention indicating statements are not fairly presented.
When It's Used:
Accepted by: many lenders for mid-size loans, HOA boards seeking assurance without full audit cost, some grant-makers, company boards seeking financial oversight
Agreed-Upon Procedures (AUP)
Targeted — Findings OnlyWhat the CPA Does:
CPA performs only the specific procedures agreed upon by the client and specified party. Reports factual findings — no opinion or conclusion expressed. Highly flexible and cost-effective.
When It's Used:
Used for: grant compliance testing, specific account verification, loan covenant verification, regulatory filings, pre-acquisition due diligence, HUD/state agency requirements
Compilation (SSARS)
None — No AssuranceWhat the CPA Does:
CPA assembles financial statements from management's information without performing any verification procedures. No assurance is expressed. Primarily for internal use or situations where parties understand the limitation.
When It's Used:
Accepted by: internal board reporting, minority shareholders, some smaller HOAs (per bylaws), management reporting, tax preparation support
Agreed-Upon Procedures (AUP) — The Flexible Attestation
AUPs are increasingly popular because they're highly flexible, cost-effective, and can be tailored to exactly what the specified party needs to know.
Grant Compliance AUPs
Many federal and state grant programs require AUPs to verify specific compliance items — drawdown requests, cost matching, eligibility testing, or performance metric verification. We design AUP procedures to meet your specific grantor's requirements.
Loan Covenant Verification
Lenders frequently require AUPs to verify specific financial ratios (DSCR, leverage ratio), borrowing base calculations, or compliance with loan agreement covenants. We perform precisely the procedures your lender requires.
Government Contractor AUPs
DCAA and contracting officers frequently request AUPs on specific contract costs, labor charges, or accounting system procedures. We prepare AUP reports that meet federal contracting requirements for government contractors in Northern Virginia and nationwide.
Business Transaction AUPs
Buyers, sellers, and investors use AUPs in M&A transactions, partnership buy-ins, and equity investments to verify specific financial information without the full cost of an audit. Common for smaller transactions where a full audit is disproportionate.
Regulatory Submission AUPs
State licensing boards, HUD, and other regulatory bodies frequently require AUPs as part of annual compliance filings. We prepare AUP reports in the format required by the specific regulatory body.
Internal Control AUPs
Organizations seeking assurance about specific internal control procedures (cash handling, procurement, payroll) can commission AUPs to test those specific controls without a full audit engagement.
Related Audit & Attestation Services
Nonprofit Audit (2 CFR 200)
Single Audits under federal uniform guidance for nonprofits.
Government Contractor Audit (DCAA)
DCAA compliance audits for Northern Virginia defense contractors.
Agreed-Upon Procedures
AT-C 215 engagements with a report of findings.
HOA Audit Services
Annual audits for homeowners and condo associations.
Audit, Review & Compilation
Full overview of all audit and assurance services.
Gov. Contractor Accounting
FAR-compliant accounting for government contractors.
Free consultation
Discuss which attestation service you need.
Attestation Services FAQs
Common questions about CPA attestation engagements, AUPs, and assurance levels.
Not Sure Which Attestation Service You Need?
Book a short call with our attestation team. We'll review your specific requirements — whether from a grantor, lender, regulator, or board — and recommend the right level of service at the right price.
Serving clients nationwide.