Key takeaway: A SR&ED review is not an accusation. Being selected for one doesn't mean the CRA thinks you cheated. It means they want to see your work. Whether that's a five-minute exchange of documents or a months-long slog comes down to one thing: did you document your R&D as it happened, or are you reconstructing it from memory a year later? The audit you're afraid of is preventable. The refund you're walking away from, up to $2.1 million a year for some companies, is not coming back.
Too many Canadian founders who qualify for SR&ED never claim it. Not because their work doesn't count. Because they're scared of the word audit.
(Quick note: SR&ED, often written SRED, is short for Scientific Research and Experimental Development, Canada's R&D tax credit. Same thing, however you spell it.)
You can picture it. The CRA shows up, picks your claim apart, and claws the money back with interest. So you leave a six-figure refund on the table to avoid a risk you've never actually looked at directly.
Let's look at it directly. Almost everything founders imagine about a SR&ED audit is worse than the reality. Once you know what a review really is, and what really decides how it goes, the fear stops being a reason to skip the money and becomes a checklist you can plan around.
A review is not an accusation
Getting picked for a SR&ED review is not a sign you did something wrong. It's the CRA asking you to show your work, nothing more. There's no presumption of guilt baked into it. When you file a claim, it gets risk-assessed, and from there one of three things happens: it's accepted as filed, it gets a light desk review, or it's pulled for a deeper technical or financial review.
Here's what nobody tells a nervous first-time claimant: that one fact changes everything. The scary version of an "audit" (clawbacks, penalties, someone tearing through your books looking for fraud) is not what a routine SR&ED review is. A review is a request to back up what you filed. If your work is documented, backing it up is easy; if it isn't, that's where the pain comes from. The fear isn't really about the CRA. It's about whether you can prove what your team built.
The odds are already better than most founders assume
Most SR&ED claims never get pulled apart in a deep review at all. Per the CRA's own annual program statistics, in fiscal year 2025-26, of the 23,677 claims the CRA processed, 90% were accepted as filed, no back-and-forth required. Another 6% went through and came out adjusted after some modification. Only 4% were denied outright.
Sit with that split for a second. The scenario founders picture when they hear "audit" (a claim gutted, money clawed back, a fight with the CRA) describes a small minority of outcomes. Even inside that 4% "denied" doesn't mean fraud was found. It usually means the reviewer decided the work described didn't clear the eligibility bar, which is an argument about documentation and framing, not a punishment. The other 96% either sailed through or got adjusted and still resulted in money in the company's account.
None of this is a reason to get sloppy: the 4% is exactly where a thin, undocumented claim tends to land. It's a reason to stop treating "will I get audited" as the question that decides whether you file. Of the 24,160 claims filed CRA-wide that year, the real question is whether yours looks like the 90% or the 4%, and that's almost entirely a documentation problem, not a luck problem.
What actually happens to you in a SR&ED audit
Two things can happen in a SR&ED audit, and you might get one or both: a technical review of whether your work qualifies, and a financial review of whether your numbers are real. So picture you get the letter. Here's what each actually looks like.
If it's a technical review, the CRA wants to know your work qualifies. Did you hit a real technical problem you didn't know how to solve? Did you experiment your way through it? A CRA reviewer with a science or technology background reads your narrative and decides whether it clears the bar.
If it's a financial review, they want to know your numbers are real. A reviewer asks for the records behind the costs you claimed: payroll, invoices, receipts for materials and subcontractors, anything that ties the spend to the R&D.
And the process is far more human than the horror stories suggest. The CRA tells you which projects they're looking at. They send a letter listing exactly what they need and by when. Often there's a meeting, sometimes a call, occasionally a visit where they talk to your engineers and look at records. Then you get the outcome in writing: accepted, adjusted, or denied.
Disagree with the result? You're not stuck with it. You talk to the reviewer first, then their manager, then you can ask for a second administrative review. After that, you still have formal appeal rights.
That's the whole thing. It's a documented process with a paper trail and an appeal button. It is not an ambush. What decides whether it's painless or brutal is what you walk in holding.
How long a SR&ED review actually takes
A SR&ED review is not an open-ended wait. The CRA publishes service standards it's measured against: refundable claims accepted as filed are targeted for processing within 60 calendar days, and refundable claims selected for a full review are targeted within 180 calendar days, with a 90% on-time target for both. These aren't aspirational numbers the CRA quietly misses: in fiscal year 2025-26 it hit the 60-day standard 95% of the time and the 180-day standard 92.5% of the time, per the same annual program statistics cited above.
Put in plain terms: if your claim is accepted as filed, which is what happens to 90% of claims, you're typically looking at about two months. If it's pulled for a full review, you're typically looking at about six months, not indefinitely. A well-documented claim can move through either path close to the standard; a claim built from reconstructed memory is the kind that drags past it, because every follow-up question needs new digging instead of an existing answer.
What makes a SR&ED audit more likely
The single biggest thing that makes a SR&ED audit more likely is a weak claim: vague technical narratives, half-finished project descriptions, missing financial schedules. You can't control the CRA's risk system. You can control the things that put a target on your claim.
A weak claim reads like you're not sure what your own work was, so the CRA asks. A specific, complete claim that clearly shows what counts as SR&ED-eligible work reads like you know exactly what you did. It invites far fewer questions.
The other common triggers aren't about suspicion at all. Your claim doubles or triples from last year. You took a grant or other funding alongside it. Your R&D time allocation jumps. None of that means you did anything wrong. It just means something changed and the CRA wants it explained. Clear records explain it in a sentence. No records turn it into a problem.
See the pattern? Almost everything that makes a review likely, and almost everything that makes it hurt, traces back to documentation. Which is the one part of this you fully control.
Picture two companies that both doubled their claim year over year, because both hired aggressively and shipped a genuinely hard technical rebuild. Company A's engineering lead wrote a paragraph in the project ticket the week the uncertainty was resolved, and the finance team tagged payroll to that project as it was incurred. Company B's founder reconstructs the story from memory eighteen months later, guessing at who worked on what and for how long. Both claims might get selected for review; the size jump alone can trigger a look. Company A answers the CRA's letter by forwarding what already exists. Company B is now writing the narrative it should have written a year and a half earlier, under a deadline, while trying to remember which engineer worked on which sprint. Same trigger, completely different experience on the other side of it.
The real thing that decides how it goes
One thing decides how a SR&ED review goes: whether you documented your R&D as it happened, or are reconstructing it from memory a year later. Here's the uncomfortable part about the old way of doing SR&ED.
Most companies treat it as a once-a-year event. At tax time a consultant shows up, sits with the team, and tries to rebuild twelve months of engineering from memory, old tickets, and half-remembered Slack threads. The narrative gets written months after the work, by people guessing at what happened.
That claim might still get filed. It might even get approved. But it's fragile. The CRA increasingly wants contemporaneous evidence: records made at the time the work was done, tied to specific projects, showing the actual dead ends and the actual uncertainty you were fighting through. Guidance on how the CRA now runs reviews basically tells claimants to document as if a review is coming.
A claim rebuilt from memory can't produce that. A claim built from evidence captured as you went can. That gap is the entire difference between a review that's a quick document swap and one that drags for months and ends with your refund cut.
So the question was never "how do I survive an audit?" It's "how do I document my R&D so an audit is a non-event?"
How to claim so a review barely registers
Three things make a SR&ED claim audit-ready by default: capture evidence as the work happens, connect the technical story to the financial one, and have a qualified expert stand behind the claim before it's filed. Stop treating documentation as a tax-season chore. Treat it as something that piles up while you build.
Start with capturing the evidence as the work happens, not after. Your team already produces the raw material every day: commits, tickets, pull requests, the Slack thread where someone says "that approach failed, trying X instead." That is your SR&ED narrative, strongest the moment it's created and weakest when it's summarized from memory in March.
Then connect the technical story to the financial one, because a review can test both. When the story of what you were solving lines up with the records of who worked on it and what it cost, the two halves back each other up. Pull them apart and each one looks thinner.
Last, get a real expert to stand behind the claim before it's filed. This is the part software can't do for you. A tool can organize evidence and draft a narrative fast, but it doesn't sit across the table from a CRA reviewer. A qualified, independent SR&ED expert who has checked your claim, knows where it's strong, and can defend it is what turns a review into a conversation instead of a scramble. Automation gets you a fast, organized draft. Expert review makes it defensible. You want both.
That's how Glauq is built. We document SR&ED-eligible work continuously, inside the tools your team already uses, so the evidence is captured as you build. Then a qualified, independent SR&ED expert reviews every claim before it's filed. By the time a review letter could ever land, the answers are already in the file. And because we charge a flat fee instead of a cut of your refund, claiming this way doesn't cost you a slice of the money you get back.
The risk you're not looking at
While you're avoiding a hypothetical audit, you're skipping a real refund. And the program just got bigger.
Changes that received royal assent in March 2026 raised the annual expenditure limit for the enhanced 35% refundable credit from $3 million to $6 million. For a qualifying Canadian-controlled private corporation, that's up to $2.1 million a year in refundable credits, roughly double the old ceiling. The same changes restored eligibility for certain capital expenditures and, for the first time, opened the enhanced refundable credit to eligible Canadian public corporations. These are the biggest SR&ED changes in over a decade, so it's worth knowing exactly what changed and who it helps.
There's also a new optional pre-claim approval step, launched April 1, 2026, that gets you a CRA eligibility determination on planned work within 8 weeks of a complete application — before the costs are incurred rather than eighteen months after, more on how it works here. The whole system is moving toward giving claimants more certainty, not less.
So weigh it honestly. On one side, a documented, appealable review you can prepare for. On the other, a six- or seven-figure refund you never collected. Done right, SR&ED isn't a gamble against an audit. It's collecting money the program was built to give you, with a paper trail strong enough that a review barely registers.
Frequently asked questions
Does claiming SRED increase my chance of being audited? Filing is what makes you eligible for a review, but a clean, well-documented claim draws far less scrutiny than a vague one. The way to lower your risk isn't skipping the claim. It's claiming with strong, contemporaneous documentation.
What documents will the CRA ask for? Usually technical evidence: project descriptions, records of the experimentation and the technical uncertainty, results, and financial records like payroll, invoices, and receipts tied to the SR&ED work. The exact list comes in the letter they send.
What if my claim gets reduced or denied? You have a path. Discuss it with the reviewer, escalate to their manager, request a second administrative review, and beyond that file a formal objection and appeal. A first-round denial is not the end.
Can I just file myself to save the cost? You can, and some do. The hard parts are writing narratives that meet the CRA's eligibility bar, getting the eligible expenditures right, and being ready to defend both under review. That's the case for continuous documentation and expert review behind your claim, rather than going in alone.
How common is it to actually get reviewed? Most claims aren't pulled apart. Per the CRA's annual program statistics, 90% of claims processed in fiscal 2025-26 were accepted as filed with no changes, 6% were adjusted, and 4% were denied. Selection for a closer look is the exception, not the default outcome.
How long does a SR&ED review take? Per the CRA's service standards, refundable claims accepted as filed target 60 calendar days; refundable claims selected for a full review target 180 calendar days. In fiscal 2025-26 the CRA hit those targets 95% and 92.5% of the time respectively, so both timelines are typically real, not aspirational.
You don't have to choose between claiming and sleeping at night. The founders who claim with confidence aren't braver than you. They documented the work as they did it, and had someone who knows the program stand behind the claim before it went in.
See if your R&D qualifies: check your eligibility or estimate your refund.