A matter certification audit letter is the written response a lawyer sends to a client’s external auditor confirming the status, likelihood of loss, and estimated financial exposure of legal matters the lawyer handled during the audit period. The auditor cannot evaluate legal risk on its own, so the lawyer’s response becomes the evidence that supports what the company reports about litigation and claims in its financial statements. What goes into that letter, and what stays out, is governed by a specific set of rules.
What the Response Has To Cover
PCAOB Auditing Standard AS 2505 sets out the categories the lawyer is expected to address for each matter.1Public Company Accounting Oversight Board. AS 2505 – Inquiry of a Client’s Lawyer Concerning Litigation, Claims, and Assessments
- Nature and progress. A description of what the case involves, where it stands, and the company’s planned approach (contest, settle, and so on).
- Likelihood of loss. The lawyer’s evaluation of how likely the company is to lose.
- Estimated exposure. A dollar amount or range, if one can reasonably be estimated.
- Completeness. Confirmation that management’s list of pending and threatened matters is accurate, with any additions the lawyer knows about.
- Unasserted claims. Comments on claims management has flagged as probable to be asserted and likely to result in a loss.
The response is limited to matters the lawyer actually worked on in a substantive way during the period. A firm that handled one employment case is not expected to speak to an unrelated patent dispute it had no part in. The letter should say so explicitly and identify the period it covers.
Financial figures are part of the response as well. Unbilled fees (time recorded but not invoiced) and outstanding advanced costs such as filing fees or expert payments are typically included, because they represent amounts the company may owe but has not yet booked. Verify these against current billing records before signing, since stale numbers misstate the client’s obligations.
Likelihood Categories and Why the Words Matter
Lawyers and auditors share a vocabulary drawn from accounting standards under FASB ASC 450. Each matter falls into one of three categories:
- Probable. The loss is likely to happen.
- Reasonably possible. The chance of loss is more than slight but less than likely.
- Remote. The chance of loss is slight.
Those labels drive financial reporting. A probable loss that can be reasonably estimated has to be recorded as a liability on the balance sheet. A reasonably possible loss requires footnote disclosure even if nothing is booked. A remote loss generally requires neither. So moving a matter from probable to reasonably possible reduces reported liabilities; moving it the other direction can force a material adjustment. Choose the label with the same care you would give a filed pleading.
Unasserted Claims and the Limits of the Inquiry
Unasserted claims are potential actions that have not been filed but that the company has reason to anticipate — a product defect that has not yet produced lawsuits, say, or a regulatory probe that has not yet produced charges. Disclosure of these creates obvious tension with the client’s litigation posture.
Under AS 2505, management identifies the unasserted claims it considers probable to be asserted and likely to produce a loss, and the lawyer comments on management’s description and evaluation. The lawyer is not asked to hunt for unasserted claims management did not list. The standard contemplates that when a lawyer, in the course of representing the client, concludes the client should disclose or consider disclosing an unasserted claim, the lawyer will advise the client directly.1Public Company Accounting Oversight Board. AS 2505 – Inquiry of a Client’s Lawyer Concerning Litigation, Claims, and Assessments
Many firms include standard language making clear they are only commenting on unasserted claims the client specifically asked them to address. That language, which tracks the ABA Statement of Policy, is not treated by auditors as a scope limitation so long as the lawyer also confirms the understanding about advising the client when disclosure may be needed.2Public Company Accounting Oversight Board. AI 17 – Inquiry of a Client’s Lawyer Concerning Litigation, Claims, and Assessments
Confidentiality and What the Inquiry Letter Actually Authorizes
ABA Model Rule 1.6 keeps information about the representation confidential unless an exception applies — preventing a crime or fraud likely to cause substantial financial harm, complying with a court order, or complying with other law.3American Bar Association. Model Rules of Professional Conduct – Rule 1.6 Confidentiality of Information The client’s own inquiry letter supplies the consent that lets the lawyer answer the auditor.
But the ABA Statement of Policy, approved by the ABA Board of Governors in 1975 and still the governing framework, draws a line that matters in practice. The initial request letter authorizes factual responses. It does not automatically authorize the lawyer to disclose confidential information or to provide evaluations of claims. Those require separate, informed consent from the client after the lawyer has explained the legal consequences of disclosure.4Public Company Accounting Oversight Board. AU Section 337C – American Bar Association Statement of Policy Regarding Lawyers Responses to Auditors Requests for Information
The concern is practical: a written evaluation of a claim’s merits can be used by an opposing party as an admission. Think carefully about how much evaluative detail you include and whether the client understands the risks of your providing it.
Scope and Date Limits Under the ABA Statement of Policy
The 1975 ABA Statement of Policy sets the ground rules for what a lawyer should and should not disclose. The key points:4Public Company Accounting Oversight Board. AU Section 337C – American Bar Association Statement of Policy Regarding Lawyers Responses to Auditors Requests for Information
- Substantive involvement only. The response is properly limited to matters the lawyer actually worked on in a substantive way during the audit period.
- Pending litigation can be addressed. For cases actively pending, or where a third party has stated an intention to sue, the lawyer may describe the claim, state the client’s position, and assess exposure.
- No general inquiries about possible claims. It is not considered appropriate for lawyers to respond to broad auditor questions about claims that have not been threatened or filed.
- Date limitation. The lawyer may specify the date as of which information is provided and disclaim any obligation to update the auditor about later developments.
Timing and Submission
Auditing standards call for the response date to be as close to the date of the auditor’s report as practicable. The client’s inquiry letter typically sets a deadline a day or two before the auditor expects to finish fieldwork. If significant time passes between the response and the audit report, the auditor may ask for an update.5American Bar Association. Report on Audit Response Timing Issues For public companies, a missed deadline can delay the whole audit and push SEC filings late.
Most response letters follow a standardized format worked out between the legal and accounting professions. Firms often use practice management software to pull matter numbers, billing figures, and case descriptions directly from internal databases, which reduces transcription errors. Submission increasingly runs through secure auditor portals, though some matters still require physical delivery with original signatures. Keep delivery confirmation and a copy of what you sent either way.
If the Lawyer Does Not Respond
A refusal to provide the information requested is a scope limitation on the audit. Under AS 2505, that alone can prevent the auditor from issuing an unqualified opinion on the financial statements.1Public Company Accounting Oversight Board. AS 2505 – Inquiry of a Client’s Lawyer Concerning Litigation, Claims, and Assessments A qualified opinion or a disclaimer tells investors and regulators the auditor could not verify what it needed to.
In-house legal cannot stand in for outside counsel here. The standard makes clear that information from a company’s internal legal department does not substitute for what an outside lawyer declines to provide. That gives outside counsel real leverage, and real responsibility.
Liability for Getting It Wrong
A knowingly false matter certification can carry federal criminal exposure. Under 18 U.S.C. § 1001, knowingly making a materially false statement in a matter within the jurisdiction of any branch of the federal government is punishable by up to five years in prison and fines, with an eight-year maximum where the statement relates to terrorism offenses. The statute reaches false writings and documents as well as oral statements, so a signed audit response letter with knowingly false content fits.6Office of the Law Revision Counsel. 18 U.S. Code 1001 – Statements or Entries Generally
Bar discipline is the other track. Audit response letters live in the company’s permanent audit file and may be reviewed by regulators years later, so a misstatement has a long tail. ABA Model Rule 1.1’s competence requirement also applies to work of this kind: the preparation and thoroughness the task requires are part of competent representation, and a sloppy response that misstates billing figures or overlooks a pending claim is a competence failure regardless of intent.7American Bar Association. Model Rules of Professional Conduct – Rule 1.1 Competence The best protection is the one the Statement of Policy already points to: stay within what you actually handled, verify your numbers, get real client consent for evaluative content, and say exactly as of what date you are speaking.