990 Data Nonprofit Risk: A CPA’s Early-Warning Guide

Most CPAs treat Form 990 as a compliance task to prepare, review, and file. But for firms serving nonprofits, 990 data nonprofit risk analysis turns it into a valuable source of financial insight, revealing revenue trends, fund shifts, and governance red flags.

Nonprofits rarely fail overnight. Risk builds gradually through shrinking reserves, overreliance on one funder, and recurring deficits. By the time a cash crisis appears, the warning signs are often already visible in past filings.

This guide gives CPAs a practical framework for spotting risk early, with tools like Crowded* that surface these signals in real time.

TL;DR

• Your nonprofit clients’ next crisis may already be visible in their 990 data. Distress signals often appear 2–3 years before a cash emergency.
• Four 990 data nonprofit risk signals matter most: declining cash reserves, eroding unrestricted net assets, revenue concentration above 30%, and falling public support.
• A one-year review is not enough. The real warning signs show up only when CPAs track Parts VIII, IX, X, XI, and Schedule A across multiple years.
• This guide gives firms a repeatable 4-step process to turn Form 990 review into a strategic advisory function.
• Crowded helps close the gap between annual filings and real-time visibility by automatically organizing live financial data into 990-ready records.

Why 990 Data Is the Sharpest Nonprofit Risk Tool You Already Have

Form 990 is a public record. Most tax-exempt organizations must file it, and those filings are available through ProPublica, Candid, IRS TEOS, or directly from the nonprofit. What makes it valuable for 990 data nonprofit risk analysis is consistency. Unlike audited financial statements, Form 990 provides a standardized annual report for nearly every nonprofit client.

Each filing shows revenue, expenses, net assets, governance disclosures, and Schedule A support data. Read across several years, and it becomes a trendline rather than just a compliance document.

A single-year read can mislead. The real warning signs emerge through multi-year 990 data and nonprofit risk analysis.

The 4 Nonprofit Risk Signals Hidden in Every 990 Filing

Over three decades of academic research, anchored by the landmark Tuckman-Chang financial vulnerability model (1991), has consistently identified four 990-derived signals that precede nonprofit financial distress. The model, which analyzed Form 990 data from thousands of U.S. charitable nonprofits, defined a financially vulnerable organization as one likely to cut service offerings immediately in response to a financial shock, due to low equity, high revenue concentration, low administrative spending, and weak operating margins. Subsequent studies validated and extended these findings across multiple economic cycles, including the Great Recession.

Here is how every 990 data nonprofit risk signal maps to the filing and what to look for.

Signal 1: Cash Reserve Deterioration

Where to find it in the 990: Part X for unrestricted cash and liquid investments, cross-checked with Part IX to calculate months of cash on hand.

Formula: Unrestricted cash and liquid investments ÷ (total annual expenses ÷ 12)

Benchmark: Three to six months is healthy. Three months is a warning sign. Below one month is a crisis.

This is one of the clearest 990 data signals of nonprofit risk because declining cash reserves can be masked by stable or growing revenue. On paper, the nonprofit may look funded; in practice, its spendable cash may be disappearing. Clients with shrinking reserves deserve immediate attention.

Signal 2: Fund Balance (Net Assets) Trend Erosion

Where to find it in the 990: Part XI, especially the year-over-year net asset change line.

What to watch: Consecutive deficits that erode unrestricted net assets, even when total net assets still look stable.

This is one of the most dangerous 990 data nonprofit risk signals because it often stays hidden in plain sight. An organization may appear healthy on paper while quietly burning through the only funds it can actually use. Three straight years of declining unrestricted net assets are a serious red flag.

Signal 3: Revenue Concentration Risk

Where to find it in the 990: Part VIII (Statement of Revenue), especially government grants, program service revenue, and major contributions.

Benchmark: If a single source accounts for more than 30% of total revenue, risk is elevated. At 50% or more, the organization is in danger territory.

Revenue concentration is one of the clearest 990 data risk signals for nonprofits because it can look like strength until funding shifts. A major grant or contract may provide short-term stability, but it also creates dependence.

Research consistently shows that high revenue concentration is a strong predictor of nonprofit distress. If 80% of funding comes from 20% or fewer sources, losing just one funder can put the organization at serious risk.

Signal 4: Public Support Test Pressure (The 33% Rule)

Where to find it in the 990: Schedule A, which tracks public charity status and the public support test.

What is the 33% rule for nonprofits? A 501(C)(3) must receive at least 33.3% of its total support from public sources over a rolling five-year period to maintain public charity status. Falling below that level can risk reclassification as a private foundation, with major implications for governance and donor treatment.

Organizations between 10% and 33% may still qualify under the IRS “facts and circumstances” test, but that is discretionary. In 990 data nonprofit risk analysis, the bigger issue is trendline: a steadily declining Schedule A percentage is an early warning sign that deserves attention before it becomes urgent.

27-month sidebar: New nonprofits generally have 27 months from formation to file Form 1023. Missing that window can jeopardize donor deductibility.

How to Build a 990 Data Nonprofit Risk Review Into Your Client Workflow

The framework only works if it becomes a repeatable process. Here is a practical four-step workflow CPAs can implement right away:

• Step 1: Pull three years of 990s at onboarding and each year after. Review Part VIII, Part IX, Part X, Part XI, and Schedule A to build the baseline for 990 data nonprofit risk analysis.
• Step 2: Run a four-signal checklist. Track cash on hand, net asset trend, revenue concentration, and public support percentage, with clear flag thresholds.
• Step 3: Trigger a client conversation when two or more signals appear. Position it as a strategic financial health check.
• Step 4: Document each client’s risk profile and revisit it annually. Risk changes over time, and 990 data remains one of the most reliable ways to track that shift.

How Crowded Turns 990 Data Nonprofit Risk Into a Real-Time Intelligence Layer

The four-signal framework is essential, but it has one limitation: 990 data nonprofit risk analysis is inherently backward-looking. Form 990 reflects the prior fiscal year, and IRS delays can make that view 9 to 18 months old by the time a CPA reviews it.

That is the gap Crowded helps close. Built for nonprofits, Crowded adds a live intelligence layer alongside the annual review cycle with three key capabilities:

• AI-powered 990 review: Crowded automatically reviews Form 990 filings, monitors compliance status, and flags risks and missed deadlines.
• Auto-filled 990 data from banking activity: Transactions are categorized and mapped to IRS Form 990 fields in real time, so clients reach year-end with organized, audit-ready records.
• Real-time fund visibility: Crowded shows live cash positions, restricted vs. unrestricted balances, and spending by category, giving CPAs visibility into the same signals they usually reconstruct from older 990 data.

For CPA firms, that means cleaner engagements, stronger advisory relationships, and more room for proactive guidance.

Interested in referring nonprofit clients to Crowded or exploring a co-advisory partnership? Learn more by booking a demo.

Turn 990 Data Nonprofit Risk Into Your Firm’s Advisory Edge

The nonprofit sector is facing a far more fragile funding environment. Federal priorities are shifting, donor fatigue is rising, and organizations that looked stable a few years ago may now depend on riskier revenue sources. As a CPA, you already have the 990 data, client relationships, and expertise to act as a strategic advisor.

Using 990 data to spot nonprofit clients at financial risk can strengthen long-term relationships, move your firm beyond compliance work, and, in some cases, help prevent a mission-driven organization from failing.

The tools already exist. The data is public. The framework is proven. The real question is whether your firm builds it into its workflow before the next crisis hits.

* Crowded Technologies Inc is a financial technology company and is not a bank. Banking services provided by i3 Bank; Members FDIC. The Crowded Technologies Inc. Visa® Debit Card is issued by i3 Bank pursuant to a license from Visa U.S.A. Inc. and may be used everywhere Visa debit cards are accepted.