The PBC List: A Template, and How to Stop Chasing It by Email

A PBC list template for a statutory audit, with item, period, format, due date and owner, plus how to issue it, how often to chase, and what to record when each document arrives.

CS
Creodata Solutions Team
The PBC List: A Template, and How to Stop Chasing It by Email

Short answer: A PBC (prepared by client, or provided by client) list is the audit request list you send a client before fieldwork: every document you need, the period it covers, the format, the due date and who at the client owns it. Issue it once the engagement letter is signed, agree the dates, chase on a fixed cadence, and record what arrived, when, from whom and which version.

This guide is for audit managers, seniors and practice administrators who send request lists to clients every season and spend too much of it in email threads asking for the same bank statement twice. It suits statutory audits of companies, and most of it carries over to tax and review engagements. You will also see the list called a document request list (DRL), an audit request list or a request for information (RFI).

Creodata sells practice software for audit firms, so we say plainly where we fit near the end. The template and the process work with any tools, including a spreadsheet. This is practical guidance, not professional advice: adapt the list to your methodology and the client.

Why the PBC list matters more than it looks

The request list is where the audit timetable is won or lost. Fieldwork booked against documents that have not arrived is time billed to nobody. It is also where the standards meet the paperwork:

  • ISA 210 makes management's agreement to give you access to all relevant information, and any additional information you request, a precondition of the audit (para 6(b)(iii)). The engagement letter records it. The PBC list is how you use it.
  • ISA 500 requires you, when using information produced by the entity, to evaluate whether it is reliable enough for your purposes, including its accuracy and completeness (para 9). Knowing which version of a trial balance or ageing report you tested, and when it arrived, is part of that.
  • ISA 505 requires the auditor to keep control of external confirmation requests, including sending them (para 7). Confirmations are not something the client sends you. What you ask the client for is the authority and the contact details.

The PBC list template for a statutory audit

Copy this into your own list and delete what does not apply. "YE" means the financial year end. Due dates are shown relative to the start of fieldwork so the list can be reused; replace them with calendar dates when you issue it.

#ItemPeriodFormatDueClient owner
1Trial balance, final and before audit adjustmentsYear to YE, with prior-year comparativesExcel10 working days before fieldworkFinance manager
2General ledger detail for all accountsFull yearExcel or CSV export10 working days beforeFinance manager
3Draft financial statements, if the client prepares themYear to YEWord or PDF, and Excel workings5 working days beforeFinance manager
4Bank statements for every account, including closed and dormant accountsFull year, plus the first month after YEPDF as issued by the bank10 working days beforeAccountant
5Bank reconciliations for every accountAt YE, and monthly if you test themExcel, signed as reviewed10 working days beforeAccountant
6Signed authority for bank and other confirmations, with contact detailsAt YESigned PDFBefore planningDirector or CFO
7Fixed asset register with additions, disposals and depreciationYear to YEExcel10 working days beforeFinance manager
8Invoices, title documents and approvals for significant additionsAdditions in the yearPDFOn request from the sampleAccountant
9Debtors (receivables) ageing, reconciled to the ledgerAt YEExcel10 working days beforeCredit controller
10Creditors (payables) ageing and supplier statements for main suppliersAt YEExcel; statements as PDF10 working days beforeAccountant
11Inventory count instructions, count sheets and valuationAt YEPDF and ExcelCount instructions before the count; rest 5 working days beforeOperations and finance
12Payroll summary by month, reconciled to the ledgerFull yearExcel10 working days beforePayroll or HR
13Payroll tax (PAYE) and statutory deduction returns and payment evidenceFull yearPDF10 working days beforePayroll
14VAT returns and payment evidenceFull yearPDF10 working days beforeTax accountant
15Corporate income tax computation, returns and instalment paymentsCurrent and prior yearPDF and Excel5 working days beforeTax accountant
16Correspondence with the tax authority, assessments and objectionsOpen mattersPDF5 working days beforeTax accountant
17Loan agreements, facility letters and security documentsIn force during the yearPDF10 working days beforeCFO
18Leases and other significant contractsIn force during the yearPDF10 working days beforeLegal or company secretary
19Board, committee and shareholder minutesYear, and up to the date of fieldworkPDF, signed where available10 working days beforeCompany secretary
20Statutory registers, certificate of incorporation and current directors and shareholdersCurrentPDFBefore planningCompany secretary
21Accruals, prepayments and provisions schedules with supportAt YEExcel and PDF5 working days beforeFinance manager
22Related party listing and transactionsYear to YEExcel5 working days beforeCFO
23Legal cases and letters from lawyersOpen at YE and sincePDF5 working days beforeLegal
24Grants, donor agreements or regulatory returns, where relevantYear to YEPDF10 working days beforeFinance manager
25Prior-year signed financial statements and management letterPrior yearPDFBefore planningFinance manager
26Subsequent events: management accounts and significant transactions after YEYE to dateExcel and PDFDuring fieldworkCFO

Country items to add. In Kenya, add eTIMS electronic tax invoice records for a sample of expenses, since KRA's rules link deductibility to them. In Tanzania, add EFD or VFD receipt records; in Rwanda, EBM invoice records. Add sector returns for banks, insurers, SACCOs and other regulated clients.

Keep it proportionate. A small owner-managed company will not have half of these. Delete rows rather than sending a list the client cannot finish; a short list that gets answered beats a long one that does not.

How to issue it

  1. Wait for the signed engagement letter. Until the terms are agreed (ISA 210 para 9), the client has not agreed to give you anything.
  2. Hold a short call. Walk the finance lead through the list, confirm owners and dates, and agree how files will reach you. Clients miss dates they did not agree to.
  3. Send one list, not many. Additional requests during fieldwork are normal; add them to the same list so everyone sees one picture of what is outstanding.
  4. Give a secure route for files. Large ledgers and payroll files containing personal data should not go through personal email. Use a link that expires, with the client identifying themselves before they upload.
  5. Say what "received" means. A trial balance that does not agree to the ledger has not been received. Tell the client you will mark items received only when they are complete and usable.

Chasing cadence

A fixed cadence is kinder to the client than an unpredictable one, and easier to defend when fieldwork slips.

WhenWhat to sendWho
Issue dateThe full list with due datesSenior or manager
A few days before the first due dateA reminder of items due, with what is already inSenior
Due date passedA chaser for each overdue item, naming the ownerSenior
Regular interval after thatA further chaser listing only what is still outstandingSenior
After a set number of chasersEscalation to the manager, then to the client's CFO or directorManager, then partner
Fieldwork at riskA written note that the timetable, and possibly the fee, will changePartner

Pick the interval and the number of chasers in your firm's policy and use the same numbers for every client.

What to record when each document arrives

RecordWhy
The list item it answersShows what is complete and what is still outstanding
Date and time receivedThe timetable, and evidence if the client later disputes delays
Who sent it, and howUpload, email, hand delivery; the sender's name and email address
File name, version and a checksumWhich version you tested (ISA 500 para 9); duplicates recognised
Receipt given to the clientStops the "we sent it already" argument
Reviewer and status: accepted, incomplete or rejected"Received" means usable, not merely delivered
Where it is filedClient, engagement and document type, so the tax team finds it next month
Retention dateThe file's retention period starts running from the audit report

Where Creodata fits

Creodata is a Nairobi software company. AuditEDMS, our practice software for audit firms, keeps request lists per engagement. A statutory audit's list is drafted from a template (trial balance, general ledger, bank statements and the rest, each with a due date), and the list shows what has arrived, what is outstanding, and the chasers sent. The chaser interval and the number of chasers before an item goes to the manager are settings your administrator changes, not code.

Clients answer the list through an expiring upload link. They confirm their email address with a one-time code, upload against the listed items, and get a receipt by email. They never need an account. Each file is saved to your own SharePoint by client, engagement and document type, recording who sent it, when and how, versioned and checksummed, never silently overwritten, with a retention date by document type. The request for information cannot go out until the signed engagement letter is filed, because that stage's evidence gate comes first.

AuditEDMS does not replace your working-paper software; it holds the client file and the requests around it. See AuditEDMS for audit firms.

Frequently asked questions

What does PBC stand for in audit?

Prepared by client, or provided by client. Both are in use and mean the same list: the schedules and documents the client supplies so the auditor can do the work.

What is the difference between a PBC list and a document request list?

None in practice. PBC list, audit request list, document request list and request for information are names for the same thing. Some firms keep "RFI" for requests raised during fieldwork.

When should the PBC list be sent?

After the engagement letter is signed and before planning is finished, early enough for the client to prepare items before fieldwork. Items needed for planning, such as the trial balance, come first.

Should bank confirmations be on the PBC list?

The client's signed authority and the bank contact details should be. The confirmation requests themselves are sent and controlled by the auditor under ISA 505 (para 7), with replies coming directly to you.

Can clients email documents instead?

They can, but email makes it hard to know which version is current, who sent what, and whether personal data was protected on the way. A request list with a single upload route and a receipt for each file avoids most of that.


See how AuditEDMS for audit firms runs request lists with chasers and client upload links: request a pilot.

See Audit Management Software in action.