CSRE 2400 Review or Compilation Report? Why RBI Won't Accept a Notice-to-Reader for Your Canadian Subsidiary

A Canadian accountant and an Indian FEMA advisor can look at the exact same financial statements and reach entirely different conclusions about whether they're usable. That gap shows up constantly with Indian companies that have a Canadian WOS or step-down subsidiary, and it usually surfaces at the worst possible moment — weeks before the December 31 APR deadline, when someone finally reads the fine print on the Canadian entity's financial statements and realizes the CPA who prepared them explicitly disclaimed any responsibility for their accuracy. That disclaimer isn't sloppy work. It's the entire point of the engagement type that produced it — and it's exactly why RBI won't accept it.

This piece explains the real difference between a compilation report, a CSRE 2400 review, and a full audit under Canadian standards, and why only one of these three genuinely satisfies what RBI's ODI framework expects from a Canadian subsidiary's APR filing.

Three Very Different Documents That All Look Like "Financial Statements"

Canadian accounting practice offers business owners three distinct levels of CPA involvement with a set of financial statements, and the difference between them isn't cosmetic — it's a difference in what the CPA is actually willing to stand behind. A compilation, governed by CSRS 4200, is the accountant simply formatting numbers the client hands over, with zero verification of whether those numbers are accurate. A review engagement, governed by CSRE 2400, sits a genuine step up — the CPA performs analytical procedures and makes inquiries of management, reaching a conclusion of limited assurance. An audit, governed by CAS 700, is the full package — extensive substantive testing, verification of transactions and balances, culminating in reasonable assurance that the statements are free of material misstatement.

All three produce a document that, glanced at quickly, looks like a normal balance sheet and income statement. The difference lives in the cover letter, and almost nobody outside the accounting profession reads that cover letter closely enough to understand what it's actually saying.

What a Compilation Report Actually Tells You

The compilation report — still widely called a Notice to Reader, even though CSRS 4200 formally replaced that terminology back in December 2021 — states plainly that the financial statements were compiled from information management provided, without independent verification, and that no assurance is being expressed on their accuracy. This isn't boilerplate caution; it's a precise, deliberate statement that the CPA has not checked whether the numbers are right. Independence from the client isn't even required for this engagement type, which is exactly why the same accountant who does a company's bookkeeping can also produce its compilation report — there's no conflict to manage, because no verification is happening in the first place.

For a small Canadian business filing routine tax returns or satisfying an internal shareholder request, this is often entirely adequate and considerably cheaper than the alternatives. For an APR audit submission to RBI, it's close to worthless, because RBI's Master Direction on ODI needs financial statements attested by the statutory auditor of the foreign entity, or an equivalent auditing professional — and a document whose entire purpose is to disclaim any attestation of accuracy cannot function as that attestation, regardless of how professionally formatted it looks.

Where a CSRE 2400 Review Sits — and Why It's Still a Judgment Call

A review engagement is a meaningfully different proposition. Under CSRE 2400, the CPA is required to maintain independence, performs actual analytical procedures, and reaches a documented conclusion — limited assurance that nothing came to their attention suggesting the statements are materially misstated. This is real work, typically taking four to eight weeks for a business with reasonably organized books, and it's the minimum standard most Canadian banks require before extending meaningful credit.

Where this gets genuinely uncertain for FEMA compliance purposes is whether "limited assurance" clears the bar RBI's framework has in mind when it references an equivalent auditing professional's attestation. A review engagement produces a real, independent conclusion — but it is explicitly, by design, a lower level of assurance than a full audit's reasonable assurance standard. Whether an AD bank processing your APR filing India submission treats a CSRE 2400 review as sufficient, or pushes back and asks for full audit-level assurance, isn't a settled, universal answer — it tends to depend on how the reviewing bank interprets "equivalent" in your specific case, which is precisely the kind of ambiguity worth resolving before filing season, not during it.

Why the Full Audit Remains the Safer Default for APR Purposes

A full audit under Canadian Auditing Standards — which align closely with the IAASB's International Standards on Auditing that RBI already recognizes as acceptable for host-country attestation — removes this ambiguity entirely. The CPA performs extensive substantive testing of transactions, balances, and internal controls, and issues an opinion expressing reasonable assurance, the same fundamental standard of confidence a statutory audit anywhere else in the world is built to provide. There's no interpretive question about whether it satisfies RBI's requirement, because it's structurally the same category of engagement RBI's framework is written around.

For Indian companies with a Canadian WOS or step-down subsidiary, this is why defaulting to a full audit, rather than the lighter engagement type a small Canadian entity might otherwise choose for its own local purposes, is usually the more defensible route — even when the Canadian entity's size or activity level would technically allow it to get by on a review or compilation for CRA and local shareholder purposes alone.

The Gap Between "What Canada Requires Locally" and "What RBI Needs"

This is the underlying pattern worth understanding, and it echoes what shows up with other host countries too: a jurisdiction's own domestic threshold for what level of financial statement assurance a small business needs has nothing to do with what RBI's ODI compliance framework separately requires. Canada doesn't mandate a full audit for every small private corporation — plenty of Canadian businesses operate perfectly legitimately on a compilation or review engagement, because CRA and most local lenders don't demand more. But RBI isn't Canada's regulator, and Canadian domestic thresholds carry no weight in determining what RBI will accept for an APR audit submission. The Indian parent's control-based obligation under FEMA compliance exists independently of whatever assurance level Canadian law happens to require of the subsidiary on its own.

What Actually Happens When a Compilation Report Gets Submitted Anyway

The failure pattern here is fairly predictable. A Canadian subsidiary, being small and closely held, has historically only ever needed a compilation report for its own local purposes — nobody on the Canadian side had any reason to think about RBI's requirements. The Indian parent's compliance team receives that compilation report at year-end, assumes "financial statements are financial statements," and submits it as part of the APR. Somewhere in that chain, either during AD bank review or later scrutiny, someone actually reads the compilation's cover letter, notices the explicit no-assurance disclaimer, and rejects the filing outright — because a document that states on its face that no verification occurred cannot serve as the audited or equivalently attested financials FEMA compliance requires.

At that point, the company isn't just behind schedule — it needs to commission an entirely new engagement, this time a proper audit, often under real time pressure against the December 31 cutoff, which is a considerably worse position than having briefed the Canadian accountant correctly from the start.

Briefing Your Canadian Accountant Before the Engagement Begins

The fix here is entirely upstream. Before any financial statement work begins for the year, the Canadian entity's accountant needs to know explicitly that the output isn't just for local Canadian purposes — it's feeding an APR filing India submission that RBI will scrutinize for assurance level. A Canadian accountant who's never worked with an Indian parent company before has no reason to default to a full audit rather than a cheaper compilation, unless someone tells them exactly what standard the engagement needs to meet and why. The same coordination that matters with a UK auditor for APR filing or a US CPA for APR filing applies equally here — the local professional needs the context, not just an instruction to "prepare financial statements."

A Short Reference for Anyone Managing a Canadian Subsidiary's APR

If your Canadian entity has historically relied on a compilation report for CRA filings or shareholder reporting, that document will not satisfy RBI on its own — full stop, regardless of how clean the underlying numbers are. A CSRE 2400 review is stronger, genuinely independent, and worth discussing directly with your AD bank before assuming it will be accepted without question. A full audit under Canadian Auditing Standards is the version that removes the ambiguity entirely, and for most Indian parents with a Canadian WOS or step-down subsidiary, it's worth treating as the default rather than the exception — the extra cost is usually smaller than the cost of a rejected filing discovered close to the deadline.

Accorp Partners coordinates exactly this kind of engagement scoping with Canadian accounting firms on behalf of Indian parent companies — making sure the Canadian side understands upfront that the deliverable needs to meet RBI's attestation standard, not just Canada's own domestic minimum, so the resulting audit is accepted the first time it's submitted rather than bounced back mid-filing-season.

A few things worth knowing at a glance: A compilation report (Notice to Reader) is never sufficient for APR purposes, since it explicitly disclaims any verification of the numbers. A CSRE 2400 review is a genuine step up but carries real interpretive risk depending on how your AD bank reads RBI's "equivalent professional" language. A full audit under Canadian Auditing Standards is the version that aligns most cleanly with what RBI's Master Direction on ODI actually expects, and it's worth requesting by name when engaging a Canadian accountant, rather than letting the accountant default to whatever level of service their typical small-business client usually needs.