What Triggers a CTAPP Compliance Review — And What Happens If Your Firm Is Selected

Irvine Bookkeeping
2 days ago
5 min read

By Tammy Hoang, Certified QuickBooks ProAdvisor

A CTAPP compliance review is no longer a rare event for California attorneys. The State Bar of California now selects up to 800 licensees every year for a mandatory examination of their client trust account records, and the notice arrives without warning. If your law firm bookkeeping has been handled casually, that letter is the moment it stops being casual.

The Client Trust Account Protection Program was created after the Girardi scandal exposed how long client funds can go missing before anyone notices. The State Bar responded with proactive regulation: annual registration of every trust account, a self-assessment, and a certification of compliance with Rule 1.15 of the California Rules of Professional Conduct. On September 29, 2025, the State Bar began notifying selected firms that they would face mandatory reviews.

This article explains what actually triggers a CTAPP compliance review, what the reviewer examines, what it costs, and what your attorney bookkeeping needs to look like before the notice arrives.

Who Gets Selected for a CTAPP Compliance Review

Selection is partly random and partly risk-based. The State Bar reviews roughly two percent of California attorneys each year, and the program is designed so that any licensee handling client funds could be chosen in any cycle.

Certain patterns raise the likelihood of selection. High volumes of IOLTA activity relative to the size of the firm draw attention, because the ratio suggests either rapid growth or loose controls. Frequent changes to bank accounts or to the firm's Designated Licensee create discontinuity in the records. Prior disciplinary history keeps a licensee on the radar. Reports or complaints from other attorneys, clients, or financial institutions can also move a firm up the list.

Effective January 1, 2025, every California law firm must appoint a Designated Licensee under Business and Professions Code section 6091.3. That person carries the primary regulatory burden for trust accounting. Responsibility can no longer be shuffled between partners or blamed on an office manager who left. If your firm has not formally named one, that gap alone is worth fixing this week.

It is worth being blunt about the timing. Attorneys who are behind on trust account reconciliation do not find out gradually. They find out when the notice arrives, and by then the records either exist or they do not.

Behind on Your Trust Account Reconciliations?

Book a 30-minute call with Irvine Bookkeeping.

Book a free consultation

Call or Text: (949) 482-2790 | irvinebookkeeping.com

What the Compliance Review Actually Involves

A CTAPP compliance review is not an audit in the disciplinary sense. It is an agreed-upon procedures engagement performed by a Certified Public Accountant firm approved by the State Bar. The reviewer works through a defined checklist against your trust accounting records and reports the findings.

The review typically takes three to four months from notice to completed report. It generally costs between five thousand and ten thousand dollars, and the attorney pays. Poor recordkeeping increases both the cost and the timeline, because every gap the reviewer finds becomes additional hours of reconstruction billed back to your firm.

That last point deserves emphasis. The fee is not fixed by the State Bar. It is driven by how much work the reviewer has to do. A firm with twelve months of completed three-way reconciliations and clean client ledgers sits at the low end. A firm handing over a box of bank statements and a spreadsheet sits at the high end, and may face investigative audits afterward where the results warrant it.

The reviewer expects individual client ledgers tracking each client's money separately within the IOLTA, a trust account journal, monthly reconciliations in writing, and supporting documentation for every disbursement. These are the same records Rule 1.15 has always required. The compliance review simply asks to see them.

Why Trust Accounting Failures End Careers

Trust account violations consistently rank among the top sources of California attorney discipline. Over sixteen hundred attorneys have already faced suspension in connection with non-compliance since the program began.

The pattern in discipline cases is remarkably consistent, and it rarely begins with theft. An attorney falls behind on reconciliations. A discrepancy appears and goes unnoticed because nobody is checking monthly. The discrepancy compounds over several months. By the time the State Bar or the bank flags the problem, the shortfall is significant and the attorney cannot explain it. The attorneys caught in this cycle are usually not stealing. They are behind on their bookkeeping.

California now presumes non-compliance if client funds are not distributed within forty-five days. Missing a single month's reconciliation can support a violation finding. Accepting credit cards for trust deposits creates its own complications, because processing fees cannot be deducted from client funds.

None of this is new law. The duty to perform monthly three-way reconciliation has existed since California adopted the Trust Account Record Keeping Standards in 1993. What changed is enforcement. The State Bar is now looking.

What Audit-Ready Law Firm Bookkeeping Looks Like

Audit-ready is a monthly discipline, not an annual scramble. A California law firm with clean trust accounting has five things in place at all times.

First, monthly three-way reconciliation performed and documented in writing, matching the bank statement, the trust account journal, and the sum of all individual client ledgers. Second, an individual ledger for every client with funds in trust, showing each deposit, each withdrawal, and a running balance. Third, written fee agreements that specify trust deposit requirements. Fourth, documented client notification within fourteen days of receiving funds on their behalf. Fifth, five years of retained records, because that is the retention period the reviewer will ask about.

Firms with in-house accounting staff trained in trust procedures usually manage this. Smaller firms rarely do, and managing partners find themselves asked to master a discipline that sits much closer to accounting than to law. That is not negligence. It is a resourcing reality.

Professional attorney bookkeeping done correctly every month is the cheapest form of CTAPP risk management available. It costs a fraction of a compliance review, and it removes the version of this story that ends in discipline. You can read the State Bar's own requirements at calbar.ca.gov.

Get Your IOLTA Records State Bar Ready.

Talk with Irvine Bookkeeping about CTAPP-ready trust accounting.

Book a free consultation

Call or Text: (949) 482-2790 | irvinebookkeeping.com

Yes, a CTAPP compliance review is a real possibility for your firm this year. And yes, it is entirely survivable when the records are already there.

Irvine Bookkeeping provides law firm bookkeeping and trust accounting support for California attorneys. We prepare monthly three-way reconciliations, maintain individual client ledgers, and keep your IOLTA records in the condition a State Bar reviewer expects to find them.

Picture the notice arriving and knowing the answer is already in a folder.