Glossary/Fraud and ethics

Nonattest services

Nonattest services are services a firm provides to an attest client other than audits, reviews and examinations, such as bookkeeping or tax prep. The AICPA Code allows them if specific requirements are met.

CORAA TeamUpdated November 5, 2026

Definition

Nonattest services are professional services provided to a client, other than attest services. Bookkeeping, payroll processing, tax preparation, valuation, IT design, internal audit outsourcing and financial statement drafting are examples. When provided to an attest client, they threaten independence unless the member meets the general requirements in ET 1.295.

Why it matters in an audit or review

The general requirements include that the member not assume management responsibilities, that the client designate someone with suitable skill, knowledge and experience (SKE) to oversee the service, that the client take responsibility for the results, and that the member meets the documentation requirements in the same subtopic. Cumulative effects of multiple services are also considered. Failing a requirement impairs independence, which cannot be fixed by a safeguard.

Example

Illustrative: a firm audits a client and also prepares its trial balance from bank statements. The client's controller reviews the work, approves the adjusting entries and accepts responsibility. The firm documents the engagement terms. That arrangement can meet the requirements. If the firm instead decides which entries to post, it is making management decisions, and independence would be impaired.

Common mistakes

Skipping the SKE assessment because the owner is 'involved'. The oversight person must be able to evaluate the work.

Sources

  • AICPA, Code of Professional Conduct, ET 1.295, Nonattest Services (including ET 1.295.040, General Requirements for Performing Nonattest Services)

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AICPA Code ET 1.295

Related terms

  • Independence
    Independence for an auditor means independence of mind and independence in appearance. It is required for audits and reviews, and under the AICPA Code it is judged using a conceptual framework.
  • Threats and safeguards
    Threats are circumstances that could compromise compliance with the AICPA Code, and safeguards are actions that reduce them to an acceptable level. If none works, the member declines or stops.
  • Conceptual framework (AICPA Code)
    The conceptual framework is the AICPA Code's three-step approach for ethics and independence: identify threats, evaluate their significance, and apply safeguards, or decline the work if none suffice.
  • Objectivity and integrity
    Objectivity and integrity are two principles in the AICPA Code. Objectivity is impartiality and freedom from conflicts of interest. Integrity means being honest and candid, without subordinating judgment to others.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required