What an AP recovery audit actually costs in 2026: a market comparison
From Big 4 statutory fees to 20-35% contingency firms to $490+ self-serve — a sourced look at what businesses of every size actually pay for someone to check their accounts payable.
"How much does an audit cost?" has no single answer, because "audit" describes at least four completely different economic models, serving completely different company sizes. Confusing them is how a small business ends up assuming a real financial review is either free (it isn't) or a six-figure commitment (it usually isn't, either) — when in fact there is now a self-serve tier that did not exist a few years ago.
The four tiers, priced
Statutory audit for large public companies
At the top of the market, audit fees are public record for listed companies, and they are large. A Fortune 500 company's external auditor fee alone commonly runs into eight figures annually — IBM's FY2025 disclosure lists $49.0 million in audit fees to PwC, plus a further $21.6 million in audit-related and other services. This tier exists because statutory audit of a multinational's consolidated accounts is a multi-month, multi-country engagement with legal liability attached — it is not a benchmark for what a smaller business should expect to pay.
Mid-market statutory and independent audit
Industry tracking puts typical audit fees at roughly 0.32% of revenue for Big 4 auditors and 0.25% for non-Big-4 firms, across the broad population of audited companies. For a $50 million revenue business, that is a six-figure annual fee — still calibrated for companies with a statutory audit requirement, not a business that simply wants its accounts payable checked once.
Small business review engagements
Below the statutory-audit threshold, regional and local CPA firms offer limited-scope reviews. Real-world benchmarks put a full small-business audit at $5,000 to $50,000, a startup-scale review at $3,000 to $10,000, hourly billing at $150 to $400 per hour, and the cheapest limited review starting around $2,500. This is the segment most businesses actually compare against — and it is priced for a general opinion on the financial statements, not a document-by-document AP check.
AP-recovery contingency firms
A separate industry — PRGX, apexanalytix and similar recovery-audit specialists — does not charge a fee at all up front. They work on 20-35% contingency of whatever overpayment or duplicate they recover, and they operate almost exclusively for organizations with billion-dollar-scale spend, because the economics of a contingency engagement only work at that volume. A mid-market company with $20-50 million in spend is, structurally, below the size these firms are built to serve — not badly served, unserved.
Where a self-serve, fixed-price audit fits
None of the four tiers above is priced or structured for a business that wants a one-time, thorough check of a batch of documents without a sales call, a contingency contract, or a statutory-audit-scale engagement. That is the gap a self-serve audit product fills: upload a batch of invoices and bank statements, pay a fixed price published on the page, get a report within a guaranteed number of hours.
DOXALIO's one-off Audit runs 55 versioned checks across document compliance, arithmetic and tax coherence, population analytics (duplicate detection, statistical anomaly screening), supplier and payment fraud risk, and recoverable-amount detection — each one tied to a named legal source (tax code articles, VAT regulations, accounting standards) rather than a black-box "risk score." Pricing starts well below the cheapest limited review found in the market comparison above, with no contingency cut and no minimum spend threshold.
What this means for the buyer
If your business has a statutory audit requirement, none of this changes anything — you need the mid-market or Big-4 tier, full stop. But if you are the mid-market company too small for a contingency firm's minimum, or the small business for whom a $2,500+ limited review is a hard sell for a routine check, the fixed-price self-serve tier is a genuinely new option, not a discount version of an existing one.
Related reading
- One-off audit vs. subscription: when a snapshot beats a monthly report
- Vendor fraud red flags every audit should catch (and most manual reviews miss)
FAQ
Is a $490+ self-serve audit the same thing as a statutory audit?
No, and it does not claim to be. It is a document-level control check — compliance, arithmetic, fraud signals, recoverable amounts — not an opinion on financial statements as a whole. Businesses with a statutory audit requirement still need a licensed auditor for that engagement.
Why do contingency recovery firms only serve large companies?
Their economics depend on the absolute dollar amount recovered, not the percentage. At 20-35% of recovered value, a firm needs a large enough spend base for the expected recovery to justify the engagement cost — which structurally excludes mid-market and smaller companies, regardless of whether they have recoverable errors.
How does a fixed price compare to hourly billing at $150-400/hour?
A fixed price removes the uncertainty of not knowing the final bill until the engagement is done — a real friction point for businesses evaluating whether to commission a check at all. The trade-off is scope: a fixed-price audit covers a defined batch of documents, not open-ended advisory hours.