Checklist · Business & Contracts · Operational Governance

The 6-Month Check-In Self-Audit for a New Practice or Business

Six months after launch, the formation file and the operating reality often diverge. Use a structured check-in to reconcile ownership, authority, filings, banking, contracts, insurance, data practices, employment, and compliance calendars.

By Lincoln Square Law · 8-minute read

🖨 Print this checklist

Reconcile the public record to the company you actually built

Pull the current Secretary of State record and compare it to the formation file. Confirm the legal name, registered agent, registered office, principal address, and listed managers or officers. For Illinois LLCs, Section 50-1 requires annual-report information that includes the registered office, agent, principal place of business, and managers or members with manager authority. If the business moved, changed leadership, or changed its registered agent during the first six months, determine which filing is needed rather than waiting for the annual report to expose the mismatch.

Confirm good standing and calendar the first annual report. The Secretary of State provides online annual-report processes for LLCs and corporations. Assign a primary owner and a backup, and put reminders well before the due date.

The same calendar should include assumed-name filings, professional or facility licenses, insurance renewals, tax deadlines, and permits. A startup often has more recurring dates than its founders realize because obligations were created by different advisers and vendors at different times.

Reconcile ownership and governance

Compare the operating agreement, bylaws, ownership ledger, cap table, tax records, and actual contributions. Did every owner contribute what the documents say? Did anyone receive additional equity for services? Were any interests transferred, promised, pledged, or repurchased? If the company is professional or regulated, confirm that ownership still satisfies applicable restrictions. Fix the official record while the facts are fresh.

Review voting and signature authority against actual practice. If a founder has been signing all contracts because it was convenient, confirm whether the governing documents and board or member resolutions support that role. Update the signature-authority matrix and bank permissions. Section 13-5 of the Illinois LLC Act makes clear that membership alone does not create agency authority, so informal assumptions should not substitute for documented delegation.

Audit the contract stack and renewal exposure

Create a list of every material contract signed since formation: leases, software, vendors, professional services, employment or contractor agreements, customer forms, loans, insurance, merchant processing, and data-processing arrangements. Record term, renewal, cancellation window, spend, owner, and location of the executed copy. Six months is early enough to catch an auto-renewal notice period before the first renewal locks in.

Compare signed contracts to actual operations. A vendor may be processing data not contemplated by the agreement. A customer may be receiving support levels that were never documented. A lease may require insurance certificates that were never delivered. Turn each mismatch into an assigned corrective action. The audit is not merely a filing exercise. It is a way to identify where the business has created obligations without building the operational control needed to satisfy them.

Test banking, payments, and financial controls

Review bank signers, cardholders, payment approvals, payroll access, expense reimbursement, and accounting permissions. Remove users who no longer need access and separate initiation from approval for material transfers where practical. Compare banking authority to corporate resolutions and the signature matrix. If personal and company expenses became mixed during launch, clean up the reimbursement record with the company’s accountant and stop the practice going forward.

Review accounts receivable, aging, recurring subscriptions, and vendor commitments against the budget. The purpose is not to conduct a financial-statement audit. It is to verify that contractual commitments are visible in the financial system.

A contract database that says a vendor costs $2,000 per month while invoices show $4,500 in add-ons is an operational warning. Use the six-month review to connect legal commitments to actual cash flow.

Review insurance and risk transfer against actual activities

Compare the business described on each insurance application to what the company actually does today. New services, locations, employees, vehicles, professional activities, cyber exposure, or inventory can change the risk. Confirm required limits in leases and customer contracts, obtain current certificates, and identify any contractual indemnity obligations that are broader than available coverage. Escalate material gaps to the broker and counsel rather than assuming the policy responds.

Verify that required insureds, additional insureds, endorsements, and notices are in place where contracts require them.

Store policies and certificates centrally with renewal dates. Insurance is most useful when it is integrated with the contract process. If Legal agrees to coverage requirements but nobody tells the broker, the paper allocation of risk may not match the actual program.

Audit people, data, and compliance controls

Review employee and contractor classifications, offer letters, confidentiality agreements, handbook acknowledgments, payroll setup, and required training. If the business uses biometric timeclocks, AI hiring tools, or regulated data, confirm that the corresponding notices, consents, contracts, and retention practices actually exist. Vendor onboarding often moves faster than policy implementation during launch, so this is the point to reconcile what technology was purchased with what compliance review occurred.

Finally, create a short corrective-action register with owner, due date, evidence of completion, and escalation status.

Separate urgent legal or regulatory gaps from housekeeping. Schedule the next review at twelve months and incorporate recurring controls into ordinary operations so the company does not depend on a once-a-year cleanup. A six-month self-audit is successful when it converts startup improvisation into documented governance.

Review licenses, permits, and professional restrictions

If the business is regulated, compare every current license and permit to the people, locations, services, and ownership actually in place. Professional practices should confirm that required owners and responsible professionals remain properly licensed and that entity records match licensing records. Cannabis, healthcare, food, transportation, construction, and other regulated businesses may also have local approvals or facility-specific conditions that do not appear in the Secretary of State file.

Create a renewal table with license number, authority, responsible person, renewal date, prerequisites, and proof of filing. A recurring compliance item should not live only in one employee’s calendar. If a change in ownership, address, services, or control requires advance approval or notice, add that trigger to the company’s change-management process.

Review what the company promised in policies and sales materials

Compare privacy notices, website terms, security statements, customer proposals, marketing claims, and employee policies to actual practice. A young business may copy language from a template and later adopt different systems or workflows. The legal risk comes from the mismatch, not from the age of the document. Identify statements about data retention, security, refunds, service levels, accessibility, licensing, or professional qualifications that operations cannot currently prove.

Treat policy corrections as controlled changes. Update the document, effective date, approval record, website copy, training, and operational procedure together. Preserve the prior version when it may matter to customers or regulators.

The six-month audit should leave the company with fewer contradictions between what it says and what it does.

Convert findings into the next operating cycle

Close the audit with a short management review that ranks findings by legal exposure, operational impact, cost, and deadline. Assign each corrective action to a named owner and identify the evidence that will close it: filed amendment, signed agreement, removed access, updated policy, completed training, renewed license, or insurer confirmation. Do not let the audit end with a list of observations that no one owns.

Use the findings to improve recurring workflows. If contract renewals were missed, add a renewal intake. If signer authority drifted, add quarterly access reviews. If policy language did not match practice, add change control for website and policy updates. The goal is to eliminate the need to rediscover the same problem at the twelve-month review.

Six-month self-audit checklist

• Secretary of State record, good standing, annual-report date, and registered-agent information verified.
• Ownership ledger, contributions, governance documents, and signer authority reconciled.
• Material contracts inventoried with term, renewal, notice window, spend, and business owner.
• Banking, card, payroll, expense, and accounting permissions reviewed and stale access removed.
• Insurance coverage and contractual requirements compared to current operations.
• Employment, privacy, security, licensing, and vendor controls tested against actual practice.
• Corrective-action register created with owner, due date, and completion evidence.