The Myth of 'We’re Too Small for Auditors': That’s When They Dig Harder
Startups believe their size is an excuse for informality. Auditors view size as a risk factor. Lack of process is not 'lean'; it is a governance vacuum.
Informality Is a Risk Factor
You believe that because you are “agile” and “lean,” you are exempt from the documentation standards of the Fortune 500. You think an investor will forgive the lack of board minutes because you were “too busy building product.”
You are mistaken. When I diligence a small company, I do not give them a pass; I double my scrutiny.
In a large enterprise, I can rely on institutional inertia and segregation of duties. The person writing the checks is not the person signing the checks. In your company, you are likely doing both. That is not agility; that is a control failure.
The Suspicion: The “Person-Dependency” Trap
When I see a data room devoid of policy documents, I assume the business runs entirely on oral tradition.
If the Revenue Recognition Policy exists only inside the CFO’s head, the revenue model is not an asset; it is a hallucination. If the IP transfer protocol is “we just email the code,” the IP is compromised.
I am looking for Key Person Risk. If you get hit by a bus, does the audit trail die with you? If the answer is yes, the company is unsellable.
The Evidence: The “Lean” Protocol
We must prove competence without bureaucracy. We do not need a 100-page binder. We need Evidence of Intent.
1. The “Memo to File” Strategy You do not have a Board of Directors meeting every month. Fine. But you must have a “Memo of Decision.”
- Bad: No record of why you switched hosting providers.
- Good: A one-page PDF dated 2024-02-15 titled
Memo_Decision_Infrastructure_Migration.pdf.- Content: “We moved to AWS to reduce latency. Projected savings: 15%.”
- Result: You have created provenance for a financial variance.
2. The Segregation of Duties Even if you are three people, you must fake the controls of a larger entity.
- The person who approves the invoice cannot be the person who initiates the wire.
- Document this workflow. “Approvals > $5k require CEO email sign-off.”
- Upload that email thread as evidence for large capex spend.
3. The Continuity Standard Everything must be retrievable by a stranger. If I ask for the “2023 Tax Returns,” and you have to text your accountant to find them, you have failed. The documents must reside in the company repository, indexed and ready.
[TO EDITOR: Guidance for illustration. Draw a balance scale. Left side: ‘Massive Binder’ (Too heavy). Right side: ‘Handshake’ (Too light). Middle: ‘The Memo’ (Perfect balance). Label this ‘The Minimum Viable Compliance’.]
The “Trust Discount”
When a buyer looks at a disorganized small business, they apply a discount rate to the valuation. They are pricing in the cost of cleaning up your mess.
If your documentation is clean, “small” looks like “efficient.” If your documentation is missing, “small” looks like “amateur.” The difference is usually 15% of the closing price.
FAQs
Do we really need an Employee Handbook if we are 5 people?
Yes. Even a 2-page document sets the standard for IP assignment and termination. Without it, you are operating on handshake logic.
Auditors are expensive. Can we skip a formal audit?
You can, but you will pay for it in the valuation. Unaudited financials carry a 'trust discount.' A Quality of Earnings (QoE) report is the compromise.
How do we document processes without slowing down?
Use 'Memos to File.' You do not need a 40-page manual. You need a 1-page memo stating: 'This is how we recognize revenue.' That is sufficient.