(a) Retention of audit documentation. The auditor must retain audit documentation and reports for a minimum of three years after the date of issuance of the auditor's report(s) to the auditee. The cognizant agency for audit, oversight agency for audit, cognizant agency for indirect costs, or pass-through entity may extend the retention period by providing written notification to the auditor. When the auditor is aware that the Federal agency, pass-through entity, or auditee is contesting an audit finding, the auditor must contact the parties contesting the audit finding for guidance prior to the destruction of the audit documentation and reports.

(b) Access to audit documentation. Audit documentation must be made available upon request to the cognizant or oversight agency for audit or its designee, cognizant agency for indirect cost, a Federal agency, or GAO at the completion of the audit, as part of a quality review, to resolve audit findings, or to carry out oversight responsibilities consistent with the purposes of this part. Access to audit documentation includes the right of Federal agencies to obtain copies of audit documentation as is reasonable and necessary.