Outsourced controller: adding CAM audit to your client services
Outsourced controllers and vCFO firms already have access to every document needed for a CAM audit. The CAM invoice sits in the accounts payable queue. The lease is in the client file. FASB ASC 842 compliance work means the lease terms have already been extracted. The only missing piece is converting that access into a structured cost-recovery review that catches what the landlord billed incorrectly.
CAM reconciliation (Common Area Maintenance reconciliation): An annual statement from a commercial landlord detailing each tenant's share of building operating expenses. The reconciliation compares estimated monthly CAM payments against actual expenses incurred for the year, resulting in a true-up charge or credit. Common billing errors include management fee overcharges, incorrect pro-rata share calculations, disallowed capital expense pass-throughs, and excluded service charges appearing on the statement.
Why outsourced controllers are positioned to deliver this service
The outsourced controller's job is to manage the financial operations of a business that does not have a full-time controller on staff. That means processing invoices, managing monthly close, preparing financial statements, and advising on cost structure. CAM charges show up in all three places: the accounts payable ledger, the occupancy cost line on the P&L, and the FASB ASC 842 lease disclosure.
What most controller firms do not do is verify those charges against the lease terms that generated them. The reconciliation arrives, the controller codes it to occupancy expense, and the client pays. That passive processing is where the opportunity lives.
Published industry data from Tango Analytics and IREM indicates that billing discrepancies in commercial CAM reconciliations are common across retail, office, and industrial lease types. The management fee overcharge alone, where the landlord calculates the fee on a base that includes capital improvements or excluded expenses, is one of the most frequently flagged errors in published lease audit case studies. After testing reconciliation samples from published audit cases through CAMAudit, our tool flagged management fee and pro-rata share errors as the two most common systematic patterns.
The controller firm does not need to become a commercial real estate specialist to catch these errors. The forensic engine (CAMAudit) applies the 14 detection rules and produces the findings. The controller firm provides three things that a standalone audit tool cannot: the client relationship, the document access, and the advisory framing that turns a findings report into an actionable cost-recovery conversation.
The document access advantage
This is the practical reason controller firms are better positioned than most to deliver CAM audit. Consider what a controller firm typically holds for a client with commercial NNN leases.
The AP queue contains every CAM invoice and the annual reconciliation statement. The lease file, if maintained as part of the controller engagement, includes the operating expense definition, the pro-rata share methodology, and the exclusions list. The FASB ASC 842 work product includes a lease abstract with the key provisions already extracted: term, rent escalation, variable payment structure, and the treatment of pass-through expenses.
That is substantially the full document set required to run a CAM audit. An outside lease auditor would spend hours gathering and organizing exactly what the controller firm already has. The incremental effort for the controller to initiate a CAM review is low because the infrastructure is already in place.
"I built CAMAudit because the documents required for a forensic lease audit are already sitting in the controller's file for every NNN tenant client. The gap was not data access. It was a structured process for turning that data into a billing verification review." — Angel Campa, Founder of CAMAudit
Identifying which clients qualify
Not every client in a controller portfolio has CAM exposure. The qualification criteria are straightforward.
Lease type. The client must lease commercial space under a NNN (triple-net) lease or a modified gross lease with pass-through provisions. Gross leases do not generate CAM reconciliation statements because the landlord absorbs operating expenses. If the client receives an annual CAM reconciliation statement, they qualify.
Lease term. Audit rights typically run two to three years back from the current date depending on the lease provision and state law. Clients who have been in their current space for at least one full calendar year have at least one reconciliation period to review.
Reconciliation volume. Multi-location clients with multiple leases have multiple audit opportunities. A medical practice group with five clinic locations has five reconciliation statements per year. A retail franchise operator with twelve locations has twelve. Portfolio clients generate significantly higher ROI on the CAM audit engagement.
Annual CAM spend. The practical floor for a CAM audit to generate meaningful findings is around $15,000 to $20,000 per year in CAM charges. Below that threshold, even a modest billing error produces findings that may not justify the engagement economics for the client. Above that threshold, the potential recovery scales directly.
Run this filter across the existing controller portfolio and the qualified client list will be immediately visible. The NNN lease is disclosed in the FASB ASC 842 work product. The annual CAM spend is on the P&L. The multi-location flag is visible in the entity structure.
Two delivery models: referral and white-label
Controller firms can add CAM audit to their service mix through either of two commercial structures, depending on how they want to position the service to clients.
The referral model
The referral model is lowest friction. The controller firm receives a unique referral link and shares it with qualified clients. The client uploads their documents directly to CAMAudit, the forensic scan runs, and the client receives findings under the CAMAudit brand. The controller firm earns 30% of every audit fee, recurring lifetime, including every renewal and every additional location.
This model works well for controller firms that want to add value to existing client relationships without expanding their service delivery footprint. The advisory conversation is still billable to the client if structured as a line item in the controller engagement. The 30% referral commission is passive income on top of the advisory fee.
The AICPA's guidance on MAS (management advisory services) is relevant here. Referring a client to a specialized forensic tool and advising on the findings is squarely within the advisory services framework, not an attest function, which means AICPA independence rules do not apply.
The white-label model
The white-label model is appropriate for controller firms that want to build CAM audit as a formal, branded service line. Under this structure, the controller firm delivers findings reports under its own name and letterhead. The client sees the controller firm as the provider. CAMAudit operates as the forensic engine in the background.
Wholesale pricing for white-label delivery runs $25 to $40 per audit depending on volume tier. The controller firm sets its own retail price for the service, which can be structured as a flat advisory fee per engagement, an annual add-on to the controller retainer, or a contingency arrangement. The white-label margin is the difference between wholesale cost and the advisory fee charged.
For controller firms serving multi-location clients, the white-label model allows them to present a portfolio-wide occupancy cost optimization service. The framing is not "we are running a CAM audit." It is "we are conducting your annual occupancy cost review." That positioning commands an advisory fee commensurate with the outcome it delivers.
Engagement structure and timing
The natural engagement structure for CAM audit in a controller services context is as an annual Q1 deliverable. CAM reconciliation statements arrive between January and April for the prior calendar year. The controller is already processing year-end close and preparing for tax season. Adding a CAM reconciliation review to the Q1 workflow captures the documents at the moment they arrive and preserves all dispute rights.
Two practical structures work.
Add-on to the annual engagement letter. The controller engagement is renewed annually. Add a CAM audit line item to the engagement scope for clients with qualifying NNN leases. Price it as a flat fee per location per year. The deliverable is a findings report within 30 days of receiving the reconciliation statement and relevant lease sections.
Standalone advisory engagement. For clients where the controller relationship does not include full-scope financial management, a standalone CAM audit advisory engagement is appropriate. The engagement letter covers document collection, CAMAudit analysis, findings review, and dispute strategy advisory. Price at an advisory rate per location or as a flat project fee.
Both structures are cleaner with a specific engagement letter that defines the scope as a forensic review of landlord billing against lease provisions. The IRS Publication 535 context is worth noting: recovered operating expense overcharges are legitimate business expense corrections. The outcome for the client is a reduction in net occupancy cost, which flows directly to EBITDA improvement with no operational change required.
Communicating the value to clients
The controller firm already talks to clients about P&L optimization. CAM audit fits directly into that conversation.
The EBITDA framing is the most effective. A client paying $60,000 per year in CAM charges across three locations who has never audited those charges may be absorbing thousands of dollars in incorrect pass-through expenses annually. Published lease audit case studies document recoveries ranging from $3,000 to $40,000 per location per year depending on lease structure and billing complexity. Over three years, the cumulative exposure is substantial. Recovery of those overcharges represents a direct, one-time EBITDA improvement equivalent to generating $27,000 in additional revenue, with no cost of goods, no additional staff, and no operational change.
For clients under FASB ASC 842, occupancy costs are now explicitly disclosed on the financial statements. Board members, lenders, and investors see the operating lease expense. Demonstrating that the controller firm is actively verifying the accuracy of that expense is a governance-level differentiator. It signals that occupancy costs are being managed, not just recorded.
The conversation entry point is usually simple: "You received your CAM reconciliation. Before you approve the true-up payment, I want to run it against your lease terms. This takes a day and it could identify recoverable overcharges." That is a sentence the controller firm can say in any quarterly review, any annual planning meeting, or any phone call triggered by a true-up that seems higher than expected.
What happens when CAMAudit finds an issue
When the forensic scan identifies a billing error, the controller firm receives a findings report with the specific lease provision violated, the landlord's charge, the calculated correct charge, and the dollar variance. For each actionable finding, CAMAudit generates a dispute letter draft that references the specific lease clause and states the calculated overcharge.
The controller's role at this point is advisory. Review the findings with the client, confirm that the lease provision cited matches the actual lease document, and advise on dispute strategy. The dispute letter draft goes to the client's attorney or directly to the landlord depending on the client's preference and the magnitude of the finding.
BOMA and IREM publish operating expense data that provides context for whether specific expense categories are typical for a given property type and geography. For example, IREM's Income/Expense Analysis data for office buildings can help contextualize whether a management fee rate is within market range before a dispute is initiated. This contextual analysis is where the controller's advisory judgment adds value that a standalone audit tool cannot replicate.
The controller firm is not making a legal determination. The dispute letter draft is a structured summary of the billing discrepancy. Legal review before sending is appropriate for significant findings. For smaller variances, many landlords correct errors when presented with a documented calculation that references the specific lease provision.
Sources
- AICPA. "Management advisory services: practice standards and ethics." American Institute of CPAs. https://www.aicpa.org/
- FASB. "ASC 842: Leases." Financial Accounting Standards Board. https://www.fasb.org/
- IREM (Institute of Real Estate Management). "Income/expense analysis reports." https://www.irem.org/
- BOMA International. "Building owners and managers guide to operating expenses." https://www.boma.org/
- IRS. "Publication 535: Business expenses." Internal Revenue Service. https://www.irs.gov/publications/p535
- Tango Analytics. "Lease management and CAM reconciliation industry data." https://www.tangoanalytics.com/
Disclaimer: This article provides general educational information about CAM reconciliation review and the CAMAudit partner program. It is not legal, tax, or accounting advice. The engagement structures described are illustrative. Consult qualified commercial real estate counsel regarding dispute rights, applicable statutes of limitation, and audit rights provisions in specific lease agreements. AICPA independence and engagement standards should be reviewed with your professional liability carrier before structuring any advisory engagement.
Ready to add CAM audit to your controller service mix? Review the white-label and referral program details at /partners/white-label.
Frequently Asked Questions
Can an outsourced controller firm deliver CAM audit without CRE expertise?
Yes. The forensic layer (document extraction, rule application, math verification) is handled by CAMAudit. The controller firm provides the client relationship, document access, and advisory framing. No commercial real estate background is required beyond understanding the NNN lease structure your clients already operate under.
What documents do I need from the client to run a CAM audit?
The two core documents are the CAM reconciliation statement for the audit year and the relevant sections of the commercial lease: the operating expense definition, the pro-rata share methodology, the management fee cap, and any exclusions list. Many outsourced controllers already hold these in the client file because they process the CAM invoice and may manage lease obligations under ASC 842.
How does the referral commission work for controller firms?
Partners earn 30% of every audit fee, recurring lifetime. Every time a referred client purchases an audit, the referring firm earns 30% of the purchase price. This applies to the first audit, every renewal, and every additional location the client adds. There is no cap and no expiration.
Can we white-label the CAM audit findings report under our firm name?
Yes. The white-label program lets controller firms deliver findings reports under their own branding. The client sees your firm name, your logo, and your letterhead. CAMAudit operates as the forensic engine in the background. Wholesale pricing for white-label delivery is $25 to $40 per audit depending on volume tier.
When is the best time in the year to introduce CAM audit to controller clients?
January through April is the natural window. CAM reconciliation statements typically arrive in Q1 covering the prior calendar year. Controllers who process these statements as part of monthly close are already reviewing the numbers. Initiating a formal audit at reconciliation receipt, rather than after the invoice is paid, gives the client the most options including dispute rights.
Does running a CAM audit create any liability for the controller firm?
CAM audit is an advisory service, not an attest engagement. It does not trigger independence impairment under AICPA standards. The engagement letter should specify that the analysis is a forensic review of landlord billing against lease provisions, not an audit of the landlord financial statements. Consult your professional liability carrier for coverage specifics.
What detection rules does CAMAudit apply to each reconciliation?
CAMAudit runs 14 detection rules covering management fee overcharge, pro-rata share error, gross-up violation, CAM cap violation, base year error, controllable expense cap overcharge, excluded service charges, gross lease charges, insurance overcharge, tax overallocation, utility overcharge, common area misclassification, landlord overhead pass-through, and estimated payment true-up error.