How to Survive Your First CTAPP Compliance Review: A Step-by-Step Playbook for California Law Firms

California's State Bar began mandatory CTAPP compliance reviews in August 2025. With the March 30, 2026 reporting deadline behind us, more firms are being selected for State Bar-approved CPA reviews that can cost $10K-$25K. Here's exactly what reviewers look for - and how to walk in ready.

Published: 2026-05-26T12:35:27.392Z · Category: Compliance · 9 min read

💡 IN SHORT

The California State Bar is actively selecting attorneys for mandatory CTAPP compliance reviews. Reviewers evaluate four phases - Planning, Compliance, Accounting, and Supervision - and the cost of a State Bar-approved CPA is paid by the firm ($10K-$25K). The good news: a firm with proper monthly three-way reconciliations, complete client ledgers, and documented supervision procedures sails through. This playbook tells you exactly what reviewers look for.

👥 Who should read this: California Attorneys Firm Administrators Bookkeepers & Controllers Compliance Officers

🏛️ What CTAPP Is - and Why 2026 Is Different

The Client Trust Account Protection Program (CTAPP), launched by the California State Bar in December 2022, requires every California attorney with client trust funds to register, self-assess, and certify compliance annually. The 2026 reporting deadline was March 30, 2026.

The 2026 escalation is enforcement. Starting in August 2025, the State Bar began conducting mandatory compliance reviews on selected attorneys - and the selected attorney must hire a State Bar-approved CPA at the attorney's own cost to conduct the review. Quoted ranges run $10,000 to $25,000 per review, and reviews can pull years of records.

🚫 Red Flag

Self-certifying compliance on the CTAPP form without actually performing monthly three-way reconciliations is a separate ethics violation regardless of what the review finds. If you signed for 2026 and your reconciliations aren't documented, fix that now.

📋 The Four Review Phases - What CPAs Actually Examine

State Bar-approved reviewers follow a structured four-phase methodology. Here's what each looks for and how to prepare.

1️⃣ Phase One: Planning

The reviewer assesses the firm's structure: number of trust accounts, range of practice areas, volume of trust transactions, and whether the responsible attorney has clear written procedures.

What they want to see:

A current list of every trust account (IOLTA and separate)
A signed engagement letter or fee agreement that specifies how client funds are handled
A written trust accounting procedures document - not "we know what we're doing"

2️⃣ Phase Two: Compliance

This is the part most attorneys fail. The reviewer is testing four specific timing and notification requirements under California Rule 1.15:

Notification to the client within 14 days of fund receipt
Distribution of undisputed funds within 45 days
Complete trust accounting records maintained for five years
Monthly three-way reconciliation completed and signed

⚠️ Watch Out

Reviewers commonly pull a random sample of 5-10 trust deposits from the prior 24 months and trace each one. If the 14-day notification letter isn't in the matter file - even if the client got it by phone - that's a finding.

3️⃣ Phase Three: Accounting

Here the reviewer verifies the actual numbers. The mechanics they test:

The trust bank statement
The trust account master ledger (all transactions across all clients)
Individual client trust ledgers (one per client)

All three must reconcile to the penny, every month, for every month they sample. This is the three-way reconciliation.

4️⃣ Phase Four: Supervision

If a paralegal or bookkeeper touches the trust account, the responsible attorney must demonstrate active supervision - not delegated authority. Reviewers ask: who reviews the reconciliation? Who signs it? When? Where is the signed copy stored?

📊 The Three-Way Reconciliation - Done Right

If you do nothing else from this playbook, do this. A clean monthly three-way reconciliation defeats most CTAPP findings on its own.

🏦

1. Bank Balance

The ending balance from the trust account bank statement, adjusted for outstanding deposits and outstanding checks.

📒

2. Trust Master Ledger

The running total of all trust transactions across every client matter, in chronological order.

👥

3. Sum of Client Ledgers

The sum of every individual client's trust ledger balance at month-end.

All three numbers must be identical. If they don't match - even by a penny - there's a problem to investigate before signing the reconciliation.

💡 Pro Tip

Print and sign the monthly three-way reconciliation report. Reviewers will ask to see the signed document. A PDF in a folder with no signature is treated as "not performed" by some reviewers.

📂 The Records Inventory Reviewers Pull

When a CPA arrives, they typically request the following - be ready to produce all of it within 10 business days:

Trust bank statements for every month under review
Canceled checks and electronic transfer records
Deposit slips and supporting documentation
Trust account master ledger
Individual client trust ledgers with full transaction history
Monthly three-way reconciliation reports - signed
Client notification letters (14-day rule) for sampled deposits
Fee agreements specifying trust handling
Written trust accounting procedures
Documentation of who reviews and signs reconciliations

🛠️ Tools and Workflow That Make Reviews Painless

Firms running trust accounting on spreadsheets, generic accounting tools (QuickBooks, Xero), or legacy desktop systems (PCLaw, Tabs3) usually spend dozens of paid CPA hours just assembling the records for the review. Firms running purpose-built legal accounting platforms typically generate the full records package in an afternoon.

Capability	Spreadsheet / QuickBooks	LawAccounting / CaseQube
Per-matter trust ledger	❌ Manual workaround	✅ Native
One-click three-way reconciliation	❌ Manual assembly	✅ Native
14-day client notification log	❌ Tracked elsewhere	✅ Logged on matter
Audit trail for every transaction	Partial	✅ Complete, immutable
Reviewer-ready records export	Hours of work	✅ One report
Compliance alerts (overdrafts, etc.)	❌ Not built in	✅ Real-time

📆 If You Get Selected - The First 72 Hours

Acknowledge the selection notice in writing within the required window. Missing the response window is itself a violation.
Engage a State Bar-approved CPA immediately. The list is published by the State Bar; demand is high during peak review windows.
Freeze your trust account procedures. Don't make administrative changes mid-review - it complicates reconciliation.
Pull your last 24 months of three-way reconciliations and confirm they're all signed.
Identify your responsible attorney and ensure they're personally available for reviewer interviews.

✅ Key Takeaways

CTAPP enforcement is active. Reviews are now mandatory for selected attorneys at the attorney's expense.
Reviewers test four phases - Planning, Compliance, Accounting, Supervision - with specific timing rules (14-day notification, 45-day distribution).
Signed monthly three-way reconciliations are the single highest-leverage defense.
Spreadsheets and generic accounting tools create days of unbillable cleanup work during a review.
Purpose-built legal accounting platforms like LawAccounting and CaseQube generate reviewer-ready records in an afternoon.

Walk Into Your Next Trust Audit Calmly

LawAccounting was built for the exact records a CTAPP reviewer wants - per-matter ledgers, one-click three-way reconciliation, signed reports, and a full audit trail. See it in a 30-minute walkthrough.

Schedule Your Demo →