What You Need to Know About the CRA’s Self-Assessment Tax Audit Process

Most Canadian businesses operate under a self-assessment tax system. This means the Canada Revenue Agency (CRA) expects you to calculate your own tax owing accurately, file returns on time, and retain adequate records. But while the system is built on trust, it is verified through audits. Knowing what to expect from the CRA’s audit process can reduce stress, avoid penalties, and protect your business if your return is selected for review.

What is a Self-Assessment Audit?

A self-assessment audit is the CRA’s way of checking that your filed returns align with your actual financial activity. Audits are not accusations of wrongdoing. Instead, they are routine reviews designed to ensure businesses comply with tax rules, remit what they owe, and claim only what they are entitled to.

The CRA conducts different types of audits. Some are desk reviews that take place remotely, while others are field audits involving an on-site visit. The goal is to confirm that the information you reported matches your records and that your tax treatment of income, deductions, and credits is reasonable.

Audits may focus on income tax, GST/HST, payroll, or multiple areas at once.

You can read more about how the process works in the CRA’s official guide, “What You Should Know About Audits”.

Common Audit Triggers for Small Businesses

CRA audits are not random. Many are selected based on specific risk indicators or red flags in your return. Some of the most common triggers include:

• Income that doesn’t match reported T-slips
• Large or unusual expense claims, especially for meals, travel, or vehicle use
• Consistent year-over-year losses without clear explanation
• High cash-based transactions with limited paper trail
• Discrepancies between GST/HST filings and income tax returns
• Industry comparisons that suggest your margins are out of line
• T-slip mismatches (e.g., missing T4s or T5s)

The CRA may also use lifestyle analysis as an investigative technique during audits when there are concerns about unreported income. This involves examining whether a taxpayer’s lifestyle appears consistent with their reported income, and is more commonly applied to cash-intensive businesses or when personal and business finances have been mixed. This is typically a verification tool used during an audit rather than a primary reason for audit selection.

More details on how CRA identifies files for audit and common triggers are outlined in CRA’s guide for small and medium business audits: what you need to know.

Records to Keep and Why

Even if you file everything correctly, your defence during an audit depends on the records you keep. The CRA expects businesses to retain supporting documents for at least six years.

Examples include:

• Invoices and receipts for all sales and purchases
• Bank statements and credit card summaries
• Mileage logs and vehicle usage records
• Payroll records, T4s, and ROEs
• Copies of filed tax returns
• Contracts and agreements
• GST/HST returns and remittance proofs

Digitally stored records are acceptable if they are accessible and readable. It’s best to organize documents by year and by category so you can locate them quickly in the event of a review. Keeping your records up to date isn’t just about compliance. It also supports stronger budgeting, better loan applications, and smoother transitions during succession or sale.

For guidance on setting up reliable bookkeeping, visit our services page.

How to Respond to a CRA Audit

If your business is selected for audit, you will be contacted by a CRA auditor by phone or mail. They will outline the years under review and the type of information they require.

Here are some general steps:

1. Stay calm and cooperate. Audits are part of the CRA’s job. Being defensive or hostile will not help.
2. Read the audit letter carefully. It will list exactly what documents or explanations they want.
3. Organize your records. Make sure everything requested is complete and clearly labeled.
4. Work with your accountant. They can help communicate with the CRA, respond to questions, and ensure information is presented properly.
5. Ask for clarification if needed. It is better to ask than to guess what the CRA wants.

If issues are found, the CRA may reassess your return and charge interest or penalties. You will have the opportunity to explain or appeal, depending on the circumstances.

If you don’t already have a tax partner, get in touch with FTF Accounting for guidance before you respond.

Preventative Strategies to Avoid Red Flags

While no system is audit-proof, you can reduce your risk with smart practices:

• Reconcile your books monthly so nothing is missed or miscategorized
• Avoid aggressive deductions, especially in grey areas like meals or home offices
• Keep business and personal accounts completely separate
• File all returns on time, even if you can’t pay in full
• Report all income, even cash sales or side jobs
• Retain records for six years in an organized format
• Use accounting software to improve tracking and reduce manual errors

It’s also worth having your year-end return reviewed by a professional. They can flag potential issues before the CRA does.

At FTF Accounting, we help BC businesses implement systems that make audits less likely and easier to navigate if they happen.

Final Thoughts

Audits are never fun, but they don’t have to be terrifying. The CRA’s self-assessment audit process is built to keep the tax system fair and accurate. By understanding how the process works, staying organized, and responding proactively, you can protect your business and your peace of mind. If you’ve received an audit letter, suspect you might be at risk, or simply want to get ahead of future reviews, contact our team today. We’ll help you prepare, respond, and strengthen your business for the long run.