The ATO doesn’t want to know your answer. They want to know how you got there.
Picture this scenario.
It’s your annual Justified Trust review — an engagement the ATO conducts every year for Top 100 taxpayers. The review officer wants to understand a $14.7 million deduction claimed at Label D — Other Deductions. Specifically, they want to see the supporting documentation, the basis for the claim, and the reconciliation from your financial statements to the tax return.
What happens next determines everything.
In some organisations, this triggers a calm, methodical response. The tax manager opens the system, traces the $14.7 million back to the underlying transactions, generates a reconciliation report, and responds within a week. The ATO officer is satisfied. The matter closes.
In other organisations, it triggers panic. The tax manager opens a folder of spreadsheets. They’re not sure which version was used for lodgment. The person who prepared that section of the return left six months ago. The classification logic is embedded in a VLOOKUP that references a lookup table on a hidden worksheet. Two weeks later, they’re still trying to reconstruct how the number was derived.
The difference between these two outcomes is an audit trail.
WHAT AN AUDIT TRAIL ACTUALLY MEANS
An audit trail isn’t a log file. It’s not a change history in the corner of a spreadsheet. It’s a complete, unbroken chain of evidence from every number in your tax return back to the source data and the decisions that shaped it.
It means: for every line in the return, you can show which GL transactions contributed to it, how they were classified, what adjustments were made, who made them, when they were made, and why.
It means: for every adjustment, you can show the approval chain. Who proposed it. Who reviewed it. Who signed off.
It means: nothing is unexplained. Nothing is “that’s just how we’ve always done it.” Nothing depends on one person’s memory of a decision made eleven months ago.
WHY SPREADSHEETS CAN’T PROVIDE THIS
Spreadsheets don’t track decisions. They track values. When someone overwrites a cell, the previous value disappears. When someone inserts a row to add a manual adjustment, there’s no record of why. When someone copies a formula and modifies it for a special case, the logic diverges from the standard process with no documentation.
You can add audit sheet tabs. You can require comments. You can implement naming conventions and colour coding. But these are workarounds bolted onto a tool that wasn’t designed for this purpose.
The fundamental problem remains: a spreadsheet is a calculation tool being asked to serve as a governance framework. It will always fail at the governance part.
And when a Justified Trust review arrives — as it does every year for Top 100 organisations — the cost of not having an audit trail becomes painfully concrete. There’s the hard time cost: weeks of senior staff effort to reconstruct how numbers were derived, trace adjustments back through spreadsheet versions, and assemble documentation that should have existed from the start. Then there’s the signal it sends. Requesting time extensions to build an audit trail after the fact tells the ATO exactly what they suspected — that your governance framework isn’t where it needs to be. And while your team is buried in reconstruction work, they’re not doing what they should be doing: analysing and managing the genuinely contentious areas that may arise during the review.
WHAT THE ATO EXPECTS
The ATO’s Justified Trust framework is explicit about what it expects from large taxpayers: transparent processes, documented positions, and the ability to explain how reported tax outcomes were derived.
Notice the language. Not just the right answer — the right process. The ATO wants to see that your tax function has controls, that decisions are documented, and that outcomes are reproducible.
There’s a governance dimension here too. The ATO’s Tax Risk Management and Governance Review Guide assesses whether the right people are in clearly defined roles — from board-level oversight of tax risk, through to managerial-level controls over day-to-day compliance. They want to see that roles and responsibilities are clearly understood, that there’s a formalised control framework endorsed by the board, and that internal controls are periodically tested and reported. To achieve the ‘Stage 2’ rating the ATO now expects for high assurance, you need evidence that an effectively designed tax control framework exists — and that it’s actually being applied. An audit trail is the backbone of that evidence.
An audit trail is how you demonstrate all three.
Without it, every ATO interaction is a reconstruction exercise. With it, every ATO interaction is a reporting exercise. The difference is weeks of work and significant risk.
THE AUDIT TRAIL AS INSURANCE
Think of your audit trail as insurance. You hope you never need it. But when you do — when the ATO raises a query, when an internal audit reviews the tax function, when a new CFO wants to understand the tax position — the premium you paid in maintaining it is worth ten times what you saved by cutting corners.
And like insurance, the best time to get it is before you need it.
If your current process can’t trace a deduction from the tax return to the source transaction in under five minutes, you have an audit trail problem.
The question is whether you fix it before or after someone asks.
