A CRA audit can shake your sense of control. You work hard, follow the rules, and still get that letter. This guide helps you face it with a clear head. You will learn what the CRA looks for, what records you must keep, and how to respond without making things worse. You will see how to spot risky habits before they draw attention. You will also understand when to handle questions yourself and when to call trusted small business tax professionals. You do not need to fear every notice. You do need to stay honest, organized, and calm. The CRA wants proof. You will be ready to show it. This guide gives you plain steps, real examples, and direct answers so you can protect your cash, your time, and your sleep.
What a CRA audit really is
A CRA audit is a check of your tax return and records. It is not a charge of fraud. The CRA wants to see if your return is correct and if your numbers match your proof.
The CRA may look at:
- Your income and sales
- Your expenses and receipts
- Your payroll records
- Your GST or HST returns
- Your bank and credit card statements
You may face a desk audit by phone or mail. You may face a field audit at your home, office, or accountant’s office. The process can feel tense, but clear steps will lower the strain for you and your family.
Why your business might be chosen
The CRA explains its audit process and risk checks on its site. You can read more on the Government of Canada page on CRA reviews and audits.
Your business might be picked because of:
- Random selection
- High cash sales
- Large swings in income or expenses
- Claims that do not match your industry pattern
- Missing slips or mismatched slips from payers
This choice can feel personal. It is usually not. The CRA uses data checks. Your job is to show clear proof and stay firm.
What records you must keep
Strong records are your shield. The CRA needs proof that backs every line on your return. Weak records turn a small issue into a large bill.
Keep:
- Sales invoices and till tapes
- Purchase invoices and receipts
- Bank and credit card statements
- Payroll records and T4 slips
- Mileage logs for business trips
- Home office cost records if you claim that space
The CRA guide on keeping records for business sets clear rules. You must keep most records for at least six years. You can store them on paper or in digital form. You must be able to show them fast if the CRA asks.
Common audit triggers and how you can avoid them
Some patterns draw attention from the CRA. You can lower your risk by watching these three points.
- Cash sales. Record every sale. Use numbered invoices. Avoid side deals in cash without receipts.
- Personal vs business costs. Do not claim personal meals, clothes, or family trips as business costs.
- Large or new claims. Big home office, auto, or meal claims need strong proof and logs.
Clean habits each week are kinder to you than a scramble when the audit letter comes.
What to do when you receive an audit letter
The audit letter will name the years and tax types under review. It will list the records the CRA wants and a reply date.
Take these three steps fast:
- Read the whole letter. Mark the reply date.
- Gather the named records. File them by year and type.
- Decide if you will answer yourself or get help from a tax expert.
Then contact the auditor. Confirm you got the letter. Ask clear questions if you do not understand the request. If you need more time, ask early. The auditor may grant a short extension if you show effort and respect.
Desk audit versus field audit
Here is a simple comparison to help you see what to expect.
| Feature | Desk audit | Field audit |
|---|---|---|
| Where it happens | By mail or phone | At your home, office, or accountant’s office |
| Scope | Often one issue or year | Often several issues and years |
| Records | Copies sent to CRA | Originals viewed on site |
| Time impact | Less time away from work | More time in meetings and prep |
| Stress level | Lower but still tense | Higher due to direct visits |
In both types, you have rights. You can ask questions. You can seek help. You can request that meetings happen at your accountant’s office to shield your family and staff.
Your rights and your duties
The CRA process rests on two ideas. You must follow the law. The CRA must treat you with fairness and respect. The Taxpayer Bill of Rights sets this out.
You have the right to:
- Know why the CRA asks for information
- Receive clear explanations of decisions
- Have your information kept private
- Complain and appeal if you disagree
You have the duty to:
- Give full and honest information
- Keep proper records
- Respond on time
Calm and firm behavior earns respect from auditors and protects your business.
When to ask for help
You can handle simple questions on your own. You should seek help when:
- The CRA is reviewing several years
- You lack records for key items
- You receive a large proposed reassessment
- You feel scared to speak freely
At that point, reach out to trusted small business tax professionals or a qualified accountant. They can speak with the CRA for you. They can sort records, explain your numbers, and push back if the CRA view is wrong.
How to lower your risk after the audit
An audit is draining. It can also be a hard lesson. Use it to change how you run your books.
Focus on three habits:
- Set a set day each week to update books and file receipts.
- Use simple software or apps that store scans of receipts.
- Review your return with a tax expert before you file high risk claims.
These steps protect your business and your home life. They cut the chance of future audits and keep you ready if one comes again.
You cannot control if the CRA selects you. However, you can control your records, your response, and your support team. That control protects your money and your peace of mind.

