The PCAOB rules for offshore audit staff depend on one question: does the offshore team belong to your firm, or to another firm? Staff your firm employs are supervised like any other engagement team member under AS 1201. People from an affiliate or a separate provider who perform audit procedures are "other auditors", which brings in the planning steps in AS 2101, written affirmations, Form AP reporting and, from December 15, 2026, the quality control rules in QC 1000.
This guide is for US CPA firms that audit issuers or broker-dealers and use offshore staff for workpapers, testing or file assembly. It sets out the PCAOB rules for offshore audit staff that apply as of October 2026, then shows how to build a workpaper file that makes supervision and review visible. If your audits are private-company engagements under AICPA standards, the rules differ, and our guide to outsourced audit support under AICPA standards covers the Code of Professional Conduct, SQMS No. 1 and AU-C 220.
PCAOB standards sort the people who work on an audit by their relationship to the firm that signs the report. The 2024 QC 1000 filing explains how this works for offshore delivery centers: "personnel at shared service centers may be firm personnel (if they are employed by the firm or function as firm employees) or other participants (if they are personnel of another organization, such as a network affiliate)" (PCAOB QC 1000 filing, SEC Release 34-100277).
That classification drives everything that follows:
| Offshore arrangement | PCAOB treatment | What the lead firm must do |
|---|---|---|
| Captive center, staff on your payroll or functioning as your employees | Firm personnel on the engagement team | Supervise and review under AS 1201; sign-offs under AS 1215 |
| Network affiliate abroad performing audit procedures | Other auditor (other participant under QC 1000) | AS 2101 planning steps, written affirmations, AS 1201 supervision, Form AP if 5% or more of hours |
| Separate outsourcing provider performing audit procedures | Other auditor | Same as above, plus checking whether its role becomes substantial for PCAOB registration |
| Provider doing clerical or administrative work only | Outside the engagement team in most cases | Confidentiality and data controls; confirm the work stays clerical |
Classification is a judgment about the facts, and the contract alone does not settle it. Document the reasoning in the planning file, because the rest of the file depends on it.
The PCAOB rewrote its rules for audits involving other auditors in Release 2022-002. The SEC approved the package on August 12, 2022, and it applies to "audits of financial statements for fiscal years ending on or after December 15, 2024" (SEC Release 34-95488). Calendar-year issuer audits from fiscal 2024 onward fall under it.
According to the SEC approval order, the amended AS 2101 and AS 1201 require the lead auditor to:
For a firm sending testing to an offshore affiliate, this means the planning folder should hold the sufficiency memo, the independence affirmations, the competence affirmation and the instruction letter before fieldwork starts. A firm moving from AICPA engagements will find the referred-to auditor concept familiar, and our article on SAS 149 and referred-to auditors explains the private-company version.
AS 1201 applies to everyone on the engagement team, wherever they sit. The QC 1000 filing describes its purpose plainly: "Proper supervision aims to ensure that work is performed as directed and supports the conclusions reached" (SEC Release 34-100277). The 2024 AS 1000 amendments also clarified "the engagement partner's existing responsibilities for supervision and review by providing more specificity related to such activities" (SEC Release 34-100773).
In a cross-border file, supervision has to show up in the documents. Practical steps:
The same 2024 amendments changed AS 1215 in two ways that matter for offshore teams. They clarified the documentation requirements "to identify who performed the work, who reviewed the work, and the date of such review", and they accelerated "the period in AS 1215 to assemble a complete and final set of audit documentation for retention from 45 days to 14 days" (SEC Release 34-100773).
The effective dates differ by firm size. The amendments apply to audits of fiscal years beginning on or after December 15, 2024. For firms that issued audit opinions for 100 or fewer issuers in calendar 2024, the documentation completion change starts with fiscal years beginning on or after December 15, 2025. That means a calendar-year 2026 issuer audit is on the 14-day clock at every registered firm. Audit documentation is then retained for seven years under AS 1215.14.
Worked example. A firm releases the auditor's report on a calendar-year 2026 issuer audit on Friday, February 26, 2027.
| Item | Date |
|---|---|
| Report release date | February 26, 2027 |
| Documentation completion date under the 14-day rule | March 12, 2027 |
| Date under the former 45-day rule, for comparison | April 12, 2027 |
Two weeks leaves little room to chase missing evidence from an offshore team in another time zone. Offshore preparers should finish assembly items (evidence uploads, cross-references, tick mark legends, closed review notes) before the report date so the final two weeks are spent on checks only.
Form AP tells investors which other firms worked on an audit. In the PCAOB's 2026 analysis, "Firms are identified on Form AP as other accounting firms if they provided at least 5% of the total audit hours for the engagement" (SEC Release 34-106372).
A separate test decides whether an offshore firm must register with the PCAOB. Under PCAOB Rule 1001(p)(ii), playing a substantial role means "performing material services that a public accounting firm uses or relies on in issuing all or part of its audit report", or performing most of the audit work on a component that makes up 20% or more of consolidated assets or revenues. In its economic analysis, the same release reasons that a firm with a less-than-substantial role would generally have hours that do "not constitute more than 20% of the total engagement hours provided by the lead auditor." That is a PCAOB staff proxy, measured against the lead auditor's own hours, and it does not replace the Rule 1001(p)(ii) test.
Worked example. An issuer audit runs 3,200 total hours. The lead auditor provides 2,100 of them, so 5% of total hours is 160 and 20% of the lead auditor's hours is 420.
| Offshore participant | Hours | Share of total hours | Named on Form AP (5% or more) | Share of lead auditor hours | Above the 20% proxy |
|---|---|---|---|---|---|
| Network affiliate in India | 280 | 8.75% | Yes | 13.33% | No |
| Separate provider, file assembly support | 120 | 3.75% | No | 5.71% | No |
| Second affiliate doing most substantive testing | 700 | 21.88% | Yes | 33.33% | Yes, review registration |
Track hours by firm from the first week, since the share can drift upward during busy season.
QC 1000 was adopted on May 13, 2024, and approved by the SEC with a December 15, 2025 start. On August 28, 2025, the PCAOB postponed it "from December 15, 2025, to December 15, 2026" and said it was not proposing any changes to the text (SEC Release 34-103803). The interim standards under Rule 3400T stay in force until that date.
As of October 2026 the start date has not moved again. On September 9, 2026, the Board adopted proposed amendments that would rescind the External QC Function requirement, rescind the "design-only" requirement, allow certain QC roles to be filled by non-firm personnel, and cut QC documentation retention "from seven to five years". The Board's filing states that "QC 1000 and the related amendments to PCAOB standards, rules, and forms adopted in 2024 will take effect on December 15, 2026", and that the amendments, if approved by the SEC, will take effect on the same date (SEC Release 34-106372). SEC comments closed on October 9, 2026, and approval was still pending when this guide was updated. Check the SEC's PCAOB rulemaking page for the final order.
For offshore work, the central point does not change with the amendments. The 2024 filing says the firm's QC system "must address all the work done on the firm's engagements and in connection with the design, implementation, and operation of the firm's QC system itself, regardless of who does it" (SEC Release 34-100277). Offshore affiliates and providers are other participants, so your quality risks and responses need to name them. The AICPA equivalent for private-company work is covered in our page on SQMS and the AICPA quality management standards.
The standards set the duties. A consistent file design is how an offshore team shows they were met.
Use a fixed folder tree and index. Keep the same top-level folders on every job: Planning, Trial Balance, Lead Schedules, Risk Assessment, Substantive Testing, Controls Testing, Analytics, Reporting and Admin. Give each area a stable index, for example 101 for Cash, 102 for Receivables, 201 for Payables and 401 for Revenue. Cross-references become fast and predictable.
Open every workpaper with the same header. Include purpose, procedure, period, preparer and date, reviewer and date, and conclusion. With the AS 1215 requirement to show who performed and who reviewed the work, these fields are evidence in their own right.
Tie the trial balance to the lead schedules. Import the trial balance once, assign index numbers and lock it. Lead schedules show beginning balance, movements and ending balance, with one column tying to the statements and one back to the trial balance index.
Make evidence easy to trace. Store evidence next to the workpaper, named to match the index. If you test ten invoices, number them one to ten in both places. When a system export is used, save the export and record the filters. Our article on PCAOB technology-assisted analysis explains the extra documentation for data the team analyzes electronically.
Explain sampling so others can repeat it. State the population, the filter, the sample size and its basis, and save the extract. For monetary unit sampling, record the interval and start point.
Record exceptions with outcomes. For each one, record the item, condition, cause and effect on the assertion, classify it as an error, control deviation or documentation gap, and close it with a status. Our list of common audit issues for small businesses shows where exceptions tend to cluster.
Keep review notes in the file. Each note gets an ID, owner and close date at the top of the workpaper. Notes in email leave no trail for an inspector.
Lock files after sign-off. Date preparer and reviewer fields on the day the work is done, keep a short version history, and lock the workpaper once reviewed. Evidence added after the documentation completion date must show the date it was added, who prepared it and the reason, as AS 1215.16 requires.
If the offshore team belongs to another firm, its independence affirmations under the amended AS 2101 belong in the planning file before work starts. Limit system access to the clients in scope, remove it at engagement end and avoid email file transfers. Our data security checklist for offshore accounting partnerships lists the controls to request. For the broader difference between audit roles, see internal vs external audits, and for selecting a vendor, our guide on how to choose an outsourced audit support provider.
Do PCAOB rules allow offshore staff to work on issuer audits? Yes. PCAOB standards do not bar offshore staff. They decide how those people are treated: as firm personnel supervised under AS 1201, or as other auditors subject to the AS 2101 planning steps, written affirmations and Form AP reporting.
Does an offshore audit support provider need to register with the PCAOB? Only if it plays a substantial role under PCAOB Rule 1001(p)(ii), such as performing material services the lead firm relies on. The PCAOB's 2026 economic analysis treats hours above 20% of the lead auditor's engagement hours as a sign that a role may no longer be less than substantial.
When does the 14-day documentation completion date apply? For audits of fiscal years beginning on or after December 15, 2024. Firms that issued opinions for 100 or fewer issuers in 2024 apply it from fiscal years beginning on or after December 15, 2025.
Was QC 1000 delayed again? As of October 2026, no. The August 2025 postponement moved the start to December 15, 2026. Amendments proposed in September 2026 would take effect on that same date if the SEC approves them.
Are offshore staff on a captive delivery center other auditors? Usually not. If they are employed by the firm or function as firm employees, the PCAOB treats them as firm personnel. Staff of a network affiliate or outside provider are other participants.
Madras Accountancy supports US CPA firms with audit workpaper preparation, tie-outs, PBC tracking and file assembly under the firm's own methodology, supervision and sign-off. To talk through how offshore support could fit your PCAOB or AICPA engagements, contact our team.
The section 4960 excise tax is 21% of nonprofit pay over $1M. From 2026 it covers all employees. See the medical carve-outs, Form 4720 and a worked example.
The paid family and medical leave tax credit is permanent from 2026. See the 12.5% to 25% rates, the premium option, the 6-month rule and how Form 8994 works.
Opportunity zones become permanent in 2027 under the One Big Beautiful Bill. See the new deferral, rural bonus, and the 2026 handoff.
