CHAR500 audit thresholds: a roadmap for NY nonprofits

At $250,000, the reporting burden changes again: an independent CPA review becomes the minimum financial-statement requirement, and the organization enters the state’s dual-filing framework.

These thresholds are often treated as accounting details. They are compliance metrics. A filing package that uses the wrong revenue measure, substitutes a compilation for a review, or carries a qualified opinion can be rejected even where the underlying organization has no allegation of misuse of funds.

The New York Charities Bureau audit thresholds create three reporting tiers. The route is straightforward only after the organization separates four variables that are routinely conflated: gross annual revenue and support, gross contributions from New York sources, federal expenditures, and the legal structure of the reporting entity.

The three-tier financial reporting framework

The CHAR500 is the annual filing used by charities registered with the New York State Attorney General’s Charities Bureau. Its financial-statement requirement is keyed to gross annual revenue and support. Not net income. Not unrestricted revenue. Not the size of the year-end surplus. Not the federal award balance.

The current tiers are compact.

The thresholds apply to gross annual revenue and support. This definition requires disciplined preparation. An organization cannot reduce its reporting tier by pointing to program expense, restricted funds, pass-through activity, or a thin operating margin. Gross figures drive the state requirement.

The $1 million audit threshold took effect on July 1, 2021. It replaced the lower audit threshold that had governed prior filings. The change reduced audit exposure for some mid-sized organizations, but it did not remove financial reporting discipline. Between $250,000 and $1 million, the independent review requirement remains.

A CPA review is not a lesser label for any accountant-produced statement. It is a specific engagement performed by an independent CPA under applicable professional standards. A compilation report is not a substitute. A prepared internal statement is not a substitute. A Form 990 prepared by a competent tax firm is not, by itself, a substitute.

The reporting tier is determined by gross revenue and support. The cost of compliance is determined by how cleanly the organization’s records can survive external scrutiny.

For organizations at or near a threshold, timing matters. A one-time grant, a capital campaign receipt, a major restricted contribution, or a substantial in-kind revenue entry can move the organization into a different tier for the year. The finance committee should identify that movement before the fiscal year closes, not after the CHAR500 calendar has already compressed.

The $250,000 and $1 million lines are not interchangeable

The new york charities bureau audit thresholds are frequently summarized as a single $1 million rule. That is incomplete. There are two operational lines, and they produce distinct obligations.

At more than $250,000 in gross annual revenue and support, an organization must provide financial statements accompanied by an independent CPA review report. An audit is also acceptable, but the review is the floor. At more than $1 million, the floor becomes an independent CPA audit.

The distinction has practical consequences.

An audit produces an opinion on whether the financial statements are presented fairly, in all material respects, in conformity with U.S. generally accepted accounting principles. The auditor performs risk assessment, tests selected transactions and controls, and gathers audit evidence. The organization’s preparation burden is correspondingly greater.

A review provides limited assurance through analytical procedures and inquiries. It is not an audit. It does not include the same testing of controls or transaction-level evidence. But it remains an independent professional engagement. The CPA must be able to reconcile the financial statements to the organization’s books, understand unusual variances, and evaluate whether the statements are plausible within the applicable reporting framework.

The internal preparation sequence differs by tier:

1. Organizations under $250,000 should still close their books as if external review were possible. The exemption is from submitting a CPA review or audit report, not from maintaining reliable accounting records. The CHAR500 remains a state compliance filing where registration applies.

2. Organizations in the review tier should schedule the CPA engagement before year-end. A review conducted after a disorganized close produces avoidable reclassifications, delayed Form 990 preparation, and late CHAR500 filing risk.

3. Organizations above $1 million should treat the audit calendar as a governance calendar. Board approvals, internal-control documentation, grant schedules, related-party disclosures, and revenue recognition support must be ready before fieldwork begins.

4. Organizations close to either line should model gross revenue before finalizing the budget. The relevant question is not whether an audit would be preferable. It is whether the organization will be required to obtain one for the completed fiscal year.

A charity with $245,000 of gross annual revenue and support may submit unaudited financial information. A charity with $255,000 cannot simply choose a compilation to reduce cost. It requires a review report or an audit report. A charity at $1,010,000 requires the audit.

This is an area where fiscal health and compliance metrics are related but separate. A balanced budget does not alter the reporting tier. Strong liquidity does not alter it. A clean review history does not alter it. The revenue measure controls.

GAAP compliance is a filing condition, not a presentation preference

The Charities Bureau requires submitted financial statements to fully comply with U.S. GAAP. This is where a technically completed audit can still fail as a filing instrument.

A qualified audit opinion or qualified review conclusion signals that the CPA could not state unmodified assurance because of a departure from GAAP, a limitation in the engagement, or another defined issue. For CHAR500 purposes, that qualification is not a minor notation to be filed and forgotten. It can result in rejection by the Charities Bureau.

The distinction is material. An organization may regard the qualification as narrow: incomplete support for one revenue class, a departure in lease accounting, unrecorded contributed services, weak consolidation, or incomplete disclosures. The Bureau’s position is broader. Financial statements must comply with GAAP.

A one-time waiver may be requested from the Attorney General for a qualified opinion or conclusion. It is not automatic. The request does not convert the qualification into acceptable recurring practice. An organization receiving a waiver must address the GAAP issue on a go-forward basis.

The highest-risk conditions are usually mundane rather than fraudulent:

• Revenue recorded on a cash basis while the financial statements purport to use accrual accounting.
• Grant revenue recognized without a documented assessment of restrictions and conditions.
• Net assets classified incorrectly between donor-restricted and without-donor-restriction categories.
• Related-party transactions omitted from the notes.
• Lease, debt, or contingency disclosures left incomplete.
• Intercompany balances left unreconciled in a multi-entity structure.
• Functional expense reporting assembled late from unsupported allocation percentages.
• A year-end receivable or payable schedule that cannot be tied back to the general ledger.

None of these defects is cured by a favorable program narrative. The CHAR500 reporting system is not designed to assess mission quality. It assesses filing compliance, public-disclosure information, and the integrity of the financial submission.

Boards should read the CPA’s management letter separately from the audit opinion. The opinion determines whether the financial statements are acceptable in their reported form. The management letter identifies control weaknesses, process gaps, and remediation items that may not rise to the level of a qualification. Both affect future filing risk.

An unmodified opinion is not merely an accounting outcome. It is a state-filing dependency.

The practical sequence is to resolve GAAP issues before the report is issued. Once a qualified opinion appears in the final report, the organization has converted an accounting correction into a regulatory issue.

Multi-entity organizations need consolidated visibility

Parent organizations with affiliates, controlled entities, supporting organizations, or program subsidiaries face an additional layer of CHAR500 complexity. New York regulations require consolidated financial statements to include all related entities. They must also be accompanied by supplementary consolidating schedules showing the individual balances.

This requirement matters because consolidated statements can obscure entity-level conditions. A parent may show acceptable liquidity while a controlled affiliate carries unresolved liabilities. A consolidated revenue figure may cross the $1 million audit threshold even where the parent’s standalone operations appear smaller. Intercompany activity may net to zero in the consolidated presentation but still reveal weak controls at the entity level.

The consolidating schedule should permit the reader to identify, by entity:

A common failure point is incomplete entity mapping. The legal chart, accounting chart, Form 990 reporting group, and audited financial-statement consolidation group must be reconciled. They are not always identical.

The board should be able to answer four narrow questions before the CPA begins work:

• Which legal entities are controlled or otherwise required in the consolidated statements?
• Which entities are registered or reportable in New York?
• Do intercompany balances reconcile before elimination entries?
• Does the supplementary consolidating schedule trace to the consolidated totals?

The answer cannot rest on prior-year practice alone. A new affiliate, fiscal sponsorship arrangement, merger, dissolution, or controlled LLC can change the reporting perimeter. The accounting team should document that perimeter annually.

Filing dates and dual-filing obligations

The CHAR500 is due on the fifteenth day of the fifth month after the organization’s fiscal year-end. An organization with a December 31 year-end therefore faces a May 15 deadline. The Bureau provides an automatic 180-day extension.

The extension is useful. It is not a substitute for calendar management. It extends the filing deadline, but it does not solve delayed closes, missing bank reconciliations, unresolved audit adjustments, or a CPA engagement that was never scheduled.

For registered charitable organizations under Article 7-A with gross revenue exceeding $250,000, New York Executive Law § 172-b(9) requires filing the CHAR500 and IRS Form 990, including Schedule B, with both the Attorney General’s Charities Bureau and the New York State Department of State.

This dual-filing obligation has existed since January 1, 2021. It should be treated as two compliance events, even where staff expect the state systems to align. Organizations should retain confirmation of submission for each required recipient. A successful submission in one location should not be assumed to establish completion in another.

The Department of State filing fee is $25. Article 7-A fee treatment also changes by revenue level: $25 for organizations with revenue of $250,000 or more, and $10 below that figure. These are small amounts relative to the cost of CPA work. They are not small relative to the administrative consequence of an incomplete filing.

There is also a narrower Article 7-A exemption. Organizations receiving less than $25,000 in annual gross contributions from New York State sources may be exempt from Article 7-A registration and filing requirements if they do not use professional fundraisers or fundraising counsel. This is not the same test as the $250,000 financial-reporting threshold.

The two rules answer different questions:

Confusing these measures creates predictable errors. An organization may be below $250,000 in annual revenue but still need to register because of its New York fundraising activity. Another may have minimal New York-source contributions yet exceed the review threshold through other revenue. A federal grant portfolio may trigger separate federal compliance analysis without changing the CHAR500 threshold calculation in the same way.

The federal Single Audit threshold is a distinct test based on federal expenditures, not total gross annual revenue and support. It should never be mapped directly onto the state audit requirement.

A filing roadmap built from records, not assumptions

The most efficient CHAR500 process begins at year-end close. The filing should not be the first occasion on which the organization calculates its reporting tier or discovers that its books do not support GAAP financial statements.

A reliable operating sequence has five parts.

1. Calculate gross annual revenue and support from finalized accounting records. Retain the reconciliation supporting the tier determination. The calculation should be available to the controller, CPA, and audit committee.

2. Identify the applicable engagement early. Below $250,000, prepare the required unaudited financial information. Above $250,000, obtain a review or audit engagement from an independent CPA. Above $1 million, plan for an audit.

3. Reconcile the CHAR500, Form 990, and financial statements. Differences may be legitimate, but they should be explainable and documented. Revenue totals, officer information, related entities, and public-support classifications warrant particular attention.

4. Test GAAP presentation before report issuance. Do not wait for the Charities Bureau to identify a qualified conclusion. Resolve classification, disclosure, consolidation, and recognition issues during the CPA process.

5. Track each state recipient and each deadline. Record the original due date, extension date, Attorney General filing confirmation, Department of State filing confirmation where required, payment status, and board review date.

The filing system rewards administrative precision. It does not reward confidence based on prior-year habits. Thresholds change. Revenue composition changes. Entity structures change. CPA engagement capacity changes. The organization that keeps a current compliance map spends less time explaining preventable exceptions.

The working database should contain, at minimum:

• Fiscal year-end and CHAR500 original due date.
• Extension deadline, if used.
• Gross annual revenue and support used for the tier calculation.
• Required engagement type: unaudited, CPA review, or independent audit.
• CPA firm, engagement start date, and report issuance date.
• Audit opinion or review conclusion status.
• GAAP remediation items and responsible staff member.
• Article 7-A registration status.
• Attorney General filing confirmation.
• Department of State filing confirmation, where required.
• Parent, subsidiary, affiliate, and intercompany reporting relationships.

The thresholds are simple. The reporting perimeter is not. For New York nonprofits, the durable control is a documented calculation, a GAAP-compliant financial package, and a filing log that treats every agency submission as a separate completed record.