Founder Private Growth Company Audit and Risk Committee Charter

This Charter governs the Audit and Risk Committee (the Committee) of the Board of Directors (the Board) of [COMPANY NAME], a [STATE] corporation (the Company), effective [DATE]. Management owns the Company’s financial statements, books and records, internal controls, legal compliance and risk management. The Committee provides oversight; it does not operate the business or guarantee outcomes.

Matter Completion Sheet

1. Purpose

The Committee assists the Board in overseeing:

• the integrity and reliability of financial statements, management reporting and key financial metrics;
• the accounting, financial-close and internal-control environment;
• the qualifications, independence, engagement and performance of any independent accountant or auditor;
• significant tax, treasury, liquidity, capital-structure and financial-covenant matters;
• the Company’s process for identifying, assessing, responding to and reporting material enterprise risks;
• confidential reporting and treatment of concerns about accounting, controls, auditing, fraud and retaliation;
• the integrity of material nonfinancial data used for investor, lender, regulatory and Board reporting; and
• the Company’s readiness for a larger financing, audited statements, acquisition, regulated expansion or public-company transition.

The Committee’s role is oversight. Management remains responsible for preparing information and maintaining controls; external accountants remain responsible for their professional work; and the Board retains matters not validly delegated.

2. Authority

The Committee may, within the scope of this Charter:

• obtain information from any officer, employee, contractor or controlled subsidiary;
• meet privately with management, finance personnel, internal or external auditors, counsel and risk owners;
• investigate a matter within its scope using a documented mandate and privilege protocol;
• retain independent legal, accounting, forensic, cybersecurity, valuation or other advisers at Company expense within the approved budget or emergency authority;
• approve or recommend engagement, compensation, scope and replacement of the independent accountant, as allocated by the Board; and
• require remediation plans, owners, deadlines, validation and escalation for material findings.

The Committee may not amend governing documents, issue securities, approve a transaction reserved to the Board or Members/stockholders, direct operations outside delegated authority or waive a legal requirement. The Committee reports recommendations and decisions to the Board promptly.

3. Membership

3.1 Composition

The Committee consists of at least [THREE / NUMBER] directors appointed by the Board. The Board appoints and may remove the chair and members, subject to designation, investor and class rights in governing documents. Vacancies do not invalidate action if quorum and required representation remain.

3.2 Financial Literacy and Expertise

Each member should be able to read and understand fundamental financial statements within a reasonable period after appointment. At least one member should possess relevant accounting, audit, finance or operating experience appropriate to the Company’s stage. The Board will document the basis for these determinations without implying that a private-company designee is an “audit committee financial expert” under public-company rules unless counsel confirms the conclusion.

3.3 Independence and Conflicts

The Company will apply the private-company independence standard in Schedule 1, considering employment, consulting, family, investment, lender, vendor and related-party relationships. A member must disclose a conflict before the Committee considers the matter and may be recused or subject to a disinterested-approval process. If public listing is planned, counsel must replace the private standard with applicable SEC and exchange criteria and transition timing.

3.4 Service on Other Committees

Concurrent service is permitted if it does not impair attention, independence or legal requirements. The Board should consider overlap with compensation, cybersecurity, finance and transaction committees and specify which committee has primary oversight for shared risks.

4. Meetings and Procedure

The Committee meets at least [quarterly] and more often as circumstances require. The chair approves the agenda with management and the Committee secretary. Materials should be delivered at least [FIVE] business days in advance where practicable and must distinguish decisions, discussion items, exceptions and open controls.

Quorum is a majority of appointed members. Action requires a majority of members present unless governing documents require more. The Committee may act by written consent if permitted, but the consent must include the same evidence, conflict and approval record as a meeting. Remote participation is permitted.

The Committee will hold regular private sessions with the chief financial officer or finance lead and, when engaged, the independent accountant, internal audit lead and counsel. Minutes will document attendance, materials, conflicts, decisions, dissent, remediation owners and deadlines without unnecessary privileged or sensitive detail.

5. Financial Reporting Oversight

The Committee will review, at a cadence proportionate to the Company:

• annual and material interim financial statements, accounting basis and significant disclosures;
• significant estimates, reserves, judgments, unusual transactions and alternative accounting treatments;
• revenue recognition, capitalization, equity compensation, debt, leases, tax, impairment, contingencies and going-concern considerations;
• related-party transactions and balances;
• consolidation, foreign-currency, intercompany and subsidiary matters;
• material differences between Board, investor, lender, tax and statutory reporting;
• the close calendar, late adjustments, waived adjustments and recurring reconciliation failures;
• material non-GAAP or operating metrics and their definitions, sources, controls and consistency; and
• management’s certification of the reporting package and known exceptions.

The Committee will ask whether the reporting fairly communicates uncertainty and risk, not merely whether totals recalculate. It will escalate suspected fraud, management override, unsupported estimates or omitted liabilities immediately.

6. Independent Accountant or Auditor

6.1 Selection and Scope

The Committee will oversee or recommend selection, compensation, retention and replacement of the independent accountant, within Board authority. It will review the engagement letter, service level (tax, compilation, review or audit), scope, materiality, timetable, team competence, use of specialists, reliance on controls and access to records.

6.2 Independence and Non-Audit Services

Before engagement and at least annually, the Committee will review relationships and services that could affect independence or objectivity. It will preapprove permitted non-audit services under the policy in Schedule 2 and prohibit services that management, counsel or applicable professional rules determine are incompatible. Private-company practice does not justify describing a service provider as independent if the facts do not support that description.

6.3 Communications and Findings

The Committee will discuss significant accounting policies and judgments, corrected and uncorrected misstatements, control deficiencies, disagreements with management, consultation with other accountants, difficulties encountered, fraud or illegal acts identified, going-concern matters and management letters. The Committee will track remediation and meet privately with the accountant.

6.4 Disputes and Dismissal

Management must notify the chair of a material disagreement or proposed dismissal. The Committee will hear both sides, preserve records, assess reporting and legal consequences and recommend or approve action under delegated authority. The Company will not retaliate against a professional for good-faith reporting.

7. Internal Controls and Finance Operations

The Committee oversees management’s process—not individual transactions—for:

• segregation of duties and compensating controls appropriate to headcount;
• bank, payment, payroll, procurement and expense approvals, including dual control;
• user access, privileged access and joiner/mover/leaver administration for financial systems;
• monthly reconciliations, close review and supporting evidence;
• revenue, billing, collections, refunds, credits and contract-to-cash controls;
• vendor onboarding, purchase-to-pay, related-party identification and conflicts;
• capitalization, equity grants, debt, warrants, SAFEs and securities-ledger reconciliation;
• treasury, cash forecast, runway, investments and counterparty concentration;
• tax calendars, filings, nexus, withholding and uncertain positions;
• whistleblower and fraud prevention/detection; and
• retention, backup, business continuity and disaster recovery for financial records.

Management will maintain the Control and Remediation Register in Schedule 3. Material deficiencies require root-cause analysis, interim mitigation, owner, deadline, validation and closure evidence. The Committee will distinguish a control’s design from proof that it operates.

8. Enterprise Risk Oversight

The Committee oversees the Company’s risk-management framework to the extent assigned by the Board. Management owns risks and controls. The Committee will review the enterprise risk register at least [semiannually], including likelihood, impact, velocity, owner, appetite/tolerance, mitigation and residual risk.

The risk perimeter should include liquidity and financing; customer and vendor concentration; cyber, privacy and data; AI model and product risk; intellectual property; regulatory and licensing; litigation; tax; employment; safety; insurance; fraud; geopolitical and sanctions; supply chain; business continuity; M&A integration; and reputational risk. The Board will allocate primary oversight where another committee has deeper responsibility and require cross-reporting.

An emerging or material incident must be escalated under Schedule 4 rather than held for the next regular meeting.

9. Liquidity, Treasury and Capital Structure

The Committee will review cash and runway forecasts, forecast accuracy, funding needs, debt covenants, banking and investment counterparties, insurance limits, foreign exchange, restricted cash, going-concern indicators and contingency plans. It will review material financings and capital-structure instruments for accounting, tax, covenant, dilution and control implications, while the Board retains approval authority unless delegated.

Wire fraud, payment fraud and bank-access controls must include independent verification, dual authorization, callback procedures, access reviews and incident escalation. No executive may override a control without documented emergency authority and prompt reporting.

10. Tax Oversight

The Committee will review the tax-risk profile, return and payment calendar, material positions, audits, transfer pricing, nexus, sales/use, payroll, withholding, research credits, equity compensation and uncertain positions. Management will identify advisers and jurisdictions and maintain a tax-responsibility matrix. The Committee does not determine tax positions without qualified advice.

11. Legal, Regulatory and Ethics Interface

The Committee will receive reports on material legal and regulatory matters that may affect financial statements, controls, liquidity or enterprise risk. It will coordinate with the Board and counsel on investigations, reserves, disclosure, document preservation and remediation. It will review the code of conduct, related-party policy and conflicts process insofar as they affect financial integrity.

Legal advice and privileged investigations require counsel-led protocols, limited distribution and careful minutes. The Committee will not demand privileged detail when a nonprivileged status and risk report is sufficient.

12. Complaints and Whistleblower Procedures

The Committee will establish and oversee procedures for receiving, retaining, triaging and treating complaints about accounting, internal controls, auditing, fraud, misuse of assets and retaliation, including confidential and, where legally appropriate, anonymous submissions. The procedures in Schedule 5 will specify:

• available reporting channels and accessibility;
• who receives, triages and investigates each category;
• conflict substitution if a report concerns management, a director or the normal recipient;
• preservation, confidentiality and data-protection controls;
• severity levels, escalation deadlines and notification to the chair;
• non-retaliation protections and interim safety measures;
• investigation findings, remediation, discipline and closure communication; and
• retention and trend reporting.

The Company must not promise absolute anonymity or confidentiality where law, fairness or investigation needs require disclosure. Retaliation allegations are separate control events and receive prompt review.

13. Related-Party Transactions

The Committee will review related-party transactions assigned by the Board under the policy in Schedule 6, including identification, disclosure, benchmarking, recusal, approval, documentation and ongoing monitoring. It will consider fairness, alternatives, conflicts, financial reporting, tax and disclosure. Approval cannot cure fraud, waste, bad faith or another nonwaivable defect.

14. Cybersecurity, Data and AI Reporting Integrity

In coordination with the Board or technology committee, the Committee will oversee how material cyber, privacy, data and AI risks affect financial reporting, reserves, insurance, customer obligations and business continuity. Management must report material incidents, control gaps, third-party concentration, access failures and remediation status using the escalation matrix.

Where AI or automated systems generate financial, operating or investor metrics, management will identify data lineage, model ownership, material assumptions, change control, human review and exception handling. The Committee does not certify technical safety but requires reliable reporting and accountable risk ownership.

15. M&A, Financing and IPO Readiness

For a material financing, acquisition, sale or IPO-readiness project, the Committee will review the integrity of financial information, quality-of-earnings issues, debt-like items, working capital, tax exposures, controls, auditor readiness, data-room accuracy and integration risks within its mandate. It will track remediation without displacing the transaction committee or full Board.

The Scaling Trigger Matrix in Schedule 7 identifies when the Company should add resources, engage an independent audit firm, form internal audit, adopt public-company controls, recruit an additional financially experienced director or refresh this Charter for SEC and exchange rules.

16. Reporting to the Board

After each meeting, the chair will report material discussions, decisions, recommendations, dissent, incidents, overdue remediation and matters requiring Board action. The Committee will provide an annual report covering financial reporting, auditor oversight, controls, complaints, enterprise risk, charter compliance, self-assessment and next-year priorities.

Reports should distinguish verified fact, management assertion, adviser conclusion, estimate and unresolved issue. A dashboard is not a substitute for disclosing a material exception.

17. Annual Self-Assessment and Charter Review

At least annually, the Committee will assess its composition, expertise, attendance, information quality, meeting cadence, private sessions, investigations, remediation effectiveness and Board reporting. It will review this Charter against the Company’s stage, governing documents, investor rights, debt covenants, regulatory posture and anticipated transactions and recommend amendments to the Board.

18. Reliance; Limitations

Members may rely in good faith on Company records and qualified advisers to the extent permitted by law, but must exercise their own judgment and address red flags. Nothing in this Charter reduces duties under law or governing documents, creates a guarantee of accuracy or compliance, or gives the Committee authority beyond the Board’s lawful delegation.

19. Adoption

The Board adopted this Charter on [DATE]. Amendments require Board approval and any additional approval required by governing documents. The corporate secretary will retain the signed resolution, final Charter, membership determinations and annual reviews.

BOARD APPROVAL:
By: ______________________________
Name: [●]
Title: [Secretary / Authorized Officer]
Date: [●]

Schedules and Oversight Tools

Schedule 1 — Private-Company Independence and Expertise Matrix

Schedule 2 — Auditor and Non-Audit Service Preapproval

Schedule 3 — Control and Remediation Register

Schedule 4 — Risk and Incident Escalation Matrix

Schedule 5 — Complaint Handling Register

Schedule 6 — Related-Party Review

Schedule 7 — Scaling Trigger Matrix

Annual Committee Calendar

Three-Pass Quality Review

Pass One — Authority and Role Clarity

• Reconcile charter/bylaws, investor agreements and Board delegation.
• Separate management responsibility, Committee oversight, auditor work and full-Board authority.
• Replace public-company labels with actual private-company requirements unless a transition plan applies.

Pass Two — Control and Risk Coverage

• Map financial close, payments, equity, debt, tax, cyber/data, complaints and related parties.
• Confirm every material control has evidence, owner, exception process and remediation validation.
• Test the charter against one fraud, liquidity, cyber and reporting incident.

Pass Three — Operating Cadence and Scaling

• Build the annual calendar and private-session plan.
• Define scaling triggers for financing, audit, acquisition, regulation and IPO readiness.
• Confirm minutes and dashboards show exceptions and decisions, not just presentations received.

Website Posting README — Not Part of the Charter

What this resource does. This charter gives a private founder-led growth company a disciplined audit, financial-control and enterprise-risk committee without falsely representing public-company status.

Prompt to complete the form. “Act as experienced private-company governance counsel working with a CFO and audit partner. Complete EF-088 from verified governing documents, investor rights, debt covenants, financial reporting, audit status, control environment, risk register and growth plan. Produce a missing-information report, clean charter, independence/expertise matrix, auditor preapproval policy, remediation register, incident escalation matrix, complaint protocol, annual calendar and scaling-trigger plan. Clearly separate private-company practices from mandatory public-company rules. Do not invent independence, audit, compliance or control conclusions.”

Required human review. Corporate governance counsel, finance leadership, the independent accountant or auditor, tax counsel, cybersecurity/privacy counsel and regulated-industry specialists. Before a public offering or listing, update for current SEC, exchange and Sarbanes-Oxley requirements.

Originality boundary. This is clean-room original drafting. It contains no publisher charter text, annotation, marking, branding or proprietary commentary.

Posting instructions. Publish only after Board/governance and editorial review. Preserve the private-company/public-company distinction, practitioner-master warning and bottom README. Link the reviewed Word file and do not post confidential complaint, incident, control-deficiency or adviser information.