CRA reviews HSA tax treatment by examining the actual plan, participants, expenses and supporting records in the tax file. This is separate from an administrator’s claim review: CRA does not routinely approve each reimbursement or certify HSA providers.
What CRA’s Published Audit Guidance Says
CRA describes selecting files through a risk assessment that can consider tax-return errors, indications of non-compliance, information on file and comparable files or other audits. That general guidance does not establish a special published HSA audit trigger for every high-value claim or every internally administered plan.
An auditor examines relevant books, records and supporting documents to determine whether tax obligations and entitlements have been reported correctly. The scope and requests depend on the actual file; the practical checks below are not an official ordered CRA HSA audit procedure.
Check the Plan and Covered People
Favourable federal medical-benefit treatment depends on a qualifying Private Health Services Plan (PHSP), eligible participants and actual operation. A business owner’s benefit must be assessed in an employee capacity rather than assumed to qualify solely because of share ownership.
A documented employer-administered arrangement may qualify when it meets the applicable PHSP requirements. A third-party administrator can support claims review and records, but using one is not a universal CRA requirement and does not guarantee qualification or fewer audits.
Check the Specific Medical Expense
Identify the actual eligible category and any practitioner-recognition, prescription, certification or other conditions. General medical necessity, maintaining health or a doctor’s note alone does not establish every expense’s eligibility.
For example, a physiotherapy service depends on the actual recognized practitioner, service and plan conditions; there is no universal requirement for a separate physician’s prescription for every practitioner service.
Under the usual drug rule, the medicine must legally require a prescription and the purchase must be recorded by a pharmacist. Specific exceptions have their own requirements. Vitamins and supplements remain ineligible even if prescribed, except vitamin B12 therapy prescribed for pernicious anaemia.
Gym memberships and general wellness purchases are not eligible medical expenses merely because a doctor recommends them. A separate WSA may cover permitted personal lifestyle benefits as generally taxable reimbursements.
Keep the Evidence Needed for the Claim
- Plan terms, covered-person information, benefit limits and relevant coverage periods.
- Itemized receipts identifying the service or item, provider, patient where applicable, date and amount.
- Prescriptions, certifications and practitioner details required for the actual category.
- Other-plan reimbursements and the remaining amount eligible for consideration.
- Claim decisions, administration charges, employer funding and payment records.
CRA generally requires records for six years from the end of the last tax year they relate to, with exceptions. Using an accountant, administrator or digital storage service does not remove the taxpayer’s record-keeping responsibilities. Confirm actual retention and export arrangements rather than assuming a product keeps every required record indefinitely.
Separate Claim Decisions from Tax Outcomes
Qualifying employee PHSP medical benefits are generally non-taxable federally; Québec has separate provincial taxable-benefit rules. Employer deductibility, employee reporting, medical-expense eligibility and a personal medical expense tax credit are separate questions.
An administrator’s acceptance does not bind CRA, and a declined claim does not automatically establish tax owing equal to the entire receipt. Reassessment, interest or penalties depend on the actual tax facts and applicable rules.
If CRA Contacts You
Confirm the request and provide relevant records through the channel specified by the assigned CRA officer. CRA’s audit guidance says auditors cannot receive records by ordinary email and can explain the available secure online services.
Discuss proposed adjustments and provide supporting explanations within the stated deadlines. CRA describes opportunities to respond to audit proposals and dispute reassessments; use the actual correspondence and applicable procedure.
A checklist, digital platform or professional review does not make an HSA audit-proof. Correct identified errors and retain the reasoning and evidence for the actual arrangement.
Review Wellbytes’ administration terms or ask about claims records and the review process for your employer’s plan.
Sources checked October 21, 2026: CRA: the audit process and taxpayer records; CRA: recordkeeping and retention requirements; CRA: medical benefits and PHSP treatment; CRA: eligible medical expenses and item conditions; Wellbytes: administration, funding and fee terms.
