# What software is suitable for accounting workpapers?

Applies to: United States · Updated 2026-09-28

No product is suitable in general; suitable software is what can hold and evidence the documentation your engagements require. List the engagement types you perform, set the minimum each demands for binder contents, referencing, the tie to the trial balance, recorded review, locking, change history and access, then add your own needs. Test dedicated products, suite modules and structured spreadsheets against that list on a real binder, including how old binders come in and completed ones come out.

## What does a workpaper system do that a shared drive does not?

AU-C section 230, the AICPA's audit documentation standard, defines audit documentation as the record of procedures performed, evidence obtained and conclusions reached, and notes that it is also called working papers or workpapers. A shared drive stores files; a workpaper system keeps them usable as that record. Test these seven functions, not storage or search:

- **Binder structure.** Each client and period gets one indexed binder built from a template.
- **Cross-referencing and annotation.** References, tick marks and notes lead from a figure to its supporting work and back.
- **Trial-balance tie.** Each reported balance links to its lead schedule and support, and the link holds when figures change.
- **Recorded review state.** The system records who prepared and reviewed the work and when, not just typed initials.
- **Roll-forward.** Next period's binder starts from this one's structure without its sign-offs.
- **Lock and change history.** A signed-off binder can be frozen and reproduced later as it stood, with any later change recorded.
- **Access control.** Rights to open, edit, sign off, unlock and export are set per binder and role.

## How do the engagements you perform set the minimum?

Settle this before looking at products, because the same tool can pass for one firm and fail for another.

### What applies to bookkeeping and tax work?

AR-C section 70 (as amended by SSARS No. 27, effective for periods ending on or after December 15, 2026), the AICPA's standard for preparing financial statements, calls merely assisting in preparing them a bookkeeping service that is not subject to that section. For periods ending before that date, section 70A keeps the currently effective text; check its scope paragraphs for those periods. Section 70 as amended bases the line between bookkeeping and an engagement to prepare financial statements on what the client requests and your professional judgment; if you are engaged to prepare them, use the preparation column. Read by their scope, AR-C, AU-C and AS 1215 set no documentation minimum for bookkeeping short of that, or for tax-return work; take that minimum from your firm's policies and any tax-practice or licensing rules that govern you.

### What do preparation, compilation and review engagements require?

AR-C 70 for preparation engagements and AR-C section 80 for compilations each say documentation should be in sufficient detail to provide a clear understanding of the work performed; neither minimum list, shown in the matrix, includes a record of who reviewed the work. AR-C section 60, which applies to engagements under these standards, makes the engagement partner responsible for supervising team members and reviewing their work, for appropriate engagement documentation being maintained, and for the engagement following the firm's policies or procedures. If those policies call for a review record, the system must hold it.

AR-C section 90, the AICPA's review standard, says review documentation provides evidence that the review was performed in accordance with its standards. It should also include, among other items, the engagement letter, specified communications, the representation letter, and a copy of the reviewed financial statements and review report.

### What does an audit require?

The AICPA says its Statements on Auditing Standards (SASs) apply to audit reports for nonissuers, that is, entities that are not issuers under the Sarbanes-Oxley Act and entities whose audits are not required to follow PCAOB standards. The PCAOB's AS 1215 sets general documentation requirements for engagements under PCAOB standards, including internal-control audits and interim reviews; use its column for those too, not the AR-C 90 column. AS 1215 does not replace other PCAOB standards' specific documentation requirements, and AU-C 230 lists other AU-C sections with specific documentation requirements; add those items to your binder-contents row. Fill the SAS and PCAOB columns each from its own framework, never one in place of the other.

For audits under the SASs, AU-C 230 does not require evidence of review on every working paper, but does require documenting what audit work was reviewed, by whom and when. AU-C 230 calls the date on which the final audit file has been assembled for retention, within the period it sets after the report release date, the documentation completion date. After that date the auditor should not delete or discard audit documentation before its retention period ends, and any modification or addition should record the specific reasons and when and by whom it was made and reviewed.

For audits under PCAOB standards, AS 1215 says a complete and final set should be assembled for retention within the period it sets after the report release date, which it calls the documentation completion date. After that date, documentation must not be deleted or discarded, though information may be added; any addition must show the date it was added, the name of the person who prepared it and the reason for adding it.

## Which capability dimensions decide suitability?

"Not set" means AR-C, AU-C and AS 1215 set no minimum for that cell. Firm-level quality management standards, tax-practice rules or state licensing rules may set one; check those that govern you before treating it as your own choice.

| Capability | What it decides | Bookkeeping or tax only | Preparation or compilation (AR-C 70, 80) | Review (AR-C 90) | Audit under the SASs (AU-C 230, 330) | Engagements under PCAOB standards (AS 1215): audits, internal-control audits and interim reviews |
|---|---|---|---|---|---|---|
| Binder contents | Whether the file is complete | Not set | Engagement letter and financial statements; compilation adds the report | Adds the items listed above, including the representation letter | Final audit file assembled by the completion date | Complete and final set assembled by the completion date |
| Indexing and cross-referencing | Whether a newcomer can follow the work | Not set | Clear understanding of the work performed | Understandable by an experienced accountant new to the review | Understandable by an experienced auditor new to the audit | Same, plus a clear link to significant findings or issues |
| Trial-balance tie | Whether each balance traces to its support | Not set; require it anyway | Not set; require it anyway | Evidence that the statements agree or reconcile with the records | Documentation shows the statements, including disclosures, agree or reconcile with the records, whether from inside or outside the ledgers | Documentation shows the records agreed or reconciled with the statements |
| Recorded review | Who did and reviewed what, and when | Not set | No record listed (see AR-C 60 above) | Preparer, reviewer, dates and extent; engagement quality reviewer, date, extent and completion before release, if any | Preparer and date; what was reviewed, by whom, when and to what extent | Preparer, reviewer and dates; reviews completed before the report release date |
| Lock and change history | Whether the signed-off binder can be reproduced | Not set | Not set | Not set | No deletion after the completion date; changes record reasons and who made and reviewed them, when | No deletion after the completion date; additions dated, named and explained |
| Access and confidentiality | Who can see, change or take client papers | Not set | Not set | Not set | Reasonable procedures to keep client information confidential | Not set |
| Roll-forward and templates | Setup effort across periods | Not set | Not set | Not set | Not set | Not set |

To apply the matrix, follow these steps:

1. Delete the columns for work you do not perform.
2. In each row, take the strictest remaining cell as your minimum if one system will hold every binder; bookkeeping binders can still use a lighter template. Where every remaining cell is "Not set", decide after the check above; the trial-balance row is always a minimum.
3. Add a column per candidate; mark a row Pass only when you have seen it work on your trial binder, otherwise Fail or Not shown.
4. Drop any candidate with Fail or Not shown on a minimum row.

In this invented example, a firm does bookkeeping, compilations and reviews. The review column sets the first five rows, the firm added a late-entry test to the trial-balance row, and made the last two its own:

| Minimum row | Candidate 1 | Candidate 2 | Candidate 3 |
|---|---|---|---|
| Binder holds engagement letter, specified communications, representation letter, reviewed statements and report | Pass | Pass | Pass |
| Index and cross-references let an experienced accountant new to the review follow the work | Pass | Fail | Not shown |
| Preparer, reviewer, dates and extent of review recorded | Pass | Pass | Not shown |
| Quality review recorded before release, if any | Pass | Not shown | Not shown |
| Statements reconcile to the records; late entries flow through | Pass | Pass | Fail |
| Binder locked at sign-off, later changes recorded | Pass | Pass | Pass |
| Full export with sign-offs, readable without the product | Not shown | Pass | Pass |

No candidate passes yet: each has at least one Fail or Not shown on a minimum row.

## What does each class of tool give up?

### What do dedicated workpaper products trade off?

Caseware's undated U.S. page for its Working Papers product, read in September 2026, describes it as a desktop solution for managing working papers in a single engagement file. It says the product links the trial balance, lead schedules and supporting workpapers so changes update every reference automatically, and rolls forward prior-year files while you choose what carries over. The trade-offs are another system to administer, binders in the vendor's format, which makes export and exit worth testing, and a second home for documents.

### What do suite modules trade off?

A module's case is shared client and trial-balance data with the tax or accounting suite you already run, removing a second import; whether a given module delivers that is what the suite tests below check. It may be thinner than a dedicated product on binder structure, review records or locking, and leaving it can mean leaving the suite.

### What do structured spreadsheets and folders trade off?

Microsoft's undated page on versioning in SharePoint lists and libraries says that with versioning on you can see when a file was changed and who changed it. What the arrangement gives up is the binding: sign-offs are typed initials anyone with edit rights can change, references are kept by hand, locking depends on configuration, and roll-forward means copying folders and re-pointing links. Score it in the matrix like any other candidate. Where your minimums include a review record and a lock, it passes only if you can show, for a finished binder, what work was reviewed, by whom and when, and that nothing changed afterwards except as your column allows and records.

## What must the trial-balance link deliver?

Workpapers exist to support reported balances, so a candidate that cannot keep the tie fails whatever else it does. The link must deliver three things:

- Balances arrive from the ledger or tax data by import or connection, without rekeying.
- Each lead schedule and workpaper stays tied to its trial-balance line through adjusting entries and reclassifications.
- When a figure changes after sign-off, you can see which schedules changed and whether their sign-offs still stand.

Microsoft's undated page on workbook links says a summary workbook is updated when its source workbooks change, but links are considered potentially unsafe and must be enabled when you open the workbook; otherwise Excel keeps the most recent values and disables refreshing the links, so a spreadsheet binder can show stale figures. It also says both workbooks must be saved in an online location reachable with your Microsoft 365 account when you create a link, so test linking and refresh in the storage you will use. Test the link by posting a late adjusting entry after a schedule is signed off and following it through; for an audit binder, also tie one disclosure figure from outside the ledger to its support. Check too how documents reach the binder: a copy inside it is frozen with the archive, a link to a file held elsewhere is not.

## Does review evidence survive archiving?

Test on your trial binder, in this order, that completed work can be shown later as it stood at sign-off:

1. Sign off each workpaper as preparer and as reviewer, and clear a review note.
2. Lock or archive the binder.
3. Try to change a workpaper as a staff user and as an administrator.
4. Add a document after the lock, and change one if your column allows, then check that the system records what your column requires, such as date, person, reason and reviewer.
5. Export the locked binder and check that sign-offs, dates and cleared notes appear in the export.

In a folder arrangement, version history is not a lock: Microsoft's versioning page says you can replace the current version with a previous one. It also says Microsoft 365 turns versioning on for new libraries and saves the last 500 versions of a document, and that earlier versions are deleted when a version limit is reached. Its permissions table gives Delete Versions to the Full Control, Design and Contribute levels by default. Check the library's limit and who can delete versions before relying on version history.

## Who should be able to open, edit and export a binder?

Access design is a selection criterion. Check that a candidate can do each of the following:

- Limit each binder to the people on that engagement
- Separate the rights to view, edit, sign off, unlock and export
- Keep archived binders read-only except for a named administrator whose actions are logged
- Keep change history out of reach of the people whose changes it records
- Require a second sign-in factor for every user

For a hosted service, also get in writing who at the vendor can reach your data. Your firm's data-security obligations are a separate question.

## Which deployment constraints rule a candidate out?

A vendor-hosted service moves servers and updates to the vendor, and you depend on a connection, its access controls and its exit terms. Get in writing what it backs up, for how long, and whether you can restore one binder as it stood at sign-off, and test a restore during the trial. Firm-managed installation or storage keeps the papers where you choose, but you administer them yourself, and some features may not reach you: Microsoft's undated page on Excel co-authoring says SharePoint On-Premises sites, those not hosted by Microsoft, do not support co-authoring.

Two more constraints often surface after purchase:

- **Offline work.** Microsoft's co-authoring page says changes made offline on a OneDrive-synced computer are not merged until it is online again, and that when two people change the same thing, the last change saved generally wins. Test two people editing one workpaper while one is offline, and check that both sign-offs and figures survive.
- **Several people on one binder.** Have two preparers work different sections while a reviewer signs off, and check that nothing is overwritten or locked out.

## What changes under peer review or inspection?

AR-C 90 notes that review documentation may be subject to review by external parties, and AU-C 230 cites clarifying documentation after external inspection comments as a reason to change an audit file after assembly. If you face peer review or inspection, archive reproduction and review evidence are pass-or-fail: before committing, run the archiving test, including a post-lock change of the kind an inspection comment would prompt.

## What if you already run a tax or accounting suite?

Put the suite's module and your best standalone candidate through the same matrix. Provided the module passes every minimum row, it can be preferable to a standalone product that also passes rows you have not made minimums, because it can avoid a second copy of client data and a second import. That holds only if its integration passes these tests:

- Trial-balance data arrives without export and re-import.
- Adjusting entries reach the ledger or return as you expect.
- Binders stay exportable if you later leave the suite.

## How do you trial candidates and plan migration and exit?

Trial every finalist on a completed binder from your most demanding engagement type. Trial on a copy with client identifiers removed unless the vendor has confirmed in writing who can reach the trial environment and what happens to the data afterwards, and your data-security obligations allow loading client data on those terms. Then follow these steps:

1. Rebuild the binder from your own template, importing the trial balance rather than typing it.
2. Run the trial-balance, archiving, access, offline and several-people tests above.
3. Roll the binder forward and check that its structure carries over and its sign-offs do not.
4. Score the results in your matrix.

For migration in, decide which old binders to convert, and keep every original in its original form. A converted binder can lose sign-offs, cross-references or links and cannot prove what the original showed at sign-off, so it is a working copy, not a replacement. Keep each original unchanged and readable for as long as you keep that binder, check each converted copy against it, and do not retire the old system until you know how the originals will stay readable; for audits, the no-deletion rules above apply to them. AU-C 230 notes that the AICPA's QM section 10A addresses firm procedures to maintain the integrity, accessibility and retrievability of documentation, for example when paper documentation is scanned or copied to another medium.

For exit, get in writing before you sign what you can export (workpapers, sign-offs, review notes and history), in which formats, for how long after cancellation, and whether archived binders open read-only without a subscription. How long binders must be kept is a separate question; the system has to let you reproduce them for as long as you keep them.

## Sources

1. American Institute of Certified Public Accountants — *U.S. Auditing Standards — AICPA (Clarified) [AU-C sections], including AU-C 230 Audit Documentation and AU-C 330 Performing Audit Procedures in Response to Assessed Risks and Evaluating the Audit Evidence Obtained*, AICPA Professional Standards, copyright 2025. https://downloads.ctfassets.net/rb9cdnjh59cm/6SZYDorUSdWM3sjctjPnOL/d2cb13701145f8699624298a1b875c8a/ps-au-c-sections.pdf
2. American Institute of CPAs — *Accounting and Review Services (Clarified) [AR-C]*, currently effective AR-C sections, copyright 2026. https://assets.ctfassets.net/rb9cdnjh59cm/30H0g7T5e1Rbd00RW9YJxE/1ce170fe7ac2edafe31f0039c2e2fba4/ps-ar-c-sections.pdf
3. AICPA & CIMA — *AICPA SASs - currently effective*, current as of August 2026. https://www.aicpa-cima.com/resources/download/aicpa-statements-on-auditing-standards-currently-effective
4. Public Company Accounting Oversight Board — *AS 1215: Audit Documentation*, current text as amended, undated page, retrieved September 2026. https://pcaobus.org/oversight/standards/auditing-standards/details/AS1215
5. Caseware International Inc. — *Caseware Working Papers*, U.S. product page, undated, retrieved September 2026. https://www.caseware.com/us/products/working-papers/
6. Microsoft — *How versioning works in lists and libraries*, undated, retrieved September 2026. https://support.microsoft.com/en-us/office/how-does-versioning-work-in-a-list-or-library-0f6cd105-974f-44a4-aadb-43ac5bdfd247
7. Microsoft — *Create workbook links*, undated, retrieved September 2026. https://support.microsoft.com/en-us/office/create-an-external-reference-link-to-a-cell-range-in-another-workbook-c98d1803-dd75-4668-ac6a-d7cca2a9b95f
8. Microsoft — *Collaborate on Excel workbooks at the same time with co-authoring*, undated, retrieved September 2026. https://support.microsoft.com/en-us/office/collaborate-on-excel-workbooks-at-the-same-time-with-co-authoring-7152aa8b-b791-414c-a3bb-3024e46fb104

## Related questions

- [What practice workflow or client-management software should an accounting or bookkeeping firm use to run and track its client work and document flow?](https://uppago.com/resources/how-to-choose-practice-management-software-for-a-bookkeeping-firm)
- [How long must a tax preparer, accountant, or bookkeeping firm keep client records and copies of client returns?](https://uppago.com/resources/how-long-a-tax-preparer-or-accounting-firm-must-keep-client-records)
- [How should a firm review and sign off a client's books before they go out — the second-pair-of-eyes step over a preparer's work?](https://uppago.com/resources/how-a-firm-reviews-and-signs-off-client-books-before-they-go-out)
- [What software should a small business use to manage and store its accounting documents (invoices, receipts, statements)?](https://uppago.com/resources/how-to-choose-software-to-manage-and-store-accounting-documents)