TL;DR: A CAM audit RFP is the right tool when you are evaluating a contingency firm or CPA auditor and need to compare methodology, scope, and contract terms before signing. This page gives you the 12 questions, a scoring rubric, and the red flags that disqualify a vendor before the first meeting ends.
CAM Audit RFP Template: 12 Questions to Ask Before Hiring an Auditor [2026]
I built CAMAudit because the procurement process for CAM audit services was opaque, and most tenants had no framework to evaluate whether a vendor's methodology would actually catch the billing errors in their specific lease. A well-structured RFP fixes that.
CAM audit RFP: A CAM audit RFP (Request for Proposal) is a structured vendor evaluation document that commercial tenants use to compare CAM audit service providers on methodology, pricing, scope, and deliverables before signing an engagement letter. An RFP helps tenants identify providers who apply forensic detection methodologies rather than surface-level reconciliation checks.
Use this page if...
You have decided to formally evaluate CAM audit service providers and want a structured comparison framework before signing anything. Start here if:
- You manage NNN or modified gross leases across multiple locations and need a vendor with documented methodology.
- Your legal or finance team requires a formal procurement process before any external engagement.
- You have received competing proposals from contingency audit firms or CPA-based auditors and need a consistent scoring framework.
- You want to understand what questions separate a forensic auditor from a reconciliation reviewer before you get on a sales call.
If you are still deciding between service categories (AI tool vs. CPA firm vs. contingency firm), read CAM Audit Services for Tenants first. This page assumes you already know you want a formal evaluation.
Why the RFP questions matter
40% of commercial CAM reconciliations contain material billing errors (Tango Analytics, 2023)
Most tenants with CAM exposure above $50,000 per year have never received a documented explanation of what their audit provider actually checks. The vendor says "we review your reconciliation," the client assumes that means a thorough forensic review, and both parties operate under different assumptions until recovery falls short.
An RFP closes that gap. Each question forces the vendor to be specific. A strong answer demonstrates depth. A vague answer tells you something important before money changes hands.
Traditional audit firms typically charge $2,500 to $15,000 per property plus 30 to 33% of recovered amounts as a contingency. At those engagement values, formal procurement discipline is warranted.
The 12 RFP questions
1. What specific overcharge categories do you detect?
This is the single most important question in the RFP. A credible auditor names specific categories: management fee overcharges, pro-rata share errors, gross-up violations, CAM cap violations, base year errors, controllable expense cap overcharges, excluded service charges, gross lease charges, insurance overcharges, tax overallocation, utility overcharges, common area misclassification, landlord overhead pass-through, and true-up verification.
A vendor who answers "we review everything in your reconciliation" has not answered the question. Push for category-level specificity. If they cannot name categories, they are reviewing receipts, not auditing compliance.
2. What is your pricing structure?
Understand the full structure before comparing quotes. Contingency fees are typically quoted as a percentage of recovered amounts. Hourly engagements may carry minimum commitments. Flat-fee structures eliminate variable cost risk.
Ask for a total cost projection based on your expected CAM pool and an assumed recovery rate. A 33% contingency on a $15,000 recovery is a $4,950 fee. That is your comparison point, not the percentage alone.
3. How many years back does your standard audit cover?
Most leases include an audit rights window of 12 to 36 months, sometimes longer. The vendor's default scope should cover the full contractual window, not just the most recent reconciliation year.
A vendor who audits one year when your lease permits three years of lookback leaves recoverable overcharges on the table. Ask whether multi-year scope is included in the base fee or treated as an add-on.
4. What documents do you require from us?
A forensic audit requires the executed lease, all amendments, the reconciliation statement with full backup, and ideally the landlord's general ledger entries for the cost pool. Some auditors also request prior-year reconciliations, rent roll snapshots, and tax or insurance backup.
A vendor who only needs "the lease and the reconciliation" is likely conducting a surface-level review. The depth of document requirements signals the depth of the audit.
5. Do you access the landlord's general ledger under our audit rights clause?
Many commercial leases grant tenants the right to inspect the landlord's books and records, not just the reconciliation summary. A thorough auditor uses that right. They request the general ledger entries behind each cost pool line item, not just the totals.
If the vendor does not exercise audit rights access, they are reviewing the landlord's summary, not the source data. That is a significant limitation for complex reconciliations.
6. What does your final report look like?
Ask for a sample report. The report should identify each finding by category, cite the specific lease clause that the finding violates, show the billed amount, show the correct amount under the lease, and calculate the overcharge. A report that says "we found potential issues" without citations and calculations is not an audit report.
The findings report is also the document your attorney or property manager will reference during any dispute. It needs to be usable by people who were not involved in the audit.
7. Do you provide a dispute letter draft with findings?
A dispute letter draft translates audit findings into a formal communication to the landlord. Not all vendors provide this. Some charge separately for it. Some provide a template and expect the tenant to fill it in.
A complete engagement delivers a dispute letter draft that cites specific findings by line item, states the corrected amount, and references the lease clause. The letter establishes the formal dispute record, which affects your legal position if the dispute escalates.
8. What is your average time from engagement to report delivery?
Traditional audit firms commonly quote 6 to 10 weeks. If your audit rights window is 30 days from reconciliation receipt, that turnaround is too slow. Confirm the vendor's turnaround time and compare it to the deadline in your lease. Missed windows are unrecoverable.
Ask whether their quoted turnaround applies to standard engagements or whether complexity, multi-year scope, or document delays typically extend it. Get a commitment in writing in the engagement letter.
9. How do you handle landlord pushback after findings are delivered?
Some vendors deliver findings and consider their job done. Others provide dispute support through negotiation, documentation requests, and escalation guidance.
Ask specifically: what happens if the landlord disputes your findings? Will the vendor provide a written rebuttal? Will they participate in a call with the landlord's property manager or attorney? Is that support included in the fee or billed separately?
10. What are your confidentiality and data handling terms?
Your lease, reconciliation data, and operating financials are sensitive. Understand who has access to your documents inside the vendor's organization, whether data is shared with third parties, how long documents are retained after the engagement, and what happens to your data if the vendor's business changes.
Ask for the confidentiality terms in writing before the engagement letter is signed. A credible vendor will have clear answers.
11. Can you provide two to three references from tenants in similar lease structures?
References matter most when they come from tenants who resemble your situation: similar property type, similar CAM pool size, and similar lease complexity. A reference from a 50-location national retailer does not validate that the vendor can handle a 3-location medical group with complex exclusion language.
Ask for references from tenants in the same property type (office, retail, industrial, medical) with CAM pools in a comparable range to yours. A vendor who cannot provide targeted references is either new to the market or over-promising their match to your situation.
12. What does your engagement letter's exclusivity clause say?
Some engagement letters include clauses that prevent the tenant from working with another audit provider during or after the engagement, often for a period of 12 to 36 months. This limits your ability to get a second opinion, switch providers, or use an automated tool for ongoing monitoring.
Read the exclusivity terms before signing. Reasonable scope: no simultaneous engagement with a competing firm for the same property and audit period. Unreasonable scope: blanket exclusivity that prevents any other provider from reviewing your leases for multiple years.
Scoring rubric
Use this table to score each vendor response across the 12 questions. Green responses indicate a provider with documented forensic methodology. Yellow responses indicate acceptable but incomplete answers that require follow-up. Red responses are disqualifying.
| Question | Green (ideal answer) | Yellow (acceptable) | Red (disqualifying) |
|---|---|---|---|
| 1. Detection categories | Names specific categories with methodology | "We cover all major categories" with examples | "We review everything" with no specifics |
| 2. Pricing structure | Full cost projection at expected recovery | Clear fee structure with variables explained | Vague percentage with no base fee details |
| 3. Years covered | Full contractual lookback window | Current year plus one prior | Current year only without explanation |
| 4. Documents required | Lease, amendments, reconciliation, GL entries | Lease and reconciliation with backup | Reconciliation only |
| 5. Audit rights access | Yes, exercises GL access routinely | Exercises on request with justification | Does not access GL or cannot explain why |
| 6. Report format | Sample report with citations, math, per finding | Report description with sample excerpt | No sample, generic description only |
| 7. Dispute letter draft | Included in engagement, cited by finding | Available as add-on with clear pricing | Not offered |
| 8. Turnaround time | Committed timeline within your deadline window | Estimated range with reasonable caveat | Longer than your audit rights window |
| 9. Landlord pushback support | Included through negotiation | Available on request, described clearly | Not addressed |
| 10. Confidentiality terms | Written terms provided proactively | Terms available on request | Vague or no response |
| 11. References | Tenants with similar property type and CAM size | References from different property types | No references or general testimonials only |
| 12. Exclusivity clause | No exclusivity or narrow same-property scope | Short-term exclusivity with clear expiration | Multi-year blanket exclusivity clause |
Score each vendor from 0 to 2 per question (0 = Red, 1 = Yellow, 2 = Green) for a maximum of 24 points. Any vendor with a single Red response on questions 1, 5, or 8 should be disqualified regardless of total score.
Red flags that disqualify a vendor
These responses should end the evaluation regardless of price or reputation.
If the vendor cannot name the specific overcharge categories they check, "our experienced auditors review your full reconciliation" is not a methodology. It is a deflection. Push until they describe how they test each category, or walk.
Any vendor who gives you a recovery projection before reading your lease and reconciliation is selling you, not evaluating you. Real auditors cannot quote expected recovery without reviewing the source documents. That number is a sales number, not an audit number.
An exclusivity clause that locks you out of other auditors or automated tools for two to three years is not standard practice. It is a vendor protection clause. Reasonable exclusivity covers the same property for the same audit period. Anything broader is worth challenging before you sign.
A findings report without a dispute letter draft leaves you to write the landlord communication yourself. That letter is the formal record that triggers your rights under the lease. Excluding it from scope is an incomplete service, regardless of how the vendor prices it.
If a vendor cannot connect you with even one former client in a similar property type or lease structure, they cannot demonstrate that their methodology fits your situation. "We have many happy clients" is not a reference.
Run the math before signing. Contingency percentage applied to a realistic recovery estimate tells you the actual vendor fee. If that number equals or exceeds the net recovery, the economics do not work. This problem is most common with small CAM pools and high-percentage contingency structures.
"The vendors who push back hardest on the exclusivity question are the ones who know their methodology won't hold up to a second opinion. A good auditor welcomes comparison because their findings stand on their own." — Angel Campa, Founder of CAMAudit
When an RFP is overkill
A formal RFP process is appropriate for traditional contingency audit firms and CPA-based auditors where the engagement terms, methodology, and pricing all require negotiation before signing. It is not appropriate for every audit situation.
If your annual CAM exposure per location is under $50,000, the economics of a traditional audit often do not work regardless of how strong the RFP responses are. At that scale, the vendor's minimum fees may consume a material portion of any recovery.
If you are evaluating an AI-powered audit tool, there is nothing to RFP. CAMAudit charges $79 for a single audit, $179 for three audits, and $249 for five audits. The methodology is fixed at 14 detection rules applied to every scan. The turnaround is under 15 minutes. The deliverable is a structured findings report plus a dispute letter draft when overcharges are found. There are no engagement letter negotiations, no exclusivity clauses, and no contingency fees.
40% of commercial CAM reconciliations contain material billing errors, making systematic detection methodology the most important vendor differentiator (Tango Analytics, 2023)
For a CFO managing 2 to 10 locations, the practical path is to run an automated audit first. If it surfaces findings, you have documented evidence before you engage anyone. If you want a second opinion or a more comprehensive engagement for a large complex property, you proceed to the traditional vendor RFP with findings in hand.
How CAMAudit answers the 12 questions
For transparency, here is how CAMAudit responds to each RFP question.
Detection categories: 14 specific rules: gross lease charges, excluded service charges, management fee overcharge, pro-rata share error, gross-up violation, CAM cap violation, base year error, controllable expense cap overcharge, insurance overcharge, tax overallocation, utility overcharge, common area misclassification, landlord overhead pass-through, and true-up verification.
Pricing: Flat fee. $79 for one audit, $179 for three, $249 for five. No contingency, no minimum, no variable fees.
Years covered: Tenants upload the documents they want analyzed. Multi-year coverage is determined by what you upload, not by a separate scope negotiation.
Documents required: The lease (or relevant sections) plus the reconciliation statement. Optional: supporting schedules, GL excerpts, prior-year reconciliations.
Audit rights and GL access: CAMAudit analyzes the documents you provide. It does not independently contact the landlord or request records on your behalf. That step remains your responsibility under the audit rights clause.
Report format: A structured findings report identifying each overcharge by category, the relevant lease provision, the billed amount, the correct amount, and the overcharge calculation.
Dispute letter draft: Included. Generated automatically when findings are confirmed.
Turnaround: Under 15 minutes.
Landlord pushback support: CAMAudit generates the initial dispute letter draft. Ongoing negotiation and escalation are the tenant's responsibility. The findings report includes citations and calculations an attorney can work with directly.
Confidentiality: Document upload and processing terms are covered in the CAMAudit privacy policy. No data is shared with third parties.
References: No testimonials offered. Run a first scan and evaluate the output directly.
Exclusivity: None. Use CAMAudit alongside any other provider or attorney.
FAQ
Frequently Asked Questions
What should a CAM audit RFP include?
A CAM audit RFP should cover: detection methodology (which specific categories the provider checks), pricing structure (flat fee, hourly, or contingency percentage), turnaround time, audit scope (years covered), report format, dispute letter draft delivery, confidentiality terms, and references from tenants in similar lease structures. An RFP that only asks about price will miss critical methodology gaps.
What is a fair contingency fee for a CAM audit?
Industry standard contingency fees for CAM audit firms range from 25% to 40% of recovered amounts. Anything above 40% is aggressive. Some firms add a minimum flat fee of $1,500 to $2,500 regardless of recovery. Always calculate your total cost at the expected recovery amount before signing, not just at the stated percentage.
What red flags should disqualify a CAM audit vendor?
Disqualifying red flags: the vendor cannot describe their specific detection methodology (just 'our experts review everything'), they require a multi-year exclusivity clause before you can work with other auditors, they promise a recovery estimate before reviewing your documents, or they cannot produce references from tenants with similar lease structures.
Do I need an RFP for a $79 software audit tool?
No. A formal RFP makes sense when evaluating contingency firms or CPA auditors where the engagement letter terms, methodology, and contingency percentage all require negotiation. AI-powered tools like CAMAudit operate on fixed terms: $79 per audit, 14 detection rules, results in under 15 minutes. There is nothing to negotiate.
How many vendors should I include in a CAM audit RFP?
For a formal RFP process, 3 to 5 vendors is practical. Include at least one AI-powered software option (which often eliminates the need for a traditional engagement) plus two to three contingency or CPA firms if your CAM spend is high enough to justify them. Under $50,000 in annual CAM per location, a software tool is likely to be the most cost-effective choice regardless of what RFP responses show.
Next pages
- CAM Audit Services for Tenants: AI vs. CPA vs. DIY: compare service categories before you start the RFP process
- Audit Rights Clause in Commercial Leases: understand your contractual access rights before engaging any vendor
- How to Read a CAM Reconciliation Statement: review the source document yourself before vendor evaluation
Sources
- Tango Analytics. "CAM Reconciliation: Why tenants should verify the math." https://tangoanalytics.com/blog/cam-reconciliation/
- IREM (Institute of Real Estate Management). Operating expense management and audit resources. https://www.irem.org/
- BOMA International. Experience Exchange Report and operating expense benchmarks. https://www.boma.org/