The Grant Recipient’s Guide to Single Audits and Federal Compliance in 2026
For nonprofit organizations across Virginia and Washington DC, federal and state grants represent both a lifeline for mission delivery and a significant compliance obligation. The landscape in 2026 is defined by rising audit standards, expanded scrutiny of internal controls, and a shifting federal enforcement environment that requires organizations to treat grants management as a core competency rather than an administrative afterthought.
This guide examines the key requirements for grant recipients, the audit obligations that accompany federal funding, and practical steps organizations can take to protect their funding and demonstrate accountability.
The Single Audit: When Federal Funding Triggers a Higher Standard
Any non-federal entity that expends $1,000,000 or more in federal awards during its fiscal year must undergo a Single Audit under the Uniform Guidance (2 CFR Part 200) . This threshold, increased from $750,000, applies to nonprofits, state and local governments, universities, hospitals, and tribal organizations .
The Single Audit is not merely a financial statement audit. It combines two examinations: an audit of the entity’s financial statements, and a compliance audit testing whether the organization followed the specific requirements of its major federal programs . Auditors examine the Schedule of Expenditures of Federal Awards (SEFA), internal controls over compliance, and compliance with requirements such as allowable costs, eligibility, procurement, and reporting .
A critical distinction for nonprofit leaders: even if your organization falls below the $1 million threshold and is exempt from a Single Audit, you remain subject to all federal grants management rules . The threshold determines whether an audit is required—not whether compliance obligations apply.
Virginia Nonprofit Audit and Review Requirements
Virginia law establishes financial reporting thresholds that operate independently of federal Single Audit rules. Nonprofits with gross annual revenue of $750,000 or more must obtain a financial review performed by an independent CPA . If gross annual revenue reaches $1.5 million or more, the Commonwealth may require a full independent audit instead of a review .
These requirements are tied to maintaining state tax exemptions and charitable registration compliance. Failing to meet applicable financial reporting standards can jeopardize a nonprofit’s compliance with Virginia tax exemption and charitable solicitation rules . Organizations soliciting contributions in Virginia with gross contributions above $750,000 must file audited financial statements with their annual VDACS charitable solicitation renewal .
For organizations operating across state lines, each state may impose its own requirements. Many multi-state nonprofits choose to meet the highest required standard—often a CPA audit—to satisfy multiple jurisdictions efficiently .
Washington DC Grant Compliance Requirements
Organizations receiving grants from the District of Columbia government face specific documentation requirements. Under DC Code § 1-325.323, grantees must submit IRS certification of 501(c)(3) status, the organization’s most recent financial audit (not more than two years old) or a recent financial statement prepared by a certified accountant, IRS Form 990, a notarized statement certifying current tax status, and a comprehensive program statement with scope of work and budget .
DC grant agreements typically include audit provisions allowing the District to audit expenditure statements and source documentation at any time before final payment and for three years thereafter .
Common Single Audit Findings and How to Avoid Them
Audit findings often stem from execution gaps rather than policy deficiencies. REDW’s Spring 2026 Single Audit Readiness guidance identifies several recurring problem areas :
Procurement Documentation
Findings frequently involve inadequate competition documentation, missing sole source or emergency justification, insufficient price reasonableness analysis, missing required approvals, and contract files that lack required clauses . Recommended actions include confirming policy currency, matching policy to actual practice, standardizing procurement file documentation with checklists, training program staff who initiate purchases, and performing pre-audit file reviews on a sample of federal purchases .
Time and Effort Reporting
Salary and benefit costs charged to federal awards must be supported by time and effort records that accurately reflect the work performed. The method used to allocate salaries must be documented, applied consistently, reviewed regularly, and supported by documentation that someone outside the organization could reasonably follow .
Subrecipient Monitoring
Pass-through entities must focus on two recurring risk areas: subrecipient versus contractor determinations (the substance of the relationship matters more than the form of the agreement), and SAM.gov verification confirming potential subrecipients are not suspended or debarred . Common findings occur when monitoring is performed but not documented, or when subaward files are missing risk assessments, monitoring plans, or follow-up on subrecipient audit results .
Eligibility Documentation
Findings often occur when eligibility criteria are met but supporting documentation is incomplete, determinations are performed inconsistently, or required recertifications are missed . Organizations should identify programs with eligibility requirements and standardize documentation.
Internal Controls: The Foundation of Grant Compliance
Internal controls are the practices that ensure grant funds are spent as intended, reported accurately, and supportable under audit. Documented controls help preserve organizational knowledge, promote consistency, and support continuity as teams evolve .
Key controls for grant management include authorization and approval (who can approve grant expenses, what limits apply, and where is that documented), segregation of duties (the person requesting a purchase should not be the one approving and recording it), and documentation and record retention (approvals, cost justifications, allocation methodologies, and exceptions must be documented and retained) .
The 2024 Uniform Guidance revisions explicitly include cybersecurity and other measures to safeguard information within the definition of internal controls . Organizations should identify where key data resides, who can change it, and what evidence exists that changes and approvals are controlled .
The Shared Responsibility of Grants Management
No single team owns grants management. It is a shared discipline spanning finance, programs, and development .
Finance owns the guardrails: internal controls, cash management, the general ledger, financial reporting, and time and effort reporting. Every restricted grant should have its own distinct identifier—a grant code, unique class or fund, or project ID—so spending can be tracked cleanly by award .
Program teams manage the work: implementing grant-funded projects, managing vendor and subrecipient relationships, confirming expenses are allowable, and reviewing budget-versus-actual reports regularly. A monthly sit-down between finance and program teams to review the numbers is a habit worth building .
Development keeps the funder relationship strong: staying in the loop so they are aware of any grant-related issues and can help communicate with a funder as needed. The handoff from development to program and finance teams is a common place for grant details or funder expectations to fall through the cracks .
Increased Scrutiny of Tax-Exempt Organizations
The environment for nonprofits in 2026 includes heightened federal scrutiny. Reports indicate that the Trump administration has directed the IRS’s Criminal Investigation Division to focus on organizations it deems politically adversarial, and the IRS is being reorganized to enable easier pursuit of investigations .
This environment elevates the importance of documentation. Organizations must treat their compliance, records, governance, and operations as though they could be subject to criminal exposure, reputational harm, and loss of exempt status .
A readiness plan should include ensuring governing documents, mission statement, bylaws, board minutes, and public filings clearly align with a valid exempt purpose; reviewing whether the organization is engaging in any activity that might jeopardize its exempt status; maintaining a master log of all records; engaging outside counsel or a tax-specialist advisor for a risk assessment; and having a document retention policy in place .
How Nova Tax & Accounting Services Can Help
At Nova Tax & Accounting Services, we help Virginia and DC nonprofits navigate the complex requirements of grant management, Single Audit compliance, and financial reporting. Our team provides:
Single Audit (Uniform Guidance) services for organizations expending $1 million or more in federal awards
Financial statement audits, reviews, and compilations tailored to nonprofit reporting requirements
Internal controls assessment to strengthen grant compliance and audit readiness
Form 990 preparation and governance consulting
Grant compliance reviews and pre-audit assessments
We serve organizations throughout Northern Virginia, Washington DC, and Maryland from our office in Ashburn. For more information, visit https://novataxservices.com/ or schedule a free consultation.
