A management representation letter is the letter in which a company's management confirms to its auditor, in writing, that it has met its responsibility for the financial statements, has given the auditor all relevant information and access, and has recorded every transaction. In an audit of a private company under the AICPA's AU-C 580, the auditor has to request it. The letter is addressed to the auditor, dated as of the date of the auditor's report, and usually signed by the CEO and the CFO. If management won't give the core representations, the auditor has to disclaim an opinion or withdraw. The AICPA publishes an illustrative letter, which I link rather than reprint. What this page adds is the part that tends to slip in practice: sending the letter, following up and tracking the return, with a template for the tracking log and the reminder.
This isn't legal, tax or audit advice. It's based on AU-C 580 as published by the AICPA and on the German professional rules, as of November 2026. For the AI side of accounting firms, start with AI Agents for Tax Firms: A Real Case.
What a management representation letter covers
AU-C 580 sets out which written representations the auditor requests. The two that every letter carries:
- Management's responsibilities (paragraph .10): that management has fulfilled its responsibility for "the preparation and fair presentation of the financial statements" under the applicable framework, and for the internal control relevant to it.
- Information and completeness (paragraph .11): that management "has provided the auditor with all relevant information and access" as agreed in the engagement terms, and that "all transactions have been recorded and are reflected in the financial statements".
Paragraph .12 adds representations about fraud: management's responsibility for controls against it, its risk assessment and its knowledge of fraud or suspected fraud. Other AU-C sections add topic-specific representations, and the auditor may ask for more where specific assertions need support.
Who signs and how the letter is dated
The auditor requests the letter from "management with appropriate responsibilities for the financial statements and knowledge of the matters concerned" (.09). The application guidance names the typical signers: "the entity's chief executive officer and chief financial officer or other equivalent persons in entities that do not use such titles" (.A2).
Two formal rules matter for anyone tracking the letter:
- Form. It's "a representation letter addressed to the auditor" (.21).
- Date. It's dated "as of the date of the auditor's report on the financial statements" (.20). The auditor's report "cannot be dated, before the date of the written representations" (.A23).
So the letter can't go out too early and come back whenever. It has to land on the report date, which makes follow-up a scheduling task.
When management won't sign
If management doesn't provide the representations under paragraphs .10 and .11, or the auditor concludes they aren't reliable because of doubts about management's integrity, the auditor "should disclaim an opinion on the financial statements" or withdraw from the engagement (.25). For other missing representations, the auditor discusses the matter with management, reevaluates management's integrity and decides on the effect on the opinion (.26). A missing signature is therefore not paperwork; it can stop the report.
Representation letter template: where to find one
The reference is Exhibit A, "Illustrative Representation Letter", in AU-C Section 580 Written Representations from the AICPA. Exhibit B lists illustrative specific representations for particular topics. The text is © AICPA, so I don't reprint it here. Adapt the illustrative letter to the engagement, and check the current AICPA edition, since amendments from SAS 143 apply to audits of periods ending on or after December 15, 2023.
What a firm can build itself is everything around the letter: when the draft goes out, who follows up and when a person steps in.
Sending and tracking returns, step by step
The more engagements close in one season, the easier it is for one unsigned letter to hold up a report. The workflow has five steps:
- Log at sending. When the draft letter goes out, one line goes into the tracking log: client ID, engagement, date sent, how to return it.
- Reminder 1. After a fixed number of days without a return, a friendly reminder goes out. You set the number; 5 business days is one example.
- Escalation. If nothing comes back, the case goes to the engagement team or the office manager, and a person calls instead of sending a second and third email.
- Return. The signed letter arrives, the date goes into the log, and a person checks signers and date against the report date.
- Report. Only then is the report released.
Template: tracking log and reminder email
The log uses client IDs, not names, so it can be shared or handed to an AI employee without listing who your clients are. The reminder contains no figures from the financial statements.
REPRESENTATION LETTER TRACKING LOG, SEASON [YEAR]
Client ID | Engagement | Sent | Reminder 1 | Escalation | Returned | Checked by
----------|----------------|------------|------------|------------|------------|-----------
[10001] | Audit FY[YY] | [MM/DD/YY] | [MM/DD/YY] | | [MM/DD/YY] | [initials]
[10002] | Audit FY[YY] | [MM/DD/YY] | [MM/DD/YY] | [MM/DD/YY] | |
[10003] | Audit FY[YY] | [MM/DD/YY] | | | |
Rules:
Reminder 1 = Sent + [5] business days, only if Returned is empty
Escalation = Reminder 1 + [3] business days, to [engagement lead / office]
No second reminder email; the next step is a phone call.
Returned = date the signed letter arrived
Checked by = person who checked signers and date against the report date
REMINDER TO THE CLIENT (email)
Subject: Your representation letter for [entity], FY[YY]
Hi [Name],
on [date sent] we sent you the draft representation letter for
[entity]'s [financial statements, FY[YY]]. We haven't received the
signed letter yet.
We need it, dated [planned report date], before we can release our
report. Please return it signed by [CEO and CFO / signers] by [date]:
[return route, e.g. upload to the client portal].
If anything in the draft needs changing, or you have questions, call
[contact] at [phone].
If you've sent it in the last few days, please ignore this message.
Best regards,
[Name, firm]
Replace the brackets once for your firm. How to keep a follow-up friendly is covered in Follow-Up Email Templates, No Pressure.
In Germany: the Vollständigkeitserklärung
German firms use the Vollständigkeitserklärung, and the rules depend on who does what. For a tax adviser preparing annual financial statements, the Federal Chamber of Tax Advisers (BStBK) recommends obtaining one (guideline, Tz. 53 f.), covering "Belege, Bücher, Bestandsnachweise, Auskünfte". According to the Chamber of Public Accountants (WPK), it's mandatory for auditors preparing statements under IDW S 7. Audits follow ISA [DE] 580 "Schriftliche Erklärungen", which the IDW applies to periods beginning on or after 15 December 2021. For personal income tax returns, a firm can ask for one to protect itself. Model forms come from publishers (DWS-Verlag for tax advisers, IDW Verlag for auditors); the German version of this page lists them.
What an AI employee takes on here
At a tax advisory firm where I built AI employees, this exact work is handed over. The case write-up says: "The AI employee sends it out and keeps track of what's been returned." I don't publish more about this part of the case. The log and steps above are my template, not a copy of the firm's setup.
In my own business, two roles fit. Here is how you use them in your firm.
Sonja, the reminder as a draft. Sonja has been running in my business since July 17, 2026. She drafts emails into my inbox, and nothing goes out until I say so explicitly. When nobody had replied to a campaign six days later, "Sonja didn't turn that into a third round of nudging", but into a two-touch approach with a short closing email. For a firm, that means: on the due day, the tracking log turns into a reminder in the firm's tone, as a draft, and after reminder 1 comes a note to call, not another email. How she learns the tone is in Can AI Write Emails in My Voice?. At the firm in the case, the AI employee sends on its own; whether yours sends or drafts for approval is your call.
Frieda, returns in the inbox. Frieda sorts my inbox into four piles plus a fifth for cases that need my judgment, and writes a weekly report. She has never sent anything on her own. For a firm, signed letters coming in land in their own pile so the log is updated quickly, and open returns show in the weekly report. The setup behind that kind of sorting is in AI Email Triage: Agent or Tool?.
What stays with people. Management signs. The firm checks signers, date and any changes. A person makes the escalation call, and the engagement partner decides on the report. The AI employee keeps a log; it doesn't decide anything about the audit or the filing.
Client data with professional secrecy needs its own groundwork; for German firms that means § 203 of the Criminal Code and § 62a of the Tax Advisers Act on service providers. How I decide what an AI gets to see is in AI and Privacy: What the AI Gets to See.
More for accounting and tax firms
Frequently asked questions
Is a management representation letter required?
In an audit under AU-C 580, yes: the auditor has to request it, and without the representations on management's responsibilities and completeness the auditor disclaims an opinion or withdraws.
Who signs the management representation letter?
Management with responsibility for the financial statements, typically the CEO and the CFO or people in equivalent roles.
What date goes on the representation letter?
The date of the auditor's report. The report can't be dated before the written representations.
Is there a free representation letter template?
The AICPA's illustrative letter is in Exhibit A of AU-C 580, available from the AICPA. The tracking log and reminder above are free to use, but they don't replace the letter.
What to do next
Look at last season: how many letters came back later than a week before the planned report date? Set up the tracking log before the first draft goes out. With a log, a reminder and a fixed escalation, you already have most of the process description for an AI employee. How you set this up in your firm is something we can work out together. Other industries are on AI by Industry.
