According to the CRA’s departmental reporting and federal budget disclosures, the CRA has conducted more than 62,000 audit reviews and examinations of small- and medium-sized businesses in recent years through GST/HST, payroll, and income tax compliance programs alone. Usually, firms do not panic upon receiving the first notice. The panic arises around day nine or ten, when the client forwards the letter to their CPA firm, marking it “urgent.”
Sadly, though, by then it is all too late.
The one thing that often gets overlooked in the Canadian CPA world is the CRA audit that Canadian CPA firms now handle every quarter. Yes, the technical work matters. However, what actually burns the firms down is the operational drag. Even for the most seasoned staff, a single audit file can take anywhere from 15 to 30 staff hours, and that’s before reaching the objection stage. Now multiply that across a mid-sized client base, and all of a sudden, your growth plan turns into three managers spending Friday nights rebuilding document trails from 2022.
Now, here is the harsh truth. Most Canadian practices still treat every audit response as custom work every time.
That is expensive.
Here is a proven 8-step defense framework that most thriving Canadian practices use to respond effectively to CRA audits.
- Step 1: The Intake Call (Within 48 Hours)
- Step 2: Document Inventory and the Response Matrix
- Step 3: The CRA Correspondence Template
- Step 4: Build Your Narrative, Not Just Your Documents
- Step 5: The Record Organization Matrix
- Step 6: The Deadline Strategy
- Step 7: The Follow-Up Protocols
- Step 8: Documentation and File Closure
Step 1: The Intake Call (Within 48 Hours)
As a CPA practice owner, your first response when you see the notice should be to get on the phone with your client. No email. Direct call.
In doing so, you not only gather the necessary information but also establish control. You assert that you have a well-defined process. You make it clear that they will not receive twelve panicked emails from your firm over the next month and that you know what is at stake.
In this call, you need to ask:
- Do they have any correspondence with the CRA before this notice?
- Do they have the tax return, working papers, and source documents for the year in question?
- What is the scope?
Often, you will find a conversation or an earlier letter that is not mentioned in the notice. Hence, you must know this. In addition, you might discover that the clients do not have the necessary tax returns, working papers, and source documents for the year in question. Finally, you will learn whether the CRA is asking about a single line item or the entire return.
Make sure you take detailed notes, including the name, date of notice, file number, CRA audit center, the CRA contact person’s name, and direct phone number. Also, list the specific items under review.
Once you have gathered all the information, send a single email summarizing what you have discussed. Confirm the next steps. Lock in a deadline for when your client will send you copies of everything. Be specific. “Can you have that to us by Thursday?” is weaker than “We need the bank statements and GST records by Thursday, June 6th, at 5 p.m. We’ll review them Friday morning and follow up with questions by noon.”
Step 2: Document Inventory and the Response Matrix
This is where discipline pays off.
Create a simple spreadsheet. CRA question in column one, documents required in column two, status, date received, is it complete, and who is responsible. That is it.
The audit letter from CRA will have a detailed list of items. You do not have to guess what backs them up. List down everything. If they are questioning a $15,000 advertising deduction, write down what proves it. Invoices. Cancelled checks. Bank statements showing the payment. Engagement letter from the vendor. Perhaps a breakdown of the channels. You know what you need.
Once you receive the documents from your clients, you can update the status. Not glamorous, but it’s the difference between losing three hours on Tuesday morning looking for a receipt you already have and not.
The spreadsheet will help you identify missing items and draft your response. It will also help you identify the missing document and frame your response to it well in advance of sending your reply to the CRA.
Step 3: The CRA Correspondence Template
Create a template; do not start from scratch every time.
The template you have with you must include the standard CRA letterhead format, your firm’s letterhead, the audit file number, the taxpayer’s information, a dated opening paragraph that references the CRA’s letter and the date it was received, and clear section breaks.
For the body, you can follow this structure: a brief acknowledgment of each item under review, a paragraph explaining the treatment (why the deduction was claimed, what regulation supports it), a list of attached supporting documents, and a closing that offers your availability for questions.
Having this template readily available will save you a lot of time. More importantly, it will ensure consistency. Your letter should sound like they are from a firm with a process, not from whoever happened to have time that week.
Also, make sure that your template has placeholders for citations. Canadian practices should reference the Income Tax Act section, CRA IT guidelines if relevant, and any court decisions or CRA clarifications that support your position. This isn’t legal advice. It’s showing your work. It’s showing the CRA that someone thought about this, that it’s not a guess.
Step 4: Build Your Narrative, Not Just Your Documents
Narrative is what separates a weaker response from a strong one.
When you send the documents to the CRA, you are not just sending papers; you are narrating a story about why your client’s treatment is right. If the CRA asks about GST on a mixed-use vehicle, you don’t send in the registration, purchase invoices, and usage logs. You need to clearly state that, “The vehicle was primarily used for business. During the audit period, log records show 87% business use and 13% personal use. The GST input tax credit claimed was calculated proportionately against actual use. Supporting documentation attached.“
Having this narrative in place will help the CRA auditor understand what story the documents are supposed to tell. In this way, they will not have to reverse-engineer your logic. Furthermore, it inoculates you against the CRA, who later says, “We didn’t understand your position.” You were clear.
While building this narrative, be transparent about your weaknesses. If your client does not have a clean record, be clear about it. “Record-keeping for the first quarter of the year was less detailed than subsequent quarters. We have reconstructed the information from bank deposits and supplier invoices.“
Step 5: The Record Organization Matrix
Build a second matrix for your firm. The second matrix should map each document to the claim it supports.
Columns: CRA question, document type (invoice, contract, bank statement, log, etc.), document date or period, document identifier (file name, invoice number, statement month), and attachment number in your response.
Example:
- CRA question: Advertising deduction, $15,000
- Document type: Invoice
- Period: January 2023
- Identifier: INV-2023-001 from XYZ Media
- Attachment number: 3a
This matrix will be included in your response package. It will help the CRA auditor find out exactly what they are looking for, without digging. It will also help you. If the CRA requests you for a follow-up question regarding the advertising file, you do not have to search through 40 pages. You look at the matrix and say, “That’s Attachment 3a.”
Step 6: The Deadline Strategy
The CRA will set a deadline for your response, typically 30 days. Do not assume that’s your deadline.
However, in reality, your deadline is 20 days, and if you want breathing room, 18 days.
Why? Because it is always good to have breathing space. If you do not get a client response in time for a follow-up question, or if you realize you need clarification on something, you can ask for clarification. This protects you from emailing the CRA on day 29, saying, “We’re almost there.”
More importantly, if you submit early, it signals to the CRA that you take this seriously. You are not a last-minute submitter. You are organized. Do you think that changes how they read your response? Possibly not. However, it does not hurt.
You must create your submission calendar backward from the CRA deadline.
- Submission to the CRA: day 18
- Final review of your response: day 16
- Client sign-off on the narrative: Day 14
- Document assembly and matrix completion: Day 10
- CRA question analysis and initial draft: day 1
If you adhere to those dates, you will often find yourselves ahead of the schedule.
Step 7: The Follow-Up Protocols
The CRA’s first response usually isn’t the last.
Once you have submitted your response, the auditor will have several questions. Your protocol: acknowledge the question within 2 business days. Do not answer it yet. Just confirm you received it, that you understand what they are asking, and when they can expect your response.
Why wait? To confirm the answers with your client. You need to ensure that everything you say is accurate. Having a two-day acknowledgment gives you time and shows responsiveness.
Your follow-up response should mirror the structure of your initial reply. Narrative first, documents second. Do not get defensive. The CRA is not attacking you. They are doing their job, and you are doing yours.
Step 8: Documentation and File Closure
Maintain a record of everything.
Everything means everything, from the initial notice to every letter the CRA sent. Every letter you sent. Every phone call log (date, time, who you spoke with, what was discussed). Every draft. Every email exchange with your client.
This will serve two purposes.
First, in case there is ever a dispute regarding anything you submitted or did, you will always have the record.
Second, if the client gets audited again sometime next year (and many do), you will always have your previous file to reference. You’re not starting from zero.
Once the audit is done, you can file everything in chronological order. Include a cover sheet that summarizes the outcome. “Audit issued March 15, 2024. Response submitted April 2, 2024. Follow-up questions, May 10, 2024. Final response May 25, 2024. Audit closed without reassessment August 3, 2024.”
This is your institutional memory. It saves your next audit response. It saves your firm hours.
Conclusion: The Real Discipline
For most CPA practices, audit responses might feel reactive. It should not, though. You must not act only once the CRA sends the notice. Where’s the strategy in that?
You need to transform the entire process into a strategy.
When you have templates, matrices, a clear narrative structure, and deadlines you actually meet, you’re not panicking. You’re not making errors because someone’s stressed at 6 p.m. on a Friday. You’re not losing documents because you don’t have a system. You’re responding like a professional firm, not like a fire department.
With the above framework, we won’t guarantee that you will win every audit. Sometimes the CRA is right. Sometimes the regulation isn’t in your favor, and you both know it. But it will guarantee you’re not losing an audit you should have won because your firm was chaotic.
If you are looking to transform your practice so that every CRA notice no longer perturbs you, write to us at marketing@datamaticsbpm.com, and our Canadian audit experts will reach out with a concrete action plan.
How quickly must we respond?
The CRA gives you 30 days. Use 20. The buffer saves you when your client drags on clarifying questions or you need to hunt down one more document.
What records does CRA want?
Whatever proves the deduction or position you claimed. Invoices, contracts, bank statements, logs, receipts. If you’re unsure, ask the CRA auditor directly—better to clarify upfront than guess and send the wrong pile.
Should we hire outside help?
Only if your firm lacks tax expertise on the specific issue or you’re drowning in active audits. Otherwise, you’re paying for someone else to do work you can control internally.
How do we negotiate?
You don’t negotiate the law. You present your position clearly, with documents that back it, and let the CRA auditor decide. If they push back, ask what gaps they see and address them.
