By Bronte Bay CPA Professional Corporation · 9 min read
Short answer: A CRA audit letter is not an accusation — it is a routine review process, and most audits conclude with no change or only minor adjustments. The keys to surviving a CRA audit well are responding promptly, engaging a CPA immediately, providing organized and complete records, knowing your rights as a taxpayer, and never volunteering more information than requested. This guide walks through exactly what happens at each stage and how to respond.
Receiving a letter from the Canada Revenue Agency announcing a review of your tax filings is not something any business owner welcomes. But a CRA audit is a routine compliance process — not an accusation of wrongdoing. The CRA conducts hundreds of thousands of audits and reviews every year, and the large majority result in no change or only minor adjustments.
The outcome of an audit depends heavily on how it is handled — both before it starts (the quality of your records) and during the process itself (how promptly and professionally you respond). This guide covers what triggers a CRA audit, the types of audits, your rights as a taxpayer, and a step-by-step approach to responding the right way.
Types of CRA Reviews and Audits
Not every CRA contact is a full audit. The CRA uses several levels of review, ranging from a simple request for clarification to a comprehensive multi-year examination:
Review Type
What It Involves
Typical Duration
Pre-assessment review
CRA verifies specific claims before issuing your notice of assessment — common for new credits or large refunds
Days to a few weeks
Processing review
CRA requests supporting documents for specific line items after assessment — e.g., medical expenses, donations
A few weeks
Desk audit
CRA reviews specific deductions or credits by mail without visiting your premises
Weeks to a few months
Field audit
CRA auditor examines complete books and records, often at your place of business, covering one or more tax years
Several months to over a year
Net worth audit
CRA reconstructs income based on lifestyle and asset changes — used when records are incomplete or unreliable
Several months to over a year
What Triggers a CRA Audit?
The CRA selects files for audit through a combination of automated risk-scoring, third-party information matching, random selection, and targeted compliance projects. Common factors that increase audit risk:
Industry benchmarking deviations — the CRA compares your reported income and expense ratios against industry norms. A business reporting significantly lower margins or higher expense ratios than similar businesses stands out.
Consistent business losses — a corporation reporting losses year after year, particularly while the owner draws a salary or dividends, raises questions about whether the activity constitutes a genuine business.
Large or unusual deductions — home office expenses, vehicle expenses, or meals and entertainment that are disproportionately large relative to income.
Cash-intensive businesses — restaurants, salons, contractors, and other cash-heavy industries receive proportionally more audit attention due to higher risk of unreported income.
HST input tax credits inconsistent with sales — ITC claims that seem high relative to reported revenue, or sudden changes in HST filing patterns.
Third-party information mismatches — T-slips, real estate transaction reporting, or information from related-party audits that does not match what you reported.
Random selection — a portion of audits are selected randomly regardless of risk factors, as part of the CRA’s compliance measurement program.
Industry-specific compliance projects — the CRA periodically runs targeted campaigns focused on specific sectors (e.g., real estate, ride-sharing, cryptocurrency) or issues (e.g., underground economy, aggressive tax planning).
📋 CPA Note: Being selected for audit does not mean you did something wrong. Many audits are simply routine — random selection, industry compliance projects, or a specific line item the CRA wants documentation for. The businesses that fare worst in audits are not those selected for the most complex reasons — they are the ones with disorganized records who cannot produce documentation quickly. Clean, current cloud accounting with source documents attached (Xero plus Hubdoc) is the single best audit preparation a business can have, regardless of why it was selected.
Step-by-Step: How to Respond to a CRA Audit
Step 1 — Read the Letter Carefully and Note the Deadline
CRA audit letters specify exactly what is being reviewed — a specific tax year, specific line items, or a complete examination of books and records — and include a response deadline, typically 30 days. Note this deadline immediately. Ignoring an audit letter is the single worst response — it can result in the CRA proceeding with an arbitrary assessment based on incomplete information, which is almost always less favourable than an assessment based on your actual records.
Step 2 — Engage Your CPA Immediately
Contact your CPA the day you receive the letter — not after you have already started gathering documents or speaking with the auditor. A CPA can request additional time if needed, communicate directly with the CRA on your behalf, and ensure nothing is provided to the auditor that could create unnecessary risk. You have the right under the Taxpayer Bill of Rights to be represented by a person of your choice — you are not required to meet with or speak to the auditor directly.
Step 3 — Gather Exactly What Is Requested — Nothing More
Provide the specific records requested — bank statements, invoices, receipts, contracts — for the specific period under review. Do not volunteer additional years, additional accounts, or unrelated information. Expanding the scope of what you provide can expand the scope of what the CRA examines. If your books are on Xero with Hubdoc, most requested documents can be exported and organized within hours rather than days.
Step 4 — Review Records for Accuracy Before Submitting
Before any documents go to the CRA, your CPA reviews them for accuracy and consistency with what was filed. If an error is identified during this review — before the CRA finds it — there are more favourable options for correcting it, including voluntary disclosure in some circumstances, than if the CRA discovers the discrepancy first.
Step 5 — Respond Professionally and On Time
Submit the requested information by the deadline, through your CPA. If a field audit is conducted at your premises, your CPA should be present for all interactions with the auditor. Answer only what is asked — auditors are trained to ask open-ended questions; a CPA experienced in audit representation knows how to respond accurately without expanding the scope unnecessarily.
Step 6 — Review the Proposed Adjustments
At the conclusion of the audit, the CRA issues a proposal letter outlining any proposed adjustments before finalizing a reassessment. You typically have 30 days to respond with additional information or arguments before the reassessment is issued. This is a critical opportunity — your CPA should review every proposed adjustment carefully, as auditors do make errors, and many proposed adjustments are reduced or eliminated at this stage with the right supporting argument.
Step 7 — File a Notice of Objection If Needed
If you disagree with the final reassessment, you have 90 days from the date of the notice of reassessment to file a formal notice of objection. The objection is reviewed by the CRA’s Appeals Division — independent from the original auditor — providing a genuine second look. If the objection is unsuccessful, the next step is an appeal to the Tax Court of Canada. Your CPA prepares the notice of objection with the supporting documentation and legal arguments that give it the best chance of success.
Your Rights During a CRA Audit
The CRA’s Taxpayer Bill of Rights sets out specific rights you retain throughout an audit, including:
The right to complete, accurate, clear, and timely information about the audit
The right to be treated professionally, courteously, and fairly
The right to have your matter handled confidentially
The right to be presumed accurate until proven otherwise, and to receive the benefit of the doubt
The right to be represented by a person of your choice, such as a CPA — you are not required to meet with the auditor without representation
The right to lodge a service complaint if you feel the audit was conducted unfairly, without fear of reprisal
The right to relief from penalties and interest in circumstances beyond your control, through the Taxpayer Relief Provisions
How to Be Audit-Ready Before You Ever Receive a Letter
The best audit defence is built long before the audit letter arrives. Businesses with clean, current, well-documented books consistently have shorter, less stressful, and more favourable audit outcomes than those with disorganized records — regardless of why they were selected.
Cloud accounting with attached source documents — Xero with Hubdoc means every transaction has the original receipt or invoice attached and searchable. Audit document requests can be fulfilled in hours, not weeks.
Monthly reconciliation — books that are reconciled monthly, not reconstructed at year-end, are dramatically more reliable and credible to an auditor.
Retain records for six years — the CRA requires source documents to be retained for six years from the end of the last tax year to which they relate. Hubdoc retains documents indefinitely and makes them searchable.
Document the business purpose of unusual transactions — large or unusual transactions should have a brief note explaining the business rationale, recorded at the time, not reconstructed months later.
Annual CPA review — a CPA who reviews your books regularly will identify and address risk areas (aggressive deductions, classification issues, HST treatment) before they ever attract CRA attention.
The CRA selects files for audit through risk-scoring algorithms that flag returns with unusual patterns relative to industry norms, random selection, third-party information matching, tips from the public, and targeted compliance projects for specific industries or issues. Common red flags include consistent business losses, large or unusual deductions, cash-intensive operations, and HST input tax credits that seem high relative to reported sales.
Under the Taxpayer Bill of Rights, you have the right to complete and accurate information, professional and courteous treatment, confidentiality, the benefit of the doubt when in question, the right to lodge a service complaint without fear of reprisal, and the right to be represented by a person of your choice, such as a CPA. You are not required to meet with the CRA auditor without your representative present.
A straightforward desk audit reviewing specific deductions may resolve within a few weeks. A full field audit examining multiple years of corporate records can take several months to over a year, particularly if the CRA requests additional information. Having organized, complete books from the start — particularly cloud accounting with attached source documents — significantly reduces audit duration because information requests can be answered immediately.
A notice of objection is the formal mechanism for disputing a CRA reassessment. You generally have 90 days from the date of the notice of assessment or reassessment to file one. The objection is reviewed by the CRA’s Appeals Division — independent from the original auditor — providing a genuine second review. If unsuccessful, the next step is an appeal to the Tax Court of Canada. A CPA should prepare the notice of objection, as the arguments and documentation significantly affect the outcome.
Yes. Bronte Bay handles CRA correspondence, audit representation, gathering and reviewing requested documentation, attending field audits, reviewing proposed adjustments, and preparing notices of objection when needed. Clients on our monthly bookkeeping packages have an additional advantage — clean, current Xero records with source documents already attached, making audit responses significantly faster and more straightforward. See our Tax Services for details on CRA audit support.
Received a CRA Audit Letter? Get a CPA Involved Today.
The earlier a CPA is involved in a CRA audit, the better the outcome tends to be. Bronte Bay represents clients through every stage of CRA audits — from the initial letter through proposed adjustments and, if needed, a notice of objection. If your books are not currently in clean, audit-ready shape, we can also help you build that foundation before a letter ever arrives. Book a consultation to discuss your situation.
Receiving a letter from the Canada Revenue Agency announcing a review of your tax filings is not something any business owner welcomes. But a CRA audit is a routine compliance process — not an accusation of wrongdoing. The CRA conducts hundreds of thousands of audits and reviews every year, and the large majority result in no change or only minor adjustments.
The outcome of an audit depends heavily on how it is handled — both before it starts (the quality of your records) and during the process itself (how promptly and professionally you respond). This guide covers what triggers a CRA audit, the types of audits, your rights as a taxpayer, and a step-by-step approach to responding the right way.
The CRA selects files for audit through a combination of automated risk-scoring, third-party information matching, random selection, and targeted compliance projects. Common factors that increase audit risk:
Contact your CPA the day you receive the letter — not after you have already started gathering documents or speaking with the auditor. A CPA can request additional time if needed, communicate directly with the CRA on your behalf, and ensure nothing is provided to the auditor that could create unnecessary risk. You have the right under the Taxpayer Bill of Rights to be represented by a person of your choice — you are not required to meet with or speak to the auditor directly.
