What 2 CFR 200 (Uniform Guidance) Actually Means for Your Nonprofit, In Plain Language
By Jasmine Thompson | Stellar Consulting Inc.
One of the first things I ask a new nonprofit client is: "Do you receive any federal funding?" If the answer is yes, the next question is: "Has anyone walked you through 2 CFR 200?" In almost every case, the answer is no, even from organizations that have been receiving federal grants for years.
That always stops me in my tracks. Not because I'm surprised anymore, but because I know what that gap can cost an organization, in audit findings, in disallowed costs, in the stress of scrambling to reconstruct records that should have been maintained from day one.
So let me do for you what I wish someone had done for my clients earlier: walk you through 2 CFR 200 in plain language, so you know exactly what it requires, why it matters, and where most organizations run into trouble.
What Is 2 CFR 200, and Where Did It Come From?
2 CFR 200, formally Title 2 of the Code of Federal Regulations, Part 200, is the federal government's unified rulebook for organizations that receive federal financial assistance.
Before 2014, federal agencies operated under a patchwork of separate OMB Circulars: A-110, A-122, A-133, and others. Each had its own requirements, its own terminology, and its own interpretation. For nonprofits working with multiple federal funders, compliance was a moving target.
The Uniform Guidance (as 2 CFR 200 is commonly called) consolidated all of those circulars into one standardized framework. It created a consistent set of rules across federal agencies, so a nonprofit receiving HUD funding and HHS funding operates under the same core compliance expectations for both awards. The Uniform Guidance was most recently updated in 2024, with clarifications that reinforce the federal emphasis on accountability and documentation.
Who Does 2 CFR 200 Apply To?
Here is where I see the most critical misunderstanding.
2 CFR 200 applies to any organization that receives federal financial assistance, whether that funding comes directly from a federal agency or passes through a state, county, or city government first.
That last part is essential, and it is where the confusion lives:
"We receive our funding from the county. The federal rules don't apply to us."
I hear this regularly. It is not accurate.
When a county receives federal dollars, through programs like CDBG, ARPA, Title IV, or dozens of others, and passes those funds to your organization as a sub-grant, those funds carry the federal requirements with them. You are a sub-recipient, and you are subject to 2 CFR 200 just as if you had received the money directly from Washington.
If your organization receives grants from state or local agencies, the first question to ask is: what is the original source of this money? If the answer (even partially) is federal, 2 CFR 200 applies.
The Six Core Requirements, Explained Simply
2 CFR 200 covers a lot of ground, but the requirements that affect day-to-day operations fall into six categories. Here is what each one actually means for your organization.
1. Allowable and Allocable Costs
Every dollar you spend from a federal award must be necessary, reasonable, and allocable to that award. "Allowable" means the cost is permitted under 2 CFR 200 and your specific grant agreement. "Allocable" means the cost genuinely benefits the program you are charging it to.
Not every legitimate business expense is an allowable cost under a specific award. Your rent may be a reasonable expense, but if your organization only uses 30% of its space for the federally funded program, you can only charge 30% of that rent to the award.
2. Documentation Requirements
Every cost charged to a federal award must be supported by source documentation: receipts, invoices, timesheets, bank statements, contracts, and purchase orders. If the documentation does not exist, the expense did not happen, at least not in the eyes of an auditor.
This is not bureaucratic overkill. It is the foundation of accountability. The documentation requirement exists because federal funds are public money, and the public has a right to know it was spent as intended.
3. Internal Controls
Your organization must maintain written policies and procedures that govern how financial transactions are processed, approved, and recorded. This includes segregation of duties (the person who authorizes a payment should not be the same person who processes it), approval workflows, and controls over your accounting system.
Internal controls are not just a compliance checkbox. They protect your organization, your staff, and your leadership from errors, misappropriation, and audit exposure.
4. Procurement Standards
When your organization purchases goods or services using federal funds above certain dollar thresholds, competitive bidding requirements apply. You cannot simply award contracts to your preferred vendor, you must document that the process was competitive and that the selected vendor provided the best value.
The thresholds vary by purchase type, but the principle is consistent: federal funds require a documented, transparent procurement process.
5. Records Retention
All financial records related to a federal award must be retained for a minimum of three years after the end of the period of performance, longer if the award is under audit or litigation. This includes contracts, invoices, payroll records, bank statements, and correspondence with the funder.
Digital records are acceptable, but they must be organized, accessible, and backed up. "Our old bookkeeper had it on their laptop" is not a compliant records system.
6. Reporting Requirements
Financial and programmatic reports must be submitted on time, accurately, and using the funder's required formats. Late or incomplete reports are a compliance finding, even if your spending was perfectly appropriate. Build reporting deadlines into your organizational calendar, treat them with the same urgency as payroll.
Not sure where your organization stands against these requirements? The free Nonprofit Financial Health Checklist is a good starting point. [Grab it here →]
Allowable vs. Unallowable Costs, The Distinction That Causes the Most Audit Findings
Understanding the difference between allowable and unallowable costs is one of the most practical skills a nonprofit finance leader can develop.
Allowable costs are expenses that 2 CFR 200 permits and that your specific grant agreement does not exclude. They must be necessary for the performance of the award, consistent with your organization's written policies, and treated consistently across all your funding sources.
Unallowable costs under 2 CFR 200 include:
Entertainment expenses (receptions, parties, social events)
Alcohol
Lobbying activities
Certain administrative and general costs above your approved indirect cost rate
Any costs specifically excluded by your grant agreement
Here is the nuance that trips organizations up: a cost can be allowable under 2 CFR 200 generally but excluded by a specific grant's terms. I have seen organizations assume that if something is permitted in the Uniform Guidance, it is automatically permitted under every award. That is not the case. You must read your award agreement.
When in doubt, ask your program officer before incurring the expense. Getting a written response protects you far more than making an assumption.
The $1 Million Single Audit Threshold
This is the requirement that catches the most organizations off guard, particularly growing CBOs and nonprofits that have been successfully securing grants without realizing what crossing a certain funding level triggers.
If your organization expends $1 million or more in federal awards in a single fiscal year, you are required to have a Single Audit (also called an A-133 audit, a reference to the OMB Circular it replaced).
A Single Audit is not just a financial statement audit. It is a compliance audit that examines:
Your organization's financial statements
Your compliance with the federal programs through which you received funding
The Single Audit results are submitted to the Federal Audit Clearinghouse and are publicly accessible. Findings, including material weaknesses, significant deficiencies, and questioned costs, become part of the public record and can affect your future grant eligibility.
Many CBOs I work with are approaching or already exceeding the $1 million threshold without realizing it. Federal ARPA (American Rescue Plan Act) funds, city and county contracts that pass through federal money, and stacked grants from multiple agencies can push an organization over the threshold faster than leadership expects.
If you are unsure whether you have crossed, or are approaching, this threshold, that calculation should happen now, not at the end of the fiscal year.
The Most Common 2 CFR 200 Findings, And How to Prevent Them
In my work supporting nonprofits and CBOs through grant compliance, the same findings appear repeatedly. None of them reflect bad intent. Most reflect gaps in systems, training, and documentation habits.
Misclassified expenses. Program costs coded to the wrong grant, the wrong period, or the wrong expense category. Prevention: implement a consistent account coding system and train every staff member who codes transactions.
Missing documentation. The expense was legitimate. The receipt, invoice, or timesheet is nowhere to be found. Prevention: establish a same-day documentation policy. Require source documents before any transaction is posted to the accounting system.
Unapproved cost transfers. Moving costs from one grant to another after the fact, often done with good intentions to "fix" a coding error, without prior written approval from the funder. Prevention: address coding errors proactively and immediately. Understand your funder's cost transfer policy before moving anything.
Inadequate time tracking. Staff whose salaries are charged to federal awards without adequate time and effort records. Under 2 CFR 200, personnel costs require documentation, typically timesheets or equivalent records, that support the allocation. Prevention: implement a timesheet system that captures actual time spent by program, and make sure it is completed consistently and on time.
No written cost allocation methodology. Expenses shared between programs and administration (occupancy, utilities, certain staff time) without a documented basis for how they are divided. Prevention: develop and document a cost allocation plan. It does not need to be complex, but it does need to be written, consistently applied, and retained.
Why This Matters More Now Than Before
The regulatory environment around federal grant compliance has been tightening, and the trend is not reversing. Federal agencies have invested significantly in oversight infrastructure, and the expectation that recipients, direct and pass-through alike, maintain clean, audit-ready records has never been more clearly communicated.
This is not about fear. It is about positioning.
Organizations that have strong compliance systems in place are more competitive for new awards. Funders at every level, federal, state, city, county, increasingly weigh prior compliance history when making funding decisions. Being audit-ready is not just a protective measure. It is a growth strategy.
Myth: "We're a Small Organization, The Rules Don't Apply the Same Way to Us"
I want to address this directly because I hear it often, and it creates real risk.
The $1 million Single Audit threshold is the only size-based distinction in 2 CFR 200. Below that threshold, you are not required to have a Single Audit, but every other requirement in the Uniform Guidance applies to your organization regardless of your size, your budget, or the dollar amount of your individual awards.
A $50,000 federal grant carries the same documentation requirements, the same allowable cost standards, and the same internal control expectations as a $500,000 award. The stakes may be different, but the rules are the same.
Small organizations are not exempt. They are simply less likely to have had someone sit down with them and explain this clearly, which is exactly why I wrote this post.
Where to Start
If you have read this far and you are feeling the weight of what your organization may not have in place, I want you to take a breath. Compliance gaps are fixable. The organizations that get into serious trouble are not the ones who discover gaps, they are the ones who discover gaps and do nothing.
The NP Compliance Checklist was built around the specific documentation and internal control requirements in 2 CFR 200. It tells you exactly where your organization stands and what to prioritize.
For organizations that want email support working through the results, the $77 option includes direct access to me.
Options:
$27, Checklist only (DIY)
$77, Checklist + email support
For organizations with complex federal awards, multiple funders, pass-through relationships, or approaching the Single Audit threshold, the NP Bookkeeping Bundle includes a Grant Award Tracker built around 2 CFR 200 requirements.
Options:
$47, Bundle only (DIY)
$97, Bundle + email support
$197, Bundle + 30-minute strategy call
$247, Full package (Bundle + email + call)
For organizations building their 2 CFR 200-compliant financial infrastructure from scratch, new nonprofits, growing CBOs, or organizations that have never had formal compliance systems:
Options:
$97, Starter Guide only (DIY)
$147, Starter Guide + email support
$297, Starter Guide + 60-minute strategy call
$347, Full package (Starter Guide + email + 60-min call), best value
Or, if you would rather talk through your specific grant situation first: [Book a free 15-minute call →]. We will figure out together what your organization needs most right now.
You have done the hard work of securing federal funding to support your mission. The compliance piece is what protects that work, for your organization, for your team, and for the communities you serve. You do not have to navigate it alone.
Jasmine Thompson is a QuickBooks Platinum ProAdvisor and fractional CFO serving small businesses, nonprofits, and community-based organizations nationwide from Los Angeles, CA. Stellar Consulting Inc. has 20+ years of expertise in bookkeeping, payroll, CFO advisory, and Federal, State, City, and County grant compliance management. Learn more at stellarconsulting.us.
Comments