The documents the Canada Revenue Agency (CRA) asks for during an audit are the records behind every number you filed. Those records show your tax obligations were calculated correctly, and when they are complete and easy to follow, the audit moves faster and leaves less room for estimated adjustments. Ontario businesses should prepare their filed tax returns and notices of assessment, general ledger and accountant's adjustments, bank statements, sales invoices and expense receipts, GST/HST and payroll records, the owners' relevant personal records, and the corporate documents behind any reorganization or ownership change.

Auditors rely mainly on original source documents and records created at the time of each transaction. A gap in those records can lead the CRA to rebuild your income from your lifestyle and bank deposits. At Beganyi Law, we advise owner-managed businesses on corporate and tax matters, including the reorganizations and share transactions that draw close attention in an audit.
Good CRA audit preparation starts well before the first letter arrives. If you have received a request, or want your records reviewed before one comes, you can arrange a confidential consultation with us or call +1 647-977-7749. Remote meetings are available anywhere in Ontario.
Key Takeaways
- Gather the records that tie each filed amount to an original source document.
- Reconcile, organize, and keep your books for at least six years, and keep some records indefinitely.
- Confirm the scope and deadline of any request, and respond to proposed adjustments within 30 days.
Which Records Should You Gather First?
Start with the documents that connect your filed returns to your books, then work outward to bank activity, sales tax, payroll, personal finances, and corporate history. An auditor checks whether your records support the amounts you reported, so each group below should let someone trace a figure from the return back to its source.
Tax Returns, Assessments, and Accounting Working Papers
Pull copies of the tax returns for each year under review, along with every notice of assessment and reassessment. These set the baseline the auditor is testing.
Next, collect the general ledger, the trial balance, and the year-end financial statements. Include the journal entries and adjustments your bookkeeper or accountant made for tax purposes, because the CRA reviews those adjustments directly.
Ask your accountant for the working papers that bridge the trial balance to the return. If a figure on the return cannot be traced through these papers, expect a question about it.
Bank Statements, Sales Invoices, and Expense Receipts
Bank statements for every business account (including lines of credit and credit cards) let the auditor compare deposits with reported income. Gather the full statements for each month of the period under review.
Sales invoices should be numbered and complete. A missing invoice number in a sequence often prompts a request for an explanation.
For business expenses, keep the invoices or receipts, the related contracts, and proof of payment. A bank statement shows that money left the account. The invoice shows what was bought and from whom.
GST/HST Returns, Input Tax Credits, and Payroll Records
Your GST/HST returns need records that let you calculate the tax you collected and the amounts you claimed back. Those records must describe goods and services in enough detail to show whether GST/HST applies.
Every input tax credit claim needs a purchase invoice, receipt, or written agreement containing the specific information the CRA requires. Supplier invoices missing a GST/HST registration number are a common reason input tax credits get denied.
Payroll records should show hours worked by each employee and amounts withheld for CPP contributions, EI premiums, and income tax. Keep each employee's TD1 form, all T4 slips and information returns filed, any CRA letters of authority reducing deductions, and registered pension information.
Personal, Investment, and Related-Party Records
The CRA can examine the personal records of business owners, including personal bank statements, mortgage documents, and credit card statements. Investment records belong in this group as well, particularly where funds moved between personal and business accounts.
Auditors can also review records of related people and entities: a spouse or common-law partner, family members, other corporations, partnerships, and trusts (including settlors, beneficiaries, and trustees). Where a group of connected entities is involved, the CRA may treat them as one economic entity and audit several members.
Document shareholder loans, management fees, and intercompany transfers with agreements and ledger entries on both sides.
Corporate Documents Supporting Ownership Changes and Reorganizations
Share transfers, rollovers, estate freezes, and amalgamations need a clear paper trail. That trail includes the minute book, share register, directors' and shareholders' resolutions, the transaction agreements, valuation reports, and filed elections such as Section 85 forms.
For purpose-based provisions, including anti-avoidance rules, the CRA examines why a transaction was done. If the commercial purpose is not evident in your records and you cannot explain it, the CRA may take the position that the main purpose was a tax benefit.
Owners who claimed the lifetime capital gains exemption should keep the purification steps, share history, and asset tests that support eligibility. Our tax law practice builds this documentation into reorganizations at the time they are implemented.
How Should You Organize, Check, and Retain Your Records?
Organized records shorten an audit; incomplete ones invite estimates. Reconcile your books to your bank accounts and returns, separate personal spending, deal honestly with gaps, store files in a usable electronic format, and keep everything for the full retention period.
Reconcile Reported Income With Your Books and Bank Accounts
Run a bank reconciliation for each month and confirm that deposits match recorded sales. Then compare total reported income on the return with the ledger.
Unexplained deposits are the first item many auditors chase. Label transfers between accounts, shareholder loans, loan proceeds, and non-taxable receipts such as gifts or inheritances, and keep the documents that prove each one.
When your bookkeeper prepares a reconciliation, have the person who signs the return review it. Using an accountant does not shift your legal responsibility for your books and records.
Document Business Purpose and Separate Personal Spending
Each expense should show who, what, and why. A short note on a meal receipt naming the client and the matter discussed answers a question the auditor would otherwise ask.
Mixing business and personal accounts is one of the listed signals that leads the CRA to verify income indirectly. Run all business activity through business accounts, and record any personal use of a business asset (a vehicle, for example) in a log.
Address Missing Receipts Without Altering Original Records
If a record is gone, request a copy from the party that created it, such as your bank or supplier. Most banks provide historical statements, and suppliers can reissue invoices marked as copies.
Never recreate, backdate, or edit an original document. If copies cannot be obtained, tell the auditor or the team leader, who will work with you on other ways to confirm the reported amounts, such as cancelled cheques, card statements, or contracts.
Keep Electronic Files Accessible and Submit Them Securely
If you keep accounting records on a computer, you must keep them in an electronically readable format, even when you also print them. Retain backups of the accounting software data itself, since exported PDFs do not show the transaction history an auditor may want.
Records must be kept at your place of business or residence in Canada unless the CRA gives written permission otherwise. Files on foreign servers that you access from Canada do not count as records kept in Canada.
Auditors cannot accept files by email. Use the CRA's secure online submission service, mail, or delivery to a tax services office, and keep an index of what you sent and when.
Understand the Six-Year Retention Rule and Its Exceptions
Most records must be kept for six years from the end of the last tax year they relate to. For corporations, the tax year is the fiscal period. Several exceptions extend or change that period:
Situation | Retention period |
|---|---|
Long-term property acquisitions and disposals, share registry, other historical records affecting a sale or wind-up | Indefinitely |
Late-filed income tax return | Six years from the filing date |
Objection or appeal filed | Until resolved, the further appeal deadline passes, or six years pass, whichever is latest |
Dissolved corporation | Two years after dissolution |
Amalgamated corporations | New corporation keeps predecessors' records six years from the end of the related tax year |
To destroy records early, you need written permission, requested with Form T137 or in writing to your tax services office.
What Should You Do When the CRA Requests Documents?
Read the request carefully, confirm who sent it, and answer exactly what it asks by the stated date. The steps below cover identity checks, the type of review, why you were selected, where the audit happens, and how follow-up questions unfold.
Verify the Auditor and Confirm the Scope and Deadline
A CRA auditor usually opens contact by phone and follows with a confirmation letter. If you are unsure the caller is legitimate, end the call and phone back the auditor or team leader through official CRA numbers, or wait for the letter before providing anything.
Once identity is confirmed, note the tax years, the tax types (income tax, GST/HST, payroll), and the documents listed. If the deadline is tight, ask early for more time. CRA officials are expected to allow reasonable time and to consider reasonable extension requests.
Make sure any accountant or lawyer speaking for you has a valid representative authorization on file.
Distinguish a CRA Review From an Income Tax or GST/HST Audit
A request for information about a specific claim, such as a single deduction or rebate, is a narrower review. Answer it completely, since your assessment will be based on what you provide.
An income tax audit or GST/HST audit examines your books more broadly to confirm they support the amounts filed. Letters from the Audit Division show the auditor's name and the division at the end of the correspondence. Knowing which process you are in tells you how much to prepare.
Understand Risk-Based Selection and Common Audit Triggers
The CRA's risk-assessment systems flag returns considered high risk for non-compliance, and an officer then decides whether an audit is needed. Selection does not mean the CRA has found an error.
Signals the CRA lists for closer income verification include:
- one person handling most of the accounting or main business functions
- business and personal accounts used interchangeably
- a lifestyle that does not match reported income
- operating in a sector considered high risk for unreported income
- income consistently lower than similar businesses
Large unexplained tax reserves also raise the perceived risk.
Prepare for an Office Audit or Field Audit
In a field audit, the auditor normally works at your place of business. Expect an initial interview about your operations, customers, and record-keeping cycle, and often a tour of the premises.
Brief whoever will attend. The auditor may speak with your bookkeeper and employees about their duties, and may want to discuss personal spending with you separately.
For office audits, or when records are electronic, the auditor usually requests files in advance. If physical documents are borrowed, you will receive a detailed receipt; keep it with your copy of the file.
Respond to Follow-Up Questions and Indirect Income Verification
Complete answers reduce follow-up requests. Provide what the request covers, with a short cover note explaining how the documents tie to the return.
If the CRA uses the net worth method, it compares changes in your assets and liabilities plus personal spending against reported income. The review can extend to your spouse and other contributing household members, and can draw on vehicle registrations and land title records. Have documentation ready for non-taxable sources such as gifts, inheritances, and loans.
How Can You Protect Your Rights and Respond to Audit Findings?
You have defined rights during an audit, and you have firm deadlines once findings arrive. Cooperating fully while using those rights and deadlines puts you in the strongest position to dispute an adjustment you believe is wrong.
Understand Taxpayer Rights and Record-Production Responsibilities
The Taxpayer Bill of Rights sets out 16 rights, including the right to pay no more and no less than the law requires, the right to privacy and confidentiality, and the right to a formal review and appeal. It also contains commitments specific to small businesses.
Those rights sit alongside obligations. You must make all relevant paper and electronic records available and give complete, timely answers, and failing to provide required books and records is an offence. Communications with your lawyer seeking or giving legal advice are protected by solicitor-client privilege, which the CRA cannot compel you to waive.
Coordinate Your Accountant and Tax Lawyer on Complex Issues
Your accountant knows the numbers and working papers. A tax lawyer adds privilege protection and can address legal interpretation, purpose-based rules, and reorganization history.
The two roles work best together from the first request. We coordinate with clients' accountants as part of an integrated tax and legal strategy, so explanations of share transactions or holding company structures stay consistent across both advisors. Reviewers of our M&A work have pointed to Ladislav Beganyi's tax background and calm approach during tense negotiations, qualities that carry over to discussions with an auditor.
Review Proposed Adjustments Before a Reassessment
When an auditor proposes changes, you receive a written summary or proposal letter and have 30 days to respond. Use that window to check each adjustment against your records and send any additional supporting documents.
If you cannot resolve an issue with the auditor, contact the team leader, whose details appear on the auditor's correspondence. If you expect to owe tax, ask the auditor for an estimate; paying before the notice arrives limits interest.
Check Objection Deadlines After a Notice of Reassessment
You have 90 days from the date of a notice of reassessment to file a notice of objection, for income tax and for GST/HST. Your objection must explain why you disagree and include the relevant facts and supporting documents. For GST/HST, an extension can be requested up to one year after the deadline.
You do not have to pay disputed income tax while an objection is pending, but interest accrues on any amount later confirmed. Large corporations (taxable capital in Canada over $10 million with related corporations) must pay 50% of the disputed amount. If an issue arises from a sale, tax planning for business sales done at the time often supplies the records your objection needs.
Build a Document Trail That Supports Your Tax Position
A CRA audit tests whether your records support what you filed, so the work that counts happens throughout the year. Businesses that reconcile monthly, keep original invoices and receipts, and record the business purpose of expenses give auditors little reason to estimate.
Treat CRA audit preparation as part of ordinary bookkeeping:
- Reconcile bank accounts to the ledger every month.
- Confirm supplier invoices show the details needed for input tax credits.
- Keep personal and business spending in separate accounts.
- File resolutions, agreements, and valuations when each reorganization closes.
- Store electronic records in Canada in a readable format for at least six years, and keep share and property records indefinitely.
When a request does arrive, verify the auditor, confirm scope, and answer completely. Track the 30-day response window for proposals and the 90-day objection deadline after any reassessment.
For owner-managed corporations with holding companies, trusts, or past reorganizations, the supporting documents behind those transactions carry the most weight. Our team reviews corporate records and tax positions together, so gaps can be addressed before the CRA asks.
Frequently Asked Questions
Are bank statements enough to prove a business expense?
Bank statements alone rarely prove a business expense. They show that a payment was made, while the invoice or receipt shows what was purchased, from whom, and the GST/HST charged. Keep both, plus a note on business purpose where it is not obvious.
What documents support a home office deduction?
Keep a floor plan or measurements showing the workspace area against the total home area, plus bills for utilities, insurance, property tax, mortgage interest, or rent. The space must be your principal place of business, or used only for business and regularly to meet clients. If the room is also used personally, keep a record of business hours to support the time-based calculation.
Can the CRA request my personal or family members' records?
Yes. Auditors can review the owner's personal bank, mortgage, and credit card records, and the records of a spouse, family members, related corporations, partnerships, and trusts. Under the net worth method, the CRA asks for records of every contributing household member.
Should I send every document I have or only what the CRA requests?
Send what the request covers, complete and organized, with a short explanation linking it to the return. Sending unrelated material slows the review and can raise new questions. If you believe extra documents support your position, discuss them with your advisor first.
Can the CRA audit tax years older than six years?
Normal reassessment periods are shorter than six years, but some situations extend them, including misrepresentation, certain elections, and waivers you sign.
Records for property, share registries, and items affecting a future sale must be kept indefinitely. The CRA can also tell you in writing to keep records longer than six years.