IPO Audit Requirements: Can You Use Your Private Audit?
If you're the controller preparing an S-1, IPO audit requirements don't automatically mean replacing your auditor or starting every historical audit again. You need an engagement-specific assessment that tells you which work can support the filing, which gaps need closing, and who owns each decision.
Key takeaway: Separate the audit standard, auditor independence, and accounting basis. A satisfactory answer to one doesn't settle the other two.
Can your existing private-company audit be used?
Possibly, but private ownership alone doesn't answer the question. Start with the statements being filed, the standards applied to the engagement, and the accounting and disclosures those statements need. Keeping the same firm and using an existing report are separate decisions.
Read the signed opinion before discussing a replacement. Regulation S-X Rule 2-02(b) requires the report to state the applicable professional standards under which the audit was conducted.
Then check the firm's eligibility. PCAOB Rule 2100 requires registration for firms issuing issuer audit reports or playing a substantial role in their preparation, but registration doesn't establish which standards a particular engagement followed.
Ask the engagement partner for a written assessment of the existing audit and the proposed filing. The useful output is a defined scope of work, including any additional procedures and report changes, rather than an assumption that a GAAS opinion can become a PCAOB opinion through new wording.
Which statements fall under IPO audit requirements?
Classify each entity before applying the audit requirement. The SEC staff's Financial Reporting Manual, Section 4110.5, distinguishes issuer and predecessor statements from separate nonissuer acquired-business statements.
| Statements appearing in the filing | PCAOB-registered firm required? | PCAOB standards required? |
|---|---|---|
| Issuer and its predecessor | Yes | Yes |
| Entity filing its initial registration statement | Yes | Yes |
| Operating-company predecessor in a SPAC transaction or public-shell reverse merger | Yes | Yes |
| Separate nonissuer acquired-business statements under S-X 3-05 or 3-14 | No, solely because of this inclusion | No, solely because of this inclusion |
| Nonissuer component with a separate report referenced in the issuer report | Depends on substantial role | Yes |
The FRM is nonauthoritative staff guidance. Other reverse-merger facts need individual analysis, and the acquired-business exception doesn't erase independence or accounting requirements.
“Predecessor” isn't shorthand for every acquisition. Have counsel and the auditor document the classification before assigning the applicable audit standard. A separate acquired-business report and the registrant's consolidated opinion serve different purposes.
Keep the required annual and interim periods in a separate schedule. Finrep's IPO financial statement requirements walkthrough covers that broader planning question; use the entity-specific scope above when assessing the audit work.
Is your existing auditor independent for the offering?
Independence needs its own dated assessment. Under S-X Rule 2-01, financial, employment, business, and service relationships matter. Gather the actual scope of bookkeeping, financial-statement preparation, valuation, and management-related services, including relevant affiliates and dates.
For a calendar-year issuer first filing in 2026, the conditional first-time-filer provision in Rule 2-01(f)(5)(iii) points to January 1, 2025. Earlier covered periods must still have complied fully with applicable independence standards; this isn't a blanket two-year clearance.
Build a timeline containing:
- Each service and relationship, with start and end dates.
- The periods covered by the financial statements.
- The audit engagement start and expected first filing date.
- The auditor's conclusions and any unresolved conditions.
PCAOB Rules 3520 and 3526 address independence and audit-committee communications. Obtain the auditor's documented assessment and required communications; a procedures plan cannot repair an incompatible independence history merely by changing the report.
What evidence should the controller gather first?
Build an audit-gap register before estimating the timetable. PCAOB AS 1105 requires sufficient appropriate evidence and explains that more evidence of the same poor quality cannot compensate for that weakness. The controller's job is to expose missing records early enough for the auditor to assess the consequences.
Use this planning matrix as a working document. These are recommended deliverables, not a universal list of mandatory conversion procedures.
| Gap to assess | Evidence package or deliverable | Decision owner | Availability check | Dependency to resolve |
|---|---|---|---|---|
| Report and firm eligibility | Signed opinions, covered periods, firm legal identity, registration | Auditor and counsel | Reports retained for each year? | Entity classification and applicable standards |
| Independence | Services, fees, relationships, affiliates, dated timeline | Auditor independence specialists | Complete service history? | Covered periods and first filing |
| Historical balances | Reconciliations, contracts, source records, inventory history | Controller supplies; auditor assesses | Original records retrievable? | Acceptable procedures for evidence gaps |
| Accounting and disclosures | Election register, acquisition valuations, revised statements and notes | Technical accounting and auditor | Acquisition-date inputs retained? | Applicable accounting and transition conclusions |
| Offering updates | Subsequent-event log, draft changes, consent schedule | Controller, auditor, counsel | One controlled change log? | Final financial statements and filing milestones |
Give every open item an owner and an evidence location. “Finance has it somewhere” isn't an availability assessment.
For historical records, distinguish “not yet collected” from “no longer exists.” Those conditions call for different conversations with the auditor, even if both currently appear as a blank cell in the project tracker.
Which private-company accounting elections need review?
Review accounting eligibility separately from audit standards. FASB ASU 2013-12 explains that inclusion in another entity's SEC filing can make an entity a public business entity for the filed statements. Acquired-business audit relief therefore doesn't automatically preserve its private-company accounting alternatives.
Two elections deserve an early inventory:
- Goodwill: ASU 2014-02 introduced an alternative involving amortization and modified impairment testing. Its basis for conclusions anticipates possible prior-period recasting when an entity becomes subject to public-business-entity reporting.
- Identifiable intangibles: ASU 2014-18 permits eligible entities to subsume specified customer-related intangibles and noncompetition agreements into goodwill, with a linked goodwill election. Losing eligibility can require acquisition-date valuation reconstruction and subsequent-accounting analysis.
Collect the election dates, acquisition agreements, valuation inputs, impairment analyses, and financial-statement effects. Reversing goodwill amortization alone isn't a complete conversion analysis.
These original ASUs explain the amendments, but the Codification is authoritative. Have technical accounting check current ASC scope, transition provisions, and subsequent amendments before approving the recast memo.
An emerging growth company's extended adoption timetable for new standards is another decision. It doesn't make every private-only accounting alternative available.
What do Reddit and Astera's IPO opinions show?
They show what a filing-ready opinion looks like, without proving how the historical work was completed. These are dated 2024 examples, not evidence that private audits always need, or never need, replacement.
In Reddit's March 11, 2024 S-1/A, KPMG's February 5, 2024 report on page F-2 covers the 2022 and 2023 consolidated statements. It identifies PCAOB registration, applicable SEC/PCAOB independence, PCAOB auditing standards, and auditor tenure beginning in 2019.
The narrow lesson: pre-listing years can appear under a PCAOB opinion from a longstanding auditor. The filing doesn't establish whether earlier engagements used GAAS, both sets of standards, or additional procedures later.
In Astera Labs' March 8, 2024 S-1/A, PwC's February 20, 2024 report on page F-2 covers 2022 and 2023 under PCAOB standards, with tenure beginning in 2021. The same filing discloses material weaknesses and an election to use the EGC extended accounting transition period.
Astera's financial-statement opinion doesn't express an opinion on ICFR effectiveness. Audit standards, disclosed control deficiencies, and accounting adoption timing are separate questions.
How should you decide what work to commission?
Use a sequence of decisions with named owners. The auditor determines whether the engagement can support the required opinion; management prepares the statements and evidence; counsel helps resolve filing scope. Don't commit the offering calendar while those decisions remain unstated.
- Classify the statements. Identify the issuer, predecessor, and any separately presented nonissuer businesses.
- Confirm the required standards and firm eligibility. Compare them with the signed historical reports.
- Resolve independence. Get an engagement-specific conclusion before relying on procedural changes.
- Assess accounting and evidence gaps. Determine which statements, notes, valuations, and underlying records need work.
- Commission the resulting scope. The outcome could involve the existing engagement, additional procedures and a report update, or a new auditor and audit where necessary.
Illustrative scenario: A private calendar-year company targets its first filing in 2026. It has GAAS reports from a PCAOB-registered firm and has elected goodwill amortization.
The controller opens two workstreams. The auditor assesses whether it can perform the work needed to issue the required opinion, while technical accounting determines the recast requirements and assembles the acquisition evidence.
Neither workstream settles the other. The example assumes no particular fee, completion date, or successful conversion.
How long should you allow for the audit work?
Estimate timing from the unresolved work and evidence availability. Ask the auditor for assumptions, dependencies, and milestones against the actual filing plan. A schedule based on complete records needs revisiting when an acquisition valuation or historical reconciliation is missing.
Don't confuse audit preparation with audit-file assembly. PCAOB's AS 1000 implementation guidance gives staggered effective dates for the 14-day documentation completion requirement: fiscal years beginning on or after December 15, 2024 for firms with more than 100 issuer reports in calendar 2024, and December 15, 2025 for other registered firms.
That deadline concerns the auditor's documentation after report release. It isn't a controller's remediation window; Finrep's AS 1215 documentation guide addresses that separate process.
Frequently asked questions
Does a PCAOB-registered firm's GAAS report satisfy the issuer requirement?
Registration alone doesn't settle engagement compliance. Check the standards stated in the report under S-X 2-02(b), then ask the auditor what work is needed for the filing.
Does an EGC avoid a PCAOB financial-statement audit?
No. AS 3101 exempts EGC audits from mandatory critical-audit-matter communication, not the underlying financial-statement audit.
Does a PCAOB opinion also certify effective internal controls?
No. An opinion on the financial statements isn't an opinion on ICFR effectiveness. S-X 2-02(f) separately addresses ICFR attestation and excludes EGCs and nonaccelerated filers from that requirement.
Can a controller decide that additional procedures will be enough?
The auditor must assess the evidence and the engagement. Bring the gap register to that discussion and request a written scope before treating the historical audit as ready for the S-1.
