How to choose a premium audit vendor

When outsourcing premium audit makes sense

Most carriers that outsource premium audit don't hand over the whole function. They use a vendor to cover the gap between the audit volume their own staff can handle and the volume the book produces.

• Audit volume that rises and falls with renewal cycles, leaving in-house staff either overloaded or idle.
• Backlogs that delay final premium, billing, and the payroll figures renewal pricing depends on.
• Policies in states or regions where the carrier has no auditors of its own.
• Staff turnover, retirements, or hiring lag in a field where experienced auditors are hard to replace.

What to evaluate

Ten areas separate one vendor from another. Each comes with the questions worth putting in writing — the same questions are in the downloadable checklist below.

1. Turnaround and capacity

   Audit cycle time decides how quickly final premium is billed and whether audited payroll is available when the renewal is priced. Vendors measure it differently, so the number alone tells you little.

   Questions to ask

   • How do you measure turnaround — from assignment, from first contact with the policyholder, or from receipt of complete documents?
   • What was your average turnaround over the last twelve months, broken out by audit type?
   • How do you handle renewal-season peaks, and how many audits a month can you commit to?
   • What happens when an audit ages past the agreed timeframe, and how are we told?

2. Accuracy and quality control

   An audit that has to be reworked or is overturned on dispute costs more than a slow one. Quality control is the difference between a vendor that finds errors and one that ships them.

   Questions to ask

   • Is every audit reviewed by someone other than the auditor before it's delivered?
   • How do you track errors, re-audits, and disputes — and will you share those rates?
   • How are corrections handled after delivery, and who bears the cost?

3. Auditor qualifications

   Premium audit is part accounting and part classification judgment. Credentials and supervision tell you how much of that judgment you can rely on.

   Questions to ask

   • What credentials do your auditors hold — for example, the Associate in Premium Auditing (APA) designation from The Institutes, or a CPA license?
   • How are new auditors trained, and how is their work supervised?
   • Are your auditors employees or subcontractors?

4. Audit formats

   Physical, virtual, telephone, and voluntary audits each fit different policies. A vendor's range of formats — and how it verifies records in each — should match your book.

   Questions to ask

   • Which formats do you perform: physical, virtual, telephone, voluntary (self-audit)?
   • How do you recommend a format for a given policy?
   • For audits without a site visit, how are records collected and verified against third-party filings such as Form 941?

5. Classification and state coverage

   Classification is where most premium moves at audit, and the rules aren't national — California, New York, and other states run their own rating bureaus and systems.

   Questions to ask

   • Which states do you audit in, including states with independent rating bureaus such as California and New York?
   • How do you document the reasoning behind classification decisions?
   • How do you handle policies with exposure in several states?

6. Policyholder experience

   Your policyholder meets the vendor, not you. How the vendor communicates affects both audit completion rates and how the insured feels about renewing.

   Questions to ask

   • What is your outreach cadence, and how many attempts do you make before reporting an audit as non-compliant?
   • What instructions and support do policyholders receive, and in which languages?
   • How do you escalate unresponsive policyholders, and does that follow our program rules?

7. Data security

   Audits move payroll records, tax filings, and employee details. "SOC 2" can describe a vendor's own audited controls or only the cloud infrastructure it rents — ask which.

   Questions to ask

   • Do you have your own SOC 2 report, or do you rely on third-party infrastructure that is SOC 2–compliant? Can we review the report?
   • How are policyholder documents transmitted and stored, and how long are they kept?
   • Who can access our policyholders' data, including any subcontractors?

8. Deliverables and integration

   A consistent report your underwriters and billing team can use without rework is most of what you're buying.

   Questions to ask

   • Can we see a sample audit report and its supporting workpapers?
   • Can you deliver in our format, or directly into our audit or policy administration system?
   • What supporting documentation is included with each audit?

9. Pricing structure

   Per-audit prices aren't comparable until you know what each one includes.

   Questions to ask

   • How is pricing structured — per audit, by audit type, or by policy size?
   • Are there separate charges for rush audits, non-compliant audits, re-audits, or disputes?
   • What is included in the base price, and what is billed separately?

10. Track record and references

    Past work with books like yours is the best predictor of how a vendor will handle yours.

    Questions to ask

    • How long have you performed premium audits, and for which lines of business?
    • Can you provide references from carriers with a similar book or program?
    • Which lines of business do you specialize in?

Red flags

• A turnaround figure with no answer to when the clock starts.
• No independent review of audits before they're delivered.
• No sample report or workpapers available to review.
• "SOC 2" claims without being able to say whose report it is.
• No documented process for unresponsive policyholders.
• Classification changes delivered without written reasoning.
• Reluctance to provide references.

The RFP checklist

All 31 questions, the red flags, and a blank scorecard for up to three vendors, on a printable PDF to send with an RFP or share with your team.

A scorecard for comparing vendors

Score each vendor 1–5 on each criterion, multiply by the weight, and add the results. The weights are a starting point — a carrier with a backlog might weight turnaround higher; one with many multi-state policies might weight coverage higher.

Related: workers' comp class codes, explained · what a premium audit is · premium leakage