Is an Audit Information Form legally enforceable?

Yes. Electronic signatures on audit forms are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are met.

Can the form be signed electronically?

Generally yes. ESIGN and state UETA laws allow e-signatures for most non-exempt documents; verify exceptions such as wills or specific court filings for the particular jurisdiction.

What authentication level is recommended?

Use at least email and SMS code authentication for auditors; stronger methods (KBA or multi-factor) are advisable for sensitive or regulated records to strengthen attribution.

How do I correct a submitted form?

If an error is discovered, create an amended form noting the correction, reference the original submission, and obtain new attestations; avoid retroactive edits without an auditable amendment record.

Who may sign on behalf of the entity?

An authorized officer or delegated custodian should sign; confirm authority through internal delegation records or board resolutions to avoid disputes over signer legitimacy.

How long must the form and logs be kept?

Follow applicable retention rules: at minimum keep audit records for three years for tax-related matters (IRC §6501) and six years for HIPAA-covered information (45 CFR §164.530(j)); state variations may extend these periods.

Electronic Signature
Templates
Miscellaneous
Audit Information Form

Audit Information Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

AUDIT INFORMATION FORM

Parties and Recitals

Client Name: Auditor Name:

WHEREAS: Client engages Auditor to perform audit and related services for Client's accounting records and financial statements for the fiscal period identified herein; and Auditor agrees to perform such services subject to the terms and conditions set forth in this Audit Information Form and the attached Scope of Work.

WHEREAS: The parties intend that the engagement will be conducted in accordance with professional auditing standards applicable to the engagement and that the Auditor will have access to the records, personnel and systems necessary to complete the engagement.

WHEREAS: The parties agree that this Audit Information Form sets forth material administrative, payment and confidentiality terms governing the engagement, and that a separate written engagement letter or contract may be executed incorporating these terms.

Client Information

Client Legal Name Client Address Primary Contact Contact Email Taxpayer/Identifier

Entity Type

Select entity type Corporation Limited Liability Company (LLC) Partnership Sole Proprietorship Other:

Engagement Period

Fiscal Period to be Audited: From through

Engagement Effective Date:

Scope of Work

Describe the nature and extent of audit services to be performed. Include objectives, deliverables, and any agreed procedures or limitations. (Complete and attach additional schedules as needed.)

Documents and Records to be Provided

Client shall provide timely access to the following documents and records prior to or during the engagement (check all that apply):

Financial statements General ledger Trial balance Bank statements Receipts and supporting invoices Material contracts and agreements

Payroll records Tax returns Inventory schedules Other:

Access, Facilities and Cooperation

Client agrees to provide Auditor reasonable access to personnel, facilities, systems and records necessary to perform the scope of work. Access period requested: From to . Estimated staff hours (if applicable):

Payment Terms

Total Audit Fee (estimated or fixed):

Payment Schedule and Billing

Late Payment Fee (applies to overdue invoices):

Billing Address Invoicing Contact

Term and Termination

Term Commencement Date: Termination Date (if applicable):

Either party may terminate this engagement for convenience upon written notice to the other party delivered at least days prior to the effective termination date. Termination for cause may be immediate where a material breach remains uncured after written notice and a 10-day opportunity to cure, unless otherwise required by law.

Confidentiality

Auditor shall keep confidential all non-public information obtained from Client in performing the engagement and shall not disclose such information except (a) to personnel and subcontractors bound by confidentiality obligations necessary to complete the engagement, (b) as required by law, professional standards, or court order, or (c) with Client's prior written consent. Confidential information does not include information that is or becomes publicly available through no fault of Auditor, or information developed independently by Auditor without reference to Client materials.

Additional Confidentiality Parameters (if any)

Representations and Warranties

Client represents and warrants that: (a) it has authority to engage Auditor and to provide access to records, (b) information and records provided are accurate and complete to the best of Client's knowledge, and (c) no material information has been withheld that would reasonably affect Auditor's ability to perform the agreed procedures. Auditor represents that it will perform services in accordance with applicable professional standards and exercise reasonable professional care.

Limitation of Liability and Indemnification

To the extent permitted by law, each party's liability to the other for claims arising out of or relating to this engagement shall be limited to direct damages and, except as required by statute, shall exclude consequential, incidental or punitive damages. Client shall indemnify and hold Auditor harmless from claims arising from Client's negligent or fraudulent acts or omissions in connection with the engagement, except to the extent caused by Auditor's gross negligence or willful misconduct.

Governing Law

This Audit Information Form and any disputes arising out of or relating to it shall be governed by and construed in accordance with the laws of the State of without regard to conflict of laws principles. Venue for any dispute shall be in the appropriate state or federal court located within that State.

Entire Agreement

This Audit Information Form, together with any executed engagement letter, annexes, and attachments expressly incorporated herein, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior discussions, proposals and understandings. Any amendment must be in writing and signed by authorized representatives of both parties.

Certifications

By checking this box, Client certifies that the information provided in this Audit Information Form is true, accurate and complete to the best of Client's knowledge, and that Client is authorized to request the audit services described herein.

Additional Terms or Notes

Client Name:

By:

Date:

Auditor Name:

By:

Date:

What the Audit Information Form Is and When to Use It

The Audit Information Form is a standardized record used to collect metadata, document lists, custodial history, and signer attestations during internal or external audits. It consolidates identifying information about the audited entity, the audit scope and period, and the documents submitted as evidence. The form supports chain-of-custody tracking, provides a clear record for reviewers, and can be included in an auditor's working papers. Many organizations accept electronically completed and signed Audit Information Forms under federal e-signature law where permitted by ESIGN and applicable state law.

Why completing an Audit Information Form adds value

A properly completed form creates a single, auditable record that reduces follow-up questions, speeds review cycles, and preserves evidence integrity for regulators and stakeholders while supporting internal controls and compliance efforts.

Typical users and signers of the form

The Audit Information Form is completed by organizational staff and reviewed by audit teams to document facts and evidence in a consistent format.

Internal auditors and audit managers responsible for compiling evidence and confirming scope and timelines.
External audit firms and engagement partners who need a reliable manifest of delivered documents and custodian attestations.
Compliance officers and legal counsel who review privilege, confidentiality, and regulatory disclosures before submission.

Use the form to centralize information for one audit engagement or to start a contextual record for recurring audits and oversight.

Core sections a professional Audit Information Form should include

A complete Audit Information Form groups identifiers, scope, evidence lists, custody details, attestations, and signature metadata so reviewers can verify provenance and completeness without chasing disparate emails or file folders.

Header

Entity name, department, contact person, and engagement identifier to link the form to the audit file and control numbering systems.

Audit Scope

Date range, system or process under review, and audit objective to define boundaries for reviewers and future reference.

Document Inventory

Ordered list of submitted exhibits with file names, descriptions, and version identifiers so each item can be matched to evidence.

Chain of Custody

Entries showing who handled each document, transfer dates, and method of delivery to preserve provenance for legal or regulatory review.

Attestations

Statements by custodians certifying the completeness and accuracy of submissions, including disclosures of missing or redacted content.

Signature and Audit Trail

Signed name, title, signature timestamp, signer authentication method, and a record of any reviewers or approvers linked to the form.

Step-by-step: completing the Audit Information Form

Follow these steps in order to prepare a clear, defensible submission for auditors and maintain an accessible record for future reviews.

01

Gather Documents: Collect all requested records and label files consistently.
02

Record Metadata: Complete entity, period, and contact fields with exact values.
03

Confirm Custody: Log who provided each file and delivery timestamps.
04

Sign and Archive: Have authorized signer attest and store the completed form securely.

Typical eSubmission workflow for the form

The digital workflow reduces physical transfers and preserves automated audit trails while meeting legal requirements for intent and attribution.

Upload Files: Attach PDFs or native files to the form package.
Place Fields: Add signature, date, and text fields where required.
Send to Signer: Deliver via email link or secure portal with authentication.
Capture Audit Trail: System records timestamps, IPs, and signer actions.

Configuring a digital workflow for Audit Information Forms

Set these core workflow options before sending to ensure consistent authentication, field behavior, and retention.

Field	Configuration
Authentication	Email link or SMS code for signer verification.
Conditional Fields	Show fields only when certain answers are selected.
Templates	Use reusable templates for recurring audit requests.
Notifications	Automate reminders and completion alerts to contacts.

Technical and platform considerations for digital use

Verify file formats, signer authentication, and retention settings before sharing the form to avoid downstream rework.

File Types: PDF, DOCX, XLSX supported
Integrations: Connectors to CRM and cloud storage
Browser Support: Modern browsers, mobile compatible

Security and compliance controls to document

In-transit Encryption: TLS 1.2/1.3

At-rest Encryption: AES-256 protected

Audit Trail: Tamper-evident logs

Certifications: SOC 2 Type II

HIPAA Support: BAA available

eSignature Law: ESIGN and UETA compliant

Penalties and risks if the form is incorrect or incomplete

Audit Delays: Missed documentation can postpone audit completion.

Regulatory Fines: HIPAA or other fines may apply for breaches.

Tax Exposure: Incomplete records risk IRS scrutiny (IRC §6501).

Evidence Rejection: Courts or regulators may reject insufficient chain of custody.

Contract Liability: Incorrect attestations can trigger indemnities.

Reputational Harm: Public disclosures can damage trust.

Common mistakes to avoid when preparing the form

Omitting version numbers or file hashes, which creates uncertainty about whether evidence was altered or is current.
Recording inconsistent dates across documents, leading reviewers to question the audit period or sampling universe.
Failing to capture signer authentication method and timestamp, which undermines attribution of statements and attestations.
Submitting redacted files without a redaction log and justification, which can result in follow-up requests and delays.

Typical timelines and response expectations

Audits often operate on set deadlines; track request dates, response windows, and closeout periods to meet obligations efficiently.

Upon Request:

Provide the form when first requested by auditors or regulators.

Audit Kickoff:

Deliver baseline materials at engagement start.

Standard Response Window:

Commonly 10–30 business days for document requests.

Closeout Submission:

Submit final reconciliations and sign-offs at engagement end.

Retention Check:

Confirm records meet applicable retention rules before disposal.

Pricing and feature snapshot for eSignature options

Compare starting prices and common feature availability across vendors to estimate costs for signing and managing Audit Information Forms.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by promotion	Varies by promotion	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Frequently asked questions about the Audit Information Form

Answers to common questions about legality, e-signatures, retention, corrections, and signer authority to help resolve issues during preparation and submission.

Need help? Contact support

Is an Audit Information Form legally enforceable?
Yes. Electronic signatures on audit forms are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are met.
Can the form be signed electronically?
Generally yes. ESIGN and state UETA laws allow e-signatures for most non-exempt documents; verify exceptions such as wills or specific court filings for the particular jurisdiction.
What authentication level is recommended?
Use at least email and SMS code authentication for auditors; stronger methods (KBA or multi-factor) are advisable for sensitive or regulated records to strengthen attribution.
How do I correct a submitted form?
If an error is discovered, create an amended form noting the correction, reference the original submission, and obtain new attestations; avoid retroactive edits without an auditable amendment record.
Who may sign on behalf of the entity?
An authorized officer or delegated custodian should sign; confirm authority through internal delegation records or board resolutions to avoid disputes over signer legitimacy.
How long must the form and logs be kept?
Follow applicable retention rules: at minimum keep audit records for three years for tax-related matters (IRC §6501) and six years for HIPAA-covered information (45 CFR §164.530(j)); state variations may extend these periods.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now