Home›Audits
What an audit looks like, by business type
Someone is coming to inspect, audit or examine your business. For each type of business, these pages list who comes and how often, what they ask to see, what they pick on the day, what gets cited where counts are published, where written policies come in, and which dates matter. Every fact links to its source.
Behavioral health and IDD providersAccreditation surveyors, state reviewers and OCR each pull different records from a CARF or Joint Commission accredited provider.Dental practicesOCR, OSHA and your state each ask a dental practice for different records.Electrical contractorsFor licensed commercial and industrial electrical contractors with 10 to 100 employees facing an OSHA inspection, a state licensing board review or a hiring client's prequalification check.Home health and home care agenciesMedicare-participating home health agencies face unannounced surveys at least every 36 months, and licensed agencies add a state survey.Independent insurance agencies and MGAsCarriers audit under their contracts, state insurance departments examine under statute and the NAIC's published standards, and New York adds the DFS cybersecurity regulation.SEC-registered investment advisersThe Division of Examinations announces most exams by phone, then sends a request list, and its Exam Handbook says staff usually allow two weeks to produce records.Machine shopsA precision job shop answers to a certification body on a three-year cycle, to OEM supplier quality teams on the customer's schedule, and to OSHA when a trigger or program selects it.Medical device makersSince February 2, 2026 FDA inspects device manufacturers to the QMSR under a risk-based compliance program that replaced QSIT.Medical practicesOCR, OSHA, Medicare claim reviewers and, for practices that run tests in the office, CLIA surveyors each ask a small practice for different records.Software companiesA 20 to 99 person software company usually answers to three reviewers: a CPA firm examining controls for SOC 2, an ISO 27001 certification body, and customer security reviews.Trucking fleetsFor regional carriers with 20 to 200 drivers facing an FMCSA safety audit, compliance review or state roadside inspection.
Need a hand implementing it?
Find a Consultant Who Does This Work
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
From the publisher
Keep Your Written Policies in One Place
Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.
See how AllyMatter works ↗From $29/mo, 20 editors, unlimited staff